last executing test programs: 3.02356205s ago: executing program 4 (id=731): r0 = socket$kcm(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0xfd32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000010a01020000000000dfff0042000000b11afe8d54ffe30da02512f26d6d34a42e4b8a01b1ffad65c8bd39a934c8007805c9326e053496a4de35a87a40948b26f382bbbfabc07b048f2fb1fde6e78155df62db73e84871d4e3c6fb68065947b1a6515add8b1fd4cdc00af0d4"], 0x14}}, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@remote, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffc, 0x4}, {0x200000000000}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000890}, 0x804) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) shutdown(r0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) 2.697520404s ago: executing program 4 (id=736): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @local}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x4, 0x0, 0x977e09a95c43052e, 0x0, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, &(0x7f0000000100)) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0xfd}, 0x9c) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e26, 0x100000, @dev={0xfe, 0x80, '\x00', 0x43}, 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000300), 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) 2.459191525s ago: executing program 2 (id=739): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="d340461125c179d1d5b155a2567b96bf86a9d6a3bb1bd2f8434af71b4bc951d983338f68642dd76864785f3b0ff415e8d35e72d3fa5596631ba9b40e2037a9af2ef96af078e5689f09bb0a0f3c31a17dd70758cf07e867e7fddce67c7581e5193b79bd270c04", 0x66}, {&(0x7f0000000400)="3d0d4295cf0e4616debbb39c0062d5334a4a89ebad696ab96ed060fd48e757cc2b8a4d9018ac39ae4c70aecf10d9a3a1ef1b096879352025be7171a8e1b94e48d957c836f3efc4a476f375111aa3131956c1664654dd74078a30c9cf8e8a026ca77eeedbb4ed3521ed392437986393f528c4b68a17a6f2860842499399d6", 0x7e}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@rr={0x7, 0x7, 0x42, [@remote]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x3d, 0x1, 0x1, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@multicast1, 0x1}, {@multicast2, 0x1}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2f}]}, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0x5, [{@loopback, 0xb}, {@empty, 0x16}, {@multicast2, 0x80}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xfff}]}, @generic={0x7, 0x9, "2934f6bcecc825"}, @timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x2, [{@private=0xa010100, 0x8e9}, {@loopback, 0x10000}, {@loopback, 0x8}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x7, 0xf0, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x2c, 0x99, 0x1, 0xc, [{@loopback, 0x800}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x84000000}, {@private=0xa010102, 0xa0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x180}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', r1, 0x29, 0x0, 0x5, 0x300000, 0x0, @local, @private1, 0x1, 0x7800, 0xffff, 0x9}}) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a8}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x6c}, 0x0, @in, 0x0, 0x4, 0x0, 0x8}]}]}, 0xfc}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = accept4(r4, &(0x7f0000000240)=@nl=@proc, &(0x7f00000002c0)=0x80, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r5) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, 0x0, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r10, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)='+', 0x1}], 0x1}}], 0x1, 0xfffe) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.167405405s ago: executing program 3 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12001) write(r2, &(0x7f0000000340), 0x11000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r6, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000000500)}, {&(0x7f0000001680)="7ffd9bd44bab71f35fb09dcdd7aacf008aaedc03b28373efb4f303bfe5f1ce4002dd39388442ff6cb4e975a6a94c015161cb7d2ce2138f46642e24867a0cf537cc12d7710e9cc72bc8054de461a73205ab3dc86838bc291d75b0feffaba721f3ebb3810d649137acd4d1076a18143ba4e1406fbd654bd39fe1eb53650a9e5e9c41cff4f1c970ce607ab2f336413f104076f068f0bd4c3c8a2a35d62abb2e3a3087676b3ae54082e81483b11927cdddb57c6e2efe06fc4c40aa3b2cd95807397be80f09c7d43e28f3a216ae863fe5b3bf", 0xd0}, {&(0x7f0000000240)="21f2c55672033ab6362d0e0f1e069e031931b25111b7ddc167", 0x19}], 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r1, 0xe1, 0x9, 0x2}) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000680)="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", 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r12 = socket(0x28, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r12, 0x28, 0x6, 0x0, 0x20000000) setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r13 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r13, 0x10d, 0xc8, &(0x7f0000010140), &(0x7f00000001c0)=0x4) 1.914142214s ago: executing program 2 (id=745): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f00000004c0)) pipe(&(0x7f0000000600)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x108, 0x0, 0x148, 0x108, 0x148, 0x1c0, 0x240, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x10}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r6}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000b2000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=@newae={0x64, 0x1e, 0x503, 0x0, 0x0, {{@in=@broadcast}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, [@lifetime_val={0x24}]}, 0x64}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) (rerun: 64) 1.745444701s ago: executing program 4 (id=748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES16=r0, @ANYBLOB="a612a76c79540302bb23e137db81ac28e5c6a44236d04410f72c89f64153ac086c8d6baae52a14f046c2f03dd619edb79fe9614ef33ee7276c775d0eb1c579d44d5b7659e710ee081a9d08b694c7eee29d73bd566ef12b720bcf9cd4da01045972b311f5d7b1e13aef2fcbda5bced05069a2d8ffea5e7c72ebd970181bf4648a23d088810a4a942caa91f3f53a33e70a49aa40fa666ac755e5c47a5818911ad2df3f5189a8e87c457c72ef385969b89b87bfccaf893472b702d37f", @ANYRES32=0x0], 0x30}}, 0x8881) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'hsr0\x00', 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000611048000000000071003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516eec8df2df8ef39db6e67fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba700"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.722446466s ago: executing program 2 (id=749): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x38, r2, 0x101, 0x0, 0x3e7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}}, 0x0) 1.630211155s ago: executing program 0 (id=750): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000100001801a00010069623a6c6f000000"], 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) close(r2) 1.510281097s ago: executing program 2 (id=752): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0ffe007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.380936043s ago: executing program 4 (id=754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a80)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2, {0xaf}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x63f44ed5f350319d}, 0x24048000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a80), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x20, r6, 0x911dc3544739be05, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4b, 0x2, {{0xfffffffd, 0x1, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x88, 0x700, 0x7ff, 0x2, {{0x12, 0x4, 0x2, 0x5, 0x48, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0x8, [{@broadcast, 0x5}, {@loopback, 0x3ff}, {@multicast2, 0x9}]}, @timestamp={0x44, 0xc, 0xa5, 0x0, 0xf, [0x2, 0x1b88e044]}, @generic={0x89, 0xb, "9623370b9631b109dc"}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31cd}, 0x0, r13}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @private, @loopback}, &(0x7f00000009c0)=0xc) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r15, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r16, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r17}]}, 0x1c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000ac0)={0x850, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x292a000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x41dc}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe8}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xed}}}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x4046}, 0x40010) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x14) 1.367863662s ago: executing program 2 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000005c0)={r2, 0xe}, &(0x7f0000000600)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="81240000001afac32d548ad3665a71eec878dc45ef427ecb47b591782788b5efb0eaab8e96276570765e5f572d8a1fa24165462e3b930d581a196abd7c62edea5b5f19928751d300143f5ce64ccc918ff851901f51739d998d93d2aeb7da89a3002200000000000010f6b1ab8a979680630edb35d5511378a5f475c7506f4bd84d618768055057d82fd60c626d6eca5483dd537077eea5ef1f011090f3a83b39f2a9c1970877beaaef247a293eb8940ac2265b9b4264527cf2b507ad8fb76b3c6a9898c2e79fa3d8f83048cde589bee09060be63fcd6e01c3b0c5a1769addec9803506bcf3fbe3e7e945", @ANYRES16=0x0, @ANYBLOB="0008000000000000000002000000050059000000000008003f008c000000"], 0x24}}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000ad0000000000000200000073fc03003725c546ddd52ac78dc5e836f0e6cfc16c6f5b87629733f46bd0556bb2c5f62cc3a8cff2b880942f6741f3b32a9caf8b640d3096bc13c368f1c9f5dfa953b30cb343c71efb0f01cd10165eb4fa954af01292e00f80f50226f8c46f783498065fa2ac4588025fe4bf57d2f8898b4eb98be48d357a4709a7f0d7ed21fee212a37ae74d2a08bd1fb5c5c76ac760749052eb13f3e3eb205d257d52d5475837aedf38dc0ed79bb066ebd94db996e548fb894af6837da4a6", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x17, &(0x7f00000001c0)=0x2, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) sendto$inet6(r7, &(0x7f0000000000)="8c", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000001200)=""/4098, &(0x7f0000000080)=0x1002) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r6, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0xc0c0) epoll_create1(0x0) r9 = socket$unix(0x1, 0x5, 0x0) close(r9) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, 0x0, 0x0) 1.296153881s ago: executing program 1 (id=756): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80803, 0xfffffffd) socket$inet(0x2, 0x80001, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000009500000100"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000a3d9bda5a9e50f4f1fbc0ef9af6d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRES8=r1], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES64=0x0, @ANYRES32], 0x20) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000240)={@dev}, 0x20000260) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) 1.282129589s ago: executing program 0 (id=757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000000)=""/13, 0xd}], 0x2}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000300)) sendmmsg(r3, &(0x7f0000000180), 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000140)={0x2, 0x5}) listen(r1, 0x4000100) listen(r1, 0x8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340f759000008000140000000130500020000000000080006400000000408000440000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) listen(r0, 0x400) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0xb5, "c5cd98c43148457e2988f9e8021892ddc092dfca602372d202d92703851172c913f7a76d748e7c981aac7837bce0603f0a4c9f26d4c7567a857d545c8784bcdc1ef9ad7d47c1c73726531c2b15e3837f9d7b55580099e2a7bb5b32d72fcff795fa95ca21771056ecb4291bd39469c08afa918c8e7f84a84f72bde2136d8a7bdb250eb381ddb9e1ffc7f64069bfb629d8085cae4afe2b13bb392da532ea976c2d84192b2dbf7d019e86de273859f41e3eb89887afbf"}, &(0x7f0000000480)=0xbd) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e24, @broadcast}}, 0x9ebe, 0xfffe, 0x569, 0x1, 0x72, 0x5, 0x8}, &(0x7f0000000580)=0x9c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read(r6, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000200), 0x4) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 'pimreg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.139887881s ago: executing program 3 (id=758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x309, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) (fail_nth: 13) 1.139074247s ago: executing program 4 (id=759): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000180)=0x2400, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffefa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="c76eacc1fdd8d66ebf73cda905940bf8777eb992ba01e2112b3973c5585f0b45f303751b704959a48c4a43ddf34ca53dfab7311fdf4dd8657305bf6bf1", 0x3d}, {&(0x7f0000000080)="0333e27628af60817ac00f408df1cdaa07b42987dd05181a0eac345ad8e44fe8d0f32c658e145a7241468983", 0x2c}], 0x2, &(0x7f00000001c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7b65}}, @rthdr={{0x18, 0x29, 0x39, {0x1d, 0x0, 0x0, 0x6a}}}, @dstopts={{0xa0, 0x29, 0x37, {0x73, 0x10, '\x00', [@ra={0x5, 0x2, 0x1}, @generic={0x0, 0x4e, "731707ecdd5e1e3952f68eab81f78cdc1cf0eca4f6ec474172a0f2bb76f1fbf3729c603e191ef9c536044e14156d2a7b3c1a4f27d0eabe6f38009f163c44280075a3d8858e4ec1147b7f30f9abe8"}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x18, {0x2, 0x4, 0x90, 0x1, [0x9, 0x4]}}, @pad1, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x401}]}}}, @hoplimit={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @dstopts={{0x1038, 0x29, 0x37, {0x3a, 0x203, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x6, 0x1000, "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"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x1168}}, {{&(0x7f0000001340)={0xa, 0x4e23, 0x3, @remote, 0x3ff}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001380)="2bc415dce5015c633d29f5d16471b5dce9c73a83be8b51f73c5ed5c81bbe3a28455c254eb7f72f088d05b58f97026ededce968a2d8a39f88375d6ad07a550dd89f926876292426f683445fe30722d4d530a2d431c3a085bc7365d07d66d9e105fceb32420bf3c2516c53ced95b418def31603461ed7afd1303c51fdff006bd5c616cc82443d572b21ce34c943143bf4739560b918068a2da6cddde481e61d97d8c8672499d58c9f52c8f444cc8e4e5bb6e429c6f4e008c2534f10b9c7cda7e8d973d4a463c66e238c0cbbb1eeaab3c2822b97c881b225e785702c4d9c33dcf26acf4e7bfd6bd112fd850e13fc0", 0xed}, {&(0x7f0000001480)="1d1fafd2410f68001a3a12e4f85580c54468d0cc5c7600422ec3310d16e9eed515161e497b4bf539fb87740472238792a3462c31ea1861768f7f2df9e0f32ee265c9e4c49adba1887e90d7f32300c9ea99b4bcf214ea41e77b498b6727f2ccbac550b55a8cc1b9a4d8050b5e597598d4a3c6b5e291c55ac67ae0493dd1c241fa6f5d364f3fd461da05c60c4aedf54dba85e8a1967c0eafbebc3dd9b3bcf049c11fd51810e014f4a22275239abacb48b4f91ab235ea361b308168eb", 0xbb}], 0x2}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001580)="d57f2ec66f6be3b069aabc76ef61108b6eb0f087b98057d9e462cd370a909e0f7620f75a2dac743b685ff0610ec19a3d8e0b7f2090ca4ec0ab8a761444795dd4298966f11265a6f0ac8836122353f689c21f1010d88bc213d78f96f364cd4658fea07f35adc9727098f9c87c070d7821a8b679284feb5692e89b613ae7e27e010da4881b073f98af48b9c9bab4d8d3fcfbe3dc90c6e16428cc975b8a43e0c488b0dd0c5f4cf2", 0xa6}, {&(0x7f0000001640)="18c050e0f87eda2c9a5be825f7cdced76fcf0e51829bde4a746ee2bc96254fa864fc0beb875695acee476eddeee0ba55a44d5cd32aa3ed8b7a3a1c96e61b270e5308c9c9e854874b4135070a77e781582abd8ea17857cd4b75d670f28e9651e652ea7b5be0b937e9e173f118dcbeb18ac5ec496621c245ec5c2bed9bbc4677b9d4688a946cfd6634baf56a0d4a90c1cf99a2afa84717a5cf0f7422fafca82d09caeb4f91d0ffd01ec6e22fe63ef4ea3c746c1bce919593f811209c360d7cceb0536a1580fc0b919e3b07616e", 0xcc}, {&(0x7f0000001740)="8e82a405a52ac6f4aac4d8d7a0a6ee1b6babd8306194d666c1e4619a4bdf9079ef09e4d175d1f882ce3cf24490", 0x2d}, {&(0x7f0000001780)="0dc5ecdc4f874894540d530ca27bb61eafe201af25f50e9c24a7e65121217e42d2499356a1f5c9c810348dcf584c16524889582aed50503b5946c9e8f75b7eb8ad78a417466ddf5fe0a0657b03112fa78e3646d5838e3909e2d703eeabe37df2dfb19f5662443e0dafdd3a30366c6fdf8eb7142c76cb", 0x76}, {&(0x7f0000001800)="28b6d4cc1da2cafc78ba3a03eb0a64db696adaab57fa202a75c5b24cb341157714ceea0c2fbfb35c8965eb64a261cadbb94590527b65933ea220cf1e9677d5504c8d529bc9ee5e95f8eb5c7ddf1d0443e999d91d8ee761307d8a75a61f0c82b19595350de3a8fd8d7ee4b2c63f6854002ae469a1ef6799a5e2bf1caabf6800ef27d573fff1d03c", 0x87}], 0x5, &(0x7f0000001940)=[@tclass={{0x14}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x67, 0xd, '\x00', [@hao={0xc9, 0x10, @local}, @generic, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x20, {0x0, 0x6, 0x20, 0x6, [0x5, 0x8, 0x45cf]}}, @generic={0x8, 0x9, "03e7f70bf58f3decff"}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x10}, r4}}}], 0xf0}}], 0x3, 0x8040) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x4, 0x0, 0x0) 1.129788515s ago: executing program 1 (id=760): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="0204e0020a0000000000000000dcdf25030005000000000002000000e0000001000000000000000002000100000000000000000b00000000030006000000000002"], 0x50}}, 0x0) (fail_nth: 7) 1.046191048s ago: executing program 0 (id=761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x538e7538}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x768d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5878}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe220}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ae7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x317ae78e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x64}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x0, 0xfffffffffffffffc}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4800, 0x800000, 0x4}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4048054}, 0x4008000) 647.8603ms ago: executing program 0 (id=762): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x900}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000e80)=[{0x10, 0x11a, 0x18000002}, {0x10, 0x104, 0x7}, {0xb0, 0x1, 0x2, "5c885647f9079b5313a3544328f0c7ff70b460adc38c6326b684be20d3c20293e34acaa3586e01ba4c7ffc0054fe7f78dc1d0e340ce432e26f7b425c3dde242090848a70d1e30b9e98091e0aac9675b96da8b91ed168075cc84b2a66112481b8e3f68d6249572329c192523b0d730effaab5a303a54545f27bfed06b56e1e6687f2404bc1c4a7e2ed85c8077a91b9739a250852b89c6ef21b7"}], 0xd0}, 0xc5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddff1700850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6(0xa, 0x80801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000300), &(0x7f0000000380)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x48, r8, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r9, @ANYRES16=r5, @ANYRES32, @ANYRES32=r7], 0x34}}, 0x840) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000ac0)={0x0, 0xfffffffffffffd64, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[@ANYRES32=r11, @ANYRESHEX=r3, @ANYBLOB="050600001900000000000100000008000700d40d000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784314000200776732000000000000000000000000000800050001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000091}, 0x8080) 613.448639ms ago: executing program 1 (id=763): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x110, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @rand_addr, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newqdisc={0x54, 0x24, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x3, 0x2}, {0xfffe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x54}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4], 0x78}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0x0, 0x6, 0x0, 0xa2c, 0xc}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003", @ANYRESHEX=r2, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='f2fs_sync_fs\x00', r10}, 0x2) recvmmsg(r8, &(0x7f0000006100), 0x49f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r11}, 0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0) 522.139229ms ago: executing program 3 (id=764): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x34}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket(0x3, 0xa, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10) 508.586799ms ago: executing program 0 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a20000000020a0108001800000000000000000002a3ff010073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000000)={0x10, @short}, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)={0x0, 0xfff, 0x8, [0x4, 0x4, 0x6, 0x0, 0x8, 0x7fff, 0x2, 0xffff]}, &(0x7f00000004c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000500)={r4, 0xfffffff4, 0x20}, 0xc) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="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", 0x26f}, {&(0x7f0000000580)="1eac4d20f8509e8f36d2842c8fae7bbe58c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d0558de77df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bbbe0131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d964b0161c1856697820eb52f55c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d09d0f74e180df6eaa94651336e7713414e49956fcb68a973e8239e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fbe071de646385dcf5cb7adf1ec70baef4061d2da93d2f5eef8b1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c109db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab58978eb8b269ba2ef764d4505ed495fe156f0dcbb79d177e4f0b476", 0x212}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000200)={0x3, 0x7}, 0x2) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000d8976c0abaf48f060000000e0001006e657464657673696d0000000f0002"], 0x3c}}, 0x0) 412.093977ms ago: executing program 1 (id=766): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffd, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@RTA_SRC={0x8, 0x2, @empty}]}, 0x24}}, 0x0) 346.269221ms ago: executing program 2 (id=767): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000100001801a00010069623a6c6f000000"], 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) close(r2) 254.239157ms ago: executing program 1 (id=768): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 253.73446ms ago: executing program 3 (id=769): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b1153dde1ce7", 0xdc}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c3984b1bf925586c0ddc116dc4b7380973ca5a76265c1ff8a08b37f76de6a1b08edb1ef43277e878fa870ba5ea0c450937dd697f02f7", 0x5c}], 0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000040420f00b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB="2f00000020000000040002"], 0x20) getsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f00000000c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x40, 0xe, 0xf551, 0x106, r1, 0x85, '\x00', r4, r0, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) connect$can_bcm(r6, &(0x7f0000000040), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004e000000711215000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 252.792028ms ago: executing program 4 (id=770): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x20000090}, 0x400008c0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000003780)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r4, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002240)="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", 0x3f8}, {&(0x7f0000000080)="5db8ad23d3fe6017add40cb374cdd53a24efb729c57f4136c6b6c78a8eaea8938377141682d40bcfd11c6d858537765cbdb3572c04d714aa0680e12ae554ff1041d1a6fb0875eb18cdcb16227ff4e9c580f8edb14c2d71c7234b7a4d58e04bb2fb1588a4a5f5f356", 0x68}, {&(0x7f0000000180)="7be2e9c70b79ea4e8a197fa4991e955f8e00a4782677a642fe2012c2f602f5c8768a457f5fb05294b2fb8ab03bd5407a13a64d9ee4b23269da893e3413bba2cfed10c405e165a4491378090be40aaccb6e6837516e03cad9b376757b9be56abda8064bd18e1a72e65e62d61cad46ed47d6ee33fcc062b5fbdb5df5e8579eeb85b59632e3c4e8f344171a241974b79eb40b0784cffbd58c00ad26de8710ee0bab28de448a1e9f4debe7e2ca52a2525f1c77b95fe0689848d90684754ee3f6d8bc8622ac62ffdaf92e8bcf9f43a080166d57583458297c3ff4298406a2f318b8c5", 0xe0}, {&(0x7f0000001100)="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", 0x2b5}], 0x4}}], 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12001) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000020b600000000000000008500000053000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xfffffffffffffe99, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fedbdf251b0000000c000600010000000100000010002e"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 208.385249ms ago: executing program 0 (id=771): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@ifindex, 0xffffffffffffffff, 0x32, 0x20, 0x0, @void, @void, @void, @value}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="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", 0x13b}, {&(0x7f0000001d00)="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", 0x3a4}], 0x4}, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r11, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="a2f5aff479edb6cdd43e513e6f9dfe6fe8f9eeef2f0975b034616f61b2db67ac7b0b4049075dd1d48c7b4e294da718b9882caed26d7e4d13aaa42b7b56e91759d427a93e2d0d90a328a365e6a3fa29f49127040a2f4d5aa0b623c0acb8c9943cf349a11668b0d0f540f339b4bb18206a9f18ce78c338bf328b7d6f12848c2aa8da51ab3c5b8d39cd02151a03db309df4d5fb1842f40452d78f17bf6a856f74642ccc2e210d4ef3f06ad7ca8e6402", 0xae}, {&(0x7f00000000c0)="20567c74ca72cf55df30be966d4a28fa2eae952a2d8b9ec0a657920b32d8cc3518032e98988aef9e4ed2bae401e0", 0x2e}], 0x2, &(0x7f0000000300)=[{0x38, 0x10d, 0x2, "655e9a536c9f893f6a5072caac766ff93dd08404edd310e7e10dacb7ff43be6595362674"}, {0x110, 0x6, 0x3, "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"}, {0x28, 0x107, 0x5, "86fb7d635f4d700eaff1aaea39a5d578574195937156c4"}, {0x48, 0x107, 0xe, "56d7811757f6e568033c95e99d9bb3b7d8ff13d047227ca1d8a8dcc36d758fbed93b3d9222773c807d00723792f1c9a64e27e49e1a393e"}, {0x18, 0x117, 0x1, "bfb7b2"}, {0x30, 0x88, 0x700000, "5ed654f5d7c5e2319f254e98060a52cbe5c32d9d16c53757562ed4d8d6"}, {0xf0, 0x88, 0xbaa, "c79e37cdb5be5753bb03d506b810a013dc665d2df4be3e0c0b22d9560cee2d4ae3f926b19b9da07c8ab8ef6762b5eecc0bdc62327625debdb7756c74897a5b97bf24a772ed693db8ec97b66db8e44c30b084c45d014cd0f04392b3394d484a9c11d35bb83abf3879909bd54a552e78ab6b88fea1759acb35193172ee738435d0755d238c3b03fe6d95bc226635b107e5ed44bf71b6daaec5d1bfe8dcfad23c142476f74953b3fb9765a9076e97fb423ae52341b41a6e15d42fa8f37673c398d361bb9b52da649c4fd20b8bd7688b671d9e79c9e4fa9a97c899"}], 0x2f0}}, {{&(0x7f0000000600)=@ax25={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000680)="a66aae4a49da5db750f24897198bfecd6a704b9cde87e005ea29db55264cbc0e4adf7664b6ab8754c3a7d0e79f97ddfab9ac36ce89fe98435da7c9f3f8e4999826fab5968c809855", 0x48}, {&(0x7f0000000700)="20441105a55b10cc48c22b911ebde425d506708475d3e428f5fc49f0551f46f61e9e466e3d70f6c715ecefe73589a0f6439b4515385a0ab53d09f660094b27946973e8bb321957bf7ddc224d29f35a22f229613121de91d8930fe516dfd875b6627560aa0cc0e436f8e84ee5425011f6dc74b18b3ad73200cd3e3832a0fda93d317dcd62453d58e4215dfd3da8d912dde76dd5f3149fedd13fc439428c9d64f81c517219dff185b2ec26f9fba146d71273cf48", 0xb3}, {&(0x7f00000007c0)="233f798184f4ad1383eaaf7f78089a6b1ea72fc84a4d944a42bbeee640709de8a4af600c2505a98ede8a0b59e5046f72f1759eef6217db14f7fbed4676ecd2d17f8f676daf4c304967f995d8bc1236aeeb320decba55712c05fdba33d3a9e45794e71f679bf22f558a99e42d592c874bd99d39950f2556b24d3bb55caa519116c603b54337d2e05b3a3b94e318cfcd28c16c6b2bd5023c6b7d9db948309f319e8de03ad973e271d065478c2fe14ec8d7", 0xb0}, {&(0x7f0000000880)="e040969aa33577033265a43dc0f9327e42855fb89d094cb514ed41270f22882e45e9a3ba9e9f1ed7fdb3e794b72ccc69562d729acc664ee1e6da6baf3605228246aa26864c0e1bd2ca1644d8c8cd8084293a1d71988f2ac66e67add5931eba3abbbb6a18efc89e58c453a7b18ee1916ac79bac09309c1c208a36137b29bf0c3ac829c47f7373d924a3217f933cf6143104a70a533acfee430502dfec95a9286b8057555a8b3a0d3560e104b8a15d367be84a72a663749d164531a11455", 0xbd}, {&(0x7f0000000940)="a647a1dc5930e0bf31e9687666c13e53e41c64e8fe8234da4c3aa50b3d4d948db4dc7b2f88252d34787db0f6c7de57f8ecc42b5cd91e9ee2cb4dd6fb426bd6a2656b929f55f63b4dfcb35621ac00414606d095b5e19a531549a0a21434870f1f6d2abae859944ce8fa29269b31c55f9125a5f2efe2320892bfb9e600eb77aaa88ca35765f4ee59774217fc4a410f9932685d89fffc02709033752205bdfec569d30e7d6e828e6c9e78f9a1850893ecf972ed5c67c12cfa1b262798e4097302ef670443861b0d", 0xc6}, {&(0x7f0000000a40)="7d4ab268faffd1730ab661e46b8f2a97bc017019eee33a2a0048502a4d42bd8b318f8f10d422a9f0750568dd76e98cad687b6fd7488cfec635dfbce81e628357b5cf89b904023cecacf030bbe43c3aa53558da68dc602eb5fcf878e0f96f7b51390c778accb5023c000cc59781bb06f08bb35ee2f9eb44b341355761d6d8d2b674322d8f2a8a3d3e589be72aefda68a7293ba1fb4a39d6552c2747021c4fb0c09a31b9da383d53573f0b162395282f00caf64f5d9e308b6627e25e6d80ec50c25feb858dccb1831c6e1527ca3b7b895991e0d3968bcd7972fef72d347305a3f6d7b2e2fff07d08ee32c71a77cf43808cb920b1a890c2", 0xf6}, {&(0x7f0000000b40)="a8fa06e004f7cf0dbb5010d5dc591dd99f0fed6aee", 0x15}, {&(0x7f0000000b80)="2d81b88b7c467b9a900270ff3d5a40db95c93d99730c754871e0e05414b124390722aeca0edd645b8df4317bcfaee055190a5169b35499723e0f59053fedb96a30f849c53fca66b02c63a39408df5c25c994d17c0d65d5bf4f3348cf3d747d3025", 0x61}, {&(0x7f0000000c00)="383659915b98ffa4b71ce7f54455bb1875d48e26e798ccfeed1e03578988cfc0f03184e035f4180baf0c520f9fa1633a9d1df3ba1425ca37f69cea65a66f076fc5f12fd26f933b50caa1acb0c1be2eb4961c4f9284bb7d0b62b79e995a2df0636f16eeae0d6b1d0689783cb0b38cd4d7d1d34a08b3d8c788894f4399ece76a0e0feb32a81b20afc3b73eaab35552760821e7d7d6048a2d0f72c4b0b50ea6c7ba7e69fc743f93fe46e1318361ac6f9052bde5", 0xb2}, {&(0x7f0000000cc0)}], 0xa, &(0x7f0000000dc0)=[{0xc8, 0x84, 0xffffff94, "f46f4cf38caac6bf10b69ac480cac0c34f202b97f5d67839237d54591a58ddf95a1cde8f356b031d99f24897b3d41c1110cf33be9f9c5e95e383b4b638651e0f79818a8cc9a60cc03576425b29ab5ffa380ee930658463651b9e48163c0a6de3d0b72f8244d3d3e1428dd1fddcde7510f0d854455542aae9087ec3685219ec32f51e39b248d5f7dc303cbd7201f23c970615f756bb2c600fa3b819f94a5e85e9e69256dd192cd1c6ea587aa1ad6f8996385af86e30a1"}, {0x60, 0x119, 0x2, "b5f4173849e97552c71fa862672b3dbe3eb6d7f2b709a103b2f0a794880fb934710a1a6035239c3b9c73783e9ad7129b0acf79cf3bc2633542fa5ecc30e39a32ce010a8386498245df43450bf178e20d"}], 0x128}}, {{&(0x7f0000000f00)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)="72bbca302422670391c94af85aad76f4f7ede6c40b49f4969984d6256f8f124d651e81100c8dfe7b3128d37df6c12c80d6fff0cd963bb103ad2f6f008520c08438532bb4dd9810ba9e6db685519cafaf497c3cd5f61c3baf04cb2a08cc9c638c0ad9b484e133a17a0b3fbb848b283e1269207bc45cae2f78fb99fce374f3cc934dd597aacc133eb070b5cbbb2eee8771451db5e57f74", 0x96}, {&(0x7f0000001040)="5995ab49ac258ea47eae430a04c13f411ab5e8742ba2e114961aecebb323af90e45a37e59991399ad1fa8f80799e68ca60316787c4e41a9375b17d6dd1fece7eca2b00e28f2d49e57db91058f10ceb75f0091acb3116399673fa568a59c71f3569b0ee53303e9a9403bcf17bf278339b1ded6fc260a47d9bfde8d9a3e9d31c1138900576c3aaeb348beb2ca63ccc5543081528e3543218e7f32362a07e5d615b85f0d6803cdc1e37ca6e3cc122e678c2bde60ac406", 0xb5}, {&(0x7f0000001100)="8873564bd36e89f4c1eb0ade6cf58ca8a3991a642b883fcd9ebe739f7f70809e1ba8e84281d00010eec3703ac48d5d22e2a2055125543c3831103f3e9e9e2b8d86e381da3298a1", 0x47}], 0x3, &(0x7f00000011c0)=[{0xc8, 0x116, 0x2, "52f7e667a8258a9b9f955702885f466c2949987851c6458f140ab5549f33891a8bc02117a9e78cced1a0e6f2e63ba6ff786d184b60d22269047907085b86fecf956922a6a190ffb7df1dd8b17f8893843d24c717c9f23188894c68118fd4433d72fd895850ba5b7c58d3b994e432fb19374e0e94034b705eb10d07023ad80c7058adac0943119bbc873e5a65fce2ff308a850273f41338cd4ab6f42ee626c7dfa73bc835e272b5be2c668e220a4169b2ef2a5e5f"}, {0xc8, 0x6, 0x9, "d600523eba46b85460ed7a8e68a56459c221c4a3c32d02b2cdd69e1f2bb57641fc0128e36cb9316745635c12b038410328016ca732965fff22d77eb83bc11aebec360fcc11a4b08019417290ebca01a3734c807c00b2040cb29574541a39362ada52ace4cd24a090d9aeaf8fcf1202cfac85b488a3960a757adaa3694bb30524ec17b443294739e8436786ba5f867c3df7b3292b146b52c61ea4358d60e2b640c8d49ef30c3b426cd3461fa33954c5b383d322"}], 0x190}}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001400)="b69558e76603d3638b75d438a78b3a83ad8e99715a8039404fb25708cd752093a0cea50b4dce40440c7f87ae46fd4957291c65210c4ac2e9570914827505d0dd9920c07be8385a25eb5b814dd0e839e243300a6240957866ba0fe231af0529dacba68234cab4c9c2", 0x68}, {&(0x7f0000001480)="d3a3578618baecf60e867d2ecb4f715b287bebbf52b2f69c4a806a5ff20e87958874e1f8fad7ef10a60dc1e50cab50f689e340", 0x33}, {&(0x7f00000014c0)="9f31758c50b01c3c5dba062bea416f5508e82eedfb9152942137570be5b6c5c8e234a8a0076087ea26e69ec502a30858fab131dd977d5a9fc64ac5f249ab0f92bd91dd61be398d90e942fdacf11d366b5e0288fbe750d5f7d8884fce0f9443e3dd567eb0c59634454976b582133493b316677b516a7dda6be6fbd2083cf45d294f1e9828399e12f2ce3bea8d0b99e8ab69c1d793d61ba9569c54cbebb8fad3af79d6c19d651d7b7e3c3c109cac53de729d6c30d99a46622825348ebd2896e5ec8742a51ec7d3d2cbb6f1e161398b2c4ec0baba02146abef068f2fbb34b924f4d9c5eabcdb2e3bced59b2c4db6b151db2", 0xf0}, {&(0x7f00000015c0)="a7bd7c188a873a6b89c71fb2418f447193884f4db110a9b9aba8e3af6cf252fe4b2b70dcd2b29eb60853cead29876f2e92490d418ad624605978", 0x3a}, {&(0x7f0000001600)="27e257801ebf9c490411d2d4d5cfb4ad087bcb7350286925a06abd1173c6acc197c94472d61253c6c7141d5058d6eb5a0ceedb37ab7720e7faa734d4829838d9ee52d058532ee2e84b6d63cc37575dda", 0x50}, {&(0x7f0000001680)="09c97c153d3c5dc7fff5a90f03be2bfea623eed5941db27a54fd1c4fd79e0d852e41a15bcab7ebb880b68dc0d7d716140974cb85d234adfed1d7fc5edb1af7ab437385f89c255808228523bfbe5682cd2bfbf3cb07894359773e781639f8fca3bc6bb3be6af58f", 0x67}, {&(0x7f0000001700)="02dc27caab48ae3e72044b7302e268730cd50a53c2aa63e34bf284060bee0a5d934159bed582af56ef271cb315eef2a80686420e8f6b889a1f95f5abc0155db3e6ffa04b18cb3fdff87162c1e010cd23de8d86b3cdcfa7a4bdae898c585cd4b91b2a4dfdfdb1b64bf30c569523f34eb080ce3f0892c82bf3433adbd7c8fd0b411f51b3198b47601a0e97f2d7b9da1908cee933656f3faf588b1fdd416132c4a3aaad163b3240fac65a5a77fb76eb58e838a6bbf5dc626a042676d17c6e87722d856b1de73250", 0xc6}, {&(0x7f0000001800)="200c904d1ffec92c4242eb0baac820db46d63cb1876ab8d2cf67180e54d592921e20d6c46bfaf1c00d4ccaef6a7895bcca5fdea4ecb013924302f1f2cf523642755bd0130b1a77021278d41d89ba4caaa3dee6b9640a8ea79b9232e9a896ea25f0114cdadebac14e75a3924a01d17010a92a311ed3de5b9a013a8da1deb925f8cb63a88e7d02b665aada0b60357dc84232191f3df89b555d", 0x98}], 0x8, &(0x7f0000001940)=[{0xb8, 0x29, 0x5, "0ee463d4d5f6e1ac1ea99df257820500c5014f37d793d640f1b36371cd25e50a88e2657faa2ca774a387fd6517119655231e1aa1bd083424ecb8d356922d6aca57640d68bf8902de0291909fcd4d0dc9b11ffd55f614ccc8bd77f201ad7cf38e6e6cd5ba40a07f6b2a575d68785fbf2f074936900e79436984b61f8629ad618de853dcc5559980181e52a8cf5a7e9ec360a300c4cc78c9968d666b50e81158f9eacd636ae10f"}, {0xb8, 0x108, 0x1ff, "38dae98fe927fd85d27cd78be48a3b07ec83b58add2d1b1ce3c2166954fd63dd810dcb256076fcc53b18326d8b95115672d3f936315d4a6de363c1f344ca4305938d7585540f74f0cd8da51b02a66ba82a679ddaf736625c296e364effe703a125bc93aa7991020dd1baa66d70f8a8cb87914566fe5fda1048581d8d3a42bd6ee206cbc2f7e6539bf95f26f722647801aca0558bd8dcc9aa675ce3ea8a3e84738f5a65bd3bb829"}, {0x98, 0x108, 0xb90, "dcf7bb00b2ced8767affcf8ebe89d4cbe8df8538ef503f323ad838d6326af57db9f3c110d5fdc88adf25309300f20187da7bde79ac20cbd069f6ab984abcb9a9da339ab4dd3ccd5699cb26703881511460e02ca9149e9d7a66865ceee97ac6f53ab148d9cca8b988134f420ed6549cc3dfb3c0ae3a0499dad44fee24ebcdd7bb8fd90bb9909bf7d7"}], 0x208}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001b80)="c5ec0683948ce23f34d4fe5e4145170c62920f0f5c1e93ab745e800c341343bd9987828e21884c3aba102cb9a95116c84fddac4a0113b7fbebc4404f5442cdc11fe644b885d3dbac00ab0b3df92319bc112cf874af95cd137f64efbebad64bc3ee280ae913b2d9a96ec0919822e7476551476959", 0x74}, {&(0x7f0000001c00)="f5693af0065dc968c5d034c8cdaa1e727ff4be8002e2350d69b57b3f8b67839e0661d5885ef75277f0732aa2a5ac9466672a3255378a3efcc07c0365dd0d6f18796ed99a1b16a9ee41d1857197ab8db58bb9c1e40838fb2a7921d17f8b388a128dfe5daa6ecf937ef8f4095ebe68685ff5561b16fca21ed32ced1ddcfd05697e9583379d35f2efe8b846a1511d40770a78ac50d044080d0f7b843c0d1878269a0e86bc68c0067920019c4bba0d952e9b6b3759e9bc142097f84777b59eaa054b62a40f0d90972a5ee2eeaf54a90f3d2cea68765952a5c616c6f850448f2569379d9f45754e428cb1", 0xe8}], 0x2, &(0x7f0000001d40)=[{0x50, 0x114, 0xb2b, "e99de55f6d463c2110f86da7943948a4db10cad86b6733818e62da3299d2e55bae2bcf93a3def3778f0c2e003e70c43bd92cac62932761e2c5fe843a01"}, {0x68, 0x115, 0x9d1, "b470d9aa1a99617db7bc8fd3ab564d6aaf35144d04e64ccaae7d2d985d5b8e0133c1b396f784fe440ab005c427db51c03836e24402fe7475aefd1fce3d65278036404790a311d5b3c898bb76b1894966ed2e"}, {0xe8, 0x84, 0x4, "1db3d7ce461bf7b4418e6090e51d3ac28dc43789ec43c5aef0f4e6f7d6fd02e761d654f44ba82ccaea7533bc262b764ce40ae43d785efcb582f8369e7e895f629fd823c1c3b203f73f3bdcb3ffd4d81b07a86b719da4b7945a9813215275988bf92797d1af8e3f6eaaa2d7701f7481f59276db21252751e55010f3b9bc14da7f1e2e6d52a32986dc9fa77b9470871876b9a0783b186cf9618a814d0524211129f4756229ee42f4d7ab66e1f48635191e2abd5f0ae34c93c0f27feaa9e6111e57bba1c0875bb592ddb6cab780937b284c0a"}, {0x50, 0x119, 0x8, "7a84961888622e3d2748962d34bcf2719e1854a9b435a59059d56dcb858c638dd819a5a62a8e2bf822000844f2bc7e7d28d3b8807987a96c99"}, {0x1010, 0x11c, 0x4, "e9f05594656b46572d6f0a474a4a9e166351982330e0ca798d1cdaad51eb9e3a3ed7f09cc9d76c1885739208bb1006babf19c0184dffb5162e28d95eaa31b45c345edc600ac626645ef0ba6ba35f06a2e94f26bd1e8640f51aeb2eb5be7c4433ffa30d662417ab0897e3acf6ce4df266a0ccd900ac81ad563fbdb066ae861218c4b34191868d4c67a4e4344aa8d9159504c754f37c563f3ab5cdb27886db65ce8fb481527851d94a039abaf488773964f6861436591cc399e97e4dc0a669237d8ce6dc17bd7a6b272cc16149f6d027886dbda583a4bda67ff844caae18e51eeee14595a8785181db95a758155549d908482ba60050ddd516aba05b66e54b78ddffbae316347ca026dbfbcb16a01556a15e97ed7562a3d06ed763b052d8ed5c74ca2be95399e26a14df7a4a237b8e98419c5facdc6ee78b44e6cb8f89bcfc9e674ba436fbdbdbc4ed9f1b6b9f0c9b269a530b5cde476b9d7b58a999e6368dd5395f107b9c0a0290253293492b6b40747bd17d2d6dc9c4efceca5b96b0ed0e88cf19a0a1b11cb42a19c8dd6168fb091f253a1628da1d7fb4e438547273b9527ced06233bd5e90ecc1b5bdbf5045ed7ec58874bc85bd19780469da7c441d0281eb4f9660e2cac13bc3bd401ea462130ea7182b107ed40b1efcd511b035620a237097df3f3bfa2ce7a068adc915d6f0a640897c856b30034f24263f05deaf20b139088dba7ce4d5ab925632dd5ff4e89abb1578350fb9f97aadd4d2492f84b5c08c84076ec972a984860c8add17cd86451ea4de3d18f7e280d6237e0838e15370c15696f172d56f591f7de991ae37c9cb74e995c158bbfb0f68782d3767ff73a83108ba99fc14a8ec2cbeb63f1e331d5a4388af833ab7cd47c1e410c419a17097bb353c219f74436dc75415c6351c0f3c948e8dab8eeb0d2cb5841a23b0b9aaf655384167632a044e413d5f2bf15d3bff5663d2ce1595c2a04e7068a90b480a30aebfc94b2ec737d9f182a4a9d938ec38ebf80d267baae5a6afbf9856799cd3449ae24c4438d7a8c1893b28665ab3036373bd0d1e76f15e10830d43d541838d4d9f4bc191acf05d97ef6dd1de5e5622c7009179d1101eb10f4a2a3b0ee7b6872063898349a0d750bbfd79eae6d89c973e57686e6fa9054d01840a5925ce962f752322fe28c49e10003a2098ff5d8d7ef4055410f70670a2b0c3c9739ffff2ef579b6097c724a085fd6d2824ee917954edce2a8781f02641afc9a2e9cb6c9d18e496f64744bcd8ee6e95c998b30bd29af4a1712009f87decf7ac240d0e61f4d5f5a14ed1fd593ca74bf6b74ad4148a7c04ab95fe0f5bd9e3ebf3dbd6ed9f6a3a9f85476b8c9eb5cec4f367b50b5fcf5f51edc6829027bb0624b6a73c0fa8ba11792a85f2184836fd97433d85aee62a2ec5983c44d9e600d2f7151e724fa1efeac233e5e0ba7d07ee2fd640bc941b2ef242d60408575ec66851f1c9da15eb50d81e0697025cabe15a74cc9a48ef710ac53e388e99f21dabf64d911f3a1058e2c007c626979a59c5ecfd6a21c37f0cbf4c7ffeafa86958c7ed3426793667ae8e4eb80c930e8debdc2c3516f6a6d394e88d9a7d139597812e1b33d23f6144634739d171d589410499bad7bc447ff188e2e237896533504caf59b48213c1c1a45f536c5b4872a2df57d70c7595c5ab463bc04aef47002ab9544c0fc423eeb2d39822ad1d563fea23f4c6109aaa1af520bcb48e1834caa6346c0d80b9143bcebcd0570a8719e822047b28dd78dc7d611bb7e6a5f7b83171035553a31b5d5136688120840dd993b803fa4f2424644a73acedef312606a406403fb82c904ee9c7dc256f91029f5f272e869069d49663b34ed799c40613bd7e0781980a3454f0c27c444f501084c2c2c9b67d8f88b97584d35c4643c4c3451e9ba7e6700aae0704f28a0cdbbbc0415559b66fdc91f84784cdc1454f4986642e9c9ceb766f41f58e9a2c18e113f05d367ee1da18adbd2649e0fa758139d035324641ab3ed2157a3e97a858155a878df7fe5caf93e52b132f5f135358b06c3f892372189ac5f935c5ae25835bbb770e34cb3f51a937e902802c2885f0d794e8301075948fb38465778249914b746f89877f12ca935a41c7379147c5088bb723d09ff162c4f185eadf65f1ad97f4c9b59abdaaa15a6a662175c0d495dc29fbe8ff91e7d642f00b51d9ede77d7488818332bc1f04bb84454a49872b774d67853f76e234bb570100a60c6d6040c459f83c05a50518db37ca03d6ecab09d79c655eb8d3acad829e0b092774be1e8a29b58db22679c7ccb0c7422233f4dce2dfb427902bc21851967c0e32e595df5be64bd3000ff711b800a83176995f5a517fbde27ad2653f6b27d7cd7f2ca1024bb7d16a8f08333f1560a58476fdd41856b502e0e6cfeb90c60d1b82b1adadcb5febbefa1b655fb72f917cdccaae2bcff07f411e9f52e67323d8993d75d765f9f7c660d5ecd9cb4d50d43385fe6a74711aa0a7cfc636d8d75cb71c036b96e4a410410e59f33876fde86ac731211b264c9cdf04f46efef9ba657e4919050de381a32269e60ce457f870ed0af07286926595a94337c79eb99fbdcfb013f719ee360e675fa733f20b0234237e61b1c45416487c8b694f5af8a8343899006c681d2f07b1202d52a322c0d1f6d88ea60553ff4480cdbbcdf1de96680baa8f2e479395df823eeb4626cc2becf80a2f5d0a7f69d57fa3c9ea81a7f1460d016aadbad8bf7ae64280bc215fe4b814ad6ca0cb72e4c70efce00636fea349c367ba87010abfd42706684a9d2fb832be54a04082f2ed14d64fed96b840c6167196fb66e6c71ce3e0dc778d712cff10e0fed31e705cf733c7fb932c3e74fa1f665e622da6c289db923eafce22d67cbc77ca4b528eea3d648c80878d654101c3e1908cdf469e81f803ed49bfae5092f25e80d9352d83d459481a99f67288d7bc05528282bc17ede9f532daa6ea695ce9ff86e7b54eeef6b1b58b20472554d003ca0e5dd7b371ec1b12222626fa0c43129a6a0ec1410de958f3aa1fbf4a8965b0dd48b26c9d72c887d6140067dcf68a2abd45e41649bee0fd64b1b5cd8ad2132cfd9e069cbd5b33b3cdaba97eefaa83290010d85758c4b04be034fb5458ded282c31dc4e15ee9fd0e7c8cbf167ffebb64010589ee7beded9f884e96840cb5815eaecc8785e6525ed360b94ffd8dc9f8d6cea30d94c631288c91d34759f2a09826f8ae7e0fbf7298af15328a9b5f7d9a5ac4eac56ff1cf194ede83156fa9c3ac79d80a8bf8f05a4a292376abecdd2c60a330be5b3b0b169ef139227c9ca611747b9b8c06a0ab278baaba1e0763c1cfd9bbef8b50fcf73d329e81c509018fc1c60405f2f27ea9f30f37b01f8e68be234d3acafb2f68fdf00ebb1006911520a461c15bb36f1ca4d2b11bb2d9a7040742fa52cbddbb390ef30871cb0deb9f117ca449dac14d0e048fcd584d1be5a7d88d1646ab6f5fdae0d3a3b04f36fb047797eebbc2007d407477cc717c0d979e7729b0c95b41c3ca455e2e8dcc285aa0e51656b71e9023d18201bd7fce6394bd5028a27958de2992055037ce772aa3d1957f0005d82940c86d75bc0edf128f78a9e768bcc4654f3972944997abf538b18a02b75dc27f61d66ab193404536cdb29f61f66ade885b0eebed7f2069010d543da332d23a3c1541f217fa8fddb0afedc9a522556a7eaa76fd926b53965d3a35e8bbef300a51a8f7bf8108c4dd31832be7fc7e4dde51558168e7578bc847acf3a9cfe72edb47da76077fe812a859c63f65c3a6b05234f88ca0892bf9364cd0298ceeff0fb55e507750fced0da4a5b4c6087e6693d0c2869becfb3182e37d531b0ca890d054f937034ccceec5e2756de500caaa8915d0d1ce4e5dd0c01b9bbce227dcea8e120dbe514d1dd60491cc8037a77f31140cf2a67d90730f222184311f9f735590176f6ae6fd4914057a20a9838c18981016b080998d1db19c43ca76e8578c6a2bca9946ae237f92b6246b1bb8b03566b8535c6dedb458412b8edbcaca6810b09537660e31514ac0dfd9b8fe8b1e367a018537c0eb831a948c53250aa29e51cc2b03d87e59f98631708620e899a37316a42adfb1aab6d8cfd747e2a12cef947656485a4a55eba3007af264347a101a6327dd3672d58c9671213514f67c40ea3f324c58d593a43c23e6073db091e9669aee9b064b57a4838b6ec2adb73487ce727c96d341208eec32f1a261d6113e49e35bdb845235034b880edc738a9e99728c063c74ed7690ff7983a9c29fc425223fa66bcd46cd54558fa1027d6ba1b44bc91bd559f0bafd5dcb4c3e172c19aca5b9f10f773a4bba90f9634c6525112b6ac46a2093f0f511498f2d99db68ee020845b57d9e638c0c51fd6eee7f1bf0cf16fc7548872defef71c81f9f23991af30a9a096350f813819919380a7d8a93fa2e4c522ac5f02e513f2963aed2adb489f70e90905311f0fe332ded75cee2729c5ad0e9139cb62c6c4a19051e15a5308ed5ff44de935936435ac3798c0fb8721d52fc9d53f27874ed77164ed1d502b011734fa9a0e6cfd3260f8fca434163a95dc896a53033fdfad8bd5858a045d99f31060c50cdfc54aa07e667fb494f658fd12578ce93a5fa59a4eb5e205892a2f0523032ee3b25019e0fcce8afd079ec1ca31421e504cc44a7ba31533456c74364101aef99de5be5ddb63ed0bec9913228c23d861efa468a77189956dbd8aa5a35dbd5e3ea3af2624f52e219aac956cd80cafc9657c33bffa099e2569f3b7eb6b36ff02b0977fef4be62ee93f9a3c043389e58aab178ce37f55ca59e8358a40106ac924e5312bb6f8d4c12cb6d3e15caf530e422d939d701356090e94248817792b803132435717a6a84bd75a7e0e8d01d514f7b26aaecd4ba71042aad227a9ad6a8975471d524de0b8f82036973ec879111edae53821f40b969678015eb3bdb172c747cc184f1eeb4c3a894a04b4172c923a75c54ab1842304d08616a5f7db975aa344d55f5167b86f0161c83355f1ef3da91627f3710b8b5ca33b2ffdd811bd5834e02bceb4023f92b45a015e20dfbdb229297867d1f8c74c9e9307320afa27072b59951935c7b8db290a8235f5338e3b867dc105f2878f33ecc75b36d591ae2a2faa2f22509f943f62983691c97106b0f290c005378a9f20c3e3ad210cfd9efde5859ba28a319e2865608daf88db53c61710c6ef703a080c6db406548a703dcfd86a9a0779d631d976dffc7c1547246b9b4886bbb536169ec5ccd04cb8a03d327fb58de77a2f066438a4c251aad0e9504e4e98f47d5533f4aa8f5b24c11a10198207e3ea694103efc8744f5d4cdae7771fd5d805e3b2e4afeecbdb2b5f081f1af22fc2ae8045e959b0071ed7a17ffd6d8a6d1a1487d8b690e0664ee68481f20671a3b036606f3eec559fdf641412a69ae19f332f0d94afcb683ae406bbbad2cd13ee36572d1c9845b21e479b2863f7395eb742cf79db6107900b100c602539b13fb46174550b678c0277c462d5975ce06d4dfa7ce79a1b385595dda205ffb3085fec2ea6c49566030eced046342f89c2d64674400a31a228bed31d17542c39102555b375159530372d07609bc0637dec983ee6cdc674e0cffedfd3b467807e246d4bdf05ab011c458804660c50eb2922bd2acc1acbf985d0bd21d94d92ba3bb374347fc3ab752af42160633d81706e1e5bb09b815b7d970cfd5d99d775c60667a85119301d8a5a2f87484ae9b961dd3411a59a707cccecf99b5ad94580"}], 0x1200}}, {{&(0x7f0000003000)=@xdp={0x2c, 0x2, 0x0, 0x28}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003080)="ae7e272dcf9357f4fe81c2b2dd31d754009e8ce105961500da405b", 0x1b}], 0x1, &(0x7f0000003100)=[{0x60, 0x110, 0x0, "e367bf8ee75ba5fca5c91dff893d352c6e8eac96c861376c5bb4436834709c256d3171b52d5117904a21df293525730aefe90ea758cd564c6922ea304bd16229e58153c33a24f0feb48297"}, {0x28, 0x114, 0x10000, "578c570decfad9ae1f9931a1af2e0dcf6634291f"}, {0x40, 0x104, 0x3ff, "259e5eac8416699f38d57ac708c2965c3b3d0c3cbea7be171518c34245132e5bce4ab3b44b6d093ca443bab49b3532a8"}, {0x98, 0x116, 0x80000001, "b92dc5aad171eaa066be752d480899489e6cedc22bc9b73fc4e6f056d485799d0842bfccbeaaa79689af1a2dd130f4c729422df29609785dafb85490c5cc682f811c36d29323deb1293e3895956c5e3ad98569cb9ed7424e69388494a673f05bb1b16431cc94c3ec12cd894ffbfa904449d2879309d946d7769cd975905ee3d415acf64e2faef9"}, {0x100, 0x101, 0x7, "92e1bd4d63268e62f5a6a876af39852eebb09f09c275502aabd9856fc37d89385c55ecbfae412f9ebe9eed8f34b8d08279b1246364e5eeb4185087b6ba570e2553ee4777ab3f3e521c136c543e727dec8a7d9ca049bd2f15dd72c5b3449dc3ab3b582be38a29117371e5f65cead1258f623017ff1997ff7f7114e4d676038519bf452c4a3021b5a8fb0f1a9306ab07fd9b7443c645eec27901362b614bc77448943114a839b94e34880f7fe87715222418464948117b980561d29d05500bd23da09e5de81d29e9fcd314c983f2720bcfcc33f717a84cb89a675c0d1bc4db921a6ff9fe096060a5bd1a1093163fc2"}, {0xc8, 0x101, 0x3e76, "e372a18dfce445aed4bcb5da49cc2bb5c6a09b96bbc423c661ae09f621848d041bacdf4f4cea39dd3fefe4ded741a2e7a630d83d7bc48a5d5cd4ae600f73cc3ea6c503f262a3e749d76fd4d8c3c0a8540c07c13110833919dad524c0a5e04d90453c26ff8433a4518ef77c6f5c66687cc89c2a1ab827530591aac342152114032b50054eae5f87ac02a38d92dc5bb471eb1686b63f5da4d9cf468a54e0d08ae29bc9426339d9808084edadd98f19fa6da65f"}], 0x328}}, {{&(0x7f0000003440)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000034c0)="b3b89b459ed825bf7dd17d0e1188fe4edc9e1644dbad12225f5fcefb95eb37db8f3c0e6fecd5ab23079a5fd819a09592107ad28e4a045b4082f06396609fbe7cfcadc814830f973400a974211fc2f7d712f44b70b62b668e4b0966349307722f99339e9d9574e9b6cd11111be0ae25f00c7833d9d2d2e63078b86c47540a61d3f8ae24f06e56a15453bc5122109c63a37a03859718dc412c95f65313cdd19c3f69371a674e56fdcacb6b12af233c67c7de222749e2d52cfa52d58670a5e70246c04881e102b049bbfcd37f00d3c3eb92f057a6e364116fc9f93cdaa587d550180e99a7674d25c8", 0xe7}], 0x1, &(0x7f0000003600)=[{0x60, 0x113, 0x1, "54cd3f0b6a0a312842c26ff2051a3471ce28b305a93cabfb0bcd8fbee6332ab029744e28459791c23b5bb91f04849a265f6fb4bd295cfb423e5c31259d083e459a4e2173974f2f90edc2da4e"}, {0x90, 0x116, 0xffffffff, "dfa9b13915020f9bb28960a2063d49127e08e020c10ec85f39391dd89a1ad69a2caab0bee7349afbabb038c448e7800b19ea0e8595c992436de812a9a1780f93a8214eba0c4766cc58203a13f6e0b83668bf712059554d52c3cda2e1c82bb1183793324b485f589ff45272a9aa1ab7fde9007b57abbdf969ebc97c5cd39050"}, {0xd0, 0x109, 0x8000, "245ff1b5d196dc3684c3597c475419b5472f5586d254040bf8eb0a83b8cf334c791085649a5f65affcd7ef67142a00aa58656bb0410a7dff8d96d4c2bee11ed37797584008f5816967660e75b5b581116d1dceab42b628b82e9ad620069065f2b047ad74d749dd74834c5a9b7c57bcbfd753a40d4b5c7c3768166c8663863ffbf6a387d056d33f5fa8c09aacaf7c1e006858dd48c828959a040e7033669e4b68d45be9dcef543bbc6a01d8f85f978315a4c5047e295bedeb2f60"}], 0x1c0}}], 0x7, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x2, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x1, 0xd, 0x2, 0x4, 0x18, 0xffffffffffffffff}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) 144.912043ms ago: executing program 3 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="30000e008000000008021100000008021100000050505050505000000000000000000000640001007206030303030303080026006c09000008000d000000000008000c00640000001c005a801800008014000300020007007f000101000003000a000700"], 0x80}}, 0x0) 54.182895ms ago: executing program 3 (id=773): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000180)=0x5, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2a, 0xe, 0x98, {0x9, @usr_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x24}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2696, 0x6, 0x1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 0xd, 0x7, [0x0, 0xf2c]}, @udp_ip6_spec={@local, @private0, 0x4e22, 0x4e21, 0x3}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x2, 0x3, [0x6, 0xc]}, 0x1, 0x4}}}) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}}, 0x802) 0s ago: executing program 1 (id=774): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x20, 0x1e, 0x723, 0x0, 0x0, "", [@nested={0x5, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x4, 0xe}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040069f92a9b005d0000080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x2000000000000275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000842c0f0000000000000000000000000000000000000000000000864ce94e5c5a53f083af8551cf29c112eebeefbf38fb78844510137b2bd47e0512d5fabd23966f46aed3c575a52f75632c8264fab7ff3296ecf863d34fdab0eb0f73818a411fab9914d6ff6b239c4cc9c7cca635aa50e011c2da9638061c798b3ea6b486df6eb2df2a8406e16b01808a1a84a5df3b5e117e09f2fd248de0684caed3652944df8a9c2df7f4a98ff9bb960a6e59f36ee8cd926b432bee6c08b977f28d3d16e9e8994453b07c33e0a6f9365d1f1b71d15a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) kernel console output (not intermixed with test programs): 6773] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.732191][ T5241] Bluetooth: hci1: command tx timeout [ 315.773219][ T6773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.844185][ T6773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.934453][ T6773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.986678][ T6767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.049690][ T2960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.072434][ T5241] Bluetooth: hci2: command tx timeout [ 316.169617][ T2960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.268066][ T2960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.289743][ T6773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.314051][ T6773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.331214][ T6767] veth0_vlan: entered promiscuous mode [ 316.372704][ T5241] Bluetooth: hci4: command tx timeout [ 316.379999][ T2960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.403941][ T6773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.414217][ T6773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.433936][ T6767] veth1_vlan: entered promiscuous mode [ 316.452348][ T5241] Bluetooth: hci8: command tx timeout [ 316.458385][ T5251] Bluetooth: hci5: command tx timeout [ 316.567264][ T6767] veth0_macvtap: entered promiscuous mode [ 316.608981][ T6767] veth1_macvtap: entered promiscuous mode [ 316.632613][ T2960] bridge_slave_1: left allmulticast mode [ 316.638729][ T2960] bridge_slave_1: left promiscuous mode [ 316.645174][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.658133][ T2960] bridge_slave_0: left allmulticast mode [ 316.663979][ T2960] bridge_slave_0: left promiscuous mode [ 316.669689][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.680661][ T2960] batadv0: left allmulticast mode [ 316.691044][ T2960] batadv0: left promiscuous mode [ 316.697754][ T2960] bridge0: port 3(batadv0) entered disabled state [ 316.715640][ T2960] bridge_slave_1: left allmulticast mode [ 316.721305][ T2960] bridge_slave_1: left promiscuous mode [ 316.732319][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.751218][ T2960] bridge_slave_0: left allmulticast mode [ 316.759323][ T2960] bridge_slave_0: left promiscuous mode [ 316.772147][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.792190][ T2960] bridge_slave_1: left allmulticast mode [ 316.797857][ T2960] bridge_slave_1: left promiscuous mode [ 316.804878][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.816429][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.831071][ T2960] bridge_slave_1: left allmulticast mode [ 316.840016][ T2960] bridge_slave_1: left promiscuous mode [ 316.860440][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.871688][ T2960] bridge_slave_0: left allmulticast mode [ 316.879496][ T2960] bridge_slave_0: left promiscuous mode [ 316.885594][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.254159][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.260523][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.812139][ T5251] Bluetooth: hci1: command tx timeout [ 318.025342][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.037364][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.048937][ T2960] bond0 (unregistering): Released all slaves [ 318.132694][ T5251] Bluetooth: hci2: command tx timeout [ 318.145886][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.156821][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.175599][ T2960] bond0 (unregistering): Released all slaves [ 318.189132][ T2960] bond1 (unregistering): Released all slaves [ 318.201407][ T2960] bond2 (unregistering): Released all slaves [ 318.295240][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.306322][ T2960] bond0 (unregistering): Released all slaves [ 318.387851][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.398284][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.418671][ T2960] bond0 (unregistering): Released all slaves [ 318.428383][ T2960] bond1 (unregistering): Released all slaves [ 318.439319][ T2960] bond2 (unregistering): Released all slaves [ 318.451950][ T5251] Bluetooth: hci4: command tx timeout [ 318.510672][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.528868][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.539151][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.544662][ T5241] Bluetooth: hci8: command tx timeout [ 318.550100][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.555057][ T5251] Bluetooth: hci5: command tx timeout [ 318.570792][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.581499][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.591378][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.602510][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.618482][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.648016][ T2960] tipc: Left network mode [ 318.677957][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.689626][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.699634][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.710217][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.720306][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.731068][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.741003][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.751632][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.768359][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.787118][ T6767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.797491][ T6767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.806664][ T6767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.815854][ T6767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.828029][ T2960] tipc: Disabling bearer [ 318.839433][ T2960] tipc: Left network mode [ 318.858423][ T2960] tipc: Disabling bearer [ 318.873188][ T2960] tipc: Left network mode [ 318.911350][ T2960] tipc: Disabling bearer [ 318.917663][ T2960] tipc: Left network mode [ 318.994962][ T6773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.116539][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.127358][ T6773] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.136808][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.202912][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.210013][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.267927][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.275047][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.349456][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.370462][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.651415][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 319.984817][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.028756][ T6769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.045415][ T6769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.170990][ T6769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.197179][ T6769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 320.206671][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 320.261217][ T6773] veth0_vlan: entered promiscuous mode [ 320.300422][ T2960] hsr_slave_0: left promiscuous mode [ 320.307647][ T2960] hsr_slave_1: left promiscuous mode [ 320.321666][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.329470][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.340022][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.347921][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.360623][ T2960] hsr_slave_0: left promiscuous mode [ 320.366508][ T6935] FAULT_INJECTION: forcing a failure. [ 320.366508][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 320.379455][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.1.417 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 320.390049][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 320.400097][ T6935] Call Trace: [ 320.403366][ T6935] [ 320.406278][ T6935] dump_stack_lvl+0x241/0x360 [ 320.410958][ T6935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.416142][ T6935] ? __pfx__printk+0x10/0x10 [ 320.420719][ T6935] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 320.426254][ T6935] ? __pfx___might_resched+0x10/0x10 [ 320.431540][ T6935] should_fail_ex+0x3b0/0x4e0 [ 320.436228][ T6935] ? skb_clone+0x20c/0x390 [ 320.440656][ T6935] should_failslab+0xac/0x100 [ 320.445328][ T6935] ? skb_clone+0x20c/0x390 [ 320.449733][ T6935] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 320.455098][ T6935] skb_clone+0x20c/0x390 [ 320.459331][ T6935] nfnetlink_rcv+0x575/0x2ab0 [ 320.464002][ T6935] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 320.469713][ T6935] ? __dev_queue_xmit+0x1758/0x3f30 [ 320.474897][ T6935] ? kasan_save_track+0x51/0x80 [ 320.479751][ T6935] ? do_syscall_64+0xf3/0x230 [ 320.484438][ T6935] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 320.489587][ T6935] ? ref_tracker_free+0x643/0x7e0 [ 320.494612][ T6935] ? __asan_memcpy+0x40/0x70 [ 320.499186][ T6935] ? __pfx_ref_tracker_free+0x10/0x10 [ 320.504552][ T6935] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.509735][ T6935] ? skb_clone+0x240/0x390 [ 320.514140][ T6935] ? __pfx_lock_release+0x10/0x10 [ 320.519157][ T6935] ? __netlink_deliver_tap+0x77e/0x7c0 [ 320.524606][ T6935] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.529792][ T6935] netlink_unicast+0x7f6/0x990 [ 320.534565][ T6935] ? __pfx_netlink_unicast+0x10/0x10 [ 320.539866][ T6935] ? __virt_addr_valid+0x183/0x530 [ 320.544986][ T6935] ? __check_object_size+0x48e/0x900 [ 320.550260][ T6935] netlink_sendmsg+0x8e4/0xcb0 [ 320.555019][ T6935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.560291][ T6935] ? aa_sock_msg_perm+0x91/0x160 [ 320.565215][ T6935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.570483][ T6935] __sock_sendmsg+0x221/0x270 [ 320.575153][ T6935] ____sys_sendmsg+0x52a/0x7e0 [ 320.579919][ T6935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.585231][ T6935] __sys_sendmsg+0x292/0x380 [ 320.589828][ T6935] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.594951][ T6935] ? __pfx_vfs_write+0x10/0x10 [ 320.599728][ T6935] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.606059][ T6935] ? do_syscall_64+0x100/0x230 [ 320.610829][ T6935] ? do_syscall_64+0xb6/0x230 [ 320.615496][ T6935] do_syscall_64+0xf3/0x230 [ 320.620000][ T6935] ? clear_bhb_loop+0x35/0x90 [ 320.624674][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.630567][ T6935] RIP: 0033:0x7f7e94b7dff9 [ 320.634982][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.654591][ T6935] RSP: 002b:00007f7e95950038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.662992][ T6935] RAX: ffffffffffffffda RBX: 00007f7e94d35f80 RCX: 00007f7e94b7dff9 [ 320.670950][ T6935] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 320.678908][ T6935] RBP: 00007f7e95950090 R08: 0000000000000000 R09: 0000000000000000 [ 320.686875][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.694848][ T6935] R13: 0000000000000000 R14: 00007f7e94d35f80 R15: 00007fff73ad6188 [ 320.702828][ T6935] [ 320.705937][ T2960] hsr_slave_1: left promiscuous mode [ 320.722700][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.740173][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.761459][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.769057][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.782520][ T2960] hsr_slave_0: left promiscuous mode [ 320.788400][ T2960] hsr_slave_1: left promiscuous mode [ 320.794724][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.802635][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.810338][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.818141][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.829501][ T2960] hsr_slave_0: left promiscuous mode [ 320.837380][ T2960] hsr_slave_1: left promiscuous mode [ 320.844577][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.858573][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.871036][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.880055][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.930064][ T2960] veth1_macvtap: left promiscuous mode [ 320.935859][ T2960] veth0_macvtap: left promiscuous mode [ 320.941470][ T2960] veth1_vlan: left promiscuous mode [ 320.948087][ T2960] veth0_vlan: left promiscuous mode [ 320.961079][ T2960] veth1_macvtap: left promiscuous mode [ 320.966820][ T2960] veth0_macvtap: left promiscuous mode [ 320.972478][ T2960] veth1_vlan: left promiscuous mode [ 320.977727][ T2960] veth0_vlan: left allmulticast mode [ 320.983155][ T2960] veth0_vlan: left promiscuous mode [ 320.990173][ T2960] veth1_macvtap: left promiscuous mode [ 320.995776][ T2960] veth0_macvtap: left promiscuous mode [ 321.001308][ T2960] veth1_vlan: left promiscuous mode [ 321.006911][ T2960] veth0_vlan: left promiscuous mode [ 321.017700][ T2960] veth1_macvtap: left promiscuous mode [ 321.023666][ T2960] veth0_macvtap: left promiscuous mode [ 321.029221][ T2960] veth1_vlan: left promiscuous mode [ 321.034908][ T2960] veth0_vlan: left promiscuous mode [ 321.601583][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 321.645811][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 322.230211][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 322.265864][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 323.109515][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 323.140896][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 323.677906][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 323.709708][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 324.066015][ T6775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.075067][ T6775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.094839][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 324.104606][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.418'. [ 324.118872][ T5341] lo speed is unknown, defaulting to 1000 [ 324.126740][ T6773] veth1_vlan: entered promiscuous mode [ 324.135892][ T6775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.212937][ T6769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.255128][ T6775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.292205][ T6769] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.349477][ T6766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.364016][ T6766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.378176][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.385318][ T6927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.413020][ T6766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.428792][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.435934][ T6927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.454264][ T6773] veth0_macvtap: entered promiscuous mode [ 324.474958][ T6766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.523361][ T6773] veth1_macvtap: entered promiscuous mode [ 324.594849][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.606006][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.617081][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.642719][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.661535][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.673236][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.716568][ T6773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.730440][ T6773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.740367][ T6773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.749609][ T6773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.929855][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.950157][ T6769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.002815][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.016628][ T6927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.036832][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.036996][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.056052][ T6927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.082061][ T6766] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.094431][ T6775] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.134466][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.141550][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.164216][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.171325][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.195527][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 325.229801][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.236953][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.275199][ T6769] veth0_vlan: entered promiscuous mode [ 325.293859][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.300998][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.390369][ T6769] veth1_vlan: entered promiscuous mode [ 325.412904][ T6769] veth0_macvtap: entered promiscuous mode [ 325.423979][ T6769] veth1_macvtap: entered promiscuous mode [ 325.440807][ T6769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.451478][ T6769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.461595][ T6769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.472261][ T6769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.484298][ T6769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.516395][ T6775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.526979][ T6775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.545798][ T6769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.556891][ T6769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.566987][ T6769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.582151][ T6769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.593444][ T6769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.647808][ T6960] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 325.657072][ T6962] tipc: Started in network mode [ 325.663366][ T6962] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 325.670850][ T6962] tipc: Enabled bearer , priority 0 [ 325.681313][ T6769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.702036][ T6769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.710763][ T6769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.733213][ T6769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.772919][ T6955] ªªªªªª: renamed from syzkaller0 [ 325.791483][ T2960] IPVS: stop unused estimator thread 0... [ 325.829643][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.904668][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.995737][ T3102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.034017][ T3102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.120237][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.140347][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.163108][ T6766] veth0_vlan: entered promiscuous mode [ 326.220524][ T6766] veth1_vlan: entered promiscuous mode [ 326.319125][ T6766] veth0_macvtap: entered promiscuous mode [ 326.331275][ T6766] veth1_macvtap: entered promiscuous mode [ 326.366768][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.370274][ T6986] FAULT_INJECTION: forcing a failure. [ 326.370274][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 326.396495][ T6986] CPU: 0 UID: 0 PID: 6986 Comm: syz.2.410 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 326.404557][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.407084][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 326.417725][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.426892][ T6986] Call Trace: [ 326.426902][ T6986] [ 326.426911][ T6986] dump_stack_lvl+0x241/0x360 [ 326.426942][ T6986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.426965][ T6986] ? __pfx__printk+0x10/0x10 [ 326.426989][ T6986] ? __kmalloc_noprof+0xb0/0x400 [ 326.427014][ T6986] ? __pfx___might_resched+0x10/0x10 [ 326.438811][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.440674][ T6986] should_fail_ex+0x3b0/0x4e0 [ 326.445249][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.448242][ T6986] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 326.462279][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.462906][ T6986] should_failslab+0xac/0x100 [ 326.479644][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.482606][ T6986] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 326.482636][ T6986] __kmalloc_noprof+0xd8/0x400 [ 326.482659][ T6986] ? apparmor_capable+0x13b/0x1b0 [ 326.482686][ T6986] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 326.514921][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.520928][ T6986] genl_rcv_msg+0x802/0xec0 [ 326.527884][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.531883][ T6986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.531937][ T6986] ? __pfx_lock_acquire+0x10/0x10 [ 326.531963][ T6986] ? __pfx_netlbl_unlabel_staticremovedef+0x10/0x10 [ 326.531991][ T6986] ? __pfx___might_resched+0x10/0x10 [ 326.538153][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.543045][ T6986] netlink_rcv_skb+0x1e3/0x430 [ 326.543072][ T6986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.543097][ T6986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.543147][ T6986] genl_rcv+0x28/0x40 [ 326.543167][ T6986] netlink_unicast+0x7f6/0x990 [ 326.555656][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.558040][ T6986] ? __pfx_netlink_unicast+0x10/0x10 [ 326.568450][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.572799][ T6986] ? __virt_addr_valid+0x183/0x530 [ 326.572827][ T6986] ? __check_object_size+0x48e/0x900 [ 326.572854][ T6986] netlink_sendmsg+0x8e4/0xcb0 [ 326.572887][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.572911][ T6986] ? aa_sock_msg_perm+0x91/0x160 [ 326.572938][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.579136][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.584505][ T6986] __sock_sendmsg+0x221/0x270 [ 326.584539][ T6986] ____sys_sendmsg+0x52a/0x7e0 [ 326.584569][ T6986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.584607][ T6986] __sys_sendmsg+0x292/0x380 [ 326.591003][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.600248][ T6986] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.600286][ T6986] ? __pfx_vfs_write+0x10/0x10 [ 326.600333][ T6986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.610552][ T6775] veth0_vlan: entered promiscuous mode [ 326.615364][ T6986] ? do_syscall_64+0x100/0x230 [ 326.615395][ T6986] ? do_syscall_64+0xb6/0x230 [ 326.615419][ T6986] do_syscall_64+0xf3/0x230 [ 326.626064][ T6766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.633908][ T6986] ? clear_bhb_loop+0x35/0x90 [ 326.633938][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.633960][ T6986] RIP: 0033:0x7f50f717dff9 [ 326.633977][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.633993][ T6986] RSP: 002b:00007f50f7ec4038 EFLAGS: 00000246 [ 326.640020][ T6766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.649657][ T6986] ORIG_RAX: 000000000000002e [ 326.649671][ T6986] RAX: ffffffffffffffda RBX: 00007f50f7335f80 RCX: 00007f50f717dff9 [ 326.649686][ T6986] RDX: 0000000004000004 RSI: 0000000020000400 RDI: 0000000000000004 [ 326.649698][ T6986] RBP: 00007f50f7ec4090 R08: 0000000000000000 R09: 0000000000000000 [ 326.649710][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.649722][ T6986] R13: 0000000000000000 R14: 00007f50f7335f80 R15: 00007ffefe7009c8 [ 326.649751][ T6986] [ 326.782293][ T939] tipc: Node number set to 12429994 [ 326.811214][ T6766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.863581][ T6988] x_tables: duplicate underflow at hook 2 [ 326.866197][ T6766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.874685][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 326.891301][ T6775] veth1_vlan: entered promiscuous mode [ 327.030526][ T6775] veth0_macvtap: entered promiscuous mode [ 327.062589][ T6775] veth1_macvtap: entered promiscuous mode [ 327.141530][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.172551][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.192006][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.233213][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.236687][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 327.256882][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.289729][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.305056][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.321404][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.355796][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.379861][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.397165][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.434755][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.447249][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.458235][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.471205][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.481369][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.489395][ T7006] IPVS: length: 60 != 813667928 [ 327.510397][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.532732][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.551821][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.569683][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.588042][ T7003] netlink: 'syz.1.434': attribute type 10 has an invalid length. [ 327.598896][ T7003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.434'. [ 327.608663][ T7003] batman_adv: batadv0: Adding interface: vlan1 [ 327.615347][ T7003] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.640921][ T7003] batman_adv: batadv0: Interface activated: vlan1 [ 327.655172][ T6775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.664308][ T6775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.674204][ T6775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.683297][ T6775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.738638][ T6927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.803942][ T6927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.979267][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.012547][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.170727][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.187092][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.383090][ T7030] vlan0: entered allmulticast mode [ 328.395461][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 328.639892][ T7044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'. [ 328.920100][ T7065] FAULT_INJECTION: forcing a failure. [ 328.920100][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 328.962803][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.1.450 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 328.973426][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 328.983501][ T7065] Call Trace: [ 328.986796][ T7065] [ 328.989750][ T7065] dump_stack_lvl+0x241/0x360 [ 328.994449][ T7065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.999663][ T7065] ? __pfx__printk+0x10/0x10 [ 329.004271][ T7065] ? __kmalloc_node_noprof+0xb7/0x440 [ 329.009664][ T7065] ? __pfx___might_resched+0x10/0x10 [ 329.014969][ T7065] ? __asan_memset+0x23/0x50 [ 329.019584][ T7065] should_fail_ex+0x3b0/0x4e0 [ 329.024293][ T7065] should_failslab+0xac/0x100 [ 329.028995][ T7065] __kmalloc_node_noprof+0xdf/0x440 [ 329.034220][ T7065] ? __kvmalloc_node_noprof+0x72/0x190 [ 329.039697][ T7065] __kvmalloc_node_noprof+0x72/0x190 [ 329.045001][ T7065] rhashtable_init_noprof+0x534/0xa60 [ 329.050394][ T7065] rhltable_init_noprof+0x1c/0x60 [ 329.055430][ T7065] nf_tables_newtable+0x7e8/0x1e10 [ 329.060554][ T7065] ? nfnl_pernet+0x23/0x240 [ 329.065070][ T7065] ? __pfx_nf_tables_newtable+0x10/0x10 [ 329.070616][ T7065] ? __nla_parse+0x40/0x60 [ 329.075028][ T7065] nfnetlink_rcv+0x14dc/0x2ab0 [ 329.079806][ T7065] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 329.084941][ T7065] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.090129][ T7065] ? skb_clone+0x240/0x390 [ 329.094538][ T7065] ? __pfx_lock_release+0x10/0x10 [ 329.099566][ T7065] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.104759][ T7065] netlink_unicast+0x7f6/0x990 [ 329.109528][ T7065] ? __pfx_netlink_unicast+0x10/0x10 [ 329.114809][ T7065] ? __virt_addr_valid+0x183/0x530 [ 329.119918][ T7065] ? __check_object_size+0x48e/0x900 [ 329.125196][ T7065] netlink_sendmsg+0x8e4/0xcb0 [ 329.129959][ T7065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.135238][ T7065] ? aa_sock_msg_perm+0x91/0x160 [ 329.140171][ T7065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.145443][ T7065] __sock_sendmsg+0x221/0x270 [ 329.150117][ T7065] ____sys_sendmsg+0x52a/0x7e0 [ 329.154878][ T7065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.160166][ T7065] __sys_sendmsg+0x292/0x380 [ 329.164752][ T7065] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.169863][ T7065] ? __pfx_vfs_write+0x10/0x10 [ 329.174636][ T7065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 329.180960][ T7065] ? do_syscall_64+0x100/0x230 [ 329.185724][ T7065] ? do_syscall_64+0xb6/0x230 [ 329.190396][ T7065] do_syscall_64+0xf3/0x230 [ 329.194908][ T7065] ? clear_bhb_loop+0x35/0x90 [ 329.199591][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.205480][ T7065] RIP: 0033:0x7f7e94b7dff9 [ 329.209886][ T7065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.229506][ T7065] RSP: 002b:00007f7e95950038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.237917][ T7065] RAX: ffffffffffffffda RBX: 00007f7e94d35f80 RCX: 00007f7e94b7dff9 [ 329.245879][ T7065] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 329.253838][ T7065] RBP: 00007f7e95950090 R08: 0000000000000000 R09: 0000000000000000 [ 329.261808][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.269777][ T7065] R13: 0000000000000000 R14: 00007f7e94d35f80 R15: 00007fff73ad6188 [ 329.277752][ T7065] [ 329.562283][ T7080] FAULT_INJECTION: forcing a failure. [ 329.562283][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 329.575144][ T7080] CPU: 1 UID: 0 PID: 7080 Comm: syz.1.461 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 329.585748][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.595822][ T7080] Call Trace: [ 329.599119][ T7080] [ 329.602068][ T7080] dump_stack_lvl+0x241/0x360 [ 329.606773][ T7080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.611991][ T7080] ? __pfx__printk+0x10/0x10 [ 329.616597][ T7080] ? unwind_get_return_address+0x4d/0x90 [ 329.622250][ T7080] ? arch_stack_walk+0xfd/0x150 [ 329.627128][ T7080] should_fail_ex+0x3b0/0x4e0 [ 329.631837][ T7080] ? radix_tree_node_alloc+0x8b/0x3c0 [ 329.637236][ T7080] should_failslab+0xac/0x100 [ 329.641937][ T7080] ? radix_tree_node_alloc+0x8b/0x3c0 [ 329.647333][ T7080] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 329.652723][ T7080] radix_tree_node_alloc+0x8b/0x3c0 [ 329.657927][ T7080] idr_get_free+0x296/0xab0 [ 329.662433][ T7080] idr_alloc_u32+0x195/0x330 [ 329.667018][ T7080] ? __pfx_idr_alloc_u32+0x10/0x10 [ 329.672124][ T7080] ? __pfx_lock_acquire+0x10/0x10 [ 329.677150][ T7080] idr_alloc_cyclic+0x106/0x300 [ 329.681997][ T7080] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 329.687357][ T7080] ? __radix_tree_preload+0x71c/0x860 [ 329.692724][ T7080] ? __radix_tree_preload+0x80/0x860 [ 329.698004][ T7080] ? kfree+0x1a0/0x440 [ 329.702065][ T7080] ? btf_new_fd+0x654/0xd30 [ 329.706569][ T7080] btf_new_fd+0x673/0xd30 [ 329.710901][ T7080] ? __pfx_btf_new_fd+0x10/0x10 [ 329.715747][ T7080] ? bpf_btf_load+0xcf/0x1a0 [ 329.720333][ T7080] __sys_bpf+0x6ef/0x810 [ 329.724575][ T7080] ? __pfx___sys_bpf+0x10/0x10 [ 329.729341][ T7080] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 329.735324][ T7080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 329.741647][ T7080] ? do_syscall_64+0x100/0x230 [ 329.746415][ T7080] __x64_sys_bpf+0x7c/0x90 [ 329.750825][ T7080] do_syscall_64+0xf3/0x230 [ 329.755322][ T7080] ? clear_bhb_loop+0x35/0x90 [ 329.759993][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.765875][ T7080] RIP: 0033:0x7f7e94b7dff9 [ 329.770279][ T7080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.789882][ T7080] RSP: 002b:00007f7e95950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.798312][ T7080] RAX: ffffffffffffffda RBX: 00007f7e94d35f80 RCX: 00007f7e94b7dff9 [ 329.806279][ T7080] RDX: 0000000000000020 RSI: 0000000020001300 RDI: 0000000000000012 [ 329.814241][ T7080] RBP: 00007f7e95950090 R08: 0000000000000000 R09: 0000000000000000 [ 329.822210][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.830174][ T7080] R13: 0000000000000001 R14: 00007f7e94d35f80 R15: 00007fff73ad6188 [ 329.838150][ T7080] [ 329.903038][ T7086] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 329.978440][ T7086] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.994848][ T7086] bond0: (slave team0): Enslaving as an active interface with an up link [ 330.007650][ T7087] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 330.021394][ T7087] bond0: (slave team0): Releasing backup interface [ 330.041528][ T7087] bridge0: port 3(team0) entered blocking state [ 330.048157][ T7087] bridge0: port 3(team0) entered disabled state [ 330.073004][ T7087] team0: entered allmulticast mode [ 330.095399][ T7087] team_slave_0: entered allmulticast mode [ 330.102263][ T7087] team_slave_1: entered allmulticast mode [ 330.129622][ T7087] team0: entered promiscuous mode [ 330.145008][ T7087] team_slave_0: entered promiscuous mode [ 330.153314][ T7087] team_slave_1: entered promiscuous mode [ 330.165364][ T7086] tipc: MTU too low for tipc bearer [ 330.176587][ T7087] netlink: 340 bytes leftover after parsing attributes in process `syz.2.462'. [ 330.705256][ T7132] FAULT_INJECTION: forcing a failure. [ 330.705256][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 330.717975][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.3.474 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 330.728579][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.738643][ T7132] Call Trace: [ 330.741922][ T7132] [ 330.744853][ T7132] dump_stack_lvl+0x241/0x360 [ 330.749531][ T7132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.754727][ T7132] ? __pfx__printk+0x10/0x10 [ 330.759320][ T7132] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 330.764864][ T7132] ? __pfx___might_resched+0x10/0x10 [ 330.770144][ T7132] should_fail_ex+0x3b0/0x4e0 [ 330.774821][ T7132] ? skb_clone+0x20c/0x390 [ 330.779229][ T7132] should_failslab+0xac/0x100 [ 330.783899][ T7132] ? skb_clone+0x20c/0x390 [ 330.788308][ T7132] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 330.793677][ T7132] skb_clone+0x20c/0x390 [ 330.797929][ T7132] nfnetlink_rcv+0x575/0x2ab0 [ 330.802615][ T7132] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 330.808337][ T7132] ? __dev_queue_xmit+0x1758/0x3f30 [ 330.813531][ T7132] ? kasan_save_track+0x51/0x80 [ 330.818378][ T7132] ? do_syscall_64+0xf3/0x230 [ 330.823047][ T7132] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 330.828169][ T7132] ? ref_tracker_free+0x643/0x7e0 [ 330.833185][ T7132] ? __asan_memcpy+0x40/0x70 [ 330.837764][ T7132] ? __pfx_ref_tracker_free+0x10/0x10 [ 330.843133][ T7132] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.848324][ T7132] ? skb_clone+0x240/0x390 [ 330.852736][ T7132] ? __pfx_lock_release+0x10/0x10 [ 330.857757][ T7132] ? __netlink_deliver_tap+0x77e/0x7c0 [ 330.863213][ T7132] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.868407][ T7132] netlink_unicast+0x7f6/0x990 [ 330.873173][ T7132] ? __pfx_netlink_unicast+0x10/0x10 [ 330.878450][ T7132] ? __virt_addr_valid+0x183/0x530 [ 330.883554][ T7132] ? __check_object_size+0x48e/0x900 [ 330.888834][ T7132] netlink_sendmsg+0x8e4/0xcb0 [ 330.893597][ T7132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.898873][ T7132] ? aa_sock_msg_perm+0x91/0x160 [ 330.903810][ T7132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.909083][ T7132] __sock_sendmsg+0x221/0x270 [ 330.913757][ T7132] ____sys_sendmsg+0x52a/0x7e0 [ 330.918516][ T7132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.923804][ T7132] __sys_sendmsg+0x292/0x380 [ 330.928388][ T7132] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.933501][ T7132] ? __pfx_vfs_write+0x10/0x10 [ 330.938274][ T7132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.944601][ T7132] ? do_syscall_64+0x100/0x230 [ 330.949359][ T7132] ? do_syscall_64+0xb6/0x230 [ 330.954036][ T7132] do_syscall_64+0xf3/0x230 [ 330.958532][ T7132] ? clear_bhb_loop+0x35/0x90 [ 330.963204][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.969089][ T7132] RIP: 0033:0x7fee9277dff9 [ 330.973497][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.993095][ T7132] RSP: 002b:00007fee934ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.001499][ T7132] RAX: ffffffffffffffda RBX: 00007fee92935f80 RCX: 00007fee9277dff9 [ 331.009462][ T7132] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 331.017422][ T7132] RBP: 00007fee934ca090 R08: 0000000000000000 R09: 0000000000000000 [ 331.025381][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.033343][ T7132] R13: 0000000000000000 R14: 00007fee92935f80 R15: 00007ffeb5b55308 [ 331.041314][ T7132] [ 331.247920][ T7135] FAULT_INJECTION: forcing a failure. [ 331.247920][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 331.306091][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.0.476 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 331.316708][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.326776][ T7135] Call Trace: [ 331.330067][ T7135] [ 331.333016][ T7135] dump_stack_lvl+0x241/0x360 [ 331.337716][ T7135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.342936][ T7135] ? __pfx__printk+0x10/0x10 [ 331.347552][ T7135] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 331.350097][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 331.353537][ T7135] ? __pfx___might_resched+0x10/0x10 [ 331.353572][ T7135] should_fail_ex+0x3b0/0x4e0 [ 331.353601][ T7135] should_failslab+0xac/0x100 [ 331.353622][ T7135] ? __alloc_skb+0x1c3/0x440 [ 331.353643][ T7135] kmem_cache_alloc_node_noprof+0x71/0x320 [ 331.353671][ T7135] __alloc_skb+0x1c3/0x440 [ 331.391811][ T7135] ? __pfx___alloc_skb+0x10/0x10 [ 331.396749][ T7135] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 331.402735][ T7135] ? netlink_ack_tlv_len+0x6e/0x200 [ 331.407926][ T7135] netlink_ack+0x13f/0xa30 [ 331.412336][ T7135] ? lockdep_hardirqs_on+0x99/0x150 [ 331.417536][ T7135] ? nfnetlink_rcv+0x27a6/0x2ab0 [ 331.422467][ T7135] nfnetlink_rcv+0x26b6/0x2ab0 [ 331.427248][ T7135] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 331.432383][ T7135] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.437572][ T7135] ? skb_clone+0x240/0x390 [ 331.441981][ T7135] ? __pfx_lock_release+0x10/0x10 [ 331.447007][ T7135] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.452196][ T7135] netlink_unicast+0x7f6/0x990 [ 331.456964][ T7135] ? __pfx_netlink_unicast+0x10/0x10 [ 331.462249][ T7135] ? __virt_addr_valid+0x183/0x530 [ 331.467353][ T7135] ? __check_object_size+0x48e/0x900 [ 331.472640][ T7135] netlink_sendmsg+0x8e4/0xcb0 [ 331.477403][ T7135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.482683][ T7135] ? aa_sock_msg_perm+0x91/0x160 [ 331.487613][ T7135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.492886][ T7135] __sock_sendmsg+0x221/0x270 [ 331.497561][ T7135] ____sys_sendmsg+0x52a/0x7e0 [ 331.502323][ T7135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.507611][ T7135] __sys_sendmsg+0x292/0x380 [ 331.512192][ T7135] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.517307][ T7135] ? __pfx_vfs_write+0x10/0x10 [ 331.522075][ T7135] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.528397][ T7135] ? do_syscall_64+0x100/0x230 [ 331.533152][ T7135] ? do_syscall_64+0xb6/0x230 [ 331.537821][ T7135] do_syscall_64+0xf3/0x230 [ 331.542318][ T7135] ? clear_bhb_loop+0x35/0x90 [ 331.546993][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.552876][ T7135] RIP: 0033:0x7f13a5d7dff9 [ 331.557280][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.576877][ T7135] RSP: 002b:00007f13a6b49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.585285][ T7135] RAX: ffffffffffffffda RBX: 00007f13a5f35f80 RCX: 00007f13a5d7dff9 [ 331.593246][ T7135] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 331.601210][ T7135] RBP: 00007f13a6b49090 R08: 0000000000000000 R09: 0000000000000000 [ 331.609172][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.617133][ T7135] R13: 0000000000000000 R14: 00007f13a5f35f80 R15: 00007ffceab9fe88 [ 331.625107][ T7135] [ 331.672823][ T7150] FAULT_INJECTION: forcing a failure. [ 331.672823][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 331.685875][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.2.481 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 331.696484][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.706553][ T7150] Call Trace: [ 331.709847][ T7150] [ 331.712791][ T7150] dump_stack_lvl+0x241/0x360 [ 331.717493][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.722712][ T7150] ? __pfx__printk+0x10/0x10 [ 331.727326][ T7150] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 331.732811][ T7150] ? __pfx___might_resched+0x10/0x10 [ 331.738128][ T7150] should_fail_ex+0x3b0/0x4e0 [ 331.742839][ T7150] should_failslab+0xac/0x100 [ 331.747538][ T7150] ? nf_tables_newtable+0x52c/0x1e10 [ 331.752843][ T7150] __kmalloc_cache_noprof+0x6c/0x2c0 [ 331.758151][ T7150] ? nft_pernet+0x23/0x240 [ 331.762602][ T7150] nf_tables_newtable+0x52c/0x1e10 [ 331.767741][ T7150] ? nfnl_pernet+0x23/0x240 [ 331.772269][ T7150] ? __pfx_nf_tables_newtable+0x10/0x10 [ 331.777844][ T7150] ? __nla_parse+0x40/0x60 [ 331.782284][ T7150] nfnetlink_rcv+0x14dc/0x2ab0 [ 331.787101][ T7150] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 331.790185][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 331.792256][ T7150] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.792281][ T7150] ? skb_clone+0x240/0x390 [ 331.792303][ T7150] ? __pfx_lock_release+0x10/0x10 [ 331.792342][ T7150] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.792366][ T7150] netlink_unicast+0x7f6/0x990 [ 331.792399][ T7150] ? __pfx_netlink_unicast+0x10/0x10 [ 331.792422][ T7150] ? __virt_addr_valid+0x183/0x530 [ 331.792445][ T7150] ? __check_object_size+0x48e/0x900 [ 331.792471][ T7150] netlink_sendmsg+0x8e4/0xcb0 [ 331.842567][ T7150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.847850][ T7150] ? aa_sock_msg_perm+0x91/0x160 [ 331.852781][ T7150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.858056][ T7150] __sock_sendmsg+0x221/0x270 [ 331.862729][ T7150] ____sys_sendmsg+0x52a/0x7e0 [ 331.867489][ T7150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.872778][ T7150] __sys_sendmsg+0x292/0x380 [ 331.877366][ T7150] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.882474][ T7150] ? __pfx_vfs_write+0x10/0x10 [ 331.887257][ T7150] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.893592][ T7150] ? do_syscall_64+0x100/0x230 [ 331.898354][ T7150] ? do_syscall_64+0xb6/0x230 [ 331.903026][ T7150] do_syscall_64+0xf3/0x230 [ 331.907527][ T7150] ? clear_bhb_loop+0x35/0x90 [ 331.912200][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.918088][ T7150] RIP: 0033:0x7f50f717dff9 [ 331.922495][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.942092][ T7150] RSP: 002b:00007f50f7ec4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.950496][ T7150] RAX: ffffffffffffffda RBX: 00007f50f7335f80 RCX: 00007f50f717dff9 [ 331.958459][ T7150] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 331.966420][ T7150] RBP: 00007f50f7ec4090 R08: 0000000000000000 R09: 0000000000000000 [ 331.974383][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.982346][ T7150] R13: 0000000000000000 R14: 00007f50f7335f80 R15: 00007ffefe7009c8 [ 331.990317][ T7150] [ 332.051645][ T7157] tun0: tun_chr_ioctl cmd 1342215231 [ 332.089772][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.098121][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.153313][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.162172][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.198417][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.218957][ T7163] netlink: 488 bytes leftover after parsing attributes in process `syz.3.485'. [ 332.238609][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.252073][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.272682][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.296076][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.321448][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.349312][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.370515][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.387397][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.394850][ T7167] syzkaller1: entered promiscuous mode [ 332.402579][ T7167] syzkaller1: entered allmulticast mode [ 332.410606][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.441352][ T7167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.487'. [ 332.450842][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.499137][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.505530][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.511016][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.516759][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.522421][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.527998][ T7155] tun0: tun_chr_ioctl cmd 1074025673 [ 332.842572][ T7190] netlink: 'syz.3.493': attribute type 11 has an invalid length. [ 332.875388][ T7190] netlink: 224 bytes leftover after parsing attributes in process `syz.3.493'. [ 332.943727][ T7195] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.203877][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 333.249890][ T7210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 333.285461][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 334.003323][ T7261] FAULT_INJECTION: forcing a failure. [ 334.003323][ T7261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.087253][ T7261] CPU: 1 UID: 0 PID: 7261 Comm: syz.4.509 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 334.097880][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.107955][ T7261] Call Trace: [ 334.111253][ T7261] [ 334.114209][ T7261] dump_stack_lvl+0x241/0x360 [ 334.118921][ T7261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.124151][ T7261] ? __pfx__printk+0x10/0x10 [ 334.128778][ T7261] ? __pfx_lock_release+0x10/0x10 [ 334.133834][ T7261] should_fail_ex+0x3b0/0x4e0 [ 334.138546][ T7261] _copy_to_user+0x2f/0xb0 [ 334.142994][ T7261] bpf_test_finish+0x212/0x890 [ 334.147789][ T7261] ? __pfx_bpf_test_finish+0x10/0x10 [ 334.153108][ T7261] ? convert___skb_to_skb+0x41/0x620 [ 334.158411][ T7261] ? convert_skb_to___skb+0x2d3/0x510 [ 334.163808][ T7261] bpf_prog_test_run_skb+0xfe5/0x1820 [ 334.169225][ T7261] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 334.175056][ T7261] ? fput+0x1a8/0x230 [ 334.179063][ T7261] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 334.184893][ T7261] bpf_prog_test_run+0x2e4/0x360 [ 334.189859][ T7261] __sys_bpf+0x48d/0x810 [ 334.194128][ T7261] ? __pfx___sys_bpf+0x10/0x10 [ 334.198927][ T7261] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.204927][ T7261] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.211256][ T7261] ? do_syscall_64+0x100/0x230 [ 334.216015][ T7261] __x64_sys_bpf+0x7c/0x90 [ 334.220425][ T7261] do_syscall_64+0xf3/0x230 [ 334.224925][ T7261] ? clear_bhb_loop+0x35/0x90 [ 334.229597][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.235481][ T7261] RIP: 0033:0x7f7fb377dff9 [ 334.239888][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.259485][ T7261] RSP: 002b:00007f7fb4499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.267892][ T7261] RAX: ffffffffffffffda RBX: 00007f7fb3935f80 RCX: 00007f7fb377dff9 [ 334.275860][ T7261] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 334.283819][ T7261] RBP: 00007f7fb4499090 R08: 0000000000000000 R09: 0000000000000000 [ 334.291782][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.299752][ T7261] R13: 0000000000000000 R14: 00007f7fb3935f80 R15: 00007ffcf70d6898 [ 334.307726][ T7261] [ 334.401165][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.432212][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 334.443675][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.512'. [ 334.950792][ T7304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.520'. [ 335.854774][ T7350] netlink: 'syz.4.532': attribute type 4 has an invalid length. [ 335.889747][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.268395][ T8] IPVS: starting estimator thread 0... [ 336.402481][ T7380] IPVS: using max 22 ests per chain, 52800 per kthread [ 336.625064][ T7390] __nla_validate_parse: 4 callbacks suppressed [ 336.625082][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 336.652202][ T7390] bridge_slave_1: left allmulticast mode [ 336.691082][ T7390] bridge_slave_1: left promiscuous mode [ 336.700824][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.545'. [ 336.710552][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.785701][ T7390] bridge_slave_0: left allmulticast mode [ 336.804632][ T7390] bridge_slave_0: left promiscuous mode [ 336.810354][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.932771][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.953880][ T7397] netlink: 116 bytes leftover after parsing attributes in process `syz.2.547'. [ 336.966750][ T7396] FAULT_INJECTION: forcing a failure. [ 336.966750][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 336.985188][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.4.546 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 336.995801][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.005877][ T7396] Call Trace: [ 337.009172][ T7396] [ 337.012116][ T7396] dump_stack_lvl+0x241/0x360 [ 337.016822][ T7396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.022051][ T7396] ? __pfx__printk+0x10/0x10 [ 337.026673][ T7396] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 337.032678][ T7396] ? __pfx___might_resched+0x10/0x10 [ 337.037995][ T7396] should_fail_ex+0x3b0/0x4e0 [ 337.042702][ T7396] should_failslab+0xac/0x100 [ 337.047404][ T7396] ? __alloc_skb+0x1c3/0x440 [ 337.052019][ T7396] kmem_cache_alloc_node_noprof+0x71/0x320 [ 337.057851][ T7396] __alloc_skb+0x1c3/0x440 [ 337.062288][ T7396] ? mutex_is_locked+0x12/0x50 [ 337.067073][ T7396] ? __pfx___alloc_skb+0x10/0x10 [ 337.072042][ T7396] ? netlink_ack_tlv_len+0x6e/0x200 [ 337.077266][ T7396] netlink_ack+0x13f/0xa30 [ 337.081705][ T7396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.082442][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 337.087182][ T7396] netlink_rcv_skb+0x262/0x430 [ 337.087210][ T7396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.087239][ T7396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.087276][ T7396] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.116683][ T7396] netlink_unicast+0x7f6/0x990 [ 337.121481][ T7396] ? __pfx_netlink_unicast+0x10/0x10 [ 337.126787][ T7396] ? __virt_addr_valid+0x183/0x530 [ 337.131920][ T7396] ? __check_object_size+0x48e/0x900 [ 337.137235][ T7396] netlink_sendmsg+0x8e4/0xcb0 [ 337.142028][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.147336][ T7396] ? aa_sock_msg_perm+0x91/0x160 [ 337.152298][ T7396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.157604][ T7396] __sock_sendmsg+0x221/0x270 [ 337.162311][ T7396] ____sys_sendmsg+0x52a/0x7e0 [ 337.167108][ T7396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.172428][ T7396] __sys_sendmsg+0x292/0x380 [ 337.177034][ T7396] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.182168][ T7396] ? __pfx_vfs_write+0x10/0x10 [ 337.186975][ T7396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.193329][ T7396] ? do_syscall_64+0x100/0x230 [ 337.198115][ T7396] ? do_syscall_64+0xb6/0x230 [ 337.202817][ T7396] do_syscall_64+0xf3/0x230 [ 337.207348][ T7396] ? clear_bhb_loop+0x35/0x90 [ 337.212060][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.217976][ T7396] RIP: 0033:0x7f7fb377dff9 [ 337.222406][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.242025][ T7396] RSP: 002b:00007f7fb4499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.250460][ T7396] RAX: ffffffffffffffda RBX: 00007f7fb3935f80 RCX: 00007f7fb377dff9 [ 337.258447][ T7396] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 337.266436][ T7396] RBP: 00007f7fb4499090 R08: 0000000000000000 R09: 0000000000000000 [ 337.274427][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.282417][ T7396] R13: 0000000000000000 R14: 00007f7fb3935f80 R15: 00007ffcf70d6898 [ 337.290420][ T7396] [ 337.366224][ T7416] vlan2: entered promiscuous mode [ 337.378355][ T7423] FAULT_INJECTION: forcing a failure. [ 337.378355][ T7423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.391536][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.0.555 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 337.402141][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.412214][ T7423] Call Trace: [ 337.415509][ T7423] [ 337.418454][ T7423] dump_stack_lvl+0x241/0x360 [ 337.423157][ T7423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.424999][ T7416] bridge0: entered promiscuous mode [ 337.428359][ T7423] ? __pfx__printk+0x10/0x10 [ 337.428388][ T7423] ? __pfx_lock_release+0x10/0x10 [ 337.443196][ T7423] ? __lock_acquire+0x1384/0x2050 [ 337.448249][ T7423] should_fail_ex+0x3b0/0x4e0 [ 337.452963][ T7423] _copy_from_user+0x2f/0xe0 [ 337.457580][ T7423] kstrtouint_from_user+0xc6/0x190 [ 337.458703][ T7416] team0: Port device vlan2 added [ 337.462689][ T7423] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 337.462720][ T7423] ? __pfx_lock_acquire+0x10/0x10 [ 337.462754][ T7423] proc_fail_nth_write+0xaa/0x2d0 [ 337.468323][ T7418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'. [ 337.473367][ T7423] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 337.473396][ T7423] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 337.473427][ T7423] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 337.473455][ T7423] vfs_write+0x29c/0xc90 [ 337.513713][ T7423] ? __pfx_vfs_write+0x10/0x10 [ 337.518501][ T7423] ? __fget_files+0x3f3/0x470 [ 337.523205][ T7423] ? fdget_pos+0x24e/0x320 [ 337.527646][ T7423] ksys_write+0x183/0x2b0 [ 337.531994][ T7423] ? __pfx_ksys_write+0x10/0x10 [ 337.536865][ T7423] ? do_syscall_64+0x100/0x230 [ 337.541654][ T7423] ? do_syscall_64+0xb6/0x230 [ 337.546354][ T7423] do_syscall_64+0xf3/0x230 [ 337.550879][ T7423] ? clear_bhb_loop+0x35/0x90 [ 337.555586][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.561498][ T7423] RIP: 0033:0x7f13a5d7cadf [ 337.565926][ T7423] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 337.585554][ T7423] RSP: 002b:00007f13a6b49030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 337.593992][ T7423] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f13a5d7cadf [ 337.601991][ T7423] RDX: 0000000000000001 RSI: 00007f13a6b490a0 RDI: 0000000000000004 [ 337.609955][ T7423] RBP: 00007f13a6b49090 R08: 0000000000000000 R09: 0000000000000000 [ 337.617917][ T7423] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 337.625873][ T7423] R13: 0000000000000000 R14: 00007f13a5f35f80 R15: 00007ffceab9fe88 [ 337.633865][ T7423] [ 337.894778][ T7440] netlink: 'syz.3.559': attribute type 21 has an invalid length. [ 337.973407][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.037452][ T7448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.100169][ T7449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.109134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.132121][ T5287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.282125][ T7465] FAULT_INJECTION: forcing a failure. [ 338.282125][ T7465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.327196][ T7465] CPU: 1 UID: 0 PID: 7465 Comm: syz.4.569 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 338.337812][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.347877][ T7465] Call Trace: [ 338.351176][ T7465] [ 338.354127][ T7465] dump_stack_lvl+0x241/0x360 [ 338.358831][ T7465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.364058][ T7465] ? __pfx__printk+0x10/0x10 [ 338.368676][ T7465] ? snprintf+0xda/0x120 [ 338.372946][ T7465] should_fail_ex+0x3b0/0x4e0 [ 338.377650][ T7465] _copy_to_user+0x2f/0xb0 [ 338.382093][ T7465] simple_read_from_buffer+0xca/0x150 [ 338.387498][ T7465] proc_fail_nth_read+0x1e9/0x250 [ 338.392539][ T7465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.398085][ T7465] ? rw_verify_area+0x55e/0x6f0 [ 338.402932][ T7465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.408471][ T7465] vfs_read+0x201/0xbc0 [ 338.412621][ T7465] ? __pfx_lock_release+0x10/0x10 [ 338.417643][ T7465] ? __pfx_vfs_read+0x10/0x10 [ 338.422319][ T7465] ? __fget_files+0x3f3/0x470 [ 338.426994][ T7465] ? fdget_pos+0x24e/0x320 [ 338.431401][ T7465] ksys_read+0x183/0x2b0 [ 338.435637][ T7465] ? __pfx_ksys_read+0x10/0x10 [ 338.440391][ T7465] ? do_syscall_64+0x100/0x230 [ 338.445148][ T7465] ? do_syscall_64+0xb6/0x230 [ 338.449816][ T7465] do_syscall_64+0xf3/0x230 [ 338.454313][ T7465] ? clear_bhb_loop+0x35/0x90 [ 338.458984][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.464865][ T7465] RIP: 0033:0x7f7fb377ca3c [ 338.469270][ T7465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 338.488865][ T7465] RSP: 002b:00007f7fb4499030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.497271][ T7465] RAX: ffffffffffffffda RBX: 00007f7fb3935f80 RCX: 00007f7fb377ca3c [ 338.505232][ T7465] RDX: 000000000000000f RSI: 00007f7fb44990a0 RDI: 0000000000000005 [ 338.513192][ T7465] RBP: 00007f7fb4499090 R08: 0000000000000000 R09: 0000000000000000 [ 338.521149][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.529110][ T7465] R13: 0000000000000000 R14: 00007f7fb3935f80 R15: 00007ffcf70d6898 [ 338.537086][ T7465] [ 338.597617][ T7471] FAULT_INJECTION: forcing a failure. [ 338.597617][ T7471] name failslab, interval 1, probability 0, space 0, times 0 [ 338.663593][ T7471] CPU: 1 UID: 0 PID: 7471 Comm: syz.0.571 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 338.674216][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.684293][ T7471] Call Trace: [ 338.687599][ T7471] [ 338.690539][ T7471] dump_stack_lvl+0x241/0x360 [ 338.695243][ T7471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.700469][ T7471] ? __pfx__printk+0x10/0x10 [ 338.705084][ T7471] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 338.710566][ T7471] ? __pfx___might_resched+0x10/0x10 [ 338.715873][ T7471] ? lockdep_init_map_type+0xa1/0x910 [ 338.721271][ T7471] should_fail_ex+0x3b0/0x4e0 [ 338.725978][ T7471] should_failslab+0xac/0x100 [ 338.730688][ T7471] ? nft_trans_table_add+0x57/0x400 [ 338.735908][ T7471] __kmalloc_cache_noprof+0x6c/0x2c0 [ 338.741223][ T7471] nft_trans_table_add+0x57/0x400 [ 338.746271][ T7471] nf_tables_newtable+0x1143/0x1e10 [ 338.751493][ T7471] ? __pfx_nf_tables_newtable+0x10/0x10 [ 338.757060][ T7471] ? __nla_parse+0x40/0x60 [ 338.761501][ T7471] nfnetlink_rcv+0x14dc/0x2ab0 [ 338.766318][ T7471] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 338.771495][ T7471] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.776713][ T7471] ? skb_clone+0x240/0x390 [ 338.781149][ T7471] ? __pfx_lock_release+0x10/0x10 [ 338.786212][ T7471] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.791437][ T7471] netlink_unicast+0x7f6/0x990 [ 338.796238][ T7471] ? __pfx_netlink_unicast+0x10/0x10 [ 338.801549][ T7471] ? __virt_addr_valid+0x183/0x530 [ 338.806695][ T7471] ? __check_object_size+0x48e/0x900 [ 338.812011][ T7471] netlink_sendmsg+0x8e4/0xcb0 [ 338.816808][ T7471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.822124][ T7471] ? aa_sock_msg_perm+0x91/0x160 [ 338.827083][ T7471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.832385][ T7471] __sock_sendmsg+0x221/0x270 [ 338.837091][ T7471] ____sys_sendmsg+0x52a/0x7e0 [ 338.841887][ T7471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.847211][ T7471] __sys_sendmsg+0x292/0x380 [ 338.851828][ T7471] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.856973][ T7471] ? __pfx_vfs_write+0x10/0x10 [ 338.861776][ T7471] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.868132][ T7471] ? do_syscall_64+0x100/0x230 [ 338.872919][ T7471] ? do_syscall_64+0xb6/0x230 [ 338.877617][ T7471] do_syscall_64+0xf3/0x230 [ 338.882145][ T7471] ? clear_bhb_loop+0x35/0x90 [ 338.886846][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.892761][ T7471] RIP: 0033:0x7f13a5d7dff9 [ 338.897193][ T7471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.916819][ T7471] RSP: 002b:00007f13a6b49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.925257][ T7471] RAX: ffffffffffffffda RBX: 00007f13a5f35f80 RCX: 00007f13a5d7dff9 [ 338.933248][ T7471] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 338.941230][ T7471] RBP: 00007f13a6b49090 R08: 0000000000000000 R09: 0000000000000000 [ 338.949194][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.957152][ T7471] R13: 0000000000000000 R14: 00007f13a5f35f80 R15: 00007ffceab9fe88 [ 338.965117][ T7471] [ 339.014408][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.111403][ T7491] FAULT_INJECTION: forcing a failure. [ 339.111403][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 339.173335][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.0.578 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 339.183955][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 339.194026][ T7491] Call Trace: [ 339.197319][ T7491] [ 339.200269][ T7491] dump_stack_lvl+0x241/0x360 [ 339.204975][ T7491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.210197][ T7491] ? __pfx__printk+0x10/0x10 [ 339.214813][ T7491] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 339.220735][ T7491] ? __pfx___might_resched+0x10/0x10 [ 339.226053][ T7491] should_fail_ex+0x3b0/0x4e0 [ 339.230760][ T7491] ? __d_alloc+0x31/0x700 [ 339.235115][ T7491] should_failslab+0xac/0x100 [ 339.239810][ T7491] ? __d_alloc+0x31/0x700 [ 339.244152][ T7491] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 339.249870][ T7491] ? alloc_fd+0x5a1/0x640 [ 339.254195][ T7491] __d_alloc+0x31/0x700 [ 339.258349][ T7491] d_alloc_pseudo+0x1f/0xb0 [ 339.262848][ T7491] alloc_file_pseudo+0x123/0x290 [ 339.267784][ T7491] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 339.273233][ T7491] ? alloc_fd+0x5a1/0x640 [ 339.277557][ T7491] anon_inode_getfd+0xce/0x1e0 [ 339.282313][ T7491] btf_new_fd+0x802/0xd30 [ 339.286642][ T7491] ? __pfx_btf_new_fd+0x10/0x10 [ 339.291492][ T7491] ? bpf_btf_load+0xcf/0x1a0 [ 339.296075][ T7491] __sys_bpf+0x6ef/0x810 [ 339.300312][ T7491] ? __pfx___sys_bpf+0x10/0x10 [ 339.305074][ T7491] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 339.311050][ T7491] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.317375][ T7491] ? do_syscall_64+0x100/0x230 [ 339.322136][ T7491] __x64_sys_bpf+0x7c/0x90 [ 339.326544][ T7491] do_syscall_64+0xf3/0x230 [ 339.331042][ T7491] ? clear_bhb_loop+0x35/0x90 [ 339.335716][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.341601][ T7491] RIP: 0033:0x7f13a5d7dff9 [ 339.346013][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.365618][ T7491] RSP: 002b:00007f13a6b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.374025][ T7491] RAX: ffffffffffffffda RBX: 00007f13a5f35f80 RCX: 00007f13a5d7dff9 [ 339.381989][ T7491] RDX: 0000000000000020 RSI: 0000000020001300 RDI: 0000000000000012 [ 339.389952][ T7491] RBP: 00007f13a6b49090 R08: 0000000000000000 R09: 0000000000000000 [ 339.397911][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.405869][ T7491] R13: 0000000000000001 R14: 00007f13a5f35f80 R15: 00007ffceab9fe88 [ 339.413843][ T7491] [ 339.483525][ T7495] tipc: Started in network mode [ 339.488407][ T7495] tipc: Node identity ffffffff, cluster identity 4711 [ 339.531949][ T7495] tipc: Node number set to 4294967295 [ 339.770642][ T7514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.586'. [ 340.052485][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.098637][ T7529] FAULT_INJECTION: forcing a failure. [ 340.098637][ T7529] name failslab, interval 1, probability 0, space 0, times 0 [ 340.122131][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.3.591 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 340.132754][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.142823][ T7529] Call Trace: [ 340.146118][ T7529] [ 340.149060][ T7529] dump_stack_lvl+0x241/0x360 [ 340.153762][ T7529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.158983][ T7529] ? __pfx__printk+0x10/0x10 [ 340.163599][ T7529] ? __kmalloc_noprof+0xb0/0x400 [ 340.168565][ T7529] ? __pfx___might_resched+0x10/0x10 [ 340.173877][ T7529] should_fail_ex+0x3b0/0x4e0 [ 340.178587][ T7529] ? nla_strdup+0x9c/0x140 [ 340.183020][ T7529] should_failslab+0xac/0x100 [ 340.187700][ T7529] ? nla_strdup+0x9c/0x140 [ 340.192111][ T7529] __kmalloc_noprof+0xd8/0x400 [ 340.196867][ T7529] ? __kmalloc_node_noprof+0x247/0x440 [ 340.202315][ T7529] ? __kvmalloc_node_noprof+0x72/0x190 [ 340.207767][ T7529] nla_strdup+0x9c/0x140 [ 340.212000][ T7529] nf_tables_newset+0x17b2/0x2ee0 [ 340.217030][ T7529] ? __pfx_nf_tables_newset+0x10/0x10 [ 340.222396][ T7529] ? __pfx_lock_release+0x10/0x10 [ 340.227424][ T7529] ? __nla_parse+0x40/0x60 [ 340.231840][ T7529] nfnetlink_rcv+0x14dc/0x2ab0 [ 340.236629][ T7529] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 340.241767][ T7529] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.246956][ T7529] ? skb_clone+0x240/0x390 [ 340.251362][ T7529] ? __pfx_lock_release+0x10/0x10 [ 340.256390][ T7529] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.261578][ T7529] netlink_unicast+0x7f6/0x990 [ 340.266345][ T7529] ? __pfx_netlink_unicast+0x10/0x10 [ 340.271624][ T7529] ? __virt_addr_valid+0x183/0x530 [ 340.276728][ T7529] ? __check_object_size+0x48e/0x900 [ 340.282014][ T7529] netlink_sendmsg+0x8e4/0xcb0 [ 340.286776][ T7529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.292055][ T7529] ? aa_sock_msg_perm+0x91/0x160 [ 340.296985][ T7529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.302258][ T7529] __sock_sendmsg+0x221/0x270 [ 340.306934][ T7529] ____sys_sendmsg+0x52a/0x7e0 [ 340.311693][ T7529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.316977][ T7529] __sys_sendmsg+0x292/0x380 [ 340.321562][ T7529] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.326678][ T7529] ? __pfx_vfs_write+0x10/0x10 [ 340.331452][ T7529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.337779][ T7529] ? do_syscall_64+0x100/0x230 [ 340.342543][ T7529] ? do_syscall_64+0xb6/0x230 [ 340.347214][ T7529] do_syscall_64+0xf3/0x230 [ 340.351708][ T7529] ? clear_bhb_loop+0x35/0x90 [ 340.356379][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.362264][ T7529] RIP: 0033:0x7fee9277dff9 [ 340.366669][ T7529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.386291][ T7529] RSP: 002b:00007fee934ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.394712][ T7529] RAX: ffffffffffffffda RBX: 00007fee92935f80 RCX: 00007fee9277dff9 [ 340.402681][ T7529] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 340.410643][ T7529] RBP: 00007fee934ca090 R08: 0000000000000000 R09: 0000000000000000 [ 340.418602][ T7529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.426562][ T7529] R13: 0000000000000000 R14: 00007fee92935f80 R15: 00007ffeb5b55308 [ 340.434536][ T7529] [ 340.546247][ T7535] xt_CT: No such helper "netbios-ns" [ 340.978322][ T7554] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 341.062264][ T7552] FAULT_INJECTION: forcing a failure. [ 341.062264][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 341.075038][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.4.597 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 341.085641][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 341.095712][ T7552] Call Trace: [ 341.099003][ T7552] [ 341.101948][ T7552] dump_stack_lvl+0x241/0x360 [ 341.106648][ T7552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.111859][ T7552] ? __pfx__printk+0x10/0x10 [ 341.116476][ T7552] should_fail_ex+0x3b0/0x4e0 [ 341.121176][ T7552] ? skb_clone+0x20c/0x390 [ 341.125610][ T7552] should_failslab+0xac/0x100 [ 341.130300][ T7552] ? skb_clone+0x20c/0x390 [ 341.134733][ T7552] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 341.140133][ T7552] skb_clone+0x20c/0x390 [ 341.144396][ T7552] ? dev_queue_xmit_nit+0x220/0xc10 [ 341.149625][ T7552] dev_queue_xmit_nit+0x419/0xc10 [ 341.154671][ T7552] ? dev_queue_xmit_nit+0x2b/0xc10 [ 341.159802][ T7552] ? validate_xmit_skb+0x9f9/0x1120 [ 341.165025][ T7552] dev_hard_start_xmit+0x15f/0x7e0 [ 341.170156][ T7552] ? __pfx_validate_xmit_skb+0x10/0x10 [ 341.175646][ T7552] __dev_queue_xmit+0x1b56/0x3f30 [ 341.180692][ T7552] ? netlink_unicast+0x7f6/0x990 [ 341.184940][ T5287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.185630][ T7552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.199751][ T7552] ? __dev_queue_xmit+0x2da/0x3f30 [ 341.204887][ T7552] ? __pfx___dev_queue_xmit+0x10/0x10 [ 341.210296][ T7552] ? __copy_skb_header+0x437/0x5b0 [ 341.215432][ T7552] ? __asan_memcpy+0x40/0x70 [ 341.220036][ T7552] ? __copy_skb_header+0x437/0x5b0 [ 341.225173][ T7552] ? __skb_clone+0x454/0x6c0 [ 341.229788][ T7552] ? skb_clone+0x240/0x390 [ 341.234227][ T7552] __netlink_deliver_tap+0x54d/0x7c0 [ 341.239536][ T7552] ? netlink_deliver_tap+0x2e/0x1b0 [ 341.244746][ T7552] netlink_deliver_tap+0x19d/0x1b0 [ 341.249869][ T7552] netlink_sendskb+0x68/0x140 [ 341.254564][ T7552] netlink_unicast+0x39d/0x990 [ 341.259342][ T7552] ? __asan_memcpy+0x40/0x70 [ 341.263949][ T7552] ? __pfx_netlink_unicast+0x10/0x10 [ 341.269264][ T7552] nfnetlink_rcv+0x26b6/0x2ab0 [ 341.274076][ T7552] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 341.279255][ T7552] ? netlink_deliver_tap+0x2e/0x1b0 [ 341.284450][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 341.293213][ T7552] ? skb_clone+0x240/0x390 [ 341.297648][ T7552] ? __pfx_lock_release+0x10/0x10 [ 341.302712][ T7552] ? netlink_deliver_tap+0x2e/0x1b0 [ 341.307926][ T7552] netlink_unicast+0x7f6/0x990 [ 341.312719][ T7552] ? __pfx_netlink_unicast+0x10/0x10 [ 341.318022][ T7552] ? __virt_addr_valid+0x183/0x530 [ 341.323158][ T7552] ? __check_object_size+0x48e/0x900 [ 341.328467][ T7552] netlink_sendmsg+0x8e4/0xcb0 [ 341.333263][ T7552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.338569][ T7552] ? aa_sock_msg_perm+0x91/0x160 [ 341.343531][ T7552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.348831][ T7552] __sock_sendmsg+0x221/0x270 [ 341.353528][ T7552] ____sys_sendmsg+0x52a/0x7e0 [ 341.358314][ T7552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.363630][ T7552] __sys_sendmsg+0x292/0x380 [ 341.368235][ T7552] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.373371][ T7552] ? __pfx_vfs_write+0x10/0x10 [ 341.378183][ T7552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.384533][ T7552] ? do_syscall_64+0x100/0x230 [ 341.389312][ T7552] ? do_syscall_64+0xb6/0x230 [ 341.394011][ T7552] do_syscall_64+0xf3/0x230 [ 341.398533][ T7552] ? clear_bhb_loop+0x35/0x90 [ 341.403231][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.409135][ T7552] RIP: 0033:0x7f7fb377dff9 [ 341.413566][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.433188][ T7552] RSP: 002b:00007f7fb4499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.441619][ T7552] RAX: ffffffffffffffda RBX: 00007f7fb3935f80 RCX: 00007f7fb377dff9 [ 341.449604][ T7552] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 341.457587][ T7552] RBP: 00007f7fb4499090 R08: 0000000000000000 R09: 0000000000000000 [ 341.465568][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.473550][ T7552] R13: 0000000000000000 R14: 00007f7fb3935f80 R15: 00007ffcf70d6898 [ 341.481547][ T7552] [ 341.512178][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.579312][ T5288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.832700][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.604'. [ 342.001291][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 342.215992][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.277478][ T7597] pim6reg: entered allmulticast mode [ 342.283228][ T7593] FAULT_INJECTION: forcing a failure. [ 342.283228][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.301069][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.2.612 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 342.311677][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.321727][ T7593] Call Trace: [ 342.325004][ T7593] [ 342.327929][ T7593] dump_stack_lvl+0x241/0x360 [ 342.332610][ T7593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.337805][ T7593] ? __pfx__printk+0x10/0x10 [ 342.342388][ T7593] ? __pfx_lock_release+0x10/0x10 [ 342.347437][ T7593] should_fail_ex+0x3b0/0x4e0 [ 342.352116][ T7593] _copy_to_user+0x2f/0xb0 [ 342.356528][ T7593] bpf_test_finish+0x2e6/0x890 [ 342.361294][ T7593] ? __pfx_bpf_test_finish+0x10/0x10 [ 342.366573][ T7593] ? convert___skb_to_skb+0x41/0x620 [ 342.371851][ T7593] ? convert_skb_to___skb+0x2d3/0x510 [ 342.377215][ T7593] bpf_prog_test_run_skb+0xfe5/0x1820 [ 342.382590][ T7593] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 342.388394][ T7593] ? fput+0x1a8/0x230 [ 342.392368][ T7593] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 342.398165][ T7593] bpf_prog_test_run+0x2e4/0x360 [ 342.403100][ T7593] __sys_bpf+0x48d/0x810 [ 342.407338][ T7593] ? __pfx___sys_bpf+0x10/0x10 [ 342.412101][ T7593] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.418083][ T7593] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.424411][ T7593] ? do_syscall_64+0x100/0x230 [ 342.429171][ T7593] __x64_sys_bpf+0x7c/0x90 [ 342.433580][ T7593] do_syscall_64+0xf3/0x230 [ 342.438075][ T7593] ? clear_bhb_loop+0x35/0x90 [ 342.442747][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.448632][ T7593] RIP: 0033:0x7f50f717dff9 [ 342.453039][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.472640][ T7593] RSP: 002b:00007f50f7ec4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.481050][ T7593] RAX: ffffffffffffffda RBX: 00007f50f7335f80 RCX: 00007f50f717dff9 [ 342.489013][ T7593] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 342.496976][ T7593] RBP: 00007f50f7ec4090 R08: 0000000000000000 R09: 0000000000000000 [ 342.504938][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.512900][ T7593] R13: 0000000000000000 R14: 00007f50f7335f80 R15: 00007ffefe7009c8 [ 342.520871][ T7593] [ 342.544151][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.930358][ T7611] sctp: [Deprecated]: syz.0.621 (pid 7611) Use of int in max_burst socket option. [ 342.930358][ T7611] Use struct sctp_assoc_value instead [ 342.955901][ T7612] FAULT_INJECTION: forcing a failure. [ 342.955901][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 342.973162][ T7612] CPU: 1 UID: 0 PID: 7612 Comm: syz.2.620 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 342.983775][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.993839][ T7612] Call Trace: [ 342.997124][ T7612] [ 343.000058][ T7612] dump_stack_lvl+0x241/0x360 [ 343.004755][ T7612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.009968][ T7612] ? __pfx__printk+0x10/0x10 [ 343.014574][ T7612] ? __kmalloc_node_noprof+0xb7/0x440 [ 343.019963][ T7612] ? __pfx___might_resched+0x10/0x10 [ 343.025264][ T7612] should_fail_ex+0x3b0/0x4e0 [ 343.029956][ T7612] should_failslab+0xac/0x100 [ 343.034645][ T7612] __kmalloc_node_noprof+0xdf/0x440 [ 343.039853][ T7612] ? __kvmalloc_node_noprof+0x72/0x190 [ 343.045324][ T7612] __kvmalloc_node_noprof+0x72/0x190 [ 343.050617][ T7612] nf_tables_newset+0x1770/0x2ee0 [ 343.055669][ T7612] ? __pfx_nf_tables_newset+0x10/0x10 [ 343.061053][ T7612] ? __pfx_lock_release+0x10/0x10 [ 343.066110][ T7612] ? __nla_parse+0x40/0x60 [ 343.070546][ T7612] nfnetlink_rcv+0x14dc/0x2ab0 [ 343.075334][ T7612] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 343.080470][ T7612] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.085661][ T7612] ? skb_clone+0x240/0x390 [ 343.090070][ T7612] ? __pfx_lock_release+0x10/0x10 [ 343.095100][ T7612] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.100290][ T7612] netlink_unicast+0x7f6/0x990 [ 343.105055][ T7612] ? __pfx_netlink_unicast+0x10/0x10 [ 343.110332][ T7612] ? __virt_addr_valid+0x183/0x530 [ 343.115435][ T7612] ? __check_object_size+0x48e/0x900 [ 343.120712][ T7612] netlink_sendmsg+0x8e4/0xcb0 [ 343.125473][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.130749][ T7612] ? aa_sock_msg_perm+0x91/0x160 [ 343.135686][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.140961][ T7612] __sock_sendmsg+0x221/0x270 [ 343.145640][ T7612] ____sys_sendmsg+0x52a/0x7e0 [ 343.150404][ T7612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.155691][ T7612] __sys_sendmsg+0x292/0x380 [ 343.160274][ T7612] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.165385][ T7612] ? __pfx_vfs_write+0x10/0x10 [ 343.170155][ T7612] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.176480][ T7612] ? do_syscall_64+0x100/0x230 [ 343.181242][ T7612] ? do_syscall_64+0xb6/0x230 [ 343.185911][ T7612] do_syscall_64+0xf3/0x230 [ 343.190405][ T7612] ? clear_bhb_loop+0x35/0x90 [ 343.195076][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.200960][ T7612] RIP: 0033:0x7f50f717dff9 [ 343.205364][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.224962][ T7612] RSP: 002b:00007f50f7ec4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.233370][ T7612] RAX: ffffffffffffffda RBX: 00007f50f7335f80 RCX: 00007f50f717dff9 [ 343.241333][ T7612] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 343.249296][ T7612] RBP: 00007f50f7ec4090 R08: 0000000000000000 R09: 0000000000000000 [ 343.257259][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.265219][ T7612] R13: 0000000000000000 R14: 00007f50f7335f80 R15: 00007ffefe7009c8 [ 343.273197][ T7612] [ 343.381241][ T7617] netlink: 104 bytes leftover after parsing attributes in process `syz.1.623'. [ 343.401030][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 343.414515][ T7613] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 343.574037][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.595620][ T7627] netlink: 'syz.2.627': attribute type 10 has an invalid length. [ 343.619683][ T7627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.627'. [ 343.629507][ T7627] bridge0: port 4(batadv0) entered blocking state [ 343.640018][ T7627] bridge0: port 4(batadv0) entered disabled state [ 343.648284][ T7627] batadv0: entered allmulticast mode [ 343.655419][ T7627] batadv0: entered promiscuous mode [ 343.662804][ T7627] bridge0: port 4(batadv0) entered blocking state [ 343.669371][ T7627] bridge0: port 4(batadv0) entered forwarding state [ 343.766383][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 343.782357][ T7636] FAULT_INJECTION: forcing a failure. [ 343.782357][ T7636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.804607][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 343.812122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.814063][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 343.822216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.822367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.841723][ T7636] CPU: 0 UID: 0 PID: 7636 Comm: syz.0.628 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 343.858104][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.868180][ T7636] Call Trace: [ 343.871470][ T7636] [ 343.874409][ T7636] dump_stack_lvl+0x241/0x360 [ 343.879109][ T7636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.884331][ T7636] ? __pfx__printk+0x10/0x10 [ 343.888950][ T7636] ? snprintf+0xda/0x120 [ 343.893215][ T7636] should_fail_ex+0x3b0/0x4e0 [ 343.897915][ T7636] _copy_to_user+0x2f/0xb0 [ 343.902357][ T7636] simple_read_from_buffer+0xca/0x150 [ 343.907752][ T7636] proc_fail_nth_read+0x1e9/0x250 [ 343.912786][ T7636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.918336][ T7636] ? rw_verify_area+0x55e/0x6f0 [ 343.923185][ T7636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.928726][ T7636] vfs_read+0x201/0xbc0 [ 343.932884][ T7636] ? __pfx_lock_release+0x10/0x10 [ 343.937910][ T7636] ? __pfx_vfs_read+0x10/0x10 [ 343.942585][ T7636] ? __fget_files+0x3f3/0x470 [ 343.947260][ T7636] ? fdget_pos+0x24e/0x320 [ 343.951670][ T7636] ksys_read+0x183/0x2b0 [ 343.955908][ T7636] ? __pfx_ksys_read+0x10/0x10 [ 343.960683][ T7636] ? do_syscall_64+0x100/0x230 [ 343.965444][ T7636] ? do_syscall_64+0xb6/0x230 [ 343.970120][ T7636] do_syscall_64+0xf3/0x230 [ 343.974618][ T7636] ? clear_bhb_loop+0x35/0x90 [ 343.979291][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.985174][ T7636] RIP: 0033:0x7f13a5d7ca3c [ 343.989579][ T7636] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 344.009175][ T7636] RSP: 002b:00007f13a6b49030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.017585][ T7636] RAX: ffffffffffffffda RBX: 00007f13a5f35f80 RCX: 00007f13a5d7ca3c [ 344.025562][ T7636] RDX: 000000000000000f RSI: 00007f13a6b490a0 RDI: 0000000000000003 [ 344.033531][ T7636] RBP: 00007f13a6b49090 R08: 0000000000000000 R09: 0000000000000000 [ 344.041494][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.049456][ T7636] R13: 0000000000000000 R14: 00007f13a5f35f80 R15: 00007ffceab9fe88 [ 344.057432][ T7636] [ 344.131530][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.633'. [ 344.141565][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.633'. [ 344.142125][ T7638] ieee802154 phy0 wpan0: encryption failed: -90 [ 344.314183][ T7642] gre1: entered allmulticast mode [ 344.356090][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 344.469883][ T7658] FAULT_INJECTION: forcing a failure. [ 344.469883][ T7658] name failslab, interval 1, probability 0, space 0, times 0 [ 344.501634][ T7658] CPU: 0 UID: 0 PID: 7658 Comm: syz.2.637 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 344.512251][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.522323][ T7658] Call Trace: [ 344.525619][ T7658] [ 344.528568][ T7658] dump_stack_lvl+0x241/0x360 [ 344.533267][ T7658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.538466][ T7658] ? __pfx__printk+0x10/0x10 [ 344.543056][ T7658] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 344.549033][ T7658] ? __pfx___might_resched+0x10/0x10 [ 344.554319][ T7658] ? kfree+0x1a0/0x440 [ 344.558387][ T7658] should_fail_ex+0x3b0/0x4e0 [ 344.563066][ T7658] should_failslab+0xac/0x100 [ 344.567741][ T7658] ? __alloc_skb+0x1c3/0x440 [ 344.572326][ T7658] kmem_cache_alloc_node_noprof+0x71/0x320 [ 344.578132][ T7658] __alloc_skb+0x1c3/0x440 [ 344.582543][ T7658] ? __pfx___alloc_skb+0x10/0x10 [ 344.587476][ T7658] ? netlink_ack_tlv_len+0x6e/0x200 [ 344.592665][ T7658] netlink_ack+0x13f/0xa30 [ 344.597069][ T7658] ? __pfx_lock_acquire+0x10/0x10 [ 344.602090][ T7658] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 344.608158][ T7658] netlink_rcv_skb+0x262/0x430 [ 344.612913][ T7658] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.617948][ T7658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.623247][ T7658] ? __netlink_deliver_tap+0x77e/0x7c0 [ 344.628709][ T7658] genl_rcv+0x28/0x40 [ 344.632692][ T7658] netlink_unicast+0x7f6/0x990 [ 344.637470][ T7658] ? __pfx_netlink_unicast+0x10/0x10 [ 344.642755][ T7658] ? __virt_addr_valid+0x183/0x530 [ 344.647864][ T7658] ? __check_object_size+0x48e/0x900 [ 344.653145][ T7658] netlink_sendmsg+0x8e4/0xcb0 [ 344.657908][ T7658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.663188][ T7658] ? aa_sock_msg_perm+0x91/0x160 [ 344.668131][ T7658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.673417][ T7658] __sock_sendmsg+0x221/0x270 [ 344.678093][ T7658] ____sys_sendmsg+0x52a/0x7e0 [ 344.682855][ T7658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.688142][ T7658] __sys_sendmsg+0x292/0x380 [ 344.692726][ T7658] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.697835][ T7658] ? __pfx_vfs_write+0x10/0x10 [ 344.702605][ T7658] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.708927][ T7658] ? do_syscall_64+0x100/0x230 [ 344.713683][ T7658] ? do_syscall_64+0xb6/0x230 [ 344.718353][ T7658] do_syscall_64+0xf3/0x230 [ 344.722848][ T7658] ? clear_bhb_loop+0x35/0x90 [ 344.727518][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.733403][ T7658] RIP: 0033:0x7f50f717dff9 [ 344.737809][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.757402][ T7658] RSP: 002b:00007f50f7ec4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.765808][ T7658] RAX: ffffffffffffffda RBX: 00007f50f7335f80 RCX: 00007f50f717dff9 [ 344.773780][ T7658] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 344.781744][ T7658] RBP: 00007f50f7ec4090 R08: 0000000000000000 R09: 0000000000000000 [ 344.789719][ T7658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.797683][ T7658] R13: 0000000000000000 R14: 00007f50f7335f80 R15: 00007ffefe7009c8 [ 344.805655][ T7658] [ 344.819166][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.971057][ T7669] netlink: 'syz.1.642': attribute type 12 has an invalid length. [ 345.360639][ T7685] Driver unsupported XDP return value 0 on prog (id 145) dev N/A, expect packet loss! [ 345.427750][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 345.446426][ T7685] netlink: 'syz.0.647': attribute type 6 has an invalid length. [ 345.620136][ T7697] bridge0: port 3(ipvlan2) entered blocking state [ 345.636936][ T7697] bridge0: port 3(ipvlan2) entered disabled state [ 345.758788][ T7697] ipvlan2: entered allmulticast mode [ 345.764489][ T7697] bridge0: entered allmulticast mode [ 345.771281][ T7697] ipvlan2: left allmulticast mode [ 345.796254][ T7697] bridge0: left allmulticast mode [ 346.030656][ T7731] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 346.221204][ T7736] net_ratelimit: 674 callbacks suppressed [ 346.221222][ T7736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.235811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.420276][ T7756] syz_tun: entered promiscuous mode [ 346.443775][ T7756] syz_tun: left promiscuous mode [ 346.551671][ T7752] FAULT_INJECTION: forcing a failure. [ 346.551671][ T7752] name failslab, interval 1, probability 0, space 0, times 0 [ 346.587415][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.1.669 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 346.598063][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.608137][ T7752] Call Trace: [ 346.611429][ T7752] [ 346.614380][ T7752] dump_stack_lvl+0x241/0x360 [ 346.619087][ T7752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.621885][ T7767] netlink: 'syz.3.670': attribute type 10 has an invalid length. [ 346.624291][ T7752] ? __pfx__printk+0x10/0x10 [ 346.624320][ T7752] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 346.642592][ T7752] ? __pfx___might_resched+0x10/0x10 [ 346.647904][ T7752] ? kfree+0x1a0/0x440 [ 346.652003][ T7752] should_fail_ex+0x3b0/0x4e0 [ 346.656709][ T7752] should_failslab+0xac/0x100 [ 346.661406][ T7752] ? __alloc_skb+0x1c3/0x440 [ 346.666013][ T7752] kmem_cache_alloc_node_noprof+0x71/0x320 [ 346.671863][ T7752] __alloc_skb+0x1c3/0x440 [ 346.676311][ T7752] ? __pfx___alloc_skb+0x10/0x10 [ 346.681270][ T7752] ? netlink_ack_tlv_len+0x6e/0x200 [ 346.686482][ T7752] netlink_ack+0x13f/0xa30 [ 346.690898][ T7752] ? __pfx_lock_acquire+0x10/0x10 [ 346.695925][ T7752] ? __pfx_nl80211_connect+0x10/0x10 [ 346.701211][ T7752] ? __pfx_nl80211_post_doit+0x10/0x10 [ 346.706679][ T7752] netlink_rcv_skb+0x262/0x430 [ 346.711438][ T7752] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.716464][ T7752] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.721756][ T7752] ? __netlink_deliver_tap+0x77e/0x7c0 [ 346.727234][ T7752] genl_rcv+0x28/0x40 [ 346.731216][ T7752] netlink_unicast+0x7f6/0x990 [ 346.735990][ T7752] ? __pfx_netlink_unicast+0x10/0x10 [ 346.741271][ T7752] ? __virt_addr_valid+0x183/0x530 [ 346.746381][ T7752] ? __check_object_size+0x48e/0x900 [ 346.751662][ T7752] netlink_sendmsg+0x8e4/0xcb0 [ 346.756428][ T7752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.761707][ T7752] ? aa_sock_msg_perm+0x91/0x160 [ 346.766647][ T7752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.771926][ T7752] __sock_sendmsg+0x221/0x270 [ 346.776605][ T7752] ____sys_sendmsg+0x52a/0x7e0 [ 346.781370][ T7752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.786662][ T7752] __sys_sendmsg+0x292/0x380 [ 346.791246][ T7752] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.796372][ T7752] ? __pfx_vfs_write+0x10/0x10 [ 346.801158][ T7752] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 346.807489][ T7752] ? do_syscall_64+0x100/0x230 [ 346.812252][ T7752] ? do_syscall_64+0xb6/0x230 [ 346.816924][ T7752] do_syscall_64+0xf3/0x230 [ 346.821425][ T7752] ? clear_bhb_loop+0x35/0x90 [ 346.826104][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.831996][ T7752] RIP: 0033:0x7f7e94b7dff9 [ 346.836406][ T7752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.856007][ T7752] RSP: 002b:00007f7e95950038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.864426][ T7752] RAX: ffffffffffffffda RBX: 00007f7e94d35f80 RCX: 00007f7e94b7dff9 [ 346.872395][ T7752] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 346.880357][ T7752] RBP: 00007f7e95950090 R08: 0000000000000000 R09: 0000000000000000 [ 346.888320][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.896282][ T7752] R13: 0000000000000000 R14: 00007f7e94d35f80 R15: 00007fff73ad6188 [ 346.904262][ T7752] [ 346.908002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.002263][ T7776] __nla_validate_parse: 2 callbacks suppressed [ 347.002280][ T7776] netlink: 336 bytes leftover after parsing attributes in process `syz.2.673'. [ 347.021230][ T7767] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 347.024686][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.312744][ T7792] FAULT_INJECTION: forcing a failure. [ 347.312744][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 347.351900][ T7792] CPU: 1 UID: 0 PID: 7792 Comm: syz.1.679 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 347.362520][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.372592][ T7792] Call Trace: [ 347.375887][ T7792] [ 347.378836][ T7792] dump_stack_lvl+0x241/0x360 [ 347.383542][ T7792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.388768][ T7792] ? __pfx__printk+0x10/0x10 [ 347.393383][ T7792] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 347.398870][ T7792] ? __pfx___might_resched+0x10/0x10 [ 347.404187][ T7792] should_fail_ex+0x3b0/0x4e0 [ 347.408895][ T7792] should_failslab+0xac/0x100 [ 347.413607][ T7792] ? nfnetlink_rcv+0x1265/0x2ab0 [ 347.418567][ T7792] __kmalloc_cache_noprof+0x6c/0x2c0 [ 347.423881][ T7792] nfnetlink_rcv+0x1265/0x2ab0 [ 347.428701][ T7792] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 347.433892][ T7792] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.439115][ T7792] ? skb_clone+0x240/0x390 [ 347.443558][ T7792] ? __pfx_lock_release+0x10/0x10 [ 347.448623][ T7792] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.453844][ T7792] netlink_unicast+0x7f6/0x990 [ 347.458644][ T7792] ? __pfx_netlink_unicast+0x10/0x10 [ 347.463956][ T7792] ? __virt_addr_valid+0x183/0x530 [ 347.469094][ T7792] ? __check_object_size+0x48e/0x900 [ 347.474408][ T7792] netlink_sendmsg+0x8e4/0xcb0 [ 347.479206][ T7792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.484520][ T7792] ? aa_sock_msg_perm+0x91/0x160 [ 347.489490][ T7792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.494794][ T7792] __sock_sendmsg+0x221/0x270 [ 347.499501][ T7792] ____sys_sendmsg+0x52a/0x7e0 [ 347.504295][ T7792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.509617][ T7792] __sys_sendmsg+0x292/0x380 [ 347.514234][ T7792] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.519381][ T7792] ? __pfx_vfs_write+0x10/0x10 [ 347.524188][ T7792] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.530543][ T7792] ? do_syscall_64+0x100/0x230 [ 347.535334][ T7792] ? do_syscall_64+0xb6/0x230 [ 347.540031][ T7792] do_syscall_64+0xf3/0x230 [ 347.544557][ T7792] ? clear_bhb_loop+0x35/0x90 [ 347.549258][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.555174][ T7792] RIP: 0033:0x7f7e94b7dff9 [ 347.559609][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.579233][ T7792] RSP: 002b:00007f7e95950038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.587668][ T7792] RAX: ffffffffffffffda RBX: 00007f7e94d35f80 RCX: 00007f7e94b7dff9 [ 347.595662][ T7792] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 347.603658][ T7792] RBP: 00007f7e95950090 R08: 0000000000000000 R09: 0000000000000000 [ 347.611651][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.619638][ T7792] R13: 0000000000000000 R14: 00007f7e94d35f80 R15: 00007fff73ad6188 [ 347.627645][ T7792] [ 347.648224][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 347.664092][ T7807] netlink: 468 bytes leftover after parsing attributes in process `syz.2.683'. [ 347.673752][ T7807] netlink: 72 bytes leftover after parsing attributes in process `syz.2.683'. [ 347.816857][ T7814] FAULT_INJECTION: forcing a failure. [ 347.816857][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 347.883160][ T7814] CPU: 0 UID: 0 PID: 7814 Comm: syz.1.686 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 347.893782][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.903854][ T7814] Call Trace: [ 347.907146][ T7814] [ 347.910091][ T7814] dump_stack_lvl+0x241/0x360 [ 347.914796][ T7814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.920020][ T7814] ? __pfx__printk+0x10/0x10 [ 347.924633][ T7814] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 347.930203][ T7814] ? __pfx___might_resched+0x10/0x10 [ 347.935524][ T7814] should_fail_ex+0x3b0/0x4e0 [ 347.940223][ T7814] ? alloc_empty_file+0x9e/0x1d0 [ 347.945182][ T7814] should_failslab+0xac/0x100 [ 347.949883][ T7814] ? alloc_empty_file+0x9e/0x1d0 [ 347.954845][ T7814] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 347.960244][ T7814] alloc_empty_file+0x9e/0x1d0 [ 347.965032][ T7814] alloc_file_pseudo+0x1da/0x290 [ 347.969998][ T7814] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 347.975482][ T7814] ? alloc_fd+0x5a1/0x640 [ 347.979838][ T7814] anon_inode_getfd+0xce/0x1e0 [ 347.984623][ T7814] btf_new_fd+0x802/0xd30 [ 347.988985][ T7814] ? __pfx_btf_new_fd+0x10/0x10 [ 347.993864][ T7814] ? bpf_btf_load+0xcf/0x1a0 [ 347.998481][ T7814] __sys_bpf+0x6ef/0x810 [ 348.002746][ T7814] ? __pfx___sys_bpf+0x10/0x10 [ 348.007544][ T7814] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 348.013554][ T7814] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.019909][ T7814] ? do_syscall_64+0x100/0x230 [ 348.024701][ T7814] __x64_sys_bpf+0x7c/0x90 [ 348.029140][ T7814] do_syscall_64+0xf3/0x230 [ 348.033664][ T7814] ? clear_bhb_loop+0x35/0x90 [ 348.038368][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.044292][ T7814] RIP: 0033:0x7f7e94b7dff9 [ 348.048724][ T7814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.068348][ T7814] RSP: 002b:00007f7e95950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.076792][ T7814] RAX: ffffffffffffffda RBX: 00007f7e94d35f80 RCX: 00007f7e94b7dff9 [ 348.084780][ T7814] RDX: 0000000000000020 RSI: 0000000020001300 RDI: 0000000000000012 [ 348.092769][ T7814] RBP: 00007f7e95950090 R08: 0000000000000000 R09: 0000000000000000 [ 348.100756][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.108741][ T7814] R13: 0000000000000001 R14: 00007f7e94d35f80 R15: 00007fff73ad6188 [ 348.116745][ T7814] [ 348.126606][ T5286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.167389][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'. [ 348.337336][ T5287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.443995][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 348.738533][ T7857] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x9 [ 348.861656][ T5287] IPVS: starting estimator thread 0... [ 348.869302][ T7866] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 348.967539][ T7874] trusted_key: syz.0.702 sent an empty control message without MSG_MORE. [ 348.976638][ T7867] IPVS: using max 18 ests per chain, 43200 per kthread [ 348.995934][ T7871] gre1: entered allmulticast mode [ 349.006204][ T7874] netlink: 60 bytes leftover after parsing attributes in process `syz.0.702'. [ 349.195252][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.254564][ T5287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.345177][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 349.361715][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 349.381283][ T7896] netlink: 304 bytes leftover after parsing attributes in process `syz.1.708'. [ 349.391161][ T7894] netlink: 'syz.4.706': attribute type 7 has an invalid length. [ 349.594241][ T7904] FAULT_INJECTION: forcing a failure. [ 349.594241][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 349.641925][ T7904] CPU: 0 UID: 0 PID: 7904 Comm: syz.3.711 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 349.652542][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.662613][ T7904] Call Trace: [ 349.665906][ T7904] [ 349.668858][ T7904] dump_stack_lvl+0x241/0x360 [ 349.673569][ T7904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.678798][ T7904] ? __pfx__printk+0x10/0x10 [ 349.683417][ T7904] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 349.689952][ T7904] ? __pfx___might_resched+0x10/0x10 [ 349.695267][ T7904] should_fail_ex+0x3b0/0x4e0 [ 349.699974][ T7904] should_failslab+0xac/0x100 [ 349.704678][ T7904] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 349.711030][ T7904] ? kasprintf+0xd5/0x120 [ 349.715389][ T7904] kvasprintf+0xdf/0x190 [ 349.719655][ T7904] ? __kmalloc_noprof+0x1fc/0x400 [ 349.724701][ T7904] ? nla_strdup+0x9c/0x140 [ 349.729136][ T7904] ? nf_tables_newset+0x17b2/0x2ee0 [ 349.734356][ T7904] ? __pfx_kvasprintf+0x10/0x10 [ 349.739231][ T7904] ? ____sys_sendmsg+0x52a/0x7e0 [ 349.744205][ T7904] kasprintf+0xd5/0x120 [ 349.748390][ T7904] ? __pfx_kasprintf+0x10/0x10 [ 349.753187][ T7904] nf_tables_set_alloc_name+0x111/0x730 [ 349.758759][ T7904] ? nla_strdup+0x9c/0x140 [ 349.763194][ T7904] ? rcu_is_watching+0x15/0xb0 [ 349.767984][ T7904] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 349.774074][ T7904] ? __asan_memcpy+0x40/0x70 [ 349.778685][ T7904] ? nla_strdup+0xb7/0x140 [ 349.783128][ T7904] nf_tables_newset+0x17d3/0x2ee0 [ 349.788189][ T7904] ? __pfx_nf_tables_newset+0x10/0x10 [ 349.793583][ T7904] ? __pfx_lock_release+0x10/0x10 [ 349.798644][ T7904] ? __nla_parse+0x40/0x60 [ 349.803086][ T7904] nfnetlink_rcv+0x14dc/0x2ab0 [ 349.807918][ T7904] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 349.813104][ T7904] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.818328][ T7904] ? skb_clone+0x240/0x390 [ 349.822766][ T7904] ? __pfx_lock_release+0x10/0x10 [ 349.827830][ T7904] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.833050][ T7904] netlink_unicast+0x7f6/0x990 [ 349.837847][ T7904] ? __pfx_netlink_unicast+0x10/0x10 [ 349.843160][ T7904] ? __virt_addr_valid+0x183/0x530 [ 349.848293][ T7904] ? __check_object_size+0x48e/0x900 [ 349.853606][ T7904] netlink_sendmsg+0x8e4/0xcb0 [ 349.858403][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.863711][ T7904] ? aa_sock_msg_perm+0x91/0x160 [ 349.868676][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.873984][ T7904] __sock_sendmsg+0x221/0x270 [ 349.878694][ T7904] ____sys_sendmsg+0x52a/0x7e0 [ 349.883488][ T7904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.888813][ T7904] __sys_sendmsg+0x292/0x380 [ 349.893427][ T7904] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.898573][ T7904] ? __pfx_vfs_write+0x10/0x10 [ 349.903379][ T7904] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.909739][ T7904] ? do_syscall_64+0x100/0x230 [ 349.914528][ T7904] ? do_syscall_64+0xb6/0x230 [ 349.919234][ T7904] do_syscall_64+0xf3/0x230 [ 349.923762][ T7904] ? clear_bhb_loop+0x35/0x90 [ 349.928463][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.934380][ T7904] RIP: 0033:0x7fee9277dff9 [ 349.938813][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.958434][ T7904] RSP: 002b:00007fee934ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.966870][ T7904] RAX: ffffffffffffffda RBX: 00007fee92935f80 RCX: 00007fee9277dff9 [ 349.974862][ T7904] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 349.982850][ T7904] RBP: 00007fee934ca090 R08: 0000000000000000 R09: 0000000000000000 [ 349.990841][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.998833][ T7904] R13: 0000000000000000 R14: 00007fee92935f80 R15: 00007ffeb5b55308 [ 350.006836][ T7904] [ 350.159985][ T7924] FAULT_INJECTION: forcing a failure. [ 350.159985][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 350.179466][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz.3.715 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 350.190081][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.200153][ T7924] Call Trace: [ 350.203452][ T7924] [ 350.206404][ T7924] dump_stack_lvl+0x241/0x360 [ 350.211117][ T7924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.216343][ T7924] ? __pfx__printk+0x10/0x10 [ 350.220959][ T7924] ? ref_tracker_alloc+0x332/0x490 [ 350.226094][ T7924] should_fail_ex+0x3b0/0x4e0 [ 350.230801][ T7924] ? skb_clone+0x20c/0x390 [ 350.235232][ T7924] should_failslab+0xac/0x100 [ 350.239909][ T7924] ? skb_clone+0x20c/0x390 [ 350.244320][ T7924] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 350.249691][ T7924] skb_clone+0x20c/0x390 [ 350.253939][ T7924] __netlink_deliver_tap+0x3cc/0x7c0 [ 350.259232][ T7924] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.264426][ T7924] netlink_deliver_tap+0x19d/0x1b0 [ 350.269530][ T7924] netlink_sendskb+0x68/0x140 [ 350.274205][ T7924] netlink_unicast+0x39d/0x990 [ 350.278970][ T7924] ? __pfx_netlink_unicast+0x10/0x10 [ 350.284262][ T7924] ctrl_getfamily+0x57a/0x6b0 [ 350.288936][ T7924] ? __pfx_ctrl_getfamily+0x10/0x10 [ 350.294131][ T7924] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 350.300468][ T7924] genl_rcv_msg+0xb14/0xec0 [ 350.304976][ T7924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.310016][ T7924] ? __pfx_lock_acquire+0x10/0x10 [ 350.315036][ T7924] ? __pfx_ctrl_getfamily+0x10/0x10 [ 350.320228][ T7924] ? __pfx___might_resched+0x10/0x10 [ 350.325515][ T7924] netlink_rcv_skb+0x1e3/0x430 [ 350.330271][ T7924] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.335294][ T7924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.340580][ T7924] ? __netlink_deliver_tap+0x77e/0x7c0 [ 350.346039][ T7924] genl_rcv+0x28/0x40 [ 350.350015][ T7924] netlink_unicast+0x7f6/0x990 [ 350.354779][ T7924] ? __pfx_netlink_unicast+0x10/0x10 [ 350.360058][ T7924] ? __virt_addr_valid+0x183/0x530 [ 350.365166][ T7924] ? __check_object_size+0x48e/0x900 [ 350.370448][ T7924] netlink_sendmsg+0x8e4/0xcb0 [ 350.375210][ T7924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.380489][ T7924] ? aa_sock_msg_perm+0x91/0x160 [ 350.385427][ T7924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.390704][ T7924] __sock_sendmsg+0x221/0x270 [ 350.395379][ T7924] __sys_sendto+0x39b/0x4f0 [ 350.399880][ T7924] ? __pfx___sys_sendto+0x10/0x10 [ 350.404895][ T7924] ? __mutex_unlock_slowpath+0x21d/0x750 [ 350.410540][ T7924] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.416519][ T7924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.422851][ T7924] __x64_sys_sendto+0xde/0x100 [ 350.427609][ T7924] do_syscall_64+0xf3/0x230 [ 350.432106][ T7924] ? clear_bhb_loop+0x35/0x90 [ 350.436777][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.442662][ T7924] RIP: 0033:0x7fee9277fe8c [ 350.447069][ T7924] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 350.466664][ T7924] RSP: 002b:00007fee934c8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 350.475070][ T7924] RAX: ffffffffffffffda RBX: 00007fee934c8fc0 RCX: 00007fee9277fe8c [ 350.483041][ T7924] RDX: 0000000000000020 RSI: 00007fee934c9010 RDI: 0000000000000003 [ 350.491003][ T7924] RBP: 0000000000000000 R08: 00007fee934c8f14 R09: 000000000000000c [ 350.498965][ T7924] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 350.506929][ T7924] R13: 00007fee934c8f68 R14: 00007fee934c9010 R15: 0000000000000000 [ 350.514904][ T7924] [ 350.942033][ T7948] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 350.961374][ T7947] FAULT_INJECTION: forcing a failure. [ 350.961374][ T7947] name failslab, interval 1, probability 0, space 0, times 0 [ 350.975750][ T7947] CPU: 0 UID: 0 PID: 7947 Comm: syz.4.725 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 350.986372][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.996447][ T7947] Call Trace: [ 350.999737][ T7947] [ 351.002682][ T7947] dump_stack_lvl+0x241/0x360 [ 351.007388][ T7947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.012610][ T7947] ? __pfx__printk+0x10/0x10 [ 351.017219][ T7947] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 351.023211][ T7947] ? __pfx___might_resched+0x10/0x10 [ 351.028494][ T7947] should_fail_ex+0x3b0/0x4e0 [ 351.033168][ T7947] should_failslab+0xac/0x100 [ 351.037836][ T7947] ? __alloc_skb+0x1c3/0x440 [ 351.042416][ T7947] kmem_cache_alloc_node_noprof+0x71/0x320 [ 351.048218][ T7947] __alloc_skb+0x1c3/0x440 [ 351.052626][ T7947] ? __pfx___alloc_skb+0x10/0x10 [ 351.057554][ T7947] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.063534][ T7947] ? netlink_ack_tlv_len+0x6e/0x200 [ 351.068725][ T7947] netlink_ack+0x13f/0xa30 [ 351.073131][ T7947] ? lockdep_hardirqs_on+0x99/0x150 [ 351.078324][ T7947] ? nfnetlink_rcv+0x27a6/0x2ab0 [ 351.083264][ T7947] nfnetlink_rcv+0x26b6/0x2ab0 [ 351.088038][ T7947] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 351.093170][ T7947] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.098362][ T7947] ? skb_clone+0x240/0x390 [ 351.102770][ T7947] ? __pfx_lock_release+0x10/0x10 [ 351.107796][ T7947] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.112986][ T7947] netlink_unicast+0x7f6/0x990 [ 351.117750][ T7947] ? __pfx_netlink_unicast+0x10/0x10 [ 351.123030][ T7947] ? __virt_addr_valid+0x183/0x530 [ 351.128138][ T7947] ? __check_object_size+0x48e/0x900 [ 351.133420][ T7947] netlink_sendmsg+0x8e4/0xcb0 [ 351.138183][ T7947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.143461][ T7947] ? aa_sock_msg_perm+0x91/0x160 [ 351.148395][ T7947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.153671][ T7947] __sock_sendmsg+0x221/0x270 [ 351.158347][ T7947] ____sys_sendmsg+0x52a/0x7e0 [ 351.163107][ T7947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.168393][ T7947] __sys_sendmsg+0x292/0x380 [ 351.172985][ T7947] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.178111][ T7947] ? __pfx_vfs_write+0x10/0x10 [ 351.182884][ T7947] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.189211][ T7947] ? do_syscall_64+0x100/0x230 [ 351.193971][ T7947] ? do_syscall_64+0xb6/0x230 [ 351.198642][ T7947] do_syscall_64+0xf3/0x230 [ 351.203137][ T7947] ? clear_bhb_loop+0x35/0x90 [ 351.207806][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.213688][ T7947] RIP: 0033:0x7f7fb377dff9 [ 351.218094][ T7947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.237690][ T7947] RSP: 002b:00007f7fb4499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.246101][ T7947] RAX: ffffffffffffffda RBX: 00007f7fb3935f80 RCX: 00007f7fb377dff9 [ 351.254066][ T7947] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 351.262027][ T7947] RBP: 00007f7fb4499090 R08: 0000000000000000 R09: 0000000000000000 [ 351.269986][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.277945][ T7947] R13: 0000000000000000 R14: 00007f7fb3935f80 R15: 00007ffcf70d6898 [ 351.285918][ T7947] [ 351.294180][ T5251] Bluetooth: hci5: command 0x0405 tx timeout [ 351.328484][ T7951] sctp: [Deprecated]: syz.1.724 (pid 7951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.328484][ T7951] Use struct sctp_sack_info instead [ 351.572476][ T5338] net_ratelimit: 2 callbacks suppressed [ 351.572493][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.165188][ T7989] __nla_validate_parse: 3 callbacks suppressed [ 352.165207][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'. [ 352.282854][ T7995] FAULT_INJECTION: forcing a failure. [ 352.282854][ T7995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.301627][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.320572][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.0.740 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 352.331190][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.341267][ T7995] Call Trace: [ 352.344560][ T7995] [ 352.347512][ T7995] dump_stack_lvl+0x241/0x360 [ 352.352224][ T7995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.357445][ T7995] ? __pfx__printk+0x10/0x10 [ 352.362061][ T7995] ? __pfx_lock_release+0x10/0x10 [ 352.367118][ T7995] should_fail_ex+0x3b0/0x4e0 [ 352.371827][ T7995] _copy_to_user+0x2f/0xb0 [ 352.376269][ T7995] bpf_test_finish+0x59c/0x890 [ 352.381061][ T7995] ? __pfx_bpf_test_finish+0x10/0x10 [ 352.386376][ T7995] ? convert___skb_to_skb+0x41/0x620 [ 352.391681][ T7995] ? convert_skb_to___skb+0x2d3/0x510 [ 352.395501][ T7998] ip6gretap1: entered allmulticast mode [ 352.397056][ T7995] bpf_prog_test_run_skb+0xfe5/0x1820 [ 352.407987][ T7995] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 352.413814][ T7995] ? fput+0x1a8/0x230 [ 352.417818][ T7995] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 352.423644][ T7995] bpf_prog_test_run+0x2e4/0x360 [ 352.428606][ T7995] __sys_bpf+0x48d/0x810 [ 352.432875][ T7995] ? __pfx___sys_bpf+0x10/0x10 [ 352.437670][ T7995] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.443679][ T7995] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.450035][ T7995] ? do_syscall_64+0x100/0x230 [ 352.454828][ T7995] __x64_sys_bpf+0x7c/0x90 [ 352.459273][ T7995] do_syscall_64+0xf3/0x230 [ 352.463799][ T7995] ? clear_bhb_loop+0x35/0x90 [ 352.468504][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.474415][ T7995] RIP: 0033:0x7f13a5d7dff9 [ 352.478849][ T7995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.498468][ T7995] RSP: 002b:00007f13a6b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 352.506903][ T7995] RAX: ffffffffffffffda RBX: 00007f13a5f35f80 RCX: 00007f13a5d7dff9 [ 352.514893][ T7995] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 352.522883][ T7995] RBP: 00007f13a6b49090 R08: 0000000000000000 R09: 0000000000000000 [ 352.530869][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.538854][ T7995] R13: 0000000000000000 R14: 00007f13a5f35f80 R15: 00007ffceab9fe88 [ 352.546850][ T7995] [ 352.612826][ T5338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.084965][ T8027] vlan0: entered promiscuous mode [ 353.141541][ T8027] team0: Port device vlan0 added [ 353.165590][ T8038] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 353.230634][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 353.317867][ T8044] netlink: 'syz.1.753': attribute type 33 has an invalid length. [ 353.376455][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.755'. [ 353.398643][ T8046] netlink: 'syz.4.754': attribute type 4 has an invalid length. [ 353.570916][ T8056] FAULT_INJECTION: forcing a failure. [ 353.570916][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 353.621927][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz.3.758 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 353.632552][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.642629][ T8056] Call Trace: [ 353.645927][ T8056] [ 353.648880][ T8056] dump_stack_lvl+0x241/0x360 [ 353.653590][ T8056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.658821][ T8056] ? __pfx__printk+0x10/0x10 [ 353.663446][ T8056] ? ref_tracker_alloc+0x332/0x490 [ 353.668586][ T8056] should_fail_ex+0x3b0/0x4e0 [ 353.673295][ T8056] ? skb_clone+0x20c/0x390 [ 353.677736][ T8056] should_failslab+0xac/0x100 [ 353.682441][ T8056] ? skb_clone+0x20c/0x390 [ 353.686882][ T8056] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 353.692284][ T8056] skb_clone+0x20c/0x390 [ 353.696552][ T8056] __netlink_deliver_tap+0x3cc/0x7c0 [ 353.701869][ T8056] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.707088][ T8056] netlink_deliver_tap+0x19d/0x1b0 [ 353.712224][ T8056] netlink_sendskb+0x68/0x140 [ 353.716927][ T8056] netlink_unicast+0x39d/0x990 [ 353.721712][ T8056] ? __asan_memcpy+0x40/0x70 [ 353.726326][ T8056] ? __pfx_netlink_unicast+0x10/0x10 [ 353.731645][ T8056] nfnetlink_rcv+0x26b6/0x2ab0 [ 353.736465][ T8056] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 353.741641][ T8056] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.746856][ T8056] ? skb_clone+0x240/0x390 [ 353.751290][ T8056] ? __pfx_lock_release+0x10/0x10 [ 353.756353][ T8056] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.761573][ T8056] netlink_unicast+0x7f6/0x990 [ 353.766368][ T8056] ? __pfx_netlink_unicast+0x10/0x10 [ 353.771680][ T8056] ? __virt_addr_valid+0x183/0x530 [ 353.776816][ T8056] ? __check_object_size+0x48e/0x900 [ 353.782128][ T8056] netlink_sendmsg+0x8e4/0xcb0 [ 353.786927][ T8056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.792236][ T8056] ? aa_sock_msg_perm+0x91/0x160 [ 353.797203][ T8056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.802508][ T8056] __sock_sendmsg+0x221/0x270 [ 353.807211][ T8056] ____sys_sendmsg+0x52a/0x7e0 [ 353.812006][ T8056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.817339][ T8056] __sys_sendmsg+0x292/0x380 [ 353.821953][ T8056] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.827100][ T8056] ? __pfx_vfs_write+0x10/0x10 [ 353.831916][ T8056] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.838272][ T8056] ? do_syscall_64+0x100/0x230 [ 353.843062][ T8056] ? do_syscall_64+0xb6/0x230 [ 353.847765][ T8056] do_syscall_64+0xf3/0x230 [ 353.852294][ T8056] ? clear_bhb_loop+0x35/0x90 [ 353.856996][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.862922][ T8056] RIP: 0033:0x7fee9277dff9 [ 353.867360][ T8056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.886984][ T8056] RSP: 002b:00007fee934ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.895428][ T8056] RAX: ffffffffffffffda RBX: 00007fee92935f80 RCX: 00007fee9277dff9 [ 353.903420][ T8056] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 353.911410][ T8056] RBP: 00007fee934ca090 R08: 0000000000000000 R09: 0000000000000000 [ 353.919401][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.927387][ T8056] R13: 0000000000000000 R14: 00007fee92935f80 R15: 00007ffeb5b55308 [ 353.935389][ T8056] [ 353.970097][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.144662][ T8072] netlink: 88 bytes leftover after parsing attributes in process `syz.1.763'. [ 354.165222][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 354.187217][ T8052] syz.2.755 (8052) used greatest stack depth: 17816 bytes left [ 354.202483][ T8055] netlink: 96 bytes leftover after parsing attributes in process `syz.4.759'. [ 354.312305][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 354.485909][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.767'. [ 354.505651][ T8091] netlink: 'syz.1.768': attribute type 6 has an invalid length. [ 354.690371][ T8093] BUG: Bad page state in process syz.4.770 pfn:2d53e [ 354.697379][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d53e [ 354.706233][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 354.713421][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 354.722073][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 354.730669][ T8093] page dumped because: page_pool leak [ 354.736121][ T8093] page_owner tracks the page as allocated [ 354.741896][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618803574, free_ts 353988134377 [ 354.758922][ T8093] post_alloc_hook+0x1f3/0x230 [ 354.763763][ T8093] get_page_from_freelist+0x3045/0x3190 [ 354.769334][ T8093] __alloc_pages_noprof+0x292/0x710 [ 354.774612][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 354.780097][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 354.786079][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 354.791309][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 354.796761][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 354.802195][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 354.807156][ T8093] __sys_bpf+0x48d/0x810 [ 354.811422][ T8093] __x64_sys_bpf+0x7c/0x90 [ 354.815928][ T8093] do_syscall_64+0xf3/0x230 [ 354.820469][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.826444][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 354.832830][ T8093] free_unref_folios+0xf12/0x18d0 [ 354.837875][ T8093] folios_put_refs+0x76c/0x860 [ 354.842721][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 354.848377][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 354.853044][ T8093] tlb_finish_mmu+0xd4/0x200 [ 354.857661][ T8093] exit_mmap+0x496/0xc40 [ 354.861977][ T8093] __mmput+0x115/0x390 [ 354.866073][ T8093] exit_mm+0x220/0x310 [ 354.870160][ T8093] do_exit+0x9b2/0x28e0 [ 354.874394][ T8093] do_group_exit+0x207/0x2c0 [ 354.879010][ T8093] get_signal+0x16a3/0x1740 [ 354.883593][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 354.889164][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 354.894782][ T8093] do_syscall_64+0x100/0x230 [ 354.899397][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.905369][ T8093] Modules linked in: [ 354.909286][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 354.919888][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.929962][ T8093] Call Trace: [ 354.933257][ T8093] [ 354.936201][ T8093] dump_stack_lvl+0x241/0x360 [ 354.940908][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.946174][ T8093] ? __pfx_print_modules+0x10/0x10 [ 354.951317][ T8093] ? pcpu_memcg_post_alloc_hook+0x12a/0x720 [ 354.957250][ T8093] bad_page+0x166/0x1b0 [ 354.961429][ T8093] free_unref_page+0xed0/0xf20 [ 354.966233][ T8093] skb_release_data+0x6dc/0x8a0 [ 354.971117][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 354.976169][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 354.981928][ T8093] ? __lock_acquire+0x1384/0x2050 [ 354.986992][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 354.993118][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 354.999128][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 355.005743][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 355.012271][ T8093] ? read_tsc+0x9/0x20 [ 355.016367][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 355.021599][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 355.027949][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 355.034127][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 355.040479][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 355.047178][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 355.052397][ T8093] ? __phys_addr+0xba/0x170 [ 355.056923][ T8093] ? build_skb_around+0x111/0x260 [ 355.061968][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 355.067890][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 355.073212][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 355.074017][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 355.078675][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 355.078722][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 355.100114][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 355.105943][ T8093] ? synchronize_rcu+0x11b/0x360 [ 355.110911][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 355.116245][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 355.122545][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 355.128481][ T8093] ? _copy_from_user+0xa6/0xe0 [ 355.133276][ T8093] ? bpf_test_init+0x15a/0x180 [ 355.138057][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 355.143544][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 355.148946][ T8093] ? __pfx_lock_release+0x10/0x10 [ 355.154009][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 355.159829][ T8093] ? __fget_files+0x29/0x470 [ 355.164450][ T8093] ? fput+0x1a8/0x230 [ 355.168456][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 355.174287][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 355.179253][ T8093] __sys_bpf+0x48d/0x810 [ 355.183519][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 355.188311][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.194322][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.200676][ T8093] ? do_syscall_64+0x100/0x230 [ 355.205465][ T8093] __x64_sys_bpf+0x7c/0x90 [ 355.209903][ T8093] do_syscall_64+0xf3/0x230 [ 355.214431][ T8093] ? clear_bhb_loop+0x35/0x90 [ 355.219140][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.225058][ T8093] RIP: 0033:0x7f7fb377dff9 [ 355.229487][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.249111][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.257557][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 355.265548][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 355.273534][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 355.281519][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.289503][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 355.297504][ T8093] [ 355.300604][ T8093] Disabling lock debugging due to kernel taint [ 355.306796][ T8093] BUG: Bad page state in process syz.4.770 pfn:65c41 [ 355.313594][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880323bb000 pfn:0x65c41 [ 355.323829][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 355.330964][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 355.339596][ T8093] raw: ffff8880323bb000 0000000000000001 00000000ffffffff 0000000000000000 [ 355.348209][ T8093] page dumped because: page_pool leak [ 355.353619][ T8093] page_owner tracks the page as allocated [ 355.359338][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618791421, free_ts 353988143146 [ 355.376317][ T8093] post_alloc_hook+0x1f3/0x230 [ 355.381102][ T8093] get_page_from_freelist+0x3045/0x3190 [ 355.386693][ T8093] __alloc_pages_noprof+0x292/0x710 [ 355.391931][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 355.397397][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 355.403333][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 355.408549][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 355.413972][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 355.419351][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 355.424335][ T8093] __sys_bpf+0x48d/0x810 [ 355.428588][ T8093] __x64_sys_bpf+0x7c/0x90 [ 355.433043][ T8093] do_syscall_64+0xf3/0x230 [ 355.437555][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.443489][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 355.449815][ T8093] free_unref_folios+0xf12/0x18d0 [ 355.454890][ T8093] folios_put_refs+0x76c/0x860 [ 355.459667][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 355.465343][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 355.469943][ T8093] tlb_finish_mmu+0xd4/0x200 [ 355.474571][ T8093] exit_mmap+0x496/0xc40 [ 355.478820][ T8093] __mmput+0x115/0x390 [ 355.482935][ T8093] exit_mm+0x220/0x310 [ 355.487007][ T8093] do_exit+0x9b2/0x28e0 [ 355.491167][ T8093] do_group_exit+0x207/0x2c0 [ 355.495791][ T8093] get_signal+0x16a3/0x1740 [ 355.500305][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 355.505906][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 355.511461][ T8093] do_syscall_64+0x100/0x230 [ 355.516111][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.522047][ T8093] Modules linked in: [ 355.525956][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 355.538028][ T8093] Tainted: [B]=BAD_PAGE [ 355.542183][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.552239][ T8093] Call Trace: [ 355.555517][ T8093] [ 355.558450][ T8093] dump_stack_lvl+0x241/0x360 [ 355.563142][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.568352][ T8093] ? __pfx_print_modules+0x10/0x10 [ 355.573482][ T8093] bad_page+0x166/0x1b0 [ 355.577647][ T8093] free_unref_page+0xed0/0xf20 [ 355.582432][ T8093] skb_release_data+0x6dc/0x8a0 [ 355.587312][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 355.592352][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 355.598088][ T8093] ? __lock_acquire+0x1384/0x2050 [ 355.603130][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 355.609220][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 355.615212][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 355.621809][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 355.628328][ T8093] ? read_tsc+0x9/0x20 [ 355.632411][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 355.637629][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 355.643966][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 355.650131][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 355.656468][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 355.663149][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 355.668357][ T8093] ? __phys_addr+0xba/0x170 [ 355.672869][ T8093] ? build_skb_around+0x111/0x260 [ 355.677897][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 355.683806][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 355.689112][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 355.694587][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 355.700507][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 355.706067][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 355.711880][ T8093] ? synchronize_rcu+0x11b/0x360 [ 355.716823][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 355.722128][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 355.728386][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 355.734294][ T8093] ? _copy_from_user+0xa6/0xe0 [ 355.739069][ T8093] ? bpf_test_init+0x15a/0x180 [ 355.743842][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 355.749306][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 355.754689][ T8093] ? __pfx_lock_release+0x10/0x10 [ 355.759727][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 355.765535][ T8093] ? __fget_files+0x29/0x470 [ 355.770138][ T8093] ? fput+0x1a8/0x230 [ 355.774129][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 355.779938][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 355.784887][ T8093] __sys_bpf+0x48d/0x810 [ 355.789141][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 355.793919][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.799920][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.806263][ T8093] ? do_syscall_64+0x100/0x230 [ 355.811034][ T8093] __x64_sys_bpf+0x7c/0x90 [ 355.815454][ T8093] do_syscall_64+0xf3/0x230 [ 355.819982][ T8093] ? clear_bhb_loop+0x35/0x90 [ 355.824678][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.830583][ T8093] RIP: 0033:0x7f7fb377dff9 [ 355.835011][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.854624][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.863052][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 355.871029][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 355.879004][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 355.886982][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.894959][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 355.902944][ T8093] [ 355.906051][ T8093] BUG: Bad page state in process syz.4.770 pfn:5e0fb [ 355.912849][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e0fbcc0 pfn:0x5e0fb [ 355.922988][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 355.930126][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 355.938751][ T8093] raw: ffff88805e0fbcc0 0000000000000001 00000000ffffffff 0000000000000000 [ 355.947361][ T8093] page dumped because: page_pool leak [ 355.952764][ T8093] page_owner tracks the page as allocated [ 355.958491][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618779357, free_ts 353988152161 [ 355.975468][ T8093] post_alloc_hook+0x1f3/0x230 [ 355.980251][ T8093] get_page_from_freelist+0x3045/0x3190 [ 355.985845][ T8093] __alloc_pages_noprof+0x292/0x710 [ 355.991053][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 355.996548][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 356.002484][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 356.007696][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 356.013108][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 356.018488][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 356.023467][ T8093] __sys_bpf+0x48d/0x810 [ 356.027717][ T8093] __x64_sys_bpf+0x7c/0x90 [ 356.032176][ T8093] do_syscall_64+0xf3/0x230 [ 356.036692][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.042632][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 356.048958][ T8093] free_unref_folios+0xf12/0x18d0 [ 356.054024][ T8093] folios_put_refs+0x76c/0x860 [ 356.058796][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 356.064473][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 356.069072][ T8093] tlb_finish_mmu+0xd4/0x200 [ 356.073705][ T8093] exit_mmap+0x496/0xc40 [ 356.077951][ T8093] __mmput+0x115/0x390 [ 356.082058][ T8093] exit_mm+0x220/0x310 [ 356.086134][ T8093] do_exit+0x9b2/0x28e0 [ 356.090293][ T8093] do_group_exit+0x207/0x2c0 [ 356.094926][ T8093] get_signal+0x16a3/0x1740 [ 356.099439][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 356.105026][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 356.110579][ T8093] do_syscall_64+0x100/0x230 [ 356.115208][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.121114][ T8093] Modules linked in: [ 356.125049][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 356.137122][ T8093] Tainted: [B]=BAD_PAGE [ 356.141271][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.151330][ T8093] Call Trace: [ 356.154610][ T8093] [ 356.157540][ T8093] dump_stack_lvl+0x241/0x360 [ 356.162228][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.167433][ T8093] ? __pfx_print_modules+0x10/0x10 [ 356.172557][ T8093] bad_page+0x166/0x1b0 [ 356.176722][ T8093] free_unref_page+0xed0/0xf20 [ 356.181501][ T8093] skb_release_data+0x6dc/0x8a0 [ 356.186369][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 356.191406][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 356.197144][ T8093] ? __lock_acquire+0x1384/0x2050 [ 356.202186][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 356.208278][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 356.214274][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 356.220868][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 356.227380][ T8093] ? read_tsc+0x9/0x20 [ 356.231456][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 356.236669][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 356.243012][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 356.249180][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 356.255514][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 356.262195][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 356.267406][ T8093] ? __phys_addr+0xba/0x170 [ 356.271913][ T8093] ? build_skb_around+0x111/0x260 [ 356.276941][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 356.282853][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 356.288149][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 356.293611][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 356.299516][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 356.305065][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 356.310874][ T8093] ? synchronize_rcu+0x11b/0x360 [ 356.315815][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 356.321114][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 356.327368][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 356.333269][ T8093] ? _copy_from_user+0xa6/0xe0 [ 356.338047][ T8093] ? bpf_test_init+0x15a/0x180 [ 356.342817][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 356.348288][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 356.353664][ T8093] ? __pfx_lock_release+0x10/0x10 [ 356.358701][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.364508][ T8093] ? __fget_files+0x29/0x470 [ 356.369106][ T8093] ? fput+0x1a8/0x230 [ 356.373094][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.378906][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 356.383857][ T8093] __sys_bpf+0x48d/0x810 [ 356.388110][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 356.392885][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.398875][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.405209][ T8093] ? do_syscall_64+0x100/0x230 [ 356.409979][ T8093] __x64_sys_bpf+0x7c/0x90 [ 356.414400][ T8093] do_syscall_64+0xf3/0x230 [ 356.418908][ T8093] ? clear_bhb_loop+0x35/0x90 [ 356.423590][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.429487][ T8093] RIP: 0033:0x7f7fb377dff9 [ 356.433902][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.453515][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.461938][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 356.469911][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 356.477886][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 356.485864][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.493837][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 356.501815][ T8093] [ 356.504905][ T8093] BUG: Bad page state in process syz.4.770 pfn:2f2f7 [ 356.511671][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f2f7dc0 pfn:0x2f2f7 [ 356.521790][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 356.528915][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 356.537535][ T8093] raw: ffff88802f2f7dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 356.546146][ T8093] page dumped because: page_pool leak [ 356.551517][ T8093] page_owner tracks the page as allocated [ 356.557266][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618767556, free_ts 353988160969 [ 356.574225][ T8093] post_alloc_hook+0x1f3/0x230 [ 356.579003][ T8093] get_page_from_freelist+0x3045/0x3190 [ 356.584591][ T8093] __alloc_pages_noprof+0x292/0x710 [ 356.589796][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 356.595290][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 356.601200][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 356.606444][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 356.611854][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 356.617233][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 356.622213][ T8093] __sys_bpf+0x48d/0x810 [ 356.626463][ T8093] __x64_sys_bpf+0x7c/0x90 [ 356.630885][ T8093] do_syscall_64+0xf3/0x230 [ 356.635430][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.641330][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 356.647691][ T8093] free_unref_folios+0xf12/0x18d0 [ 356.652761][ T8093] folios_put_refs+0x76c/0x860 [ 356.657538][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 356.663214][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 356.667810][ T8093] tlb_finish_mmu+0xd4/0x200 [ 356.672443][ T8093] exit_mmap+0x496/0xc40 [ 356.676690][ T8093] __mmput+0x115/0x390 [ 356.680764][ T8093] exit_mm+0x220/0x310 [ 356.684872][ T8093] do_exit+0x9b2/0x28e0 [ 356.689030][ T8093] do_group_exit+0x207/0x2c0 [ 356.693657][ T8093] get_signal+0x16a3/0x1740 [ 356.698168][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 356.703755][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 356.709309][ T8093] do_syscall_64+0x100/0x230 [ 356.713943][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.719850][ T8093] Modules linked in: [ 356.723789][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 356.735858][ T8093] Tainted: [B]=BAD_PAGE [ 356.740008][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.750066][ T8093] Call Trace: [ 356.753350][ T8093] [ 356.756285][ T8093] dump_stack_lvl+0x241/0x360 [ 356.760971][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.766177][ T8093] ? __pfx_print_modules+0x10/0x10 [ 356.771300][ T8093] bad_page+0x166/0x1b0 [ 356.775464][ T8093] free_unref_page+0xed0/0xf20 [ 356.780260][ T8093] skb_release_data+0x6dc/0x8a0 [ 356.785134][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 356.790172][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 356.795907][ T8093] ? __lock_acquire+0x1384/0x2050 [ 356.800949][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 356.807048][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 356.813042][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 356.819636][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 356.826149][ T8093] ? read_tsc+0x9/0x20 [ 356.830223][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 356.835437][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 356.841775][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 356.847943][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 356.854282][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 356.860970][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 356.866179][ T8093] ? __phys_addr+0xba/0x170 [ 356.870684][ T8093] ? build_skb_around+0x111/0x260 [ 356.875722][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 356.881630][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 356.886931][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 356.892398][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 356.898305][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 356.903859][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 356.909670][ T8093] ? synchronize_rcu+0x11b/0x360 [ 356.914621][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 356.919923][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 356.926182][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 356.932093][ T8093] ? _copy_from_user+0xa6/0xe0 [ 356.936870][ T8093] ? bpf_test_init+0x15a/0x180 [ 356.941642][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 356.947111][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 356.952494][ T8093] ? __pfx_lock_release+0x10/0x10 [ 356.957538][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.963353][ T8093] ? __fget_files+0x29/0x470 [ 356.967957][ T8093] ? fput+0x1a8/0x230 [ 356.971946][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 356.977755][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 356.982710][ T8093] __sys_bpf+0x48d/0x810 [ 356.986967][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 356.991743][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.997736][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.004080][ T8093] ? do_syscall_64+0x100/0x230 [ 357.008853][ T8093] __x64_sys_bpf+0x7c/0x90 [ 357.013279][ T8093] do_syscall_64+0xf3/0x230 [ 357.017790][ T8093] ? clear_bhb_loop+0x35/0x90 [ 357.022476][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.028378][ T8093] RIP: 0033:0x7f7fb377dff9 [ 357.032797][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.052406][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.060831][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 357.068810][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 357.076785][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 357.084762][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.092735][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 357.100716][ T8093] [ 357.103801][ T8093] BUG: Bad page state in process syz.4.770 pfn:3036a [ 357.110568][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803036ac30 pfn:0x3036a [ 357.120684][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 357.127829][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 357.136453][ T8093] raw: ffff88803036ac30 0000000000000001 00000000ffffffff 0000000000000000 [ 357.145061][ T8093] page dumped because: page_pool leak [ 357.150431][ T8093] page_owner tracks the page as allocated [ 357.156182][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618755866, free_ts 353988169970 [ 357.173151][ T8093] post_alloc_hook+0x1f3/0x230 [ 357.177929][ T8093] get_page_from_freelist+0x3045/0x3190 [ 357.183518][ T8093] __alloc_pages_noprof+0x292/0x710 [ 357.188724][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 357.194227][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 357.200135][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 357.205383][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 357.210761][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 357.216177][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 357.221123][ T8093] __sys_bpf+0x48d/0x810 [ 357.225414][ T8093] __x64_sys_bpf+0x7c/0x90 [ 357.229837][ T8093] do_syscall_64+0xf3/0x230 [ 357.234385][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.240287][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 357.246646][ T8093] free_unref_folios+0xf12/0x18d0 [ 357.251687][ T8093] folios_put_refs+0x76c/0x860 [ 357.256492][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 357.262159][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 357.266767][ T8093] tlb_finish_mmu+0xd4/0x200 [ 357.271370][ T8093] exit_mmap+0x496/0xc40 [ 357.275665][ T8093] __mmput+0x115/0x390 [ 357.279742][ T8093] exit_mm+0x220/0x310 [ 357.283854][ T8093] do_exit+0x9b2/0x28e0 [ 357.288015][ T8093] do_group_exit+0x207/0x2c0 [ 357.292643][ T8093] get_signal+0x16a3/0x1740 [ 357.297165][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 357.302760][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 357.308316][ T8093] do_syscall_64+0x100/0x230 [ 357.312952][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.318856][ T8093] Modules linked in: [ 357.322798][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 357.334867][ T8093] Tainted: [B]=BAD_PAGE [ 357.339015][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.349075][ T8093] Call Trace: [ 357.352352][ T8093] [ 357.355283][ T8093] dump_stack_lvl+0x241/0x360 [ 357.359973][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.365178][ T8093] ? __pfx_print_modules+0x10/0x10 [ 357.370310][ T8093] bad_page+0x166/0x1b0 [ 357.374478][ T8093] free_unref_page+0xed0/0xf20 [ 357.379258][ T8093] skb_release_data+0x6dc/0x8a0 [ 357.384122][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 357.389154][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 357.394888][ T8093] ? __lock_acquire+0x1384/0x2050 [ 357.399928][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 357.406021][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 357.412015][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 357.418612][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 357.425130][ T8093] ? read_tsc+0x9/0x20 [ 357.429209][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 357.434416][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 357.440739][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 357.446885][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 357.453204][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 357.459869][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 357.465060][ T8093] ? __phys_addr+0xba/0x170 [ 357.469550][ T8093] ? build_skb_around+0x111/0x260 [ 357.474566][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 357.480454][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 357.485730][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 357.491177][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 357.497067][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 357.502605][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 357.508406][ T8093] ? synchronize_rcu+0x11b/0x360 [ 357.513331][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 357.518614][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 357.524852][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 357.530738][ T8093] ? _copy_from_user+0xa6/0xe0 [ 357.535493][ T8093] ? bpf_test_init+0x15a/0x180 [ 357.540247][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 357.545692][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 357.551054][ T8093] ? __pfx_lock_release+0x10/0x10 [ 357.556074][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.561866][ T8093] ? __fget_files+0x29/0x470 [ 357.566447][ T8093] ? fput+0x1a8/0x230 [ 357.570421][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 357.576228][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 357.581169][ T8093] __sys_bpf+0x48d/0x810 [ 357.585410][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 357.590168][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.596141][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.602463][ T8093] ? do_syscall_64+0x100/0x230 [ 357.607221][ T8093] __x64_sys_bpf+0x7c/0x90 [ 357.611630][ T8093] do_syscall_64+0xf3/0x230 [ 357.616123][ T8093] ? clear_bhb_loop+0x35/0x90 [ 357.620790][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.626670][ T8093] RIP: 0033:0x7f7fb377dff9 [ 357.631074][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.650677][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.659082][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 357.667044][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 357.675002][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 357.682963][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.690921][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 357.698885][ T8093] [ 357.701960][ T8093] BUG: Bad page state in process syz.4.770 pfn:3138e [ 357.708728][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3138e [ 357.717527][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 357.724692][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 357.733310][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 357.741921][ T8093] page dumped because: page_pool leak [ 357.747290][ T8093] page_owner tracks the page as allocated [ 357.753031][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618743381, free_ts 353988179206 [ 357.769992][ T8093] post_alloc_hook+0x1f3/0x230 [ 357.774798][ T8093] get_page_from_freelist+0x3045/0x3190 [ 357.780351][ T8093] __alloc_pages_noprof+0x292/0x710 [ 357.785589][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 357.791057][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 357.796976][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 357.802574][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 357.807976][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 357.813386][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 357.818336][ T8093] __sys_bpf+0x48d/0x810 [ 357.822633][ T8093] __x64_sys_bpf+0x7c/0x90 [ 357.827055][ T8093] do_syscall_64+0xf3/0x230 [ 357.831546][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.837458][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 357.843814][ T8093] free_unref_folios+0xf12/0x18d0 [ 357.848839][ T8093] folios_put_refs+0x76c/0x860 [ 357.853627][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 357.859264][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 357.863886][ T8093] tlb_finish_mmu+0xd4/0x200 [ 357.868479][ T8093] exit_mmap+0x496/0xc40 [ 357.872741][ T8093] __mmput+0x115/0x390 [ 357.876816][ T8093] exit_mm+0x220/0x310 [ 357.880873][ T8093] do_exit+0x9b2/0x28e0 [ 357.885067][ T8093] do_group_exit+0x207/0x2c0 [ 357.889668][ T8093] get_signal+0x16a3/0x1740 [ 357.894195][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 357.899748][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 357.905313][ T8093] do_syscall_64+0x100/0x230 [ 357.909904][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.915820][ T8093] Modules linked in: [ 357.919717][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 357.931765][ T8093] Tainted: [B]=BAD_PAGE [ 357.935904][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.945953][ T8093] Call Trace: [ 357.949212][ T8093] [ 357.952134][ T8093] dump_stack_lvl+0x241/0x360 [ 357.956802][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.961981][ T8093] ? __pfx_print_modules+0x10/0x10 [ 357.967078][ T8093] bad_page+0x166/0x1b0 [ 357.971235][ T8093] free_unref_page+0xed0/0xf20 [ 357.975988][ T8093] skb_release_data+0x6dc/0x8a0 [ 357.980829][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 357.985843][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 357.991558][ T8093] ? __lock_acquire+0x1384/0x2050 [ 357.996580][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 358.002652][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 358.008641][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 358.015214][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 358.021695][ T8093] ? read_tsc+0x9/0x20 [ 358.025748][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 358.030935][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 358.037245][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 358.043398][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 358.049709][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 358.056369][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 358.061546][ T8093] ? __phys_addr+0xba/0x170 [ 358.066028][ T8093] ? build_skb_around+0x111/0x260 [ 358.071027][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 358.076910][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 358.082180][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 358.087635][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 358.093517][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 358.099041][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 358.104829][ T8093] ? synchronize_rcu+0x11b/0x360 [ 358.109747][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 358.115016][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 358.121242][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 358.127119][ T8093] ? _copy_from_user+0xa6/0xe0 [ 358.131875][ T8093] ? bpf_test_init+0x15a/0x180 [ 358.136647][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 358.142119][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 358.147509][ T8093] ? __pfx_lock_release+0x10/0x10 [ 358.152554][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 358.158377][ T8093] ? __fget_files+0x29/0x470 [ 358.162978][ T8093] ? fput+0x1a8/0x230 [ 358.166948][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 358.172739][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 358.177669][ T8093] __sys_bpf+0x48d/0x810 [ 358.181897][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 358.186652][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 358.192623][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.198939][ T8093] ? do_syscall_64+0x100/0x230 [ 358.203690][ T8093] __x64_sys_bpf+0x7c/0x90 [ 358.208089][ T8093] do_syscall_64+0xf3/0x230 [ 358.212579][ T8093] ? clear_bhb_loop+0x35/0x90 [ 358.217250][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.223151][ T8093] RIP: 0033:0x7f7fb377dff9 [ 358.227578][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.247182][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.255579][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 358.263536][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 358.271486][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 358.279439][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.287399][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 358.295375][ T8093] [ 358.298425][ T8093] BUG: Bad page state in process syz.4.770 pfn:311f3 [ 358.305229][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x311f3 [ 358.314006][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 358.321096][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 358.329694][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 358.338288][ T8093] page dumped because: page_pool leak [ 358.343674][ T8093] page_owner tracks the page as allocated [ 358.349386][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618731469, free_ts 353988189139 [ 358.366338][ T8093] post_alloc_hook+0x1f3/0x230 [ 358.371105][ T8093] get_page_from_freelist+0x3045/0x3190 [ 358.376665][ T8093] __alloc_pages_noprof+0x292/0x710 [ 358.381881][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 358.387317][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 358.393233][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 358.398446][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 358.403836][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 358.409207][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 358.414160][ T8093] __sys_bpf+0x48d/0x810 [ 358.418404][ T8093] __x64_sys_bpf+0x7c/0x90 [ 358.422838][ T8093] do_syscall_64+0xf3/0x230 [ 358.427341][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.433253][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 358.439576][ T8093] free_unref_folios+0xf12/0x18d0 [ 358.444613][ T8093] folios_put_refs+0x76c/0x860 [ 358.449375][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 358.455017][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 358.459610][ T8093] tlb_finish_mmu+0xd4/0x200 [ 358.464216][ T8093] exit_mmap+0x496/0xc40 [ 358.468456][ T8093] __mmput+0x115/0x390 [ 358.472542][ T8093] exit_mm+0x220/0x310 [ 358.476610][ T8093] do_exit+0x9b2/0x28e0 [ 358.480745][ T8093] do_group_exit+0x207/0x2c0 [ 358.485345][ T8093] get_signal+0x16a3/0x1740 [ 358.489849][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 358.495413][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 358.500963][ T8093] do_syscall_64+0x100/0x230 [ 358.505572][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.511467][ T8093] Modules linked in: [ 358.515377][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 358.527437][ T8093] Tainted: [B]=BAD_PAGE [ 358.531562][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.541593][ T8093] Call Trace: [ 358.544851][ T8093] [ 358.547759][ T8093] dump_stack_lvl+0x241/0x360 [ 358.552421][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.557600][ T8093] ? __pfx_print_modules+0x10/0x10 [ 358.562696][ T8093] bad_page+0x166/0x1b0 [ 358.566844][ T8093] free_unref_page+0xed0/0xf20 [ 358.572049][ T8093] skb_release_data+0x6dc/0x8a0 [ 358.576887][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 358.581892][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 358.587592][ T8093] ? __lock_acquire+0x1384/0x2050 [ 358.592603][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 358.598665][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 358.604633][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 358.611199][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 358.617683][ T8093] ? read_tsc+0x9/0x20 [ 358.621734][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 358.626927][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 358.633237][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 358.639378][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 358.645688][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 358.652344][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 358.657524][ T8093] ? __phys_addr+0xba/0x170 [ 358.662003][ T8093] ? build_skb_around+0x111/0x260 [ 358.667005][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 358.672883][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 358.678151][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 358.683586][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 358.689460][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 358.694983][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 358.700777][ T8093] ? synchronize_rcu+0x11b/0x360 [ 358.705964][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 358.711237][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 358.717465][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 358.723344][ T8093] ? _copy_from_user+0xa6/0xe0 [ 358.728092][ T8093] ? bpf_test_init+0x15a/0x180 [ 358.732835][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 358.738271][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 358.743627][ T8093] ? __pfx_lock_release+0x10/0x10 [ 358.748634][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 358.754426][ T8093] ? __fget_files+0x29/0x470 [ 358.759004][ T8093] ? fput+0x1a8/0x230 [ 358.762969][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 358.768755][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 358.773683][ T8093] __sys_bpf+0x48d/0x810 [ 358.777908][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 358.782657][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 358.788620][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.794927][ T8093] ? do_syscall_64+0x100/0x230 [ 358.799684][ T8093] __x64_sys_bpf+0x7c/0x90 [ 358.804103][ T8093] do_syscall_64+0xf3/0x230 [ 358.808592][ T8093] ? clear_bhb_loop+0x35/0x90 [ 358.813256][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.819128][ T8093] RIP: 0033:0x7f7fb377dff9 [ 358.823530][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.843115][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.851508][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 358.859457][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 358.867407][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 358.875362][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.883315][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 358.891279][ T8093] [ 358.894346][ T8093] BUG: Bad page state in process syz.4.770 pfn:31616 [ 358.901108][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31616 [ 358.909893][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 358.917025][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 358.925628][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 358.934224][ T8093] page dumped because: page_pool leak [ 358.939575][ T8093] page_owner tracks the page as allocated [ 358.945310][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618719289, free_ts 353988271680 [ 358.962261][ T8093] post_alloc_hook+0x1f3/0x230 [ 358.967012][ T8093] get_page_from_freelist+0x3045/0x3190 [ 358.972570][ T8093] __alloc_pages_noprof+0x292/0x710 [ 358.977773][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 358.983249][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 358.989151][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 358.994371][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 358.999742][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 359.005138][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 359.010078][ T8093] __sys_bpf+0x48d/0x810 [ 359.014343][ T8093] __x64_sys_bpf+0x7c/0x90 [ 359.018759][ T8093] do_syscall_64+0xf3/0x230 [ 359.023281][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.029175][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 359.035512][ T8093] free_unref_folios+0xf12/0x18d0 [ 359.040535][ T8093] folios_put_refs+0x76c/0x860 [ 359.045312][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 359.050944][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 359.055558][ T8093] tlb_finish_mmu+0xd4/0x200 [ 359.060147][ T8093] exit_mmap+0x496/0xc40 [ 359.064403][ T8093] __mmput+0x115/0x390 [ 359.068473][ T8093] exit_mm+0x220/0x310 [ 359.072555][ T8093] do_exit+0x9b2/0x28e0 [ 359.076715][ T8093] do_group_exit+0x207/0x2c0 [ 359.081285][ T8093] get_signal+0x16a3/0x1740 [ 359.085802][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 359.091355][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 359.096918][ T8093] do_syscall_64+0x100/0x230 [ 359.101512][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.107431][ T8093] Modules linked in: [ 359.111330][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 359.123372][ T8093] Tainted: [B]=BAD_PAGE [ 359.127500][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.137532][ T8093] Call Trace: [ 359.140790][ T8093] [ 359.143704][ T8093] dump_stack_lvl+0x241/0x360 [ 359.148366][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.153545][ T8093] ? __pfx_print_modules+0x10/0x10 [ 359.158638][ T8093] bad_page+0x166/0x1b0 [ 359.162791][ T8093] free_unref_page+0xed0/0xf20 [ 359.167565][ T8093] skb_release_data+0x6dc/0x8a0 [ 359.172402][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 359.177405][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 359.183107][ T8093] ? __lock_acquire+0x1384/0x2050 [ 359.188120][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 359.194172][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 359.200136][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 359.206707][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 359.213206][ T8093] ? read_tsc+0x9/0x20 [ 359.217259][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 359.222439][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 359.228746][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 359.234883][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 359.241188][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 359.247848][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 359.253032][ T8093] ? __phys_addr+0xba/0x170 [ 359.257513][ T8093] ? build_skb_around+0x111/0x260 [ 359.262522][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 359.268401][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 359.273666][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 359.279104][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 359.284978][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 359.290500][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 359.296289][ T8093] ? synchronize_rcu+0x11b/0x360 [ 359.301206][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 359.306475][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 359.312716][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 359.318620][ T8093] ? _copy_from_user+0xa6/0xe0 [ 359.323367][ T8093] ? bpf_test_init+0x15a/0x180 [ 359.328109][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 359.333545][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 359.338896][ T8093] ? __pfx_lock_release+0x10/0x10 [ 359.343906][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 359.349687][ T8093] ? __fget_files+0x29/0x470 [ 359.354258][ T8093] ? fput+0x1a8/0x230 [ 359.358221][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 359.364019][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 359.368966][ T8093] __sys_bpf+0x48d/0x810 [ 359.373195][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 359.377942][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.383908][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.390218][ T8093] ? do_syscall_64+0x100/0x230 [ 359.394961][ T8093] __x64_sys_bpf+0x7c/0x90 [ 359.399360][ T8093] do_syscall_64+0xf3/0x230 [ 359.404117][ T8093] ? clear_bhb_loop+0x35/0x90 [ 359.408775][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.414652][ T8093] RIP: 0033:0x7f7fb377dff9 [ 359.419048][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.438636][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.447030][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 359.454981][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 359.462947][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 359.470915][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.478863][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 359.486818][ T8093] [ 359.489872][ T8093] BUG: Bad page state in process syz.4.770 pfn:31729 [ 359.496662][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31729 [ 359.505708][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 359.512841][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 359.521423][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 359.530019][ T8093] page dumped because: page_pool leak [ 359.535402][ T8093] page_owner tracks the page as allocated [ 359.541093][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618707395, free_ts 353988282017 [ 359.558045][ T8093] post_alloc_hook+0x1f3/0x230 [ 359.562851][ T8093] get_page_from_freelist+0x3045/0x3190 [ 359.568391][ T8093] __alloc_pages_noprof+0x292/0x710 [ 359.573616][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 359.579082][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 359.585003][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 359.590208][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 359.595596][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 359.600971][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 359.605927][ T8093] __sys_bpf+0x48d/0x810 [ 359.610174][ T8093] __x64_sys_bpf+0x7c/0x90 [ 359.614610][ T8093] do_syscall_64+0xf3/0x230 [ 359.619124][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.625043][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 359.631365][ T8093] free_unref_folios+0xf12/0x18d0 [ 359.636423][ T8093] folios_put_refs+0x76c/0x860 [ 359.641198][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 359.646847][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 359.651439][ T8093] tlb_finish_mmu+0xd4/0x200 [ 359.656043][ T8093] exit_mmap+0x496/0xc40 [ 359.660285][ T8093] __mmput+0x115/0x390 [ 359.664377][ T8093] exit_mm+0x220/0x310 [ 359.668446][ T8093] do_exit+0x9b2/0x28e0 [ 359.672618][ T8093] do_group_exit+0x207/0x2c0 [ 359.677207][ T8093] get_signal+0x16a3/0x1740 [ 359.681690][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 359.687253][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 359.692821][ T8093] do_syscall_64+0x100/0x230 [ 359.697392][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.703299][ T8093] Modules linked in: [ 359.707196][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 359.719238][ T8093] Tainted: [B]=BAD_PAGE [ 359.723371][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.733408][ T8093] Call Trace: [ 359.736666][ T8093] [ 359.739574][ T8093] dump_stack_lvl+0x241/0x360 [ 359.744234][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.749413][ T8093] ? __pfx_print_modules+0x10/0x10 [ 359.754510][ T8093] bad_page+0x166/0x1b0 [ 359.758644][ T8093] free_unref_page+0xed0/0xf20 [ 359.763393][ T8093] skb_release_data+0x6dc/0x8a0 [ 359.768229][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 359.773235][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 359.778938][ T8093] ? __lock_acquire+0x1384/0x2050 [ 359.783952][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 359.790009][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 359.795971][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 359.802539][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 359.809020][ T8093] ? read_tsc+0x9/0x20 [ 359.813086][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 359.818293][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 359.824610][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 359.830750][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 359.837058][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 359.843713][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 359.848893][ T8093] ? __phys_addr+0xba/0x170 [ 359.853373][ T8093] ? build_skb_around+0x111/0x260 [ 359.858377][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 359.864256][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 359.869521][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 359.874958][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 359.880834][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 359.886358][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 359.892144][ T8093] ? synchronize_rcu+0x11b/0x360 [ 359.897063][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 359.902330][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 359.908549][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 359.914433][ T8093] ? _copy_from_user+0xa6/0xe0 [ 359.919186][ T8093] ? bpf_test_init+0x15a/0x180 [ 359.923930][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 359.929374][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 359.934731][ T8093] ? __pfx_lock_release+0x10/0x10 [ 359.939739][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 359.945524][ T8093] ? __fget_files+0x29/0x470 [ 359.950094][ T8093] ? fput+0x1a8/0x230 [ 359.954054][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 359.959837][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 359.964758][ T8093] __sys_bpf+0x48d/0x810 [ 359.968983][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 359.973730][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.979693][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.986001][ T8093] ? do_syscall_64+0x100/0x230 [ 359.990745][ T8093] __x64_sys_bpf+0x7c/0x90 [ 359.995144][ T8093] do_syscall_64+0xf3/0x230 [ 359.999629][ T8093] ? clear_bhb_loop+0x35/0x90 [ 360.004284][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.010153][ T8093] RIP: 0033:0x7f7fb377dff9 [ 360.014559][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.034161][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.042554][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 360.050505][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 360.058454][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 360.066409][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.074362][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 360.082318][ T8093] [ 360.085371][ T8093] BUG: Bad page state in process syz.4.770 pfn:31775 [ 360.092179][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31775 [ 360.100938][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 360.108070][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 360.116667][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 360.125255][ T8093] page dumped because: page_pool leak [ 360.130625][ T8093] page_owner tracks the page as allocated [ 360.136366][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618696244, free_ts 353988291396 [ 360.153316][ T8093] post_alloc_hook+0x1f3/0x230 [ 360.158070][ T8093] get_page_from_freelist+0x3045/0x3190 [ 360.163631][ T8093] __alloc_pages_noprof+0x292/0x710 [ 360.168833][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 360.174304][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 360.180204][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 360.185420][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 360.190796][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 360.196185][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 360.201132][ T8093] __sys_bpf+0x48d/0x810 [ 360.205392][ T8093] __x64_sys_bpf+0x7c/0x90 [ 360.209806][ T8093] do_syscall_64+0xf3/0x230 [ 360.214325][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.220219][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 360.226556][ T8093] free_unref_folios+0xf12/0x18d0 [ 360.231578][ T8093] folios_put_refs+0x76c/0x860 [ 360.236360][ T8093] free_pages_and_swap_cache+0x2ea/0x690 [ 360.242027][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 360.246615][ T8093] tlb_finish_mmu+0xd4/0x200 [ 360.251181][ T8093] exit_mmap+0x496/0xc40 [ 360.255437][ T8093] __mmput+0x115/0x390 [ 360.259510][ T8093] exit_mm+0x220/0x310 [ 360.263589][ T8093] do_exit+0x9b2/0x28e0 [ 360.267743][ T8093] do_group_exit+0x207/0x2c0 [ 360.272345][ T8093] get_signal+0x16a3/0x1740 [ 360.276848][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 360.282409][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 360.287953][ T8093] do_syscall_64+0x100/0x230 [ 360.292560][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.298453][ T8093] Modules linked in: [ 360.302362][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 360.314424][ T8093] Tainted: [B]=BAD_PAGE [ 360.318550][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.328583][ T8093] Call Trace: [ 360.331845][ T8093] [ 360.334755][ T8093] dump_stack_lvl+0x241/0x360 [ 360.339421][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.344603][ T8093] ? __pfx_print_modules+0x10/0x10 [ 360.349698][ T8093] bad_page+0x166/0x1b0 [ 360.353835][ T8093] free_unref_page+0xed0/0xf20 [ 360.358585][ T8093] skb_release_data+0x6dc/0x8a0 [ 360.363423][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 360.368427][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 360.374131][ T8093] ? __lock_acquire+0x1384/0x2050 [ 360.379138][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 360.385193][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 360.391155][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 360.397721][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 360.404202][ T8093] ? read_tsc+0x9/0x20 [ 360.408251][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 360.413450][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 360.419785][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 360.425924][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 360.432232][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 360.438892][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 360.444073][ T8093] ? __phys_addr+0xba/0x170 [ 360.448562][ T8093] ? build_skb_around+0x111/0x260 [ 360.453566][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 360.459442][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 360.464715][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 360.470156][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 360.476029][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 360.481551][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 360.487336][ T8093] ? synchronize_rcu+0x11b/0x360 [ 360.492257][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 360.497524][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 360.503746][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 360.509621][ T8093] ? _copy_from_user+0xa6/0xe0 [ 360.514369][ T8093] ? bpf_test_init+0x15a/0x180 [ 360.519117][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 360.524555][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 360.529904][ T8093] ? __pfx_lock_release+0x10/0x10 [ 360.534914][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 360.540709][ T8093] ? __fget_files+0x29/0x470 [ 360.545294][ T8093] ? fput+0x1a8/0x230 [ 360.549257][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 360.555041][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 360.559962][ T8093] __sys_bpf+0x48d/0x810 [ 360.564191][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 360.568939][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.574903][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.581211][ T8093] ? do_syscall_64+0x100/0x230 [ 360.585954][ T8093] __x64_sys_bpf+0x7c/0x90 [ 360.590347][ T8093] do_syscall_64+0xf3/0x230 [ 360.594831][ T8093] ? clear_bhb_loop+0x35/0x90 [ 360.599486][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.605356][ T8093] RIP: 0033:0x7f7fb377dff9 [ 360.609746][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.629330][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.637725][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 360.645683][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 360.653639][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 360.661591][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.669545][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 360.677500][ T8093] [ 360.680552][ T8093] BUG: Bad page state in process syz.4.770 pfn:31d61 [ 360.687333][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31d61 [ 360.696107][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 360.703242][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 360.711847][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 360.720420][ T8093] page dumped because: page_pool leak [ 360.725797][ T8093] page_owner tracks the page as allocated [ 360.731503][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618684903, free_ts 353988346003 [ 360.748451][ T8093] post_alloc_hook+0x1f3/0x230 [ 360.753244][ T8093] get_page_from_freelist+0x3045/0x3190 [ 360.758769][ T8093] __alloc_pages_noprof+0x292/0x710 [ 360.763975][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 360.769432][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 360.775351][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 360.780557][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 360.785950][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 360.791327][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 360.796284][ T8093] __sys_bpf+0x48d/0x810 [ 360.800528][ T8093] __x64_sys_bpf+0x7c/0x90 [ 360.805340][ T8093] do_syscall_64+0xf3/0x230 [ 360.809859][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.815776][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 360.822113][ T8093] free_unref_folios+0xf12/0x18d0 [ 360.827118][ T8093] folios_put_refs+0x76c/0x860 [ 360.831904][ T8093] free_pages_and_swap_cache+0x5c8/0x690 [ 360.837535][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 360.842141][ T8093] tlb_finish_mmu+0xd4/0x200 [ 360.846733][ T8093] exit_mmap+0x496/0xc40 [ 360.850959][ T8093] __mmput+0x115/0x390 [ 360.855048][ T8093] exit_mm+0x220/0x310 [ 360.859119][ T8093] do_exit+0x9b2/0x28e0 [ 360.863294][ T8093] do_group_exit+0x207/0x2c0 [ 360.867887][ T8093] get_signal+0x16a3/0x1740 [ 360.872419][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 360.877970][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 360.883551][ T8093] do_syscall_64+0x100/0x230 [ 360.888150][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.894069][ T8093] Modules linked in: [ 360.897964][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 360.910004][ T8093] Tainted: [B]=BAD_PAGE [ 360.914134][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 360.924168][ T8093] Call Trace: [ 360.927425][ T8093] [ 360.930333][ T8093] dump_stack_lvl+0x241/0x360 [ 360.934994][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.940181][ T8093] ? __pfx_print_modules+0x10/0x10 [ 360.945277][ T8093] bad_page+0x166/0x1b0 [ 360.949416][ T8093] free_unref_page+0xed0/0xf20 [ 360.954190][ T8093] skb_release_data+0x6dc/0x8a0 [ 360.959032][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 360.964041][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 360.969744][ T8093] ? __lock_acquire+0x1384/0x2050 [ 360.974755][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 360.980811][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 360.986772][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 360.993339][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 360.999818][ T8093] ? read_tsc+0x9/0x20 [ 361.003872][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 361.009053][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 361.015363][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 361.021496][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 361.027802][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 361.034457][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 361.039634][ T8093] ? __phys_addr+0xba/0x170 [ 361.044113][ T8093] ? build_skb_around+0x111/0x260 [ 361.049112][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 361.054993][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 361.060269][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 361.065704][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 361.071579][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 361.077105][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 361.082892][ T8093] ? synchronize_rcu+0x11b/0x360 [ 361.087809][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 361.093076][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 361.099297][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 361.105177][ T8093] ? _copy_from_user+0xa6/0xe0 [ 361.109924][ T8093] ? bpf_test_init+0x15a/0x180 [ 361.114666][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 361.120104][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 361.125459][ T8093] ? __pfx_lock_release+0x10/0x10 [ 361.130468][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 361.136249][ T8093] ? __fget_files+0x29/0x470 [ 361.140818][ T8093] ? fput+0x1a8/0x230 [ 361.144782][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 361.150562][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 361.155487][ T8093] __sys_bpf+0x48d/0x810 [ 361.159719][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 361.164471][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.170435][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.176746][ T8093] ? do_syscall_64+0x100/0x230 [ 361.181490][ T8093] __x64_sys_bpf+0x7c/0x90 [ 361.185884][ T8093] do_syscall_64+0xf3/0x230 [ 361.190366][ T8093] ? clear_bhb_loop+0x35/0x90 [ 361.195028][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.200898][ T8093] RIP: 0033:0x7f7fb377dff9 [ 361.205295][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.224885][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.233278][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 361.241224][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 361.249172][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 361.257131][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.265098][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 361.273053][ T8093] [ 361.276112][ T8093] BUG: Bad page state in process syz.4.770 pfn:31439 [ 361.282908][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31439 [ 361.291664][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 361.298809][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 361.307667][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 361.316257][ T8093] page dumped because: page_pool leak [ 361.321620][ T8093] page_owner tracks the page as allocated [ 361.327347][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618672999, free_ts 353988355407 [ 361.344294][ T8093] post_alloc_hook+0x1f3/0x230 [ 361.349041][ T8093] get_page_from_freelist+0x3045/0x3190 [ 361.354599][ T8093] __alloc_pages_noprof+0x292/0x710 [ 361.359807][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 361.365300][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 361.371198][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 361.376416][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 361.381823][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 361.387207][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 361.392158][ T8093] __sys_bpf+0x48d/0x810 [ 361.396405][ T8093] __x64_sys_bpf+0x7c/0x90 [ 361.400802][ T8093] do_syscall_64+0xf3/0x230 [ 361.405323][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.411231][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 361.417568][ T8093] free_unref_folios+0xf12/0x18d0 [ 361.422632][ T8093] folios_put_refs+0x76c/0x860 [ 361.427401][ T8093] free_pages_and_swap_cache+0x5c8/0x690 [ 361.433051][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 361.437643][ T8093] tlb_finish_mmu+0xd4/0x200 [ 361.442246][ T8093] exit_mmap+0x496/0xc40 [ 361.446486][ T8093] __mmput+0x115/0x390 [ 361.450542][ T8093] exit_mm+0x220/0x310 [ 361.454622][ T8093] do_exit+0x9b2/0x28e0 [ 361.458775][ T8093] do_group_exit+0x207/0x2c0 [ 361.463390][ T8093] get_signal+0x16a3/0x1740 [ 361.467899][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 361.473461][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 361.479025][ T8093] do_syscall_64+0x100/0x230 [ 361.483635][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.489525][ T8093] Modules linked in: [ 361.493434][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 361.505506][ T8093] Tainted: [B]=BAD_PAGE [ 361.509650][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 361.519699][ T8093] Call Trace: [ 361.522963][ T8093] [ 361.525873][ T8093] dump_stack_lvl+0x241/0x360 [ 361.530530][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.535709][ T8093] ? __pfx_print_modules+0x10/0x10 [ 361.540804][ T8093] bad_page+0x166/0x1b0 [ 361.544941][ T8093] free_unref_page+0xed0/0xf20 [ 361.549693][ T8093] skb_release_data+0x6dc/0x8a0 [ 361.554530][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 361.559549][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 361.565256][ T8093] ? __lock_acquire+0x1384/0x2050 [ 361.570268][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 361.576326][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 361.582290][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 361.588857][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 361.595338][ T8093] ? read_tsc+0x9/0x20 [ 361.599389][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 361.604572][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 361.610883][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 361.617020][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 361.623330][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 361.629982][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 361.635161][ T8093] ? __phys_addr+0xba/0x170 [ 361.639642][ T8093] ? build_skb_around+0x111/0x260 [ 361.644644][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 361.650521][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 361.655791][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 361.661231][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 361.667125][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 361.672656][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 361.678439][ T8093] ? synchronize_rcu+0x11b/0x360 [ 361.683354][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 361.688620][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 361.694841][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 361.700719][ T8093] ? _copy_from_user+0xa6/0xe0 [ 361.705467][ T8093] ? bpf_test_init+0x15a/0x180 [ 361.710208][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 361.715644][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 361.720994][ T8093] ? __pfx_lock_release+0x10/0x10 [ 361.726002][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 361.731790][ T8093] ? __fget_files+0x29/0x470 [ 361.736362][ T8093] ? fput+0x1a8/0x230 [ 361.740321][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 361.746103][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 361.751023][ T8093] __sys_bpf+0x48d/0x810 [ 361.755252][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 361.760003][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.765971][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.772290][ T8093] ? do_syscall_64+0x100/0x230 [ 361.777041][ T8093] __x64_sys_bpf+0x7c/0x90 [ 361.781434][ T8093] do_syscall_64+0xf3/0x230 [ 361.785926][ T8093] ? clear_bhb_loop+0x35/0x90 [ 361.790583][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.796453][ T8093] RIP: 0033:0x7f7fb377dff9 [ 361.800847][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.820434][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.828829][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 361.836779][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 361.844733][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 361.852684][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.860635][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 361.868590][ T8093] [ 361.871665][ T8093] BUG: Bad page state in process syz.4.770 pfn:3176e [ 361.878460][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3176e [ 361.887246][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 361.894374][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 361.902979][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 361.911536][ T8093] page dumped because: page_pool leak [ 361.916920][ T8093] page_owner tracks the page as allocated [ 361.922651][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618661206, free_ts 353988364395 [ 361.939591][ T8093] post_alloc_hook+0x1f3/0x230 [ 361.944382][ T8093] get_page_from_freelist+0x3045/0x3190 [ 361.949910][ T8093] __alloc_pages_noprof+0x292/0x710 [ 361.955120][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 361.960589][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 361.966513][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 361.971719][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 361.977122][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 361.982539][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 361.987480][ T8093] __sys_bpf+0x48d/0x810 [ 361.991705][ T8093] __x64_sys_bpf+0x7c/0x90 [ 361.996133][ T8093] do_syscall_64+0xf3/0x230 [ 362.000638][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.006543][ T8093] page last free pid 8066 tgid 8061 stack trace: [ 362.012881][ T8093] free_unref_folios+0xf12/0x18d0 [ 362.017884][ T8093] folios_put_refs+0x76c/0x860 [ 362.022658][ T8093] free_pages_and_swap_cache+0x5c8/0x690 [ 362.028290][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 362.032895][ T8093] tlb_finish_mmu+0xd4/0x200 [ 362.037489][ T8093] exit_mmap+0x496/0xc40 [ 362.041710][ T8093] __mmput+0x115/0x390 [ 362.045794][ T8093] exit_mm+0x220/0x310 [ 362.049861][ T8093] do_exit+0x9b2/0x28e0 [ 362.054027][ T8093] do_group_exit+0x207/0x2c0 [ 362.058616][ T8093] get_signal+0x16a3/0x1740 [ 362.063137][ T8093] arch_do_signal_or_restart+0x96/0x860 [ 362.068687][ T8093] syscall_exit_to_user_mode+0xc9/0x370 [ 362.074248][ T8093] do_syscall_64+0x100/0x230 [ 362.078845][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.084760][ T8093] Modules linked in: [ 362.088654][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 362.100698][ T8093] Tainted: [B]=BAD_PAGE [ 362.104827][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.114860][ T8093] Call Trace: [ 362.118115][ T8093] [ 362.121024][ T8093] dump_stack_lvl+0x241/0x360 [ 362.125684][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.130862][ T8093] ? __pfx_print_modules+0x10/0x10 [ 362.135960][ T8093] bad_page+0x166/0x1b0 [ 362.140096][ T8093] free_unref_page+0xed0/0xf20 [ 362.144860][ T8093] skb_release_data+0x6dc/0x8a0 [ 362.149715][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 362.154721][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 362.160427][ T8093] ? __lock_acquire+0x1384/0x2050 [ 362.165439][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 362.171494][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 362.177457][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 362.184030][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 362.190513][ T8093] ? read_tsc+0x9/0x20 [ 362.194570][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 362.199751][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 362.206061][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 362.212196][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 362.218502][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 362.225159][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 362.230338][ T8093] ? __phys_addr+0xba/0x170 [ 362.234823][ T8093] ? build_skb_around+0x111/0x260 [ 362.239823][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 362.245701][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 362.250968][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 362.256405][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 362.262280][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 362.267803][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 362.273584][ T8093] ? synchronize_rcu+0x11b/0x360 [ 362.278499][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 362.283770][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 362.289995][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 362.295872][ T8093] ? _copy_from_user+0xa6/0xe0 [ 362.300621][ T8093] ? bpf_test_init+0x15a/0x180 [ 362.305365][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 362.310802][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 362.316156][ T8093] ? __pfx_lock_release+0x10/0x10 [ 362.321167][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 362.326951][ T8093] ? __fget_files+0x29/0x470 [ 362.331522][ T8093] ? fput+0x1a8/0x230 [ 362.335490][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 362.341271][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 362.346192][ T8093] __sys_bpf+0x48d/0x810 [ 362.350415][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 362.355163][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.361126][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.367434][ T8093] ? do_syscall_64+0x100/0x230 [ 362.372182][ T8093] __x64_sys_bpf+0x7c/0x90 [ 362.376578][ T8093] do_syscall_64+0xf3/0x230 [ 362.381061][ T8093] ? clear_bhb_loop+0x35/0x90 [ 362.385722][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.391595][ T8093] RIP: 0033:0x7f7fb377dff9 [ 362.395990][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.415574][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.423970][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 362.431936][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 362.439883][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 362.447841][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.455795][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 362.463748][ T8093] [ 362.466801][ T8093] BUG: Bad page state in process syz.4.770 pfn:6839f [ 362.473598][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806839f0f0 pfn:0x6839f [ 362.483692][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 362.490806][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 362.499409][ T8093] raw: ffff88806839f0f0 0000000000000001 00000000ffffffff 0000000000000000 [ 362.507999][ T8093] page dumped because: page_pool leak [ 362.513379][ T8093] page_owner tracks the page as allocated [ 362.519085][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618648815, free_ts 354364629588 [ 362.536025][ T8093] post_alloc_hook+0x1f3/0x230 [ 362.540795][ T8093] get_page_from_freelist+0x3045/0x3190 [ 362.546358][ T8093] __alloc_pages_noprof+0x292/0x710 [ 362.551555][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 362.557028][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 362.562948][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 362.568131][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 362.573509][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 362.578885][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 362.583842][ T8093] __sys_bpf+0x48d/0x810 [ 362.588101][ T8093] __x64_sys_bpf+0x7c/0x90 [ 362.592556][ T8093] do_syscall_64+0xf3/0x230 [ 362.597063][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.602993][ T8093] page last free pid 8078 tgid 8078 stack trace: [ 362.609320][ T8093] free_unref_folios+0xf12/0x18d0 [ 362.614364][ T8093] folios_put_refs+0x76c/0x860 [ 362.619128][ T8093] free_pages_and_swap_cache+0x5c8/0x690 [ 362.624780][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 362.629371][ T8093] tlb_finish_mmu+0xd4/0x200 [ 362.633978][ T8093] exit_mmap+0x496/0xc40 [ 362.638223][ T8093] __mmput+0x115/0x390 [ 362.642308][ T8093] exit_mm+0x220/0x310 [ 362.646374][ T8093] do_exit+0x9b2/0x28e0 [ 362.650506][ T8093] do_group_exit+0x207/0x2c0 [ 362.655107][ T8093] __x64_sys_exit_group+0x3f/0x40 [ 362.660133][ T8093] x64_sys_call+0x2634/0x2640 [ 362.664851][ T8093] do_syscall_64+0xf3/0x230 [ 362.669354][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.675264][ T8093] Modules linked in: [ 362.679160][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 362.691203][ T8093] Tainted: [B]=BAD_PAGE [ 362.695332][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.705364][ T8093] Call Trace: [ 362.708620][ T8093] [ 362.711528][ T8093] dump_stack_lvl+0x241/0x360 [ 362.716188][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.721370][ T8093] ? __pfx_print_modules+0x10/0x10 [ 362.726467][ T8093] bad_page+0x166/0x1b0 [ 362.730602][ T8093] free_unref_page+0xed0/0xf20 [ 362.735355][ T8093] skb_release_data+0x6dc/0x8a0 [ 362.740190][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 362.745198][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 362.750901][ T8093] ? __lock_acquire+0x1384/0x2050 [ 362.755910][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 362.761966][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 362.767930][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 362.774498][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 362.780982][ T8093] ? read_tsc+0x9/0x20 [ 362.785038][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 362.790221][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 362.796537][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 362.802689][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 362.809002][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 362.815662][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 362.820840][ T8093] ? __phys_addr+0xba/0x170 [ 362.825320][ T8093] ? build_skb_around+0x111/0x260 [ 362.830323][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 362.836208][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 362.841478][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 362.846914][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 362.852794][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 362.858332][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 362.864122][ T8093] ? synchronize_rcu+0x11b/0x360 [ 362.869040][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 362.874307][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 362.880528][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 362.886409][ T8093] ? _copy_from_user+0xa6/0xe0 [ 362.891160][ T8093] ? bpf_test_init+0x15a/0x180 [ 362.895913][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 362.901373][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 362.906730][ T8093] ? __pfx_lock_release+0x10/0x10 [ 362.911741][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 362.917538][ T8093] ? __fget_files+0x29/0x470 [ 362.922112][ T8093] ? fput+0x1a8/0x230 [ 362.926075][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 362.931868][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 362.936814][ T8093] __sys_bpf+0x48d/0x810 [ 362.941038][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 362.945786][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.951758][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.958084][ T8093] ? do_syscall_64+0x100/0x230 [ 362.962831][ T8093] __x64_sys_bpf+0x7c/0x90 [ 362.967224][ T8093] do_syscall_64+0xf3/0x230 [ 362.971707][ T8093] ? clear_bhb_loop+0x35/0x90 [ 362.976363][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.982241][ T8093] RIP: 0033:0x7f7fb377dff9 [ 362.986637][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.006338][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.014731][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 363.022681][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 363.030630][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 363.038584][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.046535][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 363.054493][ T8093] [ 363.057547][ T8093] BUG: Bad page state in process syz.4.770 pfn:5f4d3 [ 363.064332][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f4d30f0 pfn:0x5f4d3 [ 363.074407][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 363.081521][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 363.090123][ T8093] raw: ffff88805f4d30f0 0000000000000001 00000000ffffffff 0000000000000000 [ 363.098721][ T8093] page dumped because: page_pool leak [ 363.104106][ T8093] page_owner tracks the page as allocated [ 363.109815][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618636998, free_ts 354364638021 [ 363.126759][ T8093] post_alloc_hook+0x1f3/0x230 [ 363.131534][ T8093] get_page_from_freelist+0x3045/0x3190 [ 363.137099][ T8093] __alloc_pages_noprof+0x292/0x710 [ 363.142316][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 363.147756][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 363.153675][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 363.158880][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 363.164268][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 363.169642][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 363.174601][ T8093] __sys_bpf+0x48d/0x810 [ 363.178849][ T8093] __x64_sys_bpf+0x7c/0x90 [ 363.183298][ T8093] do_syscall_64+0xf3/0x230 [ 363.187806][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.193716][ T8093] page last free pid 8078 tgid 8078 stack trace: [ 363.200034][ T8093] free_unref_folios+0xf12/0x18d0 [ 363.205083][ T8093] folios_put_refs+0x76c/0x860 [ 363.209850][ T8093] free_pages_and_swap_cache+0x5c8/0x690 [ 363.215498][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 363.220093][ T8093] tlb_finish_mmu+0xd4/0x200 [ 363.224698][ T8093] exit_mmap+0x496/0xc40 [ 363.228938][ T8093] __mmput+0x115/0x390 [ 363.233025][ T8093] exit_mm+0x220/0x310 [ 363.237096][ T8093] do_exit+0x9b2/0x28e0 [ 363.241230][ T8093] do_group_exit+0x207/0x2c0 [ 363.245832][ T8093] __x64_sys_exit_group+0x3f/0x40 [ 363.250857][ T8093] x64_sys_call+0x2634/0x2640 [ 363.255553][ T8093] do_syscall_64+0xf3/0x230 [ 363.260061][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.265975][ T8093] Modules linked in: [ 363.269872][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 363.281916][ T8093] Tainted: [B]=BAD_PAGE [ 363.286045][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.296080][ T8093] Call Trace: [ 363.299341][ T8093] [ 363.302256][ T8093] dump_stack_lvl+0x241/0x360 [ 363.306925][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.312107][ T8093] ? __pfx_print_modules+0x10/0x10 [ 363.317204][ T8093] bad_page+0x166/0x1b0 [ 363.321339][ T8093] free_unref_page+0xed0/0xf20 [ 363.326093][ T8093] skb_release_data+0x6dc/0x8a0 [ 363.330929][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 363.335933][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 363.341648][ T8093] ? __lock_acquire+0x1384/0x2050 [ 363.346660][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 363.352719][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 363.358685][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 363.365256][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 363.371736][ T8093] ? read_tsc+0x9/0x20 [ 363.375816][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 363.381003][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 363.387311][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 363.393451][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 363.399760][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 363.406420][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 363.411604][ T8093] ? __phys_addr+0xba/0x170 [ 363.416088][ T8093] ? build_skb_around+0x111/0x260 [ 363.421090][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 363.426970][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 363.432240][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 363.437675][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 363.443552][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 363.449073][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 363.454857][ T8093] ? synchronize_rcu+0x11b/0x360 [ 363.459771][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 363.465042][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 363.471267][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 363.477145][ T8093] ? _copy_from_user+0xa6/0xe0 [ 363.481894][ T8093] ? bpf_test_init+0x15a/0x180 [ 363.486633][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 363.492072][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 363.497423][ T8093] ? __pfx_lock_release+0x10/0x10 [ 363.502763][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 363.508544][ T8093] ? __fget_files+0x29/0x470 [ 363.513122][ T8093] ? fput+0x1a8/0x230 [ 363.517088][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 363.522886][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 363.527830][ T8093] __sys_bpf+0x48d/0x810 [ 363.532058][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 363.536804][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 363.542767][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.549077][ T8093] ? do_syscall_64+0x100/0x230 [ 363.553820][ T8093] __x64_sys_bpf+0x7c/0x90 [ 363.558213][ T8093] do_syscall_64+0xf3/0x230 [ 363.562699][ T8093] ? clear_bhb_loop+0x35/0x90 [ 363.567358][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.573243][ T8093] RIP: 0033:0x7f7fb377dff9 [ 363.577663][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.597250][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.605643][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 363.613596][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 363.621546][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 363.629501][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.637456][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 363.645410][ T8093] [ 363.648464][ T8093] BUG: Bad page state in process syz.4.770 pfn:311a3 [ 363.655245][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x311a3 [ 363.664016][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 363.671125][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 363.679730][ T8093] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 363.688321][ T8093] page dumped because: page_pool leak [ 363.693699][ T8093] page_owner tracks the page as allocated [ 363.699410][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618625315, free_ts 354364646821 [ 363.716355][ T8093] post_alloc_hook+0x1f3/0x230 [ 363.721129][ T8093] get_page_from_freelist+0x3045/0x3190 [ 363.726690][ T8093] __alloc_pages_noprof+0x292/0x710 [ 363.731914][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 363.737350][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 363.743263][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 363.748469][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 363.753854][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 363.759223][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 363.764180][ T8093] __sys_bpf+0x48d/0x810 [ 363.768427][ T8093] __x64_sys_bpf+0x7c/0x90 [ 363.772859][ T8093] do_syscall_64+0xf3/0x230 [ 363.777364][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.783270][ T8093] page last free pid 8078 tgid 8078 stack trace: [ 363.789589][ T8093] free_unref_folios+0xf12/0x18d0 [ 363.794626][ T8093] folios_put_refs+0x76c/0x860 [ 363.799388][ T8093] free_pages_and_swap_cache+0x5c8/0x690 [ 363.805032][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 363.809628][ T8093] tlb_finish_mmu+0xd4/0x200 [ 363.814230][ T8093] exit_mmap+0x496/0xc40 [ 363.818475][ T8093] __mmput+0x115/0x390 [ 363.822563][ T8093] exit_mm+0x220/0x310 [ 363.826633][ T8093] do_exit+0x9b2/0x28e0 [ 363.830770][ T8093] do_group_exit+0x207/0x2c0 [ 363.835374][ T8093] __x64_sys_exit_group+0x3f/0x40 [ 363.840397][ T8093] x64_sys_call+0x2634/0x2640 [ 363.845093][ T8093] do_syscall_64+0xf3/0x230 [ 363.849599][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.855509][ T8093] Modules linked in: [ 363.859407][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 363.871450][ T8093] Tainted: [B]=BAD_PAGE [ 363.875578][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.885619][ T8093] Call Trace: [ 363.888880][ T8093] [ 363.891799][ T8093] dump_stack_lvl+0x241/0x360 [ 363.896459][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.901889][ T8093] ? __pfx_print_modules+0x10/0x10 [ 363.906986][ T8093] bad_page+0x166/0x1b0 [ 363.911120][ T8093] free_unref_page+0xed0/0xf20 [ 363.915873][ T8093] skb_release_data+0x6dc/0x8a0 [ 363.920714][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 363.925725][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 363.931427][ T8093] ? __lock_acquire+0x1384/0x2050 [ 363.936440][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 363.942499][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 363.948458][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 363.955026][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 363.961504][ T8093] ? read_tsc+0x9/0x20 [ 363.965559][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 363.970742][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 363.977051][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 363.983185][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 363.989495][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 363.996150][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 364.001327][ T8093] ? __phys_addr+0xba/0x170 [ 364.005811][ T8093] ? build_skb_around+0x111/0x260 [ 364.010813][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 364.016697][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 364.021980][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 364.027438][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 364.033318][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 364.038840][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 364.044628][ T8093] ? synchronize_rcu+0x11b/0x360 [ 364.049548][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 364.054820][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 364.061042][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 364.066925][ T8093] ? _copy_from_user+0xa6/0xe0 [ 364.071679][ T8093] ? bpf_test_init+0x15a/0x180 [ 364.076422][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 364.081864][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 364.087215][ T8093] ? __pfx_lock_release+0x10/0x10 [ 364.092225][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 364.098007][ T8093] ? __fget_files+0x29/0x470 [ 364.102581][ T8093] ? fput+0x1a8/0x230 [ 364.106546][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 364.112341][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 364.117284][ T8093] __sys_bpf+0x48d/0x810 [ 364.121510][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 364.126267][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 364.132235][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.138542][ T8093] ? do_syscall_64+0x100/0x230 [ 364.143289][ T8093] __x64_sys_bpf+0x7c/0x90 [ 364.147687][ T8093] do_syscall_64+0xf3/0x230 [ 364.152173][ T8093] ? clear_bhb_loop+0x35/0x90 [ 364.156830][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.162709][ T8093] RIP: 0033:0x7f7fb377dff9 [ 364.167103][ T8093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.186686][ T8093] RSP: 002b:00007f7fb31ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.195078][ T8093] RAX: ffffffffffffffda RBX: 00007f7fb3936058 RCX: 00007f7fb377dff9 [ 364.203031][ T8093] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 364.210980][ T8093] RBP: 00007f7fb37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 364.218932][ T8093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.226895][ T8093] R13: 0000000000000000 R14: 00007f7fb3936058 R15: 00007ffcf70d6898 [ 364.234870][ T8093] [ 364.237930][ T8093] BUG: Bad page state in process syz.4.770 pfn:21b0e [ 364.244712][ T8093] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021b0ef00 pfn:0x21b0e [ 364.254791][ T8093] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 364.261943][ T8093] raw: 00fff00000000000 dead000000000040 ffff8880650d1000 0000000000000000 [ 364.270521][ T8093] raw: ffff888021b0ef00 0000000000000001 00000000ffffffff 0000000000000000 [ 364.279111][ T8093] page dumped because: page_pool leak [ 364.284491][ T8093] page_owner tracks the page as allocated [ 364.290182][ T8093] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8093, tgid 8082 (syz.4.770), ts 354618613181, free_ts 354364654820 [ 364.307128][ T8093] post_alloc_hook+0x1f3/0x230 [ 364.311939][ T8093] get_page_from_freelist+0x3045/0x3190 [ 364.317485][ T8093] __alloc_pages_noprof+0x292/0x710 [ 364.322695][ T8093] alloc_pages_bulk_noprof+0x729/0xd40 [ 364.328155][ T8093] __page_pool_alloc_pages_slow+0x122/0x690 [ 364.334078][ T8093] page_pool_alloc_pages+0xd0/0x1c0 [ 364.339284][ T8093] bpf_test_run_xdp_live+0x950/0x2160 [ 364.344679][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 364.350054][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 364.355013][ T8093] __sys_bpf+0x48d/0x810 [ 364.359258][ T8093] __x64_sys_bpf+0x7c/0x90 [ 364.363696][ T8093] do_syscall_64+0xf3/0x230 [ 364.368204][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.374116][ T8093] page last free pid 8078 tgid 8078 stack trace: [ 364.380434][ T8093] free_unref_folios+0xf12/0x18d0 [ 364.385476][ T8093] folios_put_refs+0x76c/0x860 [ 364.390241][ T8093] free_pages_and_swap_cache+0x5c8/0x690 [ 364.395887][ T8093] tlb_flush_mmu+0x3a3/0x680 [ 364.400477][ T8093] tlb_finish_mmu+0xd4/0x200 [ 364.405084][ T8093] exit_mmap+0x496/0xc40 [ 364.409324][ T8093] __mmput+0x115/0x390 [ 364.413410][ T8093] exit_mm+0x220/0x310 [ 364.417475][ T8093] do_exit+0x9b2/0x28e0 [ 364.421607][ T8093] do_group_exit+0x207/0x2c0 [ 364.426219][ T8093] __x64_sys_exit_group+0x3f/0x40 [ 364.431252][ T8093] x64_sys_call+0x2634/0x2640 [ 364.435970][ T8093] do_syscall_64+0xf3/0x230 [ 364.440478][ T8093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.446392][ T8093] Modules linked in: [ 364.450293][ T8093] CPU: 1 UID: 0 PID: 8093 Comm: syz.4.770 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 364.462334][ T8093] Tainted: [B]=BAD_PAGE [ 364.466461][ T8093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 364.476493][ T8093] Call Trace: [ 364.479750][ T8093] [ 364.482662][ T8093] dump_stack_lvl+0x241/0x360 [ 364.487320][ T8093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.492496][ T8093] ? __pfx_print_modules+0x10/0x10 [ 364.497589][ T8093] bad_page+0x166/0x1b0 [ 364.501933][ T8093] free_unref_page+0xed0/0xf20 [ 364.506707][ T8093] skb_release_data+0x6dc/0x8a0 [ 364.511544][ T8093] sk_skb_reason_drop+0x1c9/0x380 [ 364.516550][ T8093] __netif_receive_skb_core+0x3edd/0x4570 [ 364.522254][ T8093] ? __lock_acquire+0x1384/0x2050 [ 364.527264][ T8093] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 364.533322][ T8093] __netif_receive_skb_list_core+0x2b1/0x980 [ 364.539292][ T8093] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 364.545863][ T8093] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 364.552360][ T8093] ? read_tsc+0x9/0x20 [ 364.556439][ T8093] ? timekeeping_get_ns+0x2c0/0x420 [ 364.561627][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 364.567934][ T8093] netif_receive_skb_list_internal+0xa51/0xe30 [ 364.574072][ T8093] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 364.580390][ T8093] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 364.587056][ T8093] ? __pfx_eth_type_trans+0x10/0x10 [ 364.592240][ T8093] ? __phys_addr+0xba/0x170 [ 364.596720][ T8093] ? build_skb_around+0x111/0x260 [ 364.601723][ T8093] ? __xdp_build_skb_from_frame+0x338/0x650 [ 364.607613][ T8093] netif_receive_skb_list+0x55/0x4b0 [ 364.612886][ T8093] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 364.618321][ T8093] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 364.624194][ T8093] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 364.629716][ T8093] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 364.635502][ T8093] ? synchronize_rcu+0x11b/0x360 [ 364.640426][ T8093] ? __pfx_synchronize_rcu+0x10/0x10 [ 364.645700][ T8093] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 364.651939][ T8093] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 364.657842][ T8093] ? _copy_from_user+0xa6/0xe0 [ 364.662594][ T8093] ? bpf_test_init+0x15a/0x180 [ 364.667342][ T8093] ? xdp_convert_md_to_buff+0x5b/0x330 [ 364.672777][ T8093] bpf_prog_test_run_xdp+0x805/0x11e0 [ 364.678129][ T8093] ? __pfx_lock_release+0x10/0x10 [ 364.683136][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 364.688919][ T8093] ? __fget_files+0x29/0x470 [ 364.693490][ T8093] ? fput+0x1a8/0x230 [ 364.697453][ T8093] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 364.703241][ T8093] bpf_prog_test_run+0x2e4/0x360 [ 364.708164][ T8093] __sys_bpf+0x48d/0x810 [ 364.712387][ T8093] ? __pfx___sys_bpf+0x10/0x10 [ 364.717130][ T8093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 364.723093][ T8093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.729402][ T8093] ? do_syscall_64+0x100/0x230