last executing test programs: 4.451683462s ago: executing program 2 (id=1049): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r2}, &(0x7f0000000ec0), &(0x7f0000000f00)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 4.296759621s ago: executing program 0 (id=1050): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="000000000000000000000000000000000000000000000000000000008771fa4a47e1e8daf3d986b5c5c27b07350bee94fc1b32d90947a4917a2b0b2124f4a7c55b62bb7a394e040b561fd3ac8191c236bbd7b6f40a8260360e1abf887fd49386e50de2963c06566b54f2118bd7d71c172f6bc15660a8a384d27d27c8b19453dd836629f51404a545494c062032bdb20607b4d9696e95aa310ef1e0e8526a9b39b52d502df51b9fb4f5d2", @ANYBLOB="141926cc97f7f5845dcbe85742892cf451d359f164babf5ac6da8428fbf22f77ba389bd6d16b989584571a59f29f29fb2cb00cdaf450d095b0906b214ff468cb457e2f46103654405dccc169c7fdbe90e80ad4c8cf2b12a944dfa79cd30bda4a51a49e5b3320e5962f76dfa04c8b87ea1eadc92fb2f4b0feccd2abbee0de6fe5443292d6bfa42cfc631e6c5a36", @ANYRES64=0x0], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x7a, &(0x7f0000000080)={r3, 0xffffff65, "179da51e"}, &(0x7f00000000c0)=0xc) mmap(&(0x7f0000355000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000005300), 0x1, 0x0) unshare(0x62040200) r7 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f00000001c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x50000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) 4.238690857s ago: executing program 2 (id=1052): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x891d, &(0x7f0000000040)={'erspan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x474c, 0x4) (async) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r8, 0x909, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r3], 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xe4, r4, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4000000, 0x3b}}}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a85c3807484d7e2633be7258bf0707cc864311c6d6733815"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="27ca1aab4f7de6d54c46d91a019225f4e5bfc821eaec7e9d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7e8a35cd3d8b96a7"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="919c83302ea0b2b35721f5a150ef9b5113fad6a13abd34be"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e6727443218b40a1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0817fb441fcd424331030673a44bf127"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0fca1d85bddc33d4"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="597f832e6804d488785b110753d31bf49c8a456ff786c364"}, @NL80211_REKEY_DATA_AKM={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8000}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}, @IFLA_LINK={0x8}]}, 0x54}}, 0x0) 3.50084404s ago: executing program 2 (id=1054): socket$unix(0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)={0x90000008}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000540)={0x90002004}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x20000000, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) syz_emit_ethernet(0x42, &(0x7f00000024c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60e101000000000000ff02000000000000000000000000000100000e22000c907855f1ad4f00"/66], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x40c000) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xd0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0xa00, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="acc09228f916", 0x9, 0x6, [0x10, 0x1a, 0x26, 0x1f, 0x14, 0x16, 0x7, 0x10, 0x2a, 0x3b, 0x18, 0x5, 0x36, 0xa, 0x20, 0x3d], 0x1, 0x4, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0x6d47]}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(r8, r7, 0x0, 0xf03a0005) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000006640)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044001) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES8=r3], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0x40000000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.602128654s ago: executing program 1 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="050000000000710000000f00000008000300", @ANYRES32=r2, @ANYBLOB="6f000e0080000000ffffffffffff08021100000150505050505000000000000000000000640000000006010101010101040600ff00000000050300000025030000002a01003c0401ff38022d1a0000000000000000000000000000000000000000000000000000760600000000000000080026006c09000008000c000004000008000d00000001000500d50002000000"], 0xac}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000040)={0x8001, 0x4b1}) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r5, 0x81}, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x41071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.984819913s ago: executing program 2 (id=1058): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x20000800) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4b}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x34}}, 0x890) syz_emit_ethernet(0x376, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x340, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0) 1.683505827s ago: executing program 3 (id=1060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a001000000000000000000081800000080000000000000094000100fc0100"/48], 0x30}}, 0x0) 1.500907263s ago: executing program 2 (id=1061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc00}) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32-generic)\x00'}, 0x58) 1.50040524s ago: executing program 3 (id=1062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xa41, 0x8}, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@dev, @loopback, 0x0}, &(0x7f00000001c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0xfffffff9, 0xfff, 0x28a1, r3, 0x8, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0xc, @void, @value, @void, @value}, 0x50) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd, 0x8, 0x401, 0x3, 0x5, 0x9147}) 1.500131094s ago: executing program 1 (id=1063): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in=@dev, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.411602146s ago: executing program 1 (id=1064): socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x108, 0x218, 0x308, 0x308, 0x108, 0x4, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'gre0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'virt_wifi0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @remote}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1.387892018s ago: executing program 4 (id=1065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0000000080000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="620af8ff0c200021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@ipv4_getnexthop={0x20, 0x6a, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="09000000010000", 0x7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x36, 0x0, &(0x7f0000001300)="e0e90947c50d85ff9782762f86ddb18bb30294ce8611e428ff85a5691fb900b42c46ffef3f2d819b3c0d7ae1a4b9ccee0dcf5e99a1e0", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc0000001e0011050000000000000000000000000000000000000000000000000000000000000000fe800000ff0f000000000000000000fd00000000000000001c0017000000000000000000000000000000000000000000000000000c001500"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x20000090) 1.264941812s ago: executing program 3 (id=1066): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) listen(r0, 0x100101) (async) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0f"], 0x10) 1.165586126s ago: executing program 0 (id=1067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000300000001da"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@gettclass={0x0, 0x2a, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x10}, {0xfff2, 0xffff}, {0xd, 0xe}}, [""]}, 0x2b0}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280050001003a00000014000180080001007f00000108000200000000000c001980080002"], 0x44}}, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) 1.119111864s ago: executing program 3 (id=1068): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x60fe1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x101}]}}}]}, 0x40}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x3a) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x200048d0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x76, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6}, 0x18) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000080)="7bc081b75702"}, 0x20) 787.320965ms ago: executing program 4 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000ca53795241fdb1971f42fc2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) r7 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r7, &(0x7f0000007140)=[{{&(0x7f0000004680)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c, &(0x7f0000004800)=[{&(0x7f00000046c0)='x', 0x1}], 0x1}}], 0x1, 0x64004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000400000000ff03004000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x67}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x1040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x33, 0x0, &(0x7f0000001980)) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_user\x00', 0x7a44, 0x1700) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendfile(r12, r11, 0x0, 0xffffffff00d) 785.100816ms ago: executing program 1 (id=1070): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x44}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x146, 0x146, 0x3, [@volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0x8, 0x5}, {0xe, 0x3}, {0x10, 0x2}, {0x6, 0x5}, {0x4, 0x2}, {0x2, 0x4}]}, @const={0xd, 0x0, 0x0, 0xa, 0x3}, @struct={0x8, 0x3, 0x0, 0x4, 0x1, 0x7, [{0x5, 0x4, 0x4}, {0x0, 0x0, 0x641}, {0x2, 0x4, 0x5}]}, @enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0x7}, {0x1, 0x6}, {0xa, 0xb855}, {0x9, 0xfffff800}, {0x6, 0xe}]}, @fwd={0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @fwd={0x2}, @datasec={0x1, 0x7, 0x0, 0xf, 0x2, [{0x4, 0xc0000000, 0x401}, {0x5, 0x2, 0x4}, {0x2, 0x40, 0x8}, {0x4, 0x2901, 0x10001}, {0x3, 0x7f, 0x1}, {0x4, 0x7, 0xff}, {0x5, 0x1000}], "12ac"}]}, {0x0, [0x0]}}, &(0x7f0000000680)=""/251, 0x163, 0xfb, 0x1, 0x81, 0x0, @void, @value}, 0x28) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x0, r0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000280)="fd", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) shutdown(r8, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x11, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x6, 0xd, 0x8, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0xaf, &(0x7f0000000440)=""/175, 0x41000, 0x50, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000007c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x10, 0x5, 0xffffff00}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r6, r7], &(0x7f0000000900)=[{0x4, 0x1, 0xe, 0x4}, {0x4, 0x2, 0xc, 0x8}, {0x4, 0x5, 0x5, 0x7}, {0x1, 0x3, 0x2, 0xc}, {0x5, 0x3, 0x4, 0x9}], 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$MAP_LOOKUP_ELEM(0x22, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 769.746403ms ago: executing program 3 (id=1071): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="e900000000000000000000000000000079100800000000001866000001e5ff0000020000020000001863000002540887f003d613e4776918d04dd31a0792bf08"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 616.945096ms ago: executing program 4 (id=1072): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x1c}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000c829f168b70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 616.325744ms ago: executing program 2 (id=1073): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000868000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00008a2000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0xdbb3e000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000616000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1000004, 0x13, r6, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x812, r6, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r7 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1a2, 0x4000013, r7, 0x0) (async) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1a2, 0x4000013, r7, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r3, r3}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r3, r3}, 0xc) mmap(&(0x7f0000206000/0x4000)=nil, 0x4000, 0xe, 0x18012, r2, 0xffffd000) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r5, 0x20, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r5, 0x20, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3046412db4c85530f18fcac4eeb50576d70e01a2b9601e4c62000000000000a9d6008d1573620d3335a1b7600270e310ae54a4a43b9afa6bcbe501c409e6e41e48463f57733e9561fe85749e40bdac05d04e4cf57a3e8e0349e197fda8f89508f1971d7073c7ef14e72f39a2cdb59734ab62119a194760a1c34282785c", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000000000008001b0000000000"], 0x30}}, 0x0) 615.108143ms ago: executing program 3 (id=1074): socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x108, 0x218, 0x308, 0x308, 0x108, 0x4, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'gre0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'virt_wifi0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @remote}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 565.291571ms ago: executing program 0 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000001000050700a10400e71eeae31bfec1ea", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800800010067726500100002800400120008000700ffffffff"], 0x3c}}, 0x0) bind$alg(r3, &(0x7f0000003c40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000010000000000000000000950000000000003f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@empty, @remote, @void, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x3d, 0x0, 0x0, 0x0, "ff9ea9cfc16dc79c5f6a95583b8ede69a0e22546e3b9d27b7b35e1eaa747519c81402bd9f9aa3a7793b6eac2964a08abc670e03cb3caac194b8c0ebc1dc70ddc"}}}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9d9ecc3b63fce052f3f727a6f6a88207abe3", @ANYRES16=r8, @ANYBLOB="b04c27bd7000fbdbdf250f00000008000300", @ANYRES32=r9, @ANYBLOB="0500a200d700000008000d00ff0f000008000c0064000000"], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x40844) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 527.075056ms ago: executing program 4 (id=1076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000001c0)='\\', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$can_j1939(r2, &(0x7f0000000280)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@volatile={0xf, 0x0, 0x0, 0x9, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x0, 0x9, [{0x6, 0x0, 0x6}, {0x4, 0x4, 0x7798c175}, {0x10, 0x1, 0x7}, {0x7, 0x1, 0xa9}, {0x2, 0x3, 0x1}]}, @fwd={0x3}, @func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x41, 0x30, 0x2e, 0x61, 0x0, 0x2e, 0x61]}}, &(0x7f0000000000)=""/101, 0x8e, 0x65, 0x1, 0x1, 0x0, @void, @value}, 0x28) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0xff, 0x4, 0xfff, 0x18040, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @value=r4, @void, @value=r5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r7, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r8, 0x400448c8, &(0x7f0000000000)) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000000980)={{r8}, "9a32ea62c5b1df80f463fe6dc28f924177ae07e8574090d66671d4dd4bfd9c0f63621440ba02125f0e4d8f66714df074c4ae30e98d2293eb86adf2ddf2be5576c6b7095f7aad2f4e9fb43d35b00d4a2c6f6755bfa9d41fffa8f85d8da88d934d67b767d142abf2a1e174d3063a8a9c027c6cbdb360ef3139b9a515bf7ddf4d709793ba9b49f4c61c051d290052119490963415f3be91223ae5b031f9e339113152f920e8fb7a3de11ef2e6f99ec66476605686e4fbc9a46052f6be668d9e9313ef6b77718b231e5787e9e4f572a171018fcf59ea9d62750f88c60c4f7d4eb107f953d3b2b5b18a494a56cc799d21b5ee4053b684bca3b6266af1e0df1330729d5d22708577ca6d70e21f655018f87d6bf1f74d16f277a5a5ec1e4e201639a5a6fd05282a0ed45d01e6742c2674f6361e827de52172dea6917266261f747e49ba7d33a9936fadb764e038b0f5b4b76f5d2c79ceb56299ecfd36b3d36ce8cf5bf596a7888ef2b7308c9c62529eff4a8081c7ac3c5fe64fbb2f18d99c32a6644478ba517a51be6ec291ab80ac32f39e329247ed3d0f51979ee3ef862c6d85b4ab98b19d12dcf1b4f686fa6f0447a8d0325fc510efbf9ce633b61b217f79a42260455d5c3cacb5a0cf78c5e31cfb5686c58bafb60cab52cebe74b98b9cd9c87e2d57e8beeba9bc567f1228e40c90d07f518664437c7cb5c3cc2260b4c92b5cd631381d5fc1b86e45b716c35c174a9157a098fda0363d830cc7e4690ad2e4745a2d2b85b24c5dc611807413ac633ee4bc012d2728374877cd02bd2adbdc515c38249c4aa48a6127281dbda739ff7358098972428b6fd4aa8f027ee82f496eb8210e099017dc93674219e161352095fb7a10d2a39e8fdfce828d97fd713f9e9c9c59e4e3dbedf662f9afca7ca73f0d7f97d80927eb3a07735159483f9d5d9ff04914f949504db8bc81e63e972dbbdd7bcfe01a00065dbcb010b49e7e58fcacd43b1e99172de1316a8f88142bee28b9034025dcb11a0f9d9be6da881edba29adba3f75c1f6952559f19eac391e28ceeea5d0fc48bfeb1a93ade9164c25adeefc9e1b1a37f842b77f6f2a5eb1446ad68f2c04c928ea343bc8112a6090d82c3a5e9246a90037512c261a2634fcd4eff4585e55cbcfadf9ceac03c21083a20fce18d95c4fa81fbdaecf901164c13f7557a72122665f001284705de4e87ae871913a4caa6e694b311e69f17ffe49d4d806267368c0001dd2dce0a0de70500af5537cea0210ed7ccc89eb32b84740c2997b494d2bbdb62c9fc60d4088a2130a3c7b38bc951563cd17fa9b52ab53a81ef9212565fa741721706b051a97f1df16a99a3acd6c476c288954f73e19d5001d1f6fcf655bde546538cc88126bea1eec720ce1d48b8df2d2c6cce0b5d788508ca0d96380d353e4a5c78a4ec3efcda49be5011a396f6c0629ddaa35e31658bd4c7a187bffc4177b46f43c85e2aa9c00d93bf518a5206aaefcb4ff95d508b6bed2a7d192caeb01a470f2064901f161cdb6a27c8c4b33c457ae6885841404f4aed46b1cc60de1b283dfd778fb0c6247601dd22b150a44b43c4b2b9968cbcf412e3c6d2aa6a4563a487caf195f266fc69ee7032f4bd946112b24d3bf3e08b81fbb264ee3af4cfce48370e143f6bb5e9af50e87bf4ecb96f0680ed2a2488f1c5315a301720bc143b94e2aba52939b7a89e6acb5d4a33656938584faa6ef26b8ae0521200951ebda86815526863d201799ac2416f92995039a1c13449eec130f13b492ed4a066f651e0ca6834df1f64a6b722656afde04d067f8f97153526d37c9407059bcce183b0f6c7bf5a8bb412d0e3e4d17475c2de9658a495a0ae57e63fd4af354cc391af2fb7c5ff68ebdf37d9a9468fc459bc230acf849a64c07d7be3a8ff67581225d377c8432c8fc337d2a511a4cc357bae12829bac69746e8256b138bdae4615729d37dae7086f3ba932c60294a76bbbced5d56619998d523756b6cab7edb5b8da19505cf14f37fc300194bb1baf457bcfb8ca4f4411fb0e418102fda6a562ee07131f5f07a8342f02d77974b97343bbeb63fbcf48f3924541399b46ecea2dc481c0666a15851db57bda718a90a849cf363fcc8034def11c8f567686c459f50465542c9c6abe941df64c5122df10e15f6ab74c8eb14a12e90ad59f27a6b477c15d888e7896954866dfa6f06effa0a948a2a5fa737f5c0fcd6c5163d1b5dace6bca80c4ddab305e21d416872d9bd0046a0b4a8f5de431cd734857bce1745426fd66f261552cfc3f51fe7a552d664f79fba81b93da661ecfeef49c5d79d94553f577ef89370af031d3992b16becc7c00d067784727a53701cc8c359eb32c12c097697fef1d7639fd1d724e739134deb6796b175fcb4279a8783c7f4b8201cc7ca65aebe0084cbba1acd465f803dbc957b3935257e311c13fc1ecf7ea5d3a8b1dad004e07829a398985ab3da28ab61fdeeb58e2d219b85179fe41fcd524ee7ee23e9f0488038f491e5cd27806c66e404ee2bed55aac8995e21d0fbc7dac52f6319e74a54c2f3a57734ba1b37309f203ffab26c7c0e6c841033ad269874380ff36c7064b0e0fc6e7bfe1cfe6ec2512246d67bb04218512f41e2051c551d15b6f706a615d2b5ac51811edd8ee0fdf47de52064a6c71f0ed413266257b0e5d32021b5a7f59125a99c0a98300c480424b4dbb16d30d472dcdab9e89bad8ffc6f41840928097300d260d22e10465dfe542f06b7dba744e73b8dbfa7b9955f772f88df0dc4ce3dfa2f7d13cdf4ae191f04f37472ab8dd868d71c12a2302869eb5b221dfc950cb2c3eeb81fde9f4b2f97f04a547ec82d6b4201b278bc1dc62075a786cd7b805a93ec368f04da9ffd5b8f1d334fab1f66953cc158b575fded476ad6cd12e55f5dd356255bec5e4f58830361f95b21c026f759422cc9cb4853df960f420c8816c8d31d66ce5f77f1543f417eccace6c07d2cc43edb7034f38456cb17f0729d3bbe7a18c43a612156ca3e731e23dcfda22adebdca4d7021bc27816b594bf9fb08ed8e5088635a8110c16e90dfedb4abe0079cc92b7a88e16d46395351c1ab8869798ebf25d2bcc739f42069b96f9834cdc10f4143ef4816a39c147533a69edd26f1cca7b70f72cf8f6ef835dc2728999f8e0be45c1c7bf307ca85b6a36a22cbf1a4114917ea394c34f19456a32b3f1464198f2d275ec4d891e93652592c43db16b72f32b5a1945fe104ff33b382ee543cf6475813d10698a294b57babd50da549dd7719f88b6382cc5d7d85177c384c2a84cc047239480b1dcdfe56ac23d43b36a09f10fceab5248f127c7b07fd30b21643ea6ea27e5e4387cea67e396ce096d7090d65b8d0b14d5c83f0bdbf1cde9e8a816942b2126c422d1e94f3a2813dc43806fdd25341723a4cf368108b9946ac6774fbfad4a8a707a7b93596a0d34a3510a0f899379778a5dfdc189a75a8a81748bb91dfde77b4c1e39f113620a0664e4a9086ab92d50e15a5948a08e328c70373fe10db7bca35e5174044cb55fdecc08f20b3b57056a4ac0f4fceba7b8f1b900cd626ee13c1c2d4e9c4fdf3983724572de72a619df97cd52effd79a815fe41f826bae6ab065495de5407c2ecc8290a3227af076d5379f0b46cba3ba6f1057b92312464e360b3da3ab2648c8b72568cd58dd48aacc8207e7563d55fea10092ac5891f2a0c36596d2eaaf9813f1c568b10cba2020fda758fe30e34db3b179080ffd7c35debe7e46bf3aa3eec78ac2023dfc5dd78e9e9e70bb9aa01206fcfda2fdeb2f503fff2d0cca8e1c89676288115d653a9252b93410985be6fab4535dca0aa24d752774a7dc6c2a2697208af845e3c5c2c4561a4fa91b8c12122f59fdae1869294e40f912f6ba4d26ffd344ed23cff1024ea93ec65b46b685e124a91aa9dcc82bf9df20093811f248a3208c171785098b855cb0d0990cc90a2ea753306be2282d286e40d610206133651b31103d0b114f03556a3334d8bcdd764855e52c30313e5f4c83412aa6d5dc82572491ec595d346b5e286f5772a54f7cebe3e649dce6e7fa6009815aa9c08c9faf1ae4eba95387d4b84257b587d7e9e35ba6e019a5b7440243f204300b92f65ee998cf2e41ed74863e5a21f1031ca8390633b31e2cb2b86259b7d6a98e799906ce2ac138d9ae8a304d1ab4419bed0a978164933a37915fa934d11777a856f255341143e4a113afa33df835f538e01ae4464d6996c0753f0576787681c62a2115b4a087c1d61f66fb91827b5d33ada5478b6c9b898b34ed0d2341e5ddf2ffec1c81f7e35fba8db0c52166a8af07ee0ad328d9242e50309b6b53c475928c9bea404f47c97eb672aed8cb334efbb5c4eb4c58340813b0f9322a7f2f90185c18f1a8dc4642b5ab50e4e3df9327ed39f694870de63021e92f84228f2ffb34313793331523183d77b401498869866689a9a827110efef46e04f1e2851d9bb5aac84418afee47934c10a7bad77b910f86d746b0cdf9f078416423b2cc3997d5ac395560e02b9c7066fa0b632edbcfcdffcbcf87a7cecd7d917ba12b03b2b1873c4b852e9956dd5446e1c18096dc3a15b88ba4b616bd2953e21d497e61ac4ef52fdcdee26f185f97832e4cbd9404e9322c764c2802b25385bd056f96fabe9f45eb50371caa138de8fec5d73fc667628e29d9faa07fefc1fdf207f2e839c94304d93e753b5e111f17f412f4f175937d812eaebe099a4cf5d1d7efc0ffd1ee3a0938dcc4ce913567c814c347db59457ae6ced20a2641e6f02f7dd74ab413d8cb39ef7299c50314fdb53b74a4d0e35fc9080d4b563a86458efa6594dc6f9a6e79b6c7bd1ec358313c0a15bd08575cc8526462883e9c6e950a77c47a7fe44e18a637d553599dd56fe649d585df71eb2b910a7aeba64154d67569574ef47b6cb036798e8c5b7ea29cba76c11940596d6b78495f162ed0d57970730b8af405729b1c35a8beea8e4ee5db7b3156a387d893ad5201d805d51612267c5a4b8096757abe77abb57d0a52d3eb2d343745bcb1bf003b22e5f7c8813d5dc58a5e7f0c10dddf0ae51c3f3ec1c3d46301a1ab20e07fce7bf4f422cb88b7a7ef8d33286b79fc2533bb4fb462ba121ecbf13edb62724d3b7db6de14402b2ccee30cf1c06b2d4f137de6bafe9c2e3546aaad3e9c6c2abc87d327ea45b29e37434df5d6e0089568f25593e78ba5825fb4457d047da7a2e95a3f7bb2f967075054fd0347d78776fcd0ae8d64210ad2b14aa5d8a96e4f877605d02e79da57741591df6959a85ea1e66fd2321e1ebb646d13ed2d68988ce4f316b02336a37c8da181187bc30bc57709111301a32ecebf2d0cbc93b345cb7113aa931cef6fa8883f5e1cdf55196fc17079498b5748f600b2929d7665aebf724538ae337b4d24d920417c98d552596f73463c76a814811f5e9194b75bdf15e84af3978689d255ebeb27c6805b201cdd3f64ee48d3d681e3d85f3b0dd9e0cc70633e41a9f777b7250da7cbd160d5d621118316cdedface63b915cdb8d43186c28fcd3d47e16b6e7be03338a2a026d6356dc15101ad25a3c3bd4f4760ead865ac02fa10f441f115f278219c254df45f85ece2830c40718aac6f2869b04b2330ccf1e3af70878a62f1d2d0c87d236d821852afe542c84edd7c71dacd441e3a8bbe7aee6d1d9848a500f3677981f9d822fb6ea9ee6d3209fbbdc9aba6d5842a589dc96d83ab303f9d63b9a4d13703a783e4175b8ff6668d35186e7933a2aed7049b527af42531989ddc7"}) 503.567526ms ago: executing program 1 (id=1077): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) socket$kcm(0x29, 0x0, 0x0) r2 = socket(0x1f, 0x1, 0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x27}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x301}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x20000001) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x2) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)={0x360, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3d0c8342bb7a3c19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x2ec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "07c1e587ba6ba5b2a15eb10fbd978faab5585febb819e26f84ed5ab867920801ac8f8d0281b8f02ed6dc88fc55ae2c6a40b1dcd009329a1a7edaaffe29e23e2e156d3615bde1368250a70ea4afb5160531ba01bb1b69defd19aa910b5aaa9998d0f62b3124c6f9daf4fbbb50cb83c4e0d1c0fb8e8e54c3bfef5b2dae9f3c19b294d9fb76bfb37e1c8498a58907cdba3779395be992346daddcf616a1400a4f296af2236e22a3b4f2021a3f07c0d5fb550c69fe1bd328e8b3139907cadd22206ae81be248faa68e"}, @ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "886ac41e3e39b7d04cbdd0aba31a8db7639df43553fc7ef63b009927b9b81d599807de4181bec3a80e6fdd4b95f3d7f6084f2aae11f0864293dfc75454f46f"}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}\xce]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/\'-!*)!&@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{!$\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa35c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "46e5241c6227595538ccd1507ce185ff4d2bf57f15902eb63af0bb2edeb799922d1ef58a167610af33bb50147930feb806520aa8a454c51140edf3611bf38066ebd465651717c8d0622c33acf216e0fac128a2ef9ef4661d90d1d329cc073a7d1cffd8bddd43d16055b0081dc56a221715dd51c2c73ada60f4a4f34802a428e9260b6f1292722b7a1005770537e11f072472d1cc8313715397f5178e88384f8b8fb5829dc6cf31aa826f208c4c3d742c19b7171f6f74272233351f232ee6f406c6ebca595fb4052be9dfabee3064f0fb8603e445e22a2e5c66649841198ac87720f3dee9f1be7edcd346ca5f9b0a5ed7bb53b5667ec4"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}]}, 0x360}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x17f96e33e07a0dd5, 0x9, 0x0, 0x3a2, 0x45, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x10, 0x4, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'syztnl0\x00', r6, 0x10, 0x80, 0x401, 0x9, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x64, 0x0, 0xc, 0x4, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x13, 0x6a, [@loopback, @private=0xa010101, @multicast1, @loopback]}, @rr={0x7, 0x1b, 0x97, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010100, @local, @local]}, @end, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x1b, 0x62, [@multicast1, @private=0xa010100, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote]}, @timestamp={0x44, 0x18, 0x50, 0x0, 0x8, [0x5, 0x10001, 0xf67, 0x3, 0x2]}]}}}}}) r7 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f0000000900)=0x7) r8 = accept$inet(r4, &(0x7f0000000940), &(0x7f0000000980)=0x10) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f00000009c0)={0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x8, 0x4, 0x4}, 0x2c) r9 = openat$cgroup_int(r4, &(0x7f0000000a00)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000a40)=0xfffffffffffffff1, 0x12) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000002180)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002140)={&(0x7f0000000ac0)={0x167c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x30c, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6faf76b6b73fcbf79eb744e2cdf1a0ceb57312996101bd3df6031d956ae79ae2"}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10000, @empty, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x218, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x4}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}]}]}, @WGDEVICE_A_PEERS={0x674, 0x8, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0xb}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2de7975aaccfd361546eaa2f68f42649d1c588b6c8a99d640d0f076756c23a0"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3da2840a30eac1643a9167a24fa8e9bfa263026a4dbe33d958007b5eb6833973"}]}, {0x388, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b1a74ee9711eb346383afa926632ba4b250cf4e5693aa9bd9c5a36b12094f515"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x31c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0xe}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0xc88, 0x8, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7dab671a033f23b462ffbaa94b331cca1a37f696ce84d3ef6dba24ebabb6a60c"}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0xe2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "07d8128c1b393500d5d4f32068af5a4b279b88492505b47830d29e25c06282be"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x87e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "710f06a49c0ac0596883f9d196fe92d741d50e2880da4624a0ee872f17318bb2"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x1d8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1a4, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8001, @remote, 0xfffff000}}]}, {0x104, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}]}, {0x560, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x154, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x9}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x167c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) getsockname$tipc(r8, &(0x7f00000021c0)=@id, &(0x7f0000002200)=0x10) socket$netlink(0x10, 0x3, 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002400)={r4, &(0x7f0000002240)="ec29becf4826c7af48272aa002383635a0d8082994c796a7032d4623ea16bf2483a978371472f058a2dcbb7e89ffeb2af88308c3b1ea64f8592445bd8eaae7451cdf1bf1e2b59908203035e6f8afd688bcf3c3608914d9a33e94e602c29cf4a22515b57e1e9019b3cda28d6db11e06a553f53c71a2192c93889fe29bc7adbf4ad55d8420df0f8f2c7649cce6e5a412e64dcf4c4f77ba9992725f1697af66", &(0x7f0000002300)=""/206, 0x4}, 0x20) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002440)={'macvlan0\x00', 0x400}) r11 = accept$phonet_pipe(r4, &(0x7f0000002480), &(0x7f00000024c0)=0x10) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, &(0x7f0000002500)=""/98, &(0x7f0000002580)=0x62) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r12) 336.742864ms ago: executing program 1 (id=1078): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000101401000000a129000000000000080001000000000008000300ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000007212bd700000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001214000427fd7000ffdbdf250800030004000000080001000200000008004f00030000000800030001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000020}, 0x10000040) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x2d8, 0xffffffff, 0x0, 0x1c0, 0x100, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x6, 0x1, 0x7], 0x3, 0x3}, {0x0, [0xb48aee625b326fc8, 0x1, 0x7, 0x0, 0x1], 0x3, 0x3}}}}, {{@ip={@rand_addr=0x64010102, @multicast2, 0xff000000, 0xff000000, 'macsec0\x00', 'wg2\x00', {0xff}, {}, 0x88, 0x1, 0x40}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "5cf1", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "cafa21f5ee8de663e968cabada9a9013ce6fddb4f19f5119e501cf6195a7"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket(0x1, 0x803, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000002800128009000100766c616e00000000180002800c0002000a0000000300000006000100000000000800f000", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x58}}, 0x0) 336.225093ms ago: executing program 4 (id=1079): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x5e, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYRESHEX=r0], 0x60}}, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x4000100) listen(r3, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a1f5100000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff00080003400000000c0c000b4000000000000000032c0000001e0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd2, &(0x7f0000000800)=""/210, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff10, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r6, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000300)=0x1000000) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x12, 0x0, &(0x7f0000000900)) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800e9ff0f003b15000000000000000000000000d8fb719baad42930d9430fc374e6310f3312bc11d2244312edad942ec841fefebf0fcd1aa877100c6f0899a99c3ef7a85b3fe2ca49aae623ac776982cc86dcdbfeee376f56", @ANYRES16=r5, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x844) r10 = accept4$tipc(r0, &(0x7f00000000c0)=@id, &(0x7f0000000080)=0x10, 0x80000) writev(r10, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="ad3af5d3b60e67d0bba368d5689902e77ddee2215b65c368011016b5682ca356", 0x20}, {&(0x7f0000000140)="54306b7e1528b4510164991eb313154c0847e64d13825d5b78cf028a8d98d436800b03d1ba5cfc35245bb57462ee4cd30fe919db3e795138ffbfea0d2dbc0e8e13347e034fa75ca73fc086d4db043ff63156a9ed5f723c2ff52294dd453847f707dcab167ca54b69117b3ccea6f28ef160ee6cbc85c966a792f6294f3167bdfd766a3f1c57b490a5c133e27c07d7c23ed623f31c467603b4befbffdcbc627d5ad87efd53611e4d262f52f0292d957a0968d3bb3e3a21a5ee5ae0c2114ad5e49a569650fc50b46b1cd6c753bea26ad6e10d9f0be0acf9929a92b058390f367dda824a135de39bbb", 0xe7}, {&(0x7f00000002c0)="09c0aeccd357c08c0295bf17", 0xc}, {&(0x7f0000000300)="23a4e659bea44a9989a8d49f22d0826b629887b067280cccfc", 0x19}, {&(0x7f0000000340)="5c86089d0190ef92a5bfbac0e4fb978e7486ca1d7cdfbbd1916c4b286f5ce8c5467e034cc7e1cc993b956e91d631c39843b8364d381a75d6497cd8fa477127f592b9d750bec9eb51c627b90d8f8c84f689a791f575a516d545d57028851a9ccdd4aebe7adc2c72e73e09b699988aa1ec4f20fea7c6132218103eb992ded3badabeb8ed54a44dd133522f27ff6f1444fd36ebdaa0912741d40f79377e8426ca123d975f9af6d91ff2edc997d0af6cd3586803fb5d5b8c1446fbcd55545c1ed0d54b4749", 0xc3}, {&(0x7f0000000440)="ea85b6d42c40f14f341920557134a377192fface3587e49071d18b96e260de31c9170fb4177ccf844aacc891b85edb2e521ea991d928c14ba8fac63efda7138c12aa3fb0f7898e505424b1869382b01d36a80c8778ad3fea14f398ff13903b61ff690b863f", 0x65}, {&(0x7f00000005c0)="2da469ae546ce6c9c949781eb6caf6999ac4a95a6e9f79db70ddb531d00866c5874faae3ba3be9dd7dfe67133001f3dda00653e52061f8ff33aeaa7c567b2c56d5f8c90ad31a30518e60341118a0b274c91b3e8820be92d341de269f51ee10e123623765f7adda7829d57248617ea85d73b63965e0fd346e6c791b078114299ba2705da6a8dbd6c47f1281de2a863d6cf29dbe1095f186abbe7c04f943bf9379768466f0097c03256cc247f5aa50330d95aa1dd5136c337f337cac55a6b38438f18f1eb1c63550075e5f91191dea370dbf6b52b6ec98", 0xd6}], 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000001300)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) (rerun: 64) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000580)={'lo\x00', 0x1000}) 252.757052ms ago: executing program 0 (id=1080): socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x108, 0x218, 0x308, 0x308, 0x108, 0x4, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'gre0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'virt_wifi0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @remote}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 141.145103ms ago: executing program 0 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@ipv4_newnexthop={0x2c, 0x68, 0xe01, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_FDB={0x4}, @NHA_ID={0x8}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x82b7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r3, 0x7103, 0x9}, 0x8) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x4}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r2, 0xb05}, 0x14}}, 0x0) 76.75674ms ago: executing program 4 (id=1082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000008a80)=[{&(0x7f00000086c0)=""/48, 0x30}, {&(0x7f0000001800)=""/202, 0xca}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000000640)=ANY=[], 0x120}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xd, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x4000050) 0s ago: executing program 0 (id=1083): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) syz_emit_ethernet(0x86, &(0x7f0000000240)={@link_local, @random, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x7, 0x70, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x8, 0x0, {0x15, 0x4, 0x1, 0x2, 0x4, 0x67, 0x1, 0x4, 0x6c, 0x1, @remote, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1b, 0x8b, [@empty, @empty, @broadcast, @loopback, @rand_addr=0x64010100, @multicast2]}, @ssrr={0x89, 0x13, 0x84, [@dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x35, [@multicast1]}, @lsrr={0x83, 0x3, 0xb7}, @timestamp={0x44, 0x8, 0x2a, 0x0, 0x6, [0x1000]}]}}}}}}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r5, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x7f, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x0, 0x1, 0xffc}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x5}, {"832fa89b9a36d09d54396573b506a51babfb8291ba40a8d9127a00f2f8ce2a6804216f9dd3d22a15adc76a701f12b7fc25f5caa00618d554faa05e78f7ef4cfb10"}}}}}}, 0x0) kernel console output (not intermixed with test programs): ge_slave_0: left allmulticast mode [ 204.759366][ T587] bridge_slave_0: left promiscuous mode [ 204.770705][ T587] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.977743][ T6442] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.197'. [ 205.073743][ T6447] ip6t_REJECT: ECHOREPLY is not supported [ 205.162850][ T4624] Bluetooth: hci1: command tx timeout [ 205.349555][ T6454] netlink: 'syz.0.199': attribute type 11 has an invalid length. [ 205.369369][ T6454] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 205.393452][ T6454] netlink: 191384 bytes leftover after parsing attributes in process `syz.0.199'. [ 205.632708][ T587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.648956][ T587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.661555][ T587] bond0 (unregistering): Released all slaves [ 205.727625][ T6452] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 205.930381][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.952084][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.982207][ T6377] bridge_slave_0: entered allmulticast mode [ 206.001039][ T6377] bridge_slave_0: entered promiscuous mode [ 206.177979][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.189299][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.200249][ T6377] bridge_slave_1: entered allmulticast mode [ 206.208163][ T6377] bridge_slave_1: entered promiscuous mode [ 206.253184][ T6469] netlink: 472 bytes leftover after parsing attributes in process `syz.3.203'. [ 206.270417][ T6469] netlink: 80 bytes leftover after parsing attributes in process `syz.3.203'. [ 206.318104][ T587] hsr_slave_0: left promiscuous mode [ 206.343017][ T587] hsr_slave_1: left promiscuous mode [ 206.366018][ T587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.401343][ T587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.436037][ T587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.468142][ T587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.537699][ T587] veth1_macvtap: left promiscuous mode [ 206.549545][ T587] veth0_macvtap: left promiscuous mode [ 206.561096][ T587] veth1_vlan: left promiscuous mode [ 206.566729][ T587] veth0_vlan: left promiscuous mode [ 207.242394][ T4624] Bluetooth: hci1: command 0x041b tx timeout [ 207.318616][ T587] team0 (unregistering): Port device team_slave_1 removed [ 207.366905][ T587] team0 (unregistering): Port device team_slave_0 removed [ 207.814493][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.832779][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.840827][ T6475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 207.864082][ T6481] netlink: 'syz.0.205': attribute type 5 has an invalid length. [ 207.944328][ T6377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.989819][ T6377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.205329][ T6516] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 208.221719][ T6377] team0: Port device team_slave_0 added [ 208.233534][ T6516] netlink: 'syz.0.212': attribute type 11 has an invalid length. [ 208.246331][ T6377] team0: Port device team_slave_1 added [ 208.252581][ T6516] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 208.261311][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.264891][ T6516] netlink: 191384 bytes leftover after parsing attributes in process `syz.0.212'. [ 208.323188][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.448787][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.489851][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.568996][ T6377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.598692][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.613163][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.662367][ T6377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.791703][ T6377] hsr_slave_0: entered promiscuous mode [ 208.817980][ T6377] hsr_slave_1: entered promiscuous mode [ 208.827570][ T6377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.839507][ T6377] Cannot create hsr debugfs directory [ 209.016773][ T6547] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 209.030240][ T6547] netlink: 17 bytes leftover after parsing attributes in process `syz.1.218'. [ 209.322474][ T5254] Bluetooth: hci1: command 0x041b tx timeout [ 210.363244][ T6599] Illegal XDP return value 4291358720 on prog (id 94) dev N/A, expect packet loss! [ 210.418643][ T6377] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.085630][ T6377] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.124949][ T6610] team0: entered promiscuous mode [ 211.130328][ T6610] team_slave_0: entered promiscuous mode [ 211.136652][ T6610] team_slave_1: entered promiscuous mode [ 211.143543][ T6611] team0: left promiscuous mode [ 211.148486][ T6611] team_slave_0: left promiscuous mode [ 211.155398][ T6611] team_slave_1: left promiscuous mode [ 211.163539][ T6615] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 211.182301][ T6617] netlink: 'syz.3.234': attribute type 4 has an invalid length. [ 211.244255][ T6620] batadv0: entered promiscuous mode [ 211.250067][ T6620] macsec1: entered promiscuous mode [ 211.264225][ T6620] macsec1: entered allmulticast mode [ 211.302342][ T6625] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.236'. [ 211.402892][ T5254] Bluetooth: hci1: command 0x041b tx timeout [ 211.413434][ T6620] batadv0: entered allmulticast mode [ 211.457105][ T6377] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.489455][ T6377] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.530019][ T6628] netlink: 56 bytes leftover after parsing attributes in process `syz.1.237'. [ 211.797408][ T6377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.886477][ T6377] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.979764][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.987108][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.027029][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.034489][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.260875][ T6664] netlink: 188 bytes leftover after parsing attributes in process `syz.1.246'. [ 212.295665][ T6664] netlink: 48 bytes leftover after parsing attributes in process `syz.1.246'. [ 212.351352][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'. [ 212.404511][ T6664] nbd: must specify at least one socket [ 212.965841][ T6687] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.993890][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'. [ 213.085701][ T6687] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.236518][ T6687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.378008][ T6377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.485110][ T5254] Bluetooth: hci1: command 0x041b tx timeout [ 213.502539][ T6723] netlink: 160 bytes leftover after parsing attributes in process `syz.0.256'. [ 213.528753][ T6723] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 213.538633][ T6723] netlink: 'syz.0.256': attribute type 2 has an invalid length. [ 213.546969][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.256'. [ 213.558854][ T6687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.619486][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'. [ 214.041768][ T6687] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.116106][ T6687] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.207429][ T6687] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.253183][ T6687] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.304156][ T6760] sctp: [Deprecated]: syz.2.261 (pid 6760) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.304156][ T6760] Use struct sctp_sack_info instead [ 214.375545][ T6377] veth0_vlan: entered promiscuous mode [ 214.440198][ T6377] veth1_vlan: entered promiscuous mode [ 214.478393][ T6768] bridge0: port 3(dummy0) entered blocking state [ 214.486252][ T6768] bridge0: port 3(dummy0) entered disabled state [ 214.493103][ T6768] dummy0: entered allmulticast mode [ 214.501323][ T6768] dummy0: entered promiscuous mode [ 214.507518][ T6768] bridge0: port 3(dummy0) entered blocking state [ 214.515313][ T6768] bridge0: port 3(dummy0) entered forwarding state [ 214.641265][ T6377] veth0_macvtap: entered promiscuous mode [ 214.653613][ T6377] veth1_macvtap: entered promiscuous mode [ 214.674631][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.686343][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.696782][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.708382][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.718438][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.728943][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.738929][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.749593][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.761045][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.815262][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.826308][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.836657][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.847559][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.857941][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.868700][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.879098][ T6377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.889993][ T6377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.902054][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.104085][ T6377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.113240][ T6377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.134853][ T6377] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.175929][ T6377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.620531][ T587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.674802][ T587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.739162][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 215.773716][ T6815] x_tables: duplicate underflow at hook 1 [ 215.905638][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.936095][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.139629][ T6827] netlink: 244 bytes leftover after parsing attributes in process `syz.1.274'. [ 216.307169][ T6834] sit0: entered promiscuous mode [ 216.344329][ T6834] netlink: 'syz.4.161': attribute type 1 has an invalid length. [ 216.358006][ T6834] netlink: 1 bytes leftover after parsing attributes in process `syz.4.161'. [ 216.486620][ T6842] FAULT_INJECTION: forcing a failure. [ 216.486620][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 216.533762][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.279'. [ 216.548820][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.1.276 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 216.559518][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.569652][ T6842] Call Trace: [ 216.572983][ T6842] [ 216.576006][ T6842] dump_stack_lvl+0x241/0x360 [ 216.580774][ T6842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.586024][ T6842] ? __pfx__printk+0x10/0x10 [ 216.590687][ T6842] ? __pfx_lock_release+0x10/0x10 [ 216.595874][ T6842] ? __lock_acquire+0x1384/0x2050 [ 216.600996][ T6842] should_fail_ex+0x3b0/0x4e0 [ 216.605742][ T6842] _copy_from_user+0x2f/0xe0 [ 216.610493][ T6842] kstrtouint_from_user+0xc6/0x190 [ 216.615669][ T6842] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 216.621451][ T6842] ? __pfx_lock_acquire+0x10/0x10 [ 216.626550][ T6842] proc_fail_nth_write+0xaa/0x2d0 [ 216.631650][ T6842] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 216.637606][ T6842] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.643320][ T6842] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.649393][ T6842] vfs_write+0x29c/0xc90 [ 216.653714][ T6842] ? __pfx_vfs_write+0x10/0x10 [ 216.658536][ T6842] ? __fget_files+0x3f3/0x470 [ 216.663271][ T6842] ? fdget_pos+0x24e/0x320 [ 216.667718][ T6842] ksys_write+0x183/0x2b0 [ 216.672071][ T6842] ? __pfx_ksys_write+0x10/0x10 [ 216.676976][ T6842] ? do_syscall_64+0x100/0x230 [ 216.681761][ T6842] ? do_syscall_64+0xb6/0x230 [ 216.686633][ T6842] do_syscall_64+0xf3/0x230 [ 216.691173][ T6842] ? clear_bhb_loop+0x35/0x90 [ 216.696087][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.702042][ T6842] RIP: 0033:0x7fdeff57cadf [ 216.706486][ T6842] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 216.727182][ T6842] RSP: 002b:00007fdf002b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 216.735743][ T6842] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdeff57cadf [ 216.743999][ T6842] RDX: 0000000000000001 RSI: 00007fdf002b70a0 RDI: 0000000000000004 [ 216.752082][ T6842] RBP: 00007fdf002b7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.760079][ T6842] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 216.768135][ T6842] R13: 0000000000000000 R14: 00007fdeff735f80 R15: 00007fffe2421478 [ 216.776177][ T6842] [ 217.216052][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 217.242962][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.251012][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.270004][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.285536][ T6871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.458642][ T6885] bridge0: port 2(bridge_slave_1) entered listening state [ 217.717448][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 217.717453][ T6889] can: request_module (can-proto-0) failed. [ 217.728400][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 217.766591][ T6892] syz_tun: entered promiscuous mode [ 217.775873][ T6892] macsec1: entered promiscuous mode [ 217.786141][ T6892] syz_tun: left promiscuous mode [ 217.928561][ T6901] hsr0: entered promiscuous mode [ 220.147758][ T6905] __nla_validate_parse: 3 callbacks suppressed [ 220.147783][ T6905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.292'. [ 220.192083][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 220.398076][ T6933] pim6reg1: entered promiscuous mode [ 220.406412][ T6935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.299'. [ 220.416360][ T6933] pim6reg1: entered allmulticast mode [ 220.429433][ T6935] unsupported nlmsg_type 40 [ 220.440501][ T6937] sctp: [Deprecated]: syz.4.300 (pid 6937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.440501][ T6937] Use struct sctp_sack_info instead [ 220.447699][ T6935] syz.2.299 (6935) used greatest stack depth: 19096 bytes left [ 220.673741][ T6953] netlink: 52 bytes leftover after parsing attributes in process `syz.4.305'. [ 220.762158][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 220.978810][ T6964] syz_tun: entered promiscuous mode [ 221.045722][ T6964] batadv_slave_0: entered promiscuous mode [ 221.061185][ T6964] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.073613][ T6964] hsr1: entered allmulticast mode [ 221.079069][ T6964] syz_tun: entered allmulticast mode [ 221.101947][ T6964] batadv_slave_0: entered allmulticast mode [ 221.217949][ T6966] netlink: 'syz.1.308': attribute type 29 has an invalid length. [ 221.231539][ T6974] netlink: 'syz.1.308': attribute type 29 has an invalid length. [ 221.286738][ T6974] netlink: 'syz.1.308': attribute type 29 has an invalid length. [ 221.313457][ T6966] netlink: 'syz.1.308': attribute type 29 has an invalid length. [ 221.345570][ T6977] netlink: 'syz.1.308': attribute type 29 has an invalid length. [ 221.748360][ T3058] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.836782][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'. [ 224.744247][ T7077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.870275][ T7082] netlink: 830 bytes leftover after parsing attributes in process `syz.0.340'. [ 225.135534][ T7095] ebt_among: dst integrity fail: 200 [ 225.472440][ T7107] netlink: 'syz.3.348': attribute type 10 has an invalid length. [ 225.566780][ T7107] netlink: 'syz.3.348': attribute type 11 has an invalid length. [ 225.591796][ T7107] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 225.633113][ T7107] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.348'. [ 225.789485][ T7124] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 225.821736][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'. [ 225.833422][ T7125] netlink: 'syz.2.352': attribute type 10 has an invalid length. [ 225.844323][ T7126] sctp: [Deprecated]: syz.0.353 (pid 7126) Use of int in max_burst socket option deprecated. [ 225.844323][ T7126] Use struct sctp_assoc_value instead [ 225.888577][ T7125] team0: Port device team_slave_0 removed [ 225.889278][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 225.920744][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 226.400108][ T7140] netlink: 468 bytes leftover after parsing attributes in process `syz.1.360'. [ 226.427881][ T7142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.433565][ T7140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 226.585817][ T7146] vcan0 speed is unknown, defaulting to 1000 [ 226.598708][ T7146] vcan0 speed is unknown, defaulting to 1000 [ 226.608378][ T7146] vcan0 speed is unknown, defaulting to 1000 [ 226.844315][ T7154] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 226.874623][ T7154] netlink: 'syz.3.364': attribute type 11 has an invalid length. [ 226.892889][ T7154] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 226.900610][ T7154] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.364'. [ 226.939121][ T7146] infiniband syz1: set active [ 226.945458][ T5289] vcan0 speed is unknown, defaulting to 1000 [ 226.956773][ T7146] infiniband syz1: added vcan0 [ 227.052967][ T7162] macvlan0: entered allmulticast mode [ 227.058505][ T7162] veth1_vlan: entered allmulticast mode [ 227.112830][ T7146] RDS/IB: syz1: added [ 227.116925][ T7146] smc: adding ib device syz1 with port count 1 [ 227.132189][ T7146] smc: ib device syz1 port 1 has pnetid [ 227.241218][ T7146] vcan0 speed is unknown, defaulting to 1000 [ 227.248253][ T46] vcan0 speed is unknown, defaulting to 1000 [ 227.469442][ T7183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.582141][ T7186] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 227.607371][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 227.645670][ T7146] vcan0 speed is unknown, defaulting to 1000 [ 227.969824][ T7146] vcan0 speed is unknown, defaulting to 1000 [ 228.033974][ T7205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.377'. [ 228.238580][ T7146] vcan0 speed is unknown, defaulting to 1000 [ 228.254661][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 228.573703][ T7146] vcan0 speed is unknown, defaulting to 1000 [ 228.962222][ T7240] vcan0 speed is unknown, defaulting to 1000 [ 229.103389][ T7256] netlink: 'syz.1.391': attribute type 2 has an invalid length. [ 229.114140][ T7256] netlink: 'syz.1.391': attribute type 2 has an invalid length. [ 229.141521][ T7256] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 229.157360][ T7250] IPv6: NLM_F_REPLACE set, but no existing node found! [ 229.472309][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.803268][ T7277] x_tables: duplicate underflow at hook 2 [ 230.205726][ T7286] vcan0 speed is unknown, defaulting to 1000 [ 230.722296][ T7308] x_tables: duplicate underflow at hook 1 [ 231.536984][ T7341] __nla_validate_parse: 5 callbacks suppressed [ 231.537005][ T7341] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.417'. [ 231.947884][ T7354] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 232.021799][ T7359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.419'. [ 232.094701][ T3058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.122074][ T3058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.566646][ T7386] netlink: 124 bytes leftover after parsing attributes in process `syz.4.433'. [ 232.579673][ T7386] tipc: Started in network mode [ 232.585068][ T7386] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 232.593065][ T7386] tipc: Enabled bearer , priority 0 [ 232.606867][ T7387] netlink: 124 bytes leftover after parsing attributes in process `syz.4.433'. [ 232.642415][ T7387] tipc: Enabling of bearer rejected, already enabled [ 232.863050][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 232.872642][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 232.911593][ T7408] ipvlan2: entered allmulticast mode [ 232.922175][ T7408] veth0_vlan: entered allmulticast mode [ 232.944051][ T7407] IPv6: sit1: Disabled Multicast RS [ 232.967552][ T7404] vcan0 speed is unknown, defaulting to 1000 [ 233.082558][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.376157][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 233.724317][ T5291] tipc: Node number set to 10922666 [ 233.816108][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 233.870602][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 234.076606][ T7442] tipc: Enabled bearer , priority 10 [ 234.461537][ T7452] netlink: 48 bytes leftover after parsing attributes in process `syz.2.455'. [ 234.547204][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 234.768589][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.843604][ T7474] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 234.952693][ T7478] validate_nla: 2 callbacks suppressed [ 234.952714][ T7478] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 234.995184][ T7478] netlink: 'syz.3.462': attribute type 2 has an invalid length. [ 235.018690][ T7478] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 235.640558][ T7527] vcan0 speed is unknown, defaulting to 1000 [ 235.703852][ T7531] gre1: entered promiscuous mode [ 235.717361][ T7531] gre1: entered allmulticast mode [ 237.034207][ T7581] netlink: 'syz.2.495': attribute type 11 has an invalid length. [ 237.297417][ T7593] __nla_validate_parse: 3 callbacks suppressed [ 237.297449][ T7593] netlink: 132 bytes leftover after parsing attributes in process `syz.1.500'. [ 237.573471][ T7614] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 237.584952][ T7614] netlink: 224 bytes leftover after parsing attributes in process `syz.3.503'. [ 237.754813][ T7618] vcan0 speed is unknown, defaulting to 1000 [ 238.037995][ T7631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.507'. [ 238.058977][ T7628] xt_connbytes: Forcing CT accounting to be enabled [ 238.074959][ T7628] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 238.090968][ T7628] xt_bpf: check failed: parse error [ 238.433898][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 238.614651][ T7652] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.636145][ T7652] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.803052][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 238.835332][ T7665] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 238.973972][ T7670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.520'. [ 239.028210][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 239.044754][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 239.058432][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 239.070218][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 239.213472][ T7678] wireguard0: entered promiscuous mode [ 239.229455][ T7678] wireguard0: entered allmulticast mode [ 239.304464][ T7684] syz_tun: entered promiscuous mode [ 239.319994][ T7684] batadv_slave_0: entered promiscuous mode [ 239.328878][ T7684] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 239.352314][ T7684] Cannot create hsr debugfs directory [ 239.518644][ T46] IPVS: starting estimator thread 0... [ 239.622044][ T7695] IPVS: using max 18 ests per chain, 43200 per kthread [ 239.682154][ T7703] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 239.702213][ T7703] netlink: 'syz.1.530': attribute type 2 has an invalid length. [ 241.077653][ T7764] syzkaller1: entered promiscuous mode [ 241.102388][ T7764] syzkaller1: entered allmulticast mode [ 241.612977][ T7792] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.799797][ T7800] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 242.293083][ T7826] netlink: 'syz.2.563': attribute type 9 has an invalid length. [ 242.306398][ T7826] __nla_validate_parse: 10 callbacks suppressed [ 242.306420][ T7826] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.563'. [ 242.369821][ T7827] netlink: 'syz.2.563': attribute type 9 has an invalid length. [ 242.380250][ T7827] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.563'. [ 243.160436][ T7861] netlink: 'syz.4.573': attribute type 4 has an invalid length. [ 243.686244][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.579'. [ 244.044050][ T7891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.582'. [ 244.096318][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.583'. [ 244.120753][ T7888] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.219739][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 244.312406][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.581'. [ 244.606783][ T7907] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 244.993626][ T7927] netlink: 76 bytes leftover after parsing attributes in process `syz.1.589'. [ 245.010588][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.592'. [ 245.022303][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.592'. [ 245.125725][ T7927] ÊüðÿG: entered promiscuous mode [ 245.191245][ T7918] vcan0 speed is unknown, defaulting to 1000 [ 245.257768][ T7940] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 245.267528][ T7940] bridge0: port 3(dummy0) entered disabled state [ 245.274157][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.281816][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.302725][ T7940] bridge0: port 3(dummy0) entered blocking state [ 245.309268][ T7940] bridge0: port 3(dummy0) entered forwarding state [ 245.316155][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.323591][ T7940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.331050][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.338339][ T7940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.379650][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.395328][ T7940] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 245.619577][ T7945] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 245.640449][ T7945] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 246.639258][ T7975] IPv6: NLM_F_REPLACE set, but no existing node found! [ 246.655947][ T7978] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 246.683675][ T7978] x_tables: duplicate underflow at hook 2 [ 246.952448][ T7995] vcan0 speed is unknown, defaulting to 1000 [ 247.335411][ T8005] __nla_validate_parse: 4 callbacks suppressed [ 247.335437][ T8005] netlink: 56 bytes leftover after parsing attributes in process `syz.3.614'. [ 247.516872][ T7994] vcan0 speed is unknown, defaulting to 1000 [ 268.632861][ T5249] Bluetooth: hci5: command 0x0406 tx timeout [ 268.638964][ T5249] Bluetooth: hci7: command 0x0406 tx timeout [ 268.645172][ T5249] Bluetooth: hci9: command 0x0406 tx timeout [ 309.722227][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.732482][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.741912][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.831464][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.873005][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.882316][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.134576][ T4624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.148267][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.166058][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.177100][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.190536][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.198805][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.206687][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 310.215565][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.262069][ T4624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.271109][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.281228][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.292997][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.303728][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.311006][ T5253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.311592][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 310.326418][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.334837][ T5253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.343233][ T5253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.375789][ T5253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.390563][ T7499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.393274][ T5253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.420047][ T5253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.444244][ T5253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.455599][ T5253] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 310.471580][ T5253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.540580][ T5966] syz_tun (unregistering): left promiscuous mode [ 310.579440][ T5973] syz_tun (unregistering): left promiscuous mode [ 310.648403][ T7499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.665319][ T8037] vcan0 speed is unknown, defaulting to 1000 [ 310.763524][ T7499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.808660][ T8046] vcan0 speed is unknown, defaulting to 1000 [ 310.868795][ T7499] bond0: (slave netdevsim0): Releasing backup interface [ 310.880227][ T7499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.959110][ T8044] vcan0 speed is unknown, defaulting to 1000 [ 311.066588][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 311.103287][ T7499] bridge_slave_1: left allmulticast mode [ 311.109588][ T7499] bridge_slave_1: left promiscuous mode [ 311.115592][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.125191][ T7499] bridge_slave_0: left allmulticast mode [ 311.130890][ T7499] bridge_slave_0: left promiscuous mode [ 311.136867][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.526779][ T7499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.541242][ T7499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.555775][ T7499] bond0 (unregistering): Released all slaves [ 311.566758][ T8041] vcan0 speed is unknown, defaulting to 1000 [ 311.659583][ T7499] ÊüðÿG: left promiscuous mode [ 311.723728][ T8040] vcan0 speed is unknown, defaulting to 1000 [ 311.785378][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.803449][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.810841][ T8037] bridge_slave_0: entered allmulticast mode [ 311.826671][ T8037] bridge_slave_0: entered promiscuous mode [ 311.882925][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.890552][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.898637][ T8037] bridge_slave_1: entered allmulticast mode [ 311.906244][ T8037] bridge_slave_1: entered promiscuous mode [ 312.013927][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.026065][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.202238][ T5254] Bluetooth: hci2: command tx timeout [ 312.212513][ T8037] team0: Port device team_slave_0 added [ 312.220680][ T8037] team0: Port device team_slave_1 added [ 312.243030][ T7499] hsr_slave_0: left promiscuous mode [ 312.249033][ T7499] hsr_slave_1: left promiscuous mode [ 312.262743][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.270360][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.279252][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.287064][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.306400][ T7499] veth1_macvtap: left promiscuous mode [ 312.312122][ T7499] veth0_macvtap: left promiscuous mode [ 312.317701][ T7499] veth1_vlan: left promiscuous mode [ 312.323418][ T7499] veth0_vlan: left promiscuous mode [ 312.362471][ T5254] Bluetooth: hci0: command tx timeout [ 312.368700][ T5254] Bluetooth: hci3: command tx timeout [ 312.375185][ T5253] Bluetooth: hci4: command tx timeout [ 312.419145][ T7499] infiniband syz1: set down [ 312.525401][ T5253] Bluetooth: hci5: command tx timeout [ 312.808329][ T7499] team0 (unregistering): Port device team_slave_1 removed [ 312.857191][ T7499] team0 (unregistering): Port device team_slave_0 removed [ 313.291194][ T7498] smc: removing ib device syz1 [ 313.516817][ T5288] vcan0 speed is unknown, defaulting to 1000 [ 313.591206][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.598765][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.664695][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.726873][ T8046] chnl_net:caif_netlink_parms(): no params data found [ 313.798840][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.831035][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.879467][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.289239][ T5253] Bluetooth: hci2: command tx timeout [ 314.306809][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 314.343905][ T8041] chnl_net:caif_netlink_parms(): no params data found [ 314.389837][ T8037] hsr_slave_0: entered promiscuous mode [ 314.418478][ T8037] hsr_slave_1: entered promiscuous mode [ 314.425312][ T8037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.439918][ T8037] Cannot create hsr debugfs directory [ 314.445648][ T5253] Bluetooth: hci4: command tx timeout [ 314.451087][ T5253] Bluetooth: hci3: command tx timeout [ 314.456801][ T5253] Bluetooth: hci0: command tx timeout [ 314.586588][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 314.602009][ T5249] Bluetooth: hci5: command tx timeout [ 314.644484][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.652134][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.659413][ T8046] bridge_slave_0: entered allmulticast mode [ 314.672721][ T8046] bridge_slave_0: entered promiscuous mode [ 314.721729][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.729060][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.736502][ T8046] bridge_slave_1: entered allmulticast mode [ 314.744168][ T8046] bridge_slave_1: entered promiscuous mode [ 314.860085][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.872084][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.879355][ T8041] bridge_slave_0: entered allmulticast mode [ 314.886440][ T8041] bridge_slave_0: entered promiscuous mode [ 314.906624][ T7499] IPVS: stop unused estimator thread 0... [ 314.928685][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.939586][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.947671][ T8044] bridge_slave_0: entered allmulticast mode [ 314.955180][ T8044] bridge_slave_0: entered promiscuous mode [ 314.964829][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.981963][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.989171][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.998407][ T8041] bridge_slave_1: entered allmulticast mode [ 315.005467][ T8041] bridge_slave_1: entered promiscuous mode [ 315.027454][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.034703][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.042103][ T8040] bridge_slave_0: entered allmulticast mode [ 315.049255][ T8040] bridge_slave_0: entered promiscuous mode [ 315.056564][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.070128][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.077832][ T8044] bridge_slave_1: entered allmulticast mode [ 315.084956][ T8044] bridge_slave_1: entered promiscuous mode [ 315.094040][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.134622][ T8046] team0: Port device team_slave_0 added [ 315.153939][ T8041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.173122][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.180280][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.193788][ T8040] bridge_slave_1: entered allmulticast mode [ 315.202321][ T8040] bridge_slave_1: entered promiscuous mode [ 315.236310][ T8046] team0: Port device team_slave_1 added [ 315.244592][ T8041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.288637][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.351720][ T8041] team0: Port device team_slave_0 added [ 315.396621][ T8037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.418384][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.434501][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.489474][ T7499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.510750][ T8041] team0: Port device team_slave_1 added [ 315.528396][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.578059][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.585979][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.613832][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.626630][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.634602][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.661437][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.706648][ T8037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.748308][ T7499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.781681][ T8040] team0: Port device team_slave_0 added [ 315.797205][ T8044] team0: Port device team_slave_0 added [ 315.868126][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.875430][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.903107][ T8041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.940252][ T8037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.958296][ T8040] team0: Port device team_slave_1 added [ 315.981121][ T7499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.996876][ T8044] team0: Port device team_slave_1 added [ 316.027099][ T8046] hsr_slave_0: entered promiscuous mode [ 316.040359][ T8046] hsr_slave_1: entered promiscuous mode [ 316.047341][ T8046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.055447][ T8046] Cannot create hsr debugfs directory [ 316.061529][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.068752][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.095730][ T8041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.144973][ T8037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.169162][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.177255][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.204950][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.234509][ T7499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.280428][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.287945][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.318290][ T8040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.330737][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.338613][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.371935][ T5249] Bluetooth: hci2: command tx timeout [ 316.378223][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.412745][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.419778][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.450246][ T8040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.521355][ T8041] hsr_slave_0: entered promiscuous mode [ 316.522172][ T5249] Bluetooth: hci3: command tx timeout [ 316.527511][ T5253] Bluetooth: hci4: command tx timeout [ 316.532550][ T5249] Bluetooth: hci0: command tx timeout [ 316.550360][ T8041] hsr_slave_1: entered promiscuous mode [ 316.557109][ T8041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.571962][ T8041] Cannot create hsr debugfs directory [ 316.674705][ T8044] hsr_slave_0: entered promiscuous mode [ 316.681186][ T8044] hsr_slave_1: entered promiscuous mode [ 316.688025][ T8044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.696264][ T5253] Bluetooth: hci5: command tx timeout [ 316.702214][ T8044] Cannot create hsr debugfs directory [ 316.774698][ T8040] hsr_slave_0: entered promiscuous mode [ 316.781203][ T8040] hsr_slave_1: entered promiscuous mode [ 316.788331][ T8040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.796142][ T8040] Cannot create hsr debugfs directory [ 316.867970][ T8037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.917679][ T7499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.982542][ T8037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.993201][ T8037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.039539][ T7499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.088910][ T8037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.158586][ T7499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.252697][ T7499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.409922][ T7499] bridge_slave_1: left allmulticast mode [ 317.418271][ T7499] bridge_slave_1: left promiscuous mode [ 317.424529][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.434227][ T7499] bridge_slave_0: left allmulticast mode [ 317.439930][ T7499] bridge_slave_0: left promiscuous mode [ 317.446888][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.463582][ T7499] dummy0: left allmulticast mode [ 317.468640][ T7499] dummy0: left promiscuous mode [ 317.474801][ T7499] bridge0: port 3(dummy0) entered disabled state [ 317.492738][ T7499] bridge_slave_1: left allmulticast mode [ 317.498472][ T7499] bridge_slave_1: left promiscuous mode [ 317.507054][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.522529][ T7499] bridge_slave_0: left allmulticast mode [ 317.528248][ T7499] bridge_slave_0: left promiscuous mode [ 317.534647][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.546385][ T7499] tipc: Resetting bearer [ 318.027496][ T7499] tipc: Disabling bearer [ 318.078764][ T7499] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 318.229221][ T7499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.241132][ T7499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.256131][ T7499] bond0 (unregistering): Released all slaves [ 318.390152][ T7499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.401502][ T7499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.416153][ T7499] bond0 (unregistering): Released all slaves [ 318.442056][ T5253] Bluetooth: hci2: command tx timeout [ 318.550958][ T7499] tipc: Disabling bearer [ 318.563120][ T7499] tipc: Left network mode [ 318.567607][ T8046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 318.602203][ T5253] Bluetooth: hci0: command tx timeout [ 318.607752][ T5253] Bluetooth: hci3: command tx timeout [ 318.613218][ T5254] Bluetooth: hci4: command tx timeout [ 318.627527][ T8044] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.690341][ T8046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 318.712083][ T8046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.734188][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.745327][ T8044] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.759572][ T8046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 318.766579][ T5253] Bluetooth: hci5: command tx timeout [ 318.824976][ T8044] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.883649][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.921686][ T8044] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.944048][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.951182][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.017961][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.025150][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.176576][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.236858][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.280467][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.287856][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.327994][ T8044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.352134][ T8044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.485863][ T8044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.512178][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.519379][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.533776][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.541389][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.550188][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.557999][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.568230][ T7499] batadv_slave_0: left promiscuous mode [ 319.582064][ T7499] hsr_slave_0: left promiscuous mode [ 319.588290][ T7499] hsr_slave_1: left promiscuous mode [ 319.594568][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.602897][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.610821][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.618480][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.649246][ T7499] veth1_macvtap: left promiscuous mode [ 319.655184][ T7499] veth0_macvtap: left promiscuous mode [ 319.660768][ T7499] veth1_vlan: left promiscuous mode [ 319.666352][ T7499] veth0_vlan: left promiscuous mode [ 319.672888][ T7499] batadv0: left allmulticast mode [ 319.678077][ T7499] batadv0: left promiscuous mode [ 319.684719][ T7499] veth1_macvtap: left promiscuous mode [ 319.690272][ T7499] veth0_macvtap: left promiscuous mode [ 319.695999][ T7499] veth1_vlan: left promiscuous mode [ 319.701378][ T7499] veth0_vlan: left promiscuous mode [ 320.325698][ T7499] team0 (unregistering): Port device team_slave_1 removed [ 320.376114][ T7499] team0 (unregistering): Port device team_slave_0 removed [ 321.230282][ T7499] team0 (unregistering): Port device team_slave_1 removed [ 321.283189][ T7499] team0 (unregistering): Port device team_slave_0 removed [ 321.782834][ T8044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.908456][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.131089][ T8037] veth0_vlan: entered promiscuous mode [ 322.191248][ T8040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.241050][ T8040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.295360][ T8037] veth1_vlan: entered promiscuous mode [ 322.319896][ T8040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.344773][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.424344][ T8040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.465431][ T8044] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.527097][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.534312][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.549805][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.557142][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.669469][ T8037] veth0_macvtap: entered promiscuous mode [ 322.724139][ T8037] veth1_macvtap: entered promiscuous mode [ 322.741400][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.841325][ T8041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.887687][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.899932][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.913436][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.936639][ T8041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.965491][ T8041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.005449][ T8041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.049695][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.071152][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.083721][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.131683][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.175430][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.198812][ T8037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.216333][ T8037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.228458][ T8037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.238002][ T8037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.278853][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.286074][ T7498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.310599][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.331320][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.339332][ T7498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.380452][ T8041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.417846][ T8041] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.469850][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.477040][ T7507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.525386][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.532575][ T7507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.608164][ T8044] veth0_vlan: entered promiscuous mode [ 323.615861][ T7498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.630285][ T7498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.656540][ T8046] veth0_vlan: entered promiscuous mode [ 323.729482][ T8044] veth1_vlan: entered promiscuous mode [ 323.740868][ T8046] veth1_vlan: entered promiscuous mode [ 323.763656][ T2922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.771562][ T2922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.876154][ T8044] veth0_macvtap: entered promiscuous mode [ 323.918401][ T8046] veth0_macvtap: entered promiscuous mode [ 323.958631][ T8044] veth1_macvtap: entered promiscuous mode [ 323.984746][ T8046] veth1_macvtap: entered promiscuous mode [ 324.067643][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.081742][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.092982][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.103501][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.115545][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.135186][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.147591][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.152526][ T8110] xt_TCPMSS: Only works on TCP SYN packets [ 324.164413][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.164420][ T8111] xt_TCPMSS: Only works on TCP SYN packets [ 324.164438][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.193971][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.206933][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.225753][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.241358][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.260203][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.270640][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.289328][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.303459][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.317961][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.378144][ T8044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.391337][ T8044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.401480][ T8044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.411369][ T8044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.429353][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.440808][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.461886][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.472520][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.486319][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.496952][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.508417][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.524076][ T8041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.556470][ T8046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.565926][ T8046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.581486][ T8046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.591624][ T8046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.729335][ T8118] netlink: 'syz.2.629': attribute type 5 has an invalid length. [ 324.816324][ T8040] veth0_vlan: entered promiscuous mode [ 324.871215][ T8040] veth1_vlan: entered promiscuous mode [ 324.904312][ T7498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.912510][ T7498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.957210][ T8041] veth0_vlan: entered promiscuous mode [ 324.976713][ T7498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.002994][ T7498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.014636][ T8040] veth0_macvtap: entered promiscuous mode [ 325.034856][ T8041] veth1_vlan: entered promiscuous mode [ 325.050771][ T7507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.062610][ T7507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.084675][ T8040] veth1_macvtap: entered promiscuous mode [ 325.147585][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.168197][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.182779][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.200117][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.210968][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.225551][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.237490][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.248731][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.261562][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.304545][ T7507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.305512][ T8041] veth0_macvtap: entered promiscuous mode [ 325.333031][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.341997][ T7507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.347366][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.368919][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.385120][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.396670][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.407395][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.418138][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.429004][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.444543][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.456707][ T8126] IPv6: Can't replace route, no match found [ 325.483570][ T8040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.497994][ T8040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.508321][ T8040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.517512][ T8040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.555296][ T8041] veth1_macvtap: entered promiscuous mode [ 325.617385][ T8130] Bluetooth: MGMT ver 1.23 [ 325.661714][ T7498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.663110][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.680390][ T7498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.690571][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.702119][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.712987][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.732592][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.743671][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.756126][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.766871][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.776846][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.787619][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.799349][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.851039][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.863452][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.873964][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.885795][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.896042][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.906879][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.917167][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.928053][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.939817][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.956615][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.970694][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.000483][ T8041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.010943][ T8041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.021245][ T8041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.030614][ T8041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.044801][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.066077][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.075886][ T8141] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 326.119001][ T8140] netlink: 'syz.4.635': attribute type 11 has an invalid length. [ 326.132868][ T8140] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 326.140696][ T8140] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.635'. [ 326.217890][ T8128] Bluetooth: hci3: Opcode 0x0c20 failed: -4 [ 326.237199][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.260871][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.288187][ T8143] netlink: 'syz.0.622': attribute type 20 has an invalid length. [ 326.347691][ T7510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.380580][ T8146] netlink: 'syz.2.636': attribute type 10 has an invalid length. [ 326.387361][ T7510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.390592][ T8146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.432229][ T8146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.480221][ T8146] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 326.557769][ T8146] netlink: 'syz.2.636': attribute type 10 has an invalid length. [ 326.602286][ T8152] netlink: 104 bytes leftover after parsing attributes in process `syz.3.638'. [ 326.678062][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.638'. [ 326.711658][ T8146] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 327.069907][ T8170] netlink: 'syz.1.642': attribute type 7 has an invalid length. [ 327.139251][ T8163] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 327.562897][ T5249] Bluetooth: hci3: command 0x0c20 tx timeout [ 327.643154][ T5253] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 327.643242][ T5249] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.686375][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.152480][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 328.533807][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'. [ 328.599717][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 328.692037][ T8195] netlink: 'syz.4.649': attribute type 2 has an invalid length. [ 328.795616][ T8] IPVS: starting estimator thread 0... [ 328.892141][ T8196] IPVS: using max 19 ests per chain, 45600 per kthread [ 328.904586][ T8199] xt_hashlimit: overflow, rate too high: 0 [ 328.963976][ T8199] netlink: 312 bytes leftover after parsing attributes in process `syz.1.650'. [ 329.036160][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 329.143795][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.651'. [ 329.437918][ T8217] x_tables: duplicate underflow at hook 3 [ 329.465303][ T8218] netlink: 'syz.3.654': attribute type 12 has an invalid length. [ 329.495287][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.655'. [ 329.674805][ T8217] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 329.714594][ T8217] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 330.168965][ T8233] netlink: 'syz.4.661': attribute type 9 has an invalid length. [ 330.200923][ T8233] netlink: 'syz.4.661': attribute type 7 has an invalid length. [ 330.266870][ T8233] netlink: 'syz.4.661': attribute type 8 has an invalid length. [ 330.281272][ T8237] vlan2: entered promiscuous mode [ 330.312854][ T8237] bond0: entered promiscuous mode [ 330.318485][ T8237] bond_slave_0: entered promiscuous mode [ 330.329440][ T8237] bond_slave_1: entered promiscuous mode [ 330.378036][ T8237] batadv_slave_0: entered promiscuous mode [ 330.407861][ T8237] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 330.423041][ T8237] vlan2: entered allmulticast mode [ 330.428664][ T8237] bond0: entered allmulticast mode [ 330.434936][ T8237] bond_slave_0: entered allmulticast mode [ 330.440966][ T8237] bond_slave_1: entered allmulticast mode [ 330.448110][ T8237] batadv_slave_0: entered allmulticast mode [ 330.454659][ T8237] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 330.479661][ T8237] bond0: left allmulticast mode [ 330.490196][ T8237] bond_slave_0: left allmulticast mode [ 330.498940][ T8237] bond_slave_1: left allmulticast mode [ 330.510014][ T8237] batadv_slave_0: left allmulticast mode [ 330.519218][ T8237] mac80211_hwsim hwsim36 wlan1: left allmulticast mode [ 330.537472][ T8237] bond0: left promiscuous mode [ 330.545651][ T8237] bond_slave_0: left promiscuous mode [ 330.551424][ T8237] bond_slave_1: left promiscuous mode [ 330.566943][ T8237] batadv_slave_0: left promiscuous mode [ 330.575701][ T8237] mac80211_hwsim hwsim36 wlan1: left promiscuous mode [ 330.645061][ T8242] caif0: Master is either lo or non-ether device [ 331.060895][ T8256] netlink: 'syz.0.669': attribute type 10 has an invalid length. [ 331.179328][ T8256] team0: Port device wlan1 added [ 331.230096][ T8264] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 331.603063][ T8289] __nla_validate_parse: 3 callbacks suppressed [ 331.603085][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'. [ 331.662710][ T8289] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 331.675341][ T8293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.704805][ T8289] netlink: 'syz.1.676': attribute type 11 has an invalid length. [ 331.719125][ T8289] netlink: 'syz.1.676': attribute type 1 has an invalid length. [ 331.768915][ T8289] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.676'. [ 331.889585][ T8300] tipc: Can't bind to reserved service type 2 [ 332.385081][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.687'. [ 332.412688][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.687'. [ 332.425548][ T8324] netlink: 'syz.4.687': attribute type 4 has an invalid length. [ 332.449720][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.687'. [ 332.471880][ T8324] netlink: 244 bytes leftover after parsing attributes in process `syz.4.687'. [ 332.495386][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.687'. [ 332.792760][ T8336] xt_policy: neither incoming nor outgoing policy selected [ 332.851997][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 333.136255][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.699'. [ 333.145733][ T8365] lo speed is unknown, defaulting to 1000 [ 333.155568][ T8364] netlink: 'syz.1.695': attribute type 29 has an invalid length. [ 333.198767][ T8360] netlink: 'syz.1.695': attribute type 29 has an invalid length. [ 333.210267][ T8365] lo speed is unknown, defaulting to 1000 [ 333.229189][ T8365] lo speed is unknown, defaulting to 1000 [ 333.237267][ T8368] netlink: 191384 bytes leftover after parsing attributes in process `syz.0.699'. [ 333.244633][ T8365] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 333.253835][ T5253] Bluetooth: hci0: command 0x0c1a tx timeout [ 333.260204][ T5249] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 333.287419][ T8365] lo speed is unknown, defaulting to 1000 [ 333.295045][ T8365] lo speed is unknown, defaulting to 1000 [ 333.302501][ T8365] lo speed is unknown, defaulting to 1000 [ 333.309483][ T8365] lo speed is unknown, defaulting to 1000 [ 333.316721][ T8365] lo speed is unknown, defaulting to 1000 [ 333.336133][ T8365] lo speed is unknown, defaulting to 1000 [ 333.348034][ T8365] lo speed is unknown, defaulting to 1000 [ 333.367644][ T8372] wg2: entered promiscuous mode [ 333.383251][ T8372] team0: Device wg2 is of different type [ 333.417542][ T8372] lo speed is unknown, defaulting to 1000 [ 333.697867][ T8378] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 334.616843][ T8432] hsr0: entered promiscuous mode [ 334.886228][ T8447] lo speed is unknown, defaulting to 1000 [ 335.322370][ T5249] Bluetooth: hci0: command 0x0c1a tx timeout [ 335.346527][ T8465] lo speed is unknown, defaulting to 1000 [ 335.850014][ T8480] validate_nla: 7 callbacks suppressed [ 335.850038][ T8480] netlink: 'syz.3.733': attribute type 16 has an invalid length. [ 335.871705][ T8480] netlink: 'syz.3.733': attribute type 17 has an invalid length. [ 335.977102][ T8482] netlink: 'syz.3.734': attribute type 16 has an invalid length. [ 336.004096][ T8482] netlink: 'syz.3.734': attribute type 17 has an invalid length. [ 336.021212][ T8482] netlink: 'syz.3.734': attribute type 27 has an invalid length. [ 336.030630][ T8465] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 336.057763][ T8465] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (7540) [ 336.071180][ T8465] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 336.081443][ T8485] wg1 speed is unknown, defaulting to 1000 [ 336.101046][ T8468] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (7540) [ 336.111151][ T8468] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 336.149726][ T8485] wg1 speed is unknown, defaulting to 1000 [ 336.164642][ T8485] wg1 speed is unknown, defaulting to 1000 [ 336.339006][ T8485] infiniband syz1: set active [ 336.346663][ T9] wg1 speed is unknown, defaulting to 1000 [ 336.360242][ T8485] infiniband syz1: added wg1 [ 336.370062][ T8485] syz1: rxe_create_cq: returned err = -12 [ 336.392911][ T8485] infiniband syz1: Couldn't create ib_mad CQ [ 336.412146][ T8485] infiniband syz1: Couldn't open port 1 [ 336.460613][ T8485] RDS/IB: syz1: added [ 336.469834][ T8485] smc: adding ib device syz1 with port count 1 [ 336.499708][ T8485] smc: ib device syz1 port 1 has pnetid [ 336.522740][ T5322] wg1 speed is unknown, defaulting to 1000 [ 336.529357][ T8485] wg1 speed is unknown, defaulting to 1000 [ 336.882390][ T8515] __nla_validate_parse: 8 callbacks suppressed [ 336.882416][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.741'. [ 336.915041][ T8518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.940119][ T8516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.953100][ T8521] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 337.005676][ T8485] wg1 speed is unknown, defaulting to 1000 [ 337.040163][ T8515] netlink: 'syz.2.741': attribute type 11 has an invalid length. [ 337.059530][ T8515] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 337.077720][ T8515] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.741'. [ 337.218804][ T8485] wg1 speed is unknown, defaulting to 1000 [ 337.299293][ T8533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.387736][ T8533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.414579][ T5249] Bluetooth: hci0: command 0x0c1a tx timeout [ 337.438996][ T8533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.450086][ T8485] wg1 speed is unknown, defaulting to 1000 [ 337.526202][ T8535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.748'. [ 337.602234][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 337.612427][ T8485] wg1 speed is unknown, defaulting to 1000 [ 337.885884][ T8485] wg1 speed is unknown, defaulting to 1000 [ 338.027190][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 338.060819][ T8551] tipc: Started in network mode [ 338.071094][ T8551] tipc: Node identity 300000002e0001006e, cluster identity 8 [ 338.091851][ T8553] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 338.135087][ T8485] wg1 speed is unknown, defaulting to 1000 [ 338.337437][ T8485] wg1 speed is unknown, defaulting to 1000 [ 338.848169][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.760'. [ 338.903998][ T8581] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 338.981264][ T8581] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.760'. [ 339.301480][ T8606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.516977][ T8625] netlink: 224 bytes leftover after parsing attributes in process `syz.4.772'. [ 339.997298][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 340.283763][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.785'. [ 340.778611][ T8683] bridge1: entered promiscuous mode [ 340.787362][ T8683] bridge1: entered allmulticast mode [ 340.879632][ T8684] bridge1: entered promiscuous mode [ 340.885351][ T8684] bridge1: entered allmulticast mode [ 340.906697][ T8690] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 340.915632][ T8690] openvswitch: netlink: Key 0 has unexpected len 8 expected 0 [ 341.182683][ T8695] validate_nla: 8 callbacks suppressed [ 341.182703][ T8695] netlink: 'syz.1.793': attribute type 9 has an invalid length. [ 341.210380][ T8695] bond_slave_0: entered promiscuous mode [ 341.217385][ T8695] bond_slave_1: entered promiscuous mode [ 341.223580][ T8695] macvlan2: entered promiscuous mode [ 341.228915][ T8695] bond0: entered promiscuous mode [ 341.234576][ T8695] macvlan2: entered allmulticast mode [ 341.240085][ T8695] bond0: entered allmulticast mode [ 341.247707][ T8695] bond_slave_0: entered allmulticast mode [ 341.272175][ T8695] bond_slave_1: entered allmulticast mode [ 341.279386][ T8695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.437479][ T8710] netlink: 'syz.2.798': attribute type 9 has an invalid length. [ 341.574487][ T8710] siw: device registration error -23 [ 341.764960][ T8722] tipc: Started in network mode [ 341.776779][ T8722] tipc: Node identity , cluster identity 4711 [ 341.790610][ T8722] tipc: Failed to set node id, please configure manually [ 341.808089][ T8722] tipc: Enabling of bearer rejected, failed to enable media [ 341.934667][ T8729] __nla_validate_parse: 6 callbacks suppressed [ 341.934691][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'. [ 341.991071][ T8733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.803'. [ 342.003981][ T8733] netlink: 'syz.3.803': attribute type 10 has an invalid length. [ 342.029307][ T8733] netlink: 'syz.3.803': attribute type 11 has an invalid length. [ 342.073327][ T8733] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 342.093361][ T8733] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.803'. [ 342.106657][ T8741] netlink: 76 bytes leftover after parsing attributes in process `syz.1.809'. [ 342.620479][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.634767][ T8765] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 342.709169][ T8768] openvswitch: netlink: Missing valid actions attribute. [ 342.717869][ T8768] openvswitch: netlink: Actions may not be safe on all matching packets [ 342.755837][ T8772] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 342.772620][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 342.883378][ T8776] netlink: 188 bytes leftover after parsing attributes in process `syz.4.821'. [ 342.899757][ T8776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.821'. [ 342.909868][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.821'. [ 342.931238][ T8776] netlink: 'syz.4.821': attribute type 10 has an invalid length. [ 343.064133][ T8781] lo speed is unknown, defaulting to 1000 [ 343.101174][ T8781] wg1 speed is unknown, defaulting to 1000 [ 343.224768][ T8788] lo speed is unknown, defaulting to 1000 [ 343.240529][ T8787] lo speed is unknown, defaulting to 1000 [ 343.397382][ T8792] hsr0: entered promiscuous mode [ 343.434659][ T8792] hsr0: left promiscuous mode [ 343.507348][ T8788] wg1 speed is unknown, defaulting to 1000 [ 343.535447][ T8795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.827'. [ 343.563001][ T8795] netlink: 'syz.0.827': attribute type 10 has an invalid length. [ 343.593092][ T8795] netlink: 'syz.0.827': attribute type 11 has an invalid length. [ 343.622031][ T8795] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 343.642433][ T8795] netlink: 191384 bytes leftover after parsing attributes in process `syz.0.827'. [ 343.722191][ T8787] wg1 speed is unknown, defaulting to 1000 [ 343.737498][ T8798] team_slave_0: entered promiscuous mode [ 343.744811][ T8798] team_slave_1: entered promiscuous mode [ 343.786775][ T8798] vlan2: entered promiscuous mode [ 343.802911][ T8798] team0: entered promiscuous mode [ 343.840240][ T8798] team0: Device vlan2 is already an upper device of the team interface [ 343.874485][ T8798] team0: left promiscuous mode [ 343.879842][ T8798] team_slave_0: left promiscuous mode [ 343.885444][ T8798] team_slave_1: left promiscuous mode [ 344.917355][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.043970][ T8828] lo speed is unknown, defaulting to 1000 [ 345.161092][ T8839] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 345.190092][ T8839] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 345.201093][ T8839] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 345.214365][ T8839] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 345.262419][ T8839] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 345.311947][ T8828] wg1 speed is unknown, defaulting to 1000 [ 345.385714][ T8844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.240097][ T8863] validate_nla: 3 callbacks suppressed [ 346.240115][ T8863] netlink: 'syz.3.843': attribute type 21 has an invalid length. [ 346.464463][ T8867] lo speed is unknown, defaulting to 1000 [ 346.471636][ T8867] wg1 speed is unknown, defaulting to 1000 [ 346.660573][ T8873] FAULT_INJECTION: forcing a failure. [ 346.660573][ T8873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.674430][ T8873] CPU: 0 UID: 0 PID: 8873 Comm: syz.4.846 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 346.685191][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.695311][ T8873] Call Trace: [ 346.698632][ T8873] [ 346.701697][ T8873] dump_stack_lvl+0x241/0x360 [ 346.706455][ T8873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.711716][ T8873] ? __pfx__printk+0x10/0x10 [ 346.716373][ T8873] ? __pfx_lock_release+0x10/0x10 [ 346.721471][ T8873] should_fail_ex+0x3b0/0x4e0 [ 346.726220][ T8873] _copy_from_iter+0x1ed/0x1d60 [ 346.731144][ T8873] ? __virt_addr_valid+0x183/0x530 [ 346.736316][ T8873] ? __pfx_lock_release+0x10/0x10 [ 346.741414][ T8873] ? __alloc_skb+0x28f/0x440 [ 346.746237][ T8873] ? __pfx__copy_from_iter+0x10/0x10 [ 346.751589][ T8873] ? __virt_addr_valid+0x183/0x530 [ 346.756769][ T8873] ? __virt_addr_valid+0x183/0x530 [ 346.762110][ T8873] ? __virt_addr_valid+0x45f/0x530 [ 346.767318][ T8873] ? __check_object_size+0x48e/0x900 [ 346.772673][ T8873] netlink_sendmsg+0x73d/0xcb0 [ 346.777535][ T8873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.782882][ T8873] ? aa_sock_msg_perm+0x91/0x160 [ 346.787880][ T8873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.793213][ T8873] __sock_sendmsg+0x221/0x270 [ 346.798050][ T8873] ____sys_sendmsg+0x52a/0x7e0 [ 346.802874][ T8873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.808230][ T8873] __sys_sendmsg+0x292/0x380 [ 346.812877][ T8873] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.818142][ T8873] ? __pfx_vfs_write+0x10/0x10 [ 346.822988][ T8873] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 346.829382][ T8873] ? do_syscall_64+0x100/0x230 [ 346.834238][ T8873] ? do_syscall_64+0xb6/0x230 [ 346.839022][ T8873] do_syscall_64+0xf3/0x230 [ 346.843609][ T8873] ? clear_bhb_loop+0x35/0x90 [ 346.848424][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.854386][ T8873] RIP: 0033:0x7f327af7dff9 [ 346.858831][ T8873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.878581][ T8873] RSP: 002b:00007f327bde8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.887111][ T8873] RAX: ffffffffffffffda RBX: 00007f327b135f80 RCX: 00007f327af7dff9 [ 346.895115][ T8873] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 346.903220][ T8873] RBP: 00007f327bde8090 R08: 0000000000000000 R09: 0000000000000000 [ 346.911392][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.919408][ T8873] R13: 0000000000000000 R14: 00007f327b135f80 R15: 00007ffdcbd8cdf8 [ 346.927588][ T8873] [ 346.997347][ T8876] netlink: 'syz.1.847': attribute type 322 has an invalid length. [ 347.206848][ T8888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.225434][ T8891] __nla_validate_parse: 4 callbacks suppressed [ 347.225458][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.853'. [ 347.398891][ T8899] xt_l2tp: v2 doesn't support IP mode [ 347.687579][ T8904] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 347.700364][ T8904] netlink: 'syz.4.858': attribute type 2 has an invalid length. [ 347.722223][ T8904] netlink: 16074 bytes leftover after parsing attributes in process `syz.4.858'. [ 347.738391][ T8908] netlink: 'syz.2.859': attribute type 10 has an invalid length. [ 347.740925][ T8909] FAULT_INJECTION: forcing a failure. [ 347.740925][ T8909] name failslab, interval 1, probability 0, space 0, times 1 [ 347.778101][ T8908] netlink: 'syz.2.859': attribute type 11 has an invalid length. [ 347.780718][ T8909] CPU: 0 UID: 0 PID: 8909 Comm: syz.1.860 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 347.796544][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.806768][ T8909] Call Trace: [ 347.810094][ T8909] [ 347.812037][ T8908] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 347.813042][ T8909] dump_stack_lvl+0x241/0x360 [ 347.813077][ T8909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.820724][ T8908] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.859'. [ 347.825568][ T8909] ? __pfx__printk+0x10/0x10 [ 347.825615][ T8909] ? ref_tracker_alloc+0x332/0x490 [ 347.825641][ T8909] should_fail_ex+0x3b0/0x4e0 [ 347.825679][ T8909] ? skb_clone+0x20c/0x390 [ 347.825704][ T8909] should_failslab+0xac/0x100 [ 347.825732][ T8909] ? skb_clone+0x20c/0x390 [ 347.825757][ T8909] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 347.825795][ T8909] skb_clone+0x20c/0x390 [ 347.825825][ T8909] __netlink_deliver_tap+0x3cc/0x7c0 [ 347.825880][ T8909] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.888860][ T8909] netlink_deliver_tap+0x19d/0x1b0 [ 347.894018][ T8909] netlink_unicast+0x7c4/0x990 [ 347.898856][ T8909] ? __pfx_netlink_unicast+0x10/0x10 [ 347.904176][ T8909] ? __virt_addr_valid+0x183/0x530 [ 347.909310][ T8909] ? __check_object_size+0x48e/0x900 [ 347.914647][ T8909] netlink_sendmsg+0x8e4/0xcb0 [ 347.919453][ T8909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.924767][ T8909] ? aa_sock_msg_perm+0x91/0x160 [ 347.929729][ T8909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.935035][ T8909] __sock_sendmsg+0x221/0x270 [ 347.939749][ T8909] ____sys_sendmsg+0x52a/0x7e0 [ 347.944540][ T8909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.949858][ T8909] __sys_sendmsg+0x292/0x380 [ 347.954469][ T8909] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.959638][ T8909] ? __pfx_vfs_write+0x10/0x10 [ 347.964463][ T8909] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.970820][ T8909] ? do_syscall_64+0x100/0x230 [ 347.975610][ T8909] ? do_syscall_64+0xb6/0x230 [ 347.980311][ T8909] do_syscall_64+0xf3/0x230 [ 347.984844][ T8909] ? clear_bhb_loop+0x35/0x90 [ 347.989544][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.995460][ T8909] RIP: 0033:0x7fd36ed7dff9 [ 347.999887][ T8909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.019532][ T8909] RSP: 002b:00007fd36fbc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.027969][ T8909] RAX: ffffffffffffffda RBX: 00007fd36ef35f80 RCX: 00007fd36ed7dff9 [ 348.036046][ T8909] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 348.044036][ T8909] RBP: 00007fd36fbc3090 R08: 0000000000000000 R09: 0000000000000000 [ 348.052024][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.060012][ T8909] R13: 0000000000000000 R14: 00007fd36ef35f80 R15: 00007fff3e0e6e58 [ 348.068014][ T8909] [ 348.277532][ T8919] lo speed is unknown, defaulting to 1000 [ 348.286599][ T8919] wg1 speed is unknown, defaulting to 1000 [ 348.349734][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 348.800987][ T8939] netlink: 144 bytes leftover after parsing attributes in process `syz.0.868'. [ 348.941027][ T8943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.869'. [ 349.213905][ T8956] FAULT_INJECTION: forcing a failure. [ 349.213905][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 349.226998][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 349.236163][ T8948] bridge_slave_1: left allmulticast mode [ 349.250540][ T8948] bridge_slave_1: left promiscuous mode [ 349.260872][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.276975][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.4.874 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 349.287737][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.297826][ T8956] Call Trace: [ 349.301191][ T8956] [ 349.304200][ T8956] dump_stack_lvl+0x241/0x360 [ 349.308931][ T8956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.314175][ T8956] ? __pfx__printk+0x10/0x10 [ 349.318827][ T8956] ? __kmalloc_noprof+0xb0/0x400 [ 349.323830][ T8956] ? __pfx___might_resched+0x10/0x10 [ 349.329172][ T8956] should_fail_ex+0x3b0/0x4e0 [ 349.333916][ T8956] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 349.340235][ T8956] should_failslab+0xac/0x100 [ 349.344973][ T8956] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 349.351272][ T8956] __kmalloc_noprof+0xd8/0x400 [ 349.356098][ T8956] ? __local_bh_enable_ip+0x168/0x200 [ 349.361625][ T8956] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 349.367842][ T8956] ? __pfx_ethnl_default_start+0x10/0x10 [ 349.373549][ T8956] genl_rcv_msg+0x802/0xec0 [ 349.378115][ T8956] ? mark_lock+0x9a/0x360 [ 349.382518][ T8956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.387634][ T8956] ? __pfx_lock_acquire+0x10/0x10 [ 349.392817][ T8956] ? __pfx_ethnl_default_doit+0x10/0x10 [ 349.398512][ T8956] ? __pfx___might_resched+0x10/0x10 [ 349.403925][ T8956] netlink_rcv_skb+0x1e3/0x430 [ 349.408840][ T8956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.413969][ T8956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.419304][ T8956] ? __netlink_deliver_tap+0x77e/0x7c0 [ 349.424811][ T8956] genl_rcv+0x28/0x40 [ 349.428823][ T8956] netlink_unicast+0x7f6/0x990 [ 349.433639][ T8956] ? __pfx_netlink_unicast+0x10/0x10 [ 349.438984][ T8956] ? __virt_addr_valid+0x183/0x530 [ 349.444251][ T8956] ? __check_object_size+0x48e/0x900 [ 349.449872][ T8956] netlink_sendmsg+0x8e4/0xcb0 [ 349.454698][ T8956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.460157][ T8956] ? aa_sock_msg_perm+0x91/0x160 [ 349.465153][ T8956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.470485][ T8956] __sock_sendmsg+0x221/0x270 [ 349.475200][ T8956] ____sys_sendmsg+0x52a/0x7e0 [ 349.480008][ T8956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.485366][ T8956] __sys_sendmsg+0x292/0x380 [ 349.490072][ T8956] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.495239][ T8956] ? __pfx_vfs_write+0x10/0x10 [ 349.500068][ T8956] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.506460][ T8956] ? do_syscall_64+0x100/0x230 [ 349.511276][ T8956] ? do_syscall_64+0xb6/0x230 [ 349.515994][ T8956] do_syscall_64+0xf3/0x230 [ 349.520513][ T8956] ? clear_bhb_loop+0x35/0x90 [ 349.525237][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.531286][ T8956] RIP: 0033:0x7f327af7dff9 [ 349.535745][ T8956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.555390][ T8956] RSP: 002b:00007f327bde8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.563932][ T8956] RAX: ffffffffffffffda RBX: 00007f327b135f80 RCX: 00007f327af7dff9 [ 349.571968][ T8956] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 349.579986][ T8956] RBP: 00007f327bde8090 R08: 0000000000000000 R09: 0000000000000000 [ 349.588017][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.596033][ T8956] R13: 0000000000000000 R14: 00007f327b135f80 R15: 00007ffdcbd8cdf8 [ 349.604140][ T8956] [ 349.623179][ T8948] bridge_slave_0: left allmulticast mode [ 349.628894][ T8948] bridge_slave_0: left promiscuous mode [ 349.635860][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.786780][ T8968] netlink: 'syz.1.875': attribute type 11 has an invalid length. [ 349.813187][ T8968] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 349.849372][ T8968] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.875'. [ 349.916480][ T8961] netlink: 'syz.1.875': attribute type 10 has an invalid length. [ 350.169909][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 350.632999][ T9000] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.884'. [ 350.680984][ T9002] batadv_slave_0: entered promiscuous mode [ 350.704489][ T9005] FAULT_INJECTION: forcing a failure. [ 350.704489][ T9005] name failslab, interval 1, probability 0, space 0, times 0 [ 350.762180][ T9005] CPU: 1 UID: 0 PID: 9005 Comm: syz.0.886 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 350.772852][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.782924][ T9005] Call Trace: [ 350.786216][ T9005] [ 350.789167][ T9005] dump_stack_lvl+0x241/0x360 [ 350.793870][ T9005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.799091][ T9005] ? __pfx__printk+0x10/0x10 [ 350.803759][ T9005] ? __kmalloc_noprof+0xb0/0x400 [ 350.808760][ T9005] ? __pfx___might_resched+0x10/0x10 [ 350.814083][ T9005] should_fail_ex+0x3b0/0x4e0 [ 350.818814][ T9005] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 350.825082][ T9005] should_failslab+0xac/0x100 [ 350.829789][ T9005] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 350.836067][ T9005] __kmalloc_noprof+0xd8/0x400 [ 350.840859][ T9005] ? __local_bh_enable_ip+0x168/0x200 [ 350.846300][ T9005] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 350.852422][ T9005] ? __pfx_ethnl_default_start+0x10/0x10 [ 350.858083][ T9005] genl_rcv_msg+0x802/0xec0 [ 350.862639][ T9005] ? mark_lock+0x9a/0x360 [ 350.867079][ T9005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.872155][ T9005] ? __pfx_lock_acquire+0x10/0x10 [ 350.877222][ T9005] ? __pfx_ethnl_default_doit+0x10/0x10 [ 350.882801][ T9005] ? __pfx___might_resched+0x10/0x10 [ 350.888124][ T9005] netlink_rcv_skb+0x1e3/0x430 [ 350.892925][ T9005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.898077][ T9005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.903401][ T9005] ? __netlink_deliver_tap+0x77e/0x7c0 [ 350.909161][ T9005] genl_rcv+0x28/0x40 [ 350.913167][ T9005] netlink_unicast+0x7f6/0x990 [ 350.917965][ T9005] ? __pfx_netlink_unicast+0x10/0x10 [ 350.923361][ T9005] ? __virt_addr_valid+0x183/0x530 [ 350.928614][ T9005] ? __check_object_size+0x48e/0x900 [ 350.933986][ T9005] netlink_sendmsg+0x8e4/0xcb0 [ 350.938793][ T9005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.944115][ T9005] ? aa_sock_msg_perm+0x91/0x160 [ 350.949090][ T9005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.954478][ T9005] __sock_sendmsg+0x221/0x270 [ 350.959191][ T9005] ____sys_sendmsg+0x52a/0x7e0 [ 350.963989][ T9005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.969308][ T9005] __sys_sendmsg+0x292/0x380 [ 350.973918][ T9005] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.979062][ T9005] ? __pfx_vfs_write+0x10/0x10 [ 350.983866][ T9005] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.990227][ T9005] ? do_syscall_64+0x100/0x230 [ 350.995099][ T9005] ? do_syscall_64+0xb6/0x230 [ 351.000324][ T9005] do_syscall_64+0xf3/0x230 [ 351.004846][ T9005] ? clear_bhb_loop+0x35/0x90 [ 351.009544][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.015465][ T9005] RIP: 0033:0x7f186b17dff9 [ 351.019925][ T9005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.039586][ T9005] RSP: 002b:00007f186bf65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.048306][ T9005] RAX: ffffffffffffffda RBX: 00007f186b335f80 RCX: 00007f186b17dff9 [ 351.056407][ T9005] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 351.064439][ T9005] RBP: 00007f186bf65090 R08: 0000000000000000 R09: 0000000000000000 [ 351.072444][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.080467][ T9005] R13: 0000000000000000 R14: 00007f186b335f80 R15: 00007fff6fe971a8 [ 351.088503][ T9005] [ 351.146451][ T9007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.174398][ T9007] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 351.689987][ T9023] netlink: 'syz.1.890': attribute type 63 has an invalid length. [ 351.861613][ T9034] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 351.939197][ T9040] FAULT_INJECTION: forcing a failure. [ 351.939197][ T9040] name failslab, interval 1, probability 0, space 0, times 0 [ 351.952443][ T9040] CPU: 1 UID: 0 PID: 9040 Comm: syz.4.901 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 351.963095][ T9040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 351.973212][ T9040] Call Trace: [ 351.976539][ T9040] [ 351.979516][ T9040] dump_stack_lvl+0x241/0x360 [ 351.984247][ T9040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.989505][ T9040] ? __pfx__printk+0x10/0x10 [ 351.994161][ T9040] ? __kmalloc_noprof+0xb0/0x400 [ 351.999175][ T9040] ? __pfx___might_resched+0x10/0x10 [ 352.004531][ T9040] should_fail_ex+0x3b0/0x4e0 [ 352.009285][ T9040] ? ethnl_default_doit+0x237/0xd80 [ 352.014546][ T9040] should_failslab+0xac/0x100 [ 352.019286][ T9040] ? ethnl_default_doit+0x237/0xd80 [ 352.024537][ T9040] __kmalloc_noprof+0xd8/0x400 [ 352.029366][ T9040] ethnl_default_doit+0x237/0xd80 [ 352.034522][ T9040] ? __nla_parse+0x40/0x60 [ 352.038995][ T9040] ? __pfx_ethnl_default_doit+0x10/0x10 [ 352.044611][ T9040] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 352.051015][ T9040] genl_rcv_msg+0xb14/0xec0 [ 352.055571][ T9040] ? mark_lock+0x9a/0x360 [ 352.060037][ T9040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.065137][ T9040] ? __pfx_lock_acquire+0x10/0x10 [ 352.070232][ T9040] ? __pfx_ethnl_default_doit+0x10/0x10 [ 352.075851][ T9040] ? __pfx___might_resched+0x10/0x10 [ 352.081207][ T9040] netlink_rcv_skb+0x1e3/0x430 [ 352.086046][ T9040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.091128][ T9040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.096485][ T9040] ? __netlink_deliver_tap+0x77e/0x7c0 [ 352.102029][ T9040] genl_rcv+0x28/0x40 [ 352.106083][ T9040] netlink_unicast+0x7f6/0x990 [ 352.110922][ T9040] ? __pfx_netlink_unicast+0x10/0x10 [ 352.116278][ T9040] ? __virt_addr_valid+0x183/0x530 [ 352.121441][ T9040] ? __check_object_size+0x48e/0x900 [ 352.126806][ T9040] netlink_sendmsg+0x8e4/0xcb0 [ 352.131638][ T9040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.136980][ T9040] ? aa_sock_msg_perm+0x91/0x160 [ 352.141978][ T9040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.147304][ T9040] __sock_sendmsg+0x221/0x270 [ 352.152121][ T9040] ____sys_sendmsg+0x52a/0x7e0 [ 352.156942][ T9040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.162297][ T9040] __sys_sendmsg+0x292/0x380 [ 352.166947][ T9040] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.172300][ T9040] ? __pfx_vfs_write+0x10/0x10 [ 352.177139][ T9040] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.183534][ T9040] ? do_syscall_64+0x100/0x230 [ 352.188555][ T9040] ? do_syscall_64+0xb6/0x230 [ 352.193285][ T9040] do_syscall_64+0xf3/0x230 [ 352.197830][ T9040] ? clear_bhb_loop+0x35/0x90 [ 352.202586][ T9040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.208564][ T9040] RIP: 0033:0x7f327af7dff9 [ 352.213030][ T9040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.232700][ T9040] RSP: 002b:00007f327bde8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.241164][ T9040] RAX: ffffffffffffffda RBX: 00007f327b135f80 RCX: 00007f327af7dff9 [ 352.249187][ T9040] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 352.257215][ T9040] RBP: 00007f327bde8090 R08: 0000000000000000 R09: 0000000000000000 [ 352.265251][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.273279][ T9040] R13: 0000000000000000 R14: 00007f327b135f80 R15: 00007ffdcbd8cdf8 [ 352.281409][ T9040] [ 352.415871][ T9051] __nla_validate_parse: 4 callbacks suppressed [ 352.415895][ T9051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.902'. [ 352.494791][ T9061] xt_limit: Overflow, try lower: 0/0 [ 352.608664][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 352.650025][ T9069] lo speed is unknown, defaulting to 1000 [ 352.662201][ T9069] wg1 speed is unknown, defaulting to 1000 [ 352.846577][ T9085] lo speed is unknown, defaulting to 1000 [ 352.927350][ T9089] FAULT_INJECTION: forcing a failure. [ 352.927350][ T9089] name failslab, interval 1, probability 0, space 0, times 0 [ 352.951718][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.1.917 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 352.962485][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.972602][ T9089] Call Trace: [ 352.975926][ T9089] [ 352.978908][ T9089] dump_stack_lvl+0x241/0x360 [ 352.983645][ T9089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.988907][ T9089] ? __pfx__printk+0x10/0x10 [ 352.993660][ T9089] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 352.999702][ T9089] ? __pfx___might_resched+0x10/0x10 [ 353.005057][ T9089] should_fail_ex+0x3b0/0x4e0 [ 353.009802][ T9089] should_failslab+0xac/0x100 [ 353.014535][ T9089] ? __alloc_skb+0x1c3/0x440 [ 353.019175][ T9089] kmem_cache_alloc_node_noprof+0x71/0x320 [ 353.025049][ T9089] __alloc_skb+0x1c3/0x440 [ 353.029518][ T9089] ? __pfx___alloc_skb+0x10/0x10 [ 353.034510][ T9089] ? netlink_ack_tlv_len+0x6e/0x200 [ 353.039772][ T9089] netlink_ack+0x13f/0xa30 [ 353.044246][ T9089] ? __pfx_lock_acquire+0x10/0x10 [ 353.049333][ T9089] ? __pfx_ethnl_default_doit+0x10/0x10 [ 353.054968][ T9089] netlink_rcv_skb+0x262/0x430 [ 353.059797][ T9089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 353.064883][ T9089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.070332][ T9089] ? __netlink_deliver_tap+0x77e/0x7c0 [ 353.075879][ T9089] genl_rcv+0x28/0x40 [ 353.079919][ T9089] netlink_unicast+0x7f6/0x990 [ 353.084754][ T9089] ? __pfx_netlink_unicast+0x10/0x10 [ 353.090098][ T9089] ? __virt_addr_valid+0x183/0x530 [ 353.095268][ T9089] ? __check_object_size+0x48e/0x900 [ 353.100623][ T9089] netlink_sendmsg+0x8e4/0xcb0 [ 353.105454][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.110798][ T9089] ? aa_sock_msg_perm+0x91/0x160 [ 353.115804][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.121243][ T9089] __sock_sendmsg+0x221/0x270 [ 353.125992][ T9089] ____sys_sendmsg+0x52a/0x7e0 [ 353.130823][ T9089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.136187][ T9089] __sys_sendmsg+0x292/0x380 [ 353.140861][ T9089] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.146059][ T9089] ? __pfx_vfs_write+0x10/0x10 [ 353.150918][ T9089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.157484][ T9089] ? do_syscall_64+0x100/0x230 [ 353.162318][ T9089] ? do_syscall_64+0xb6/0x230 [ 353.167051][ T9089] do_syscall_64+0xf3/0x230 [ 353.171608][ T9089] ? clear_bhb_loop+0x35/0x90 [ 353.176345][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.182505][ T9089] RIP: 0033:0x7fd36ed7dff9 [ 353.186982][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.206678][ T9089] RSP: 002b:00007fd36fbc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.215174][ T9089] RAX: ffffffffffffffda RBX: 00007fd36ef35f80 RCX: 00007fd36ed7dff9 [ 353.223583][ T9089] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 353.231616][ T9089] RBP: 00007fd36fbc3090 R08: 0000000000000000 R09: 0000000000000000 [ 353.239650][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.247682][ T9089] R13: 0000000000000000 R14: 00007fd36ef35f80 R15: 00007fff3e0e6e58 [ 353.255728][ T9089] [ 353.375075][ T9085] wg1 speed is unknown, defaulting to 1000 [ 353.447310][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 353.463918][ T9092] tipc: Enabled bearer , priority 10 [ 353.678304][ T9106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.921'. [ 353.939950][ T9113] macsec1: entered promiscuous mode [ 353.951920][ T9113] macsec1: entered allmulticast mode [ 354.233476][ T9122] syz.3.925[9122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.233591][ T9122] syz.3.925[9122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.296295][ T9122] syz.3.925[9122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.382547][ T9128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.493714][ T9128] batadv_slave_0: entered promiscuous mode [ 354.593470][ T9] tipc: Node number set to 1879048448 [ 354.826100][ T9145] FAULT_INJECTION: forcing a failure. [ 354.826100][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 354.871594][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.0.929 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 354.882368][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.892476][ T9145] Call Trace: [ 354.895803][ T9145] [ 354.898779][ T9145] dump_stack_lvl+0x241/0x360 [ 354.903523][ T9145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.908780][ T9145] ? __pfx__printk+0x10/0x10 [ 354.913455][ T9145] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 354.919509][ T9145] ? __pfx___might_resched+0x10/0x10 [ 354.924873][ T9145] should_fail_ex+0x3b0/0x4e0 [ 354.929633][ T9145] should_failslab+0xac/0x100 [ 354.934376][ T9145] ? __alloc_skb+0x1c3/0x440 [ 354.939032][ T9145] kmem_cache_alloc_node_noprof+0x71/0x320 [ 354.944922][ T9145] __alloc_skb+0x1c3/0x440 [ 354.949587][ T9145] ? __pfx___alloc_skb+0x10/0x10 [ 354.954591][ T9145] ? netlink_ack_tlv_len+0x6e/0x200 [ 354.959951][ T9145] netlink_ack+0x13f/0xa30 [ 354.964438][ T9145] ? __pfx_lock_acquire+0x10/0x10 [ 354.969544][ T9145] ? __pfx_ethnl_default_doit+0x10/0x10 [ 354.975178][ T9145] netlink_rcv_skb+0x262/0x430 [ 354.980013][ T9145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.985141][ T9145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.990598][ T9145] ? __netlink_deliver_tap+0x77e/0x7c0 [ 354.996243][ T9145] genl_rcv+0x28/0x40 [ 355.000290][ T9145] netlink_unicast+0x7f6/0x990 [ 355.005142][ T9145] ? __pfx_netlink_unicast+0x10/0x10 [ 355.010503][ T9145] ? __virt_addr_valid+0x183/0x530 [ 355.015705][ T9145] ? __check_object_size+0x48e/0x900 [ 355.021161][ T9145] netlink_sendmsg+0x8e4/0xcb0 [ 355.026006][ T9145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.031375][ T9145] ? aa_sock_msg_perm+0x91/0x160 [ 355.036392][ T9145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.041822][ T9145] __sock_sendmsg+0x221/0x270 [ 355.046561][ T9145] ____sys_sendmsg+0x52a/0x7e0 [ 355.051408][ T9145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.056859][ T9145] __sys_sendmsg+0x292/0x380 [ 355.061515][ T9145] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.066865][ T9145] ? __pfx_vfs_write+0x10/0x10 [ 355.071716][ T9145] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.078130][ T9145] ? do_syscall_64+0x100/0x230 [ 355.082952][ T9145] ? do_syscall_64+0xb6/0x230 [ 355.087690][ T9145] do_syscall_64+0xf3/0x230 [ 355.092249][ T9145] ? clear_bhb_loop+0x35/0x90 [ 355.097019][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.103088][ T9145] RIP: 0033:0x7f186b17dff9 [ 355.107556][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.127387][ T9145] RSP: 002b:00007f186bf65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.135842][ T9145] RAX: ffffffffffffffda RBX: 00007f186b335f80 RCX: 00007f186b17dff9 [ 355.143840][ T9145] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 355.151918][ T9145] RBP: 00007f186bf65090 R08: 0000000000000000 R09: 0000000000000000 [ 355.159927][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.168001][ T9145] R13: 0000000000000000 R14: 00007f186b335f80 R15: 00007fff6fe971a8 [ 355.176004][ T9145] [ 355.218259][ T9122] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 355.475622][ T9149] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 355.705977][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 356.193141][ T9158] bridge0: port 3(gretap0) entered blocking state [ 356.212503][ T9158] bridge0: port 3(gretap0) entered disabled state [ 356.219222][ T9158] gretap0: entered allmulticast mode [ 356.254001][ T9158] gretap0: entered promiscuous mode [ 356.261376][ T9158] bridge0: port 3(gretap0) entered blocking state [ 356.268109][ T9158] bridge0: port 3(gretap0) entered forwarding state [ 356.361289][ T9169] gretap0: left allmulticast mode [ 356.402253][ T9169] gretap0: left promiscuous mode [ 356.444223][ T9169] bridge0: port 3(gretap0) entered disabled state [ 356.497324][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 356.527695][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 356.607631][ T9179] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.940'. [ 357.137806][ T9189] netlink: 'syz.3.944': attribute type 4 has an invalid length. [ 357.175847][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 357.176381][ T9189] netlink: 'syz.3.944': attribute type 4 has an invalid length. [ 357.441730][ T9195] syzkaller1: entered promiscuous mode [ 357.454318][ T9195] syzkaller1: entered allmulticast mode [ 357.643324][ T9196] lo speed is unknown, defaulting to 1000 [ 357.673444][ T9198] bridge0: port 3(gretap0) entered blocking state [ 357.696443][ T9198] bridge0: port 3(gretap0) entered disabled state [ 357.710625][ T9198] gretap0: entered allmulticast mode [ 357.718428][ T9198] gretap0: entered promiscuous mode [ 357.739817][ T9198] bridge0: port 3(gretap0) entered blocking state [ 357.746605][ T9198] bridge0: port 3(gretap0) entered forwarding state [ 357.769535][ T9196] wg1 speed is unknown, defaulting to 1000 [ 357.777121][ T9200] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 357.827798][ T9202] gretap0: left allmulticast mode [ 357.842247][ T9202] gretap0: left promiscuous mode [ 357.859495][ T9202] bridge0: port 3(gretap0) entered disabled state [ 357.949358][ T9205] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 358.048505][ T5288] lo speed is unknown, defaulting to 1000 [ 358.055030][ T9200] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 358.103326][ T5291] lo speed is unknown, defaulting to 1000 [ 358.282156][ T5249] Bluetooth: hci5: command tx timeout [ 358.460889][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 358.497234][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.951'. [ 358.521193][ T9220] syz_tun: entered allmulticast mode [ 358.634574][ T9216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.951'. [ 358.834102][ T9231] lo speed is unknown, defaulting to 1000 [ 358.840984][ T9231] wg1 speed is unknown, defaulting to 1000 [ 358.852253][ T9221] syz_tun: left allmulticast mode [ 358.945691][ T9239] netlink: 'syz.1.958': attribute type 21 has an invalid length. [ 358.971905][ T9239] netlink: 168 bytes leftover after parsing attributes in process `syz.1.958'. [ 359.003903][ T9241] netlink: 'syz.3.957': attribute type 10 has an invalid length. [ 359.024775][ T9239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.958'. [ 359.058171][ T9241] lo: entered promiscuous mode [ 359.067445][ T9241] lo: entered allmulticast mode [ 359.100706][ T9241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.130015][ T9230] netlink: 'syz.4.956': attribute type 9 has an invalid length. [ 359.153191][ T9230] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.956'. [ 359.270328][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'. [ 359.400583][ T9247] netlink: 'syz.0.959': attribute type 12 has an invalid length. [ 359.455942][ T9237] rdma_rxe: rxe_newlink: failed to add lo [ 360.280035][ T9287] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 360.290248][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 360.644418][ T9301] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 360.950863][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 361.166725][ T9329] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 361.179845][ T9329] macsec1: entered promiscuous mode [ 361.188272][ T9329] mac80211_hwsim hwsim44 wlan1: left promiscuous mode [ 361.209410][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'. [ 361.237110][ T9331] netlink: 'syz.1.983': attribute type 2 has an invalid length. [ 362.163862][ T9377] FAULT_INJECTION: forcing a failure. [ 362.163862][ T9377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.205686][ T9378] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.216923][ T9377] CPU: 0 UID: 0 PID: 9377 Comm: syz.2.991 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 362.227687][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 362.237802][ T9377] Call Trace: [ 362.241302][ T9377] [ 362.244274][ T9377] dump_stack_lvl+0x241/0x360 [ 362.248996][ T9377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.254241][ T9377] ? __pfx__printk+0x10/0x10 [ 362.258896][ T9377] ? snprintf+0xda/0x120 [ 362.263197][ T9377] should_fail_ex+0x3b0/0x4e0 [ 362.268028][ T9377] _copy_to_user+0x2f/0xb0 [ 362.272501][ T9377] simple_read_from_buffer+0xca/0x150 [ 362.277973][ T9377] proc_fail_nth_read+0x1e9/0x250 [ 362.283154][ T9377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.288806][ T9377] ? rw_verify_area+0x55e/0x6f0 [ 362.293726][ T9377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.299322][ T9377] vfs_read+0x201/0xbc0 [ 362.303520][ T9377] ? __pfx_aa_sk_perm+0x10/0x10 [ 362.306295][ T9378] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.308396][ T9377] ? __pfx_vfs_read+0x10/0x10 [ 362.320140][ T9377] ? do_sys_openat2+0x17a/0x1d0 [ 362.325025][ T9377] ? rds_connect+0x59/0x580 [ 362.329556][ T9377] ? __pfx_rds_connect+0x10/0x10 [ 362.334517][ T9377] ? __sys_connect+0x156/0x300 [ 362.339411][ T9377] ? __pfx___sys_connect+0x10/0x10 [ 362.344565][ T9377] ? fdget_pos+0x265/0x320 [ 362.349016][ T9377] ksys_read+0x183/0x2b0 [ 362.353293][ T9377] ? __pfx_ksys_read+0x10/0x10 [ 362.358073][ T9377] ? do_syscall_64+0x100/0x230 [ 362.362937][ T9377] ? do_syscall_64+0xb6/0x230 [ 362.367633][ T9377] do_syscall_64+0xf3/0x230 [ 362.372155][ T9377] ? clear_bhb_loop+0x35/0x90 [ 362.376849][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.383115][ T9377] RIP: 0033:0x7f1d75b7ca3c [ 362.387544][ T9377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 362.407344][ T9377] RSP: 002b:00007f1d76a3a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 362.415784][ T9377] RAX: ffffffffffffffda RBX: 00007f1d75d35f80 RCX: 00007f1d75b7ca3c [ 362.423772][ T9377] RDX: 000000000000000f RSI: 00007f1d76a3a0a0 RDI: 0000000000000004 [ 362.431855][ T9377] RBP: 00007f1d76a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 362.440026][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.448013][ T9377] R13: 0000000000000000 R14: 00007f1d75d35f80 R15: 00007ffc891e2268 [ 362.456013][ T9377] [ 362.558895][ T9378] tipc: Resetting bearer [ 362.632474][ T9394] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 362.700015][ T9388] lo speed is unknown, defaulting to 1000 [ 362.733394][ T9396] tun0: tun_chr_ioctl cmd 2147767511 [ 362.747949][ T9388] wg1 speed is unknown, defaulting to 1000 [ 363.040895][ T9415] xt_hashlimit: overflow, try lower: 18446465897267724288/2047 [ 363.283959][ T9427] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 363.315575][ T9427] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 363.792575][ T9455] IPv6: Can't replace route, no match found [ 363.844114][ T9388] lo speed is unknown, defaulting to 1000 [ 363.855112][ T9388] wg1 speed is unknown, defaulting to 1000 [ 363.964417][ T9463] validate_nla: 2 callbacks suppressed [ 363.964441][ T9463] netlink: 'syz.1.1013': attribute type 6 has an invalid length. [ 364.544472][ T9485] sctp: [Deprecated]: syz.2.1018 (pid 9485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.544472][ T9485] Use struct sctp_sack_info instead [ 364.643372][ T9486] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 364.725156][ T9489] __nla_validate_parse: 4 callbacks suppressed [ 364.725180][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 364.828206][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1019'. [ 365.045063][ T9508] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 365.147867][ T9508] team0: Port device wlan1 added [ 365.312581][ T9513] lo speed is unknown, defaulting to 1000 [ 365.319578][ T9513] wg1 speed is unknown, defaulting to 1000 [ 365.602309][ T9531] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1033'. [ 365.842427][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1035'. [ 366.962285][ T9568] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1045'. [ 367.192650][ T9580] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 367.257137][ T9581] IPVS: stopping backup sync thread 9580 ... [ 367.310239][ T9572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1046'. [ 367.363038][ T9583] lo speed is unknown, defaulting to 1000 [ 367.387777][ T9583] wg1 speed is unknown, defaulting to 1000 [ 368.524477][ T9588] lo speed is unknown, defaulting to 1000 [ 368.538869][ T9588] wg1 speed is unknown, defaulting to 1000 [ 369.695585][ T9617] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1057'. [ 370.078985][ T9619] netlink: 'syz.2.1058': attribute type 4 has an invalid length. [ 370.339620][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 370.613141][ T9641] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1065'. [ 370.815725][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1068'. [ 370.829668][ T9627] team0 (unregistering): Port device team_slave_0 removed [ 370.850270][ T9627] team0 (unregistering): Port device team_slave_1 removed [ 370.923489][ T9655] bond0: option miimon: invalid value (18446744073072082944) [ 370.941049][ T9655] bond0: option miimon: allowed values 0 - 2147483647 [ 371.013988][ T9654] tun0: tun_chr_ioctl cmd 2147767511 [ 371.040416][ T9660] syz.4.1069 (9660) used greatest stack depth: 18464 bytes left [ 371.409870][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 371.455942][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1078'. [ 371.558918][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 371.587140][ T9695] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 371.797425][ T9703] BUG: Bad page state in process syz.4.1082 pfn:12784 [ 371.805124][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888012784e00 pfn:0x12784 [ 371.815335][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 371.822599][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 371.831358][ T9703] raw: ffff888012784e00 0000000000000001 00000000ffffffff 0000000000000000 [ 371.840048][ T9703] page dumped because: page_pool leak [ 371.845621][ T9703] page_owner tracks the page as allocated [ 371.851395][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771584889, free_ts 361612665508 [ 371.868816][ T9703] post_alloc_hook+0x1f3/0x230 [ 371.873723][ T9703] get_page_from_freelist+0x3045/0x3190 [ 371.879447][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 371.884842][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 371.890375][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 371.896402][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 371.901812][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 371.907265][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 371.912761][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 371.917775][ T9703] __sys_bpf+0x48d/0x810 [ 371.922125][ T9703] __x64_sys_bpf+0x7c/0x90 [ 371.926691][ T9703] do_syscall_64+0xf3/0x230 [ 371.931252][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.937281][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 371.943705][ T9703] free_unref_page+0xcfb/0xf20 [ 371.948542][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 371.954369][ T9703] __apply_to_page_range+0x806/0xde0 [ 371.959733][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 371.964965][ T9703] purge_vmap_node+0x417/0x810 [ 371.969862][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 371.975345][ T9703] drain_vmap_area_work+0x27/0x40 [ 371.980443][ T9703] process_scheduled_works+0xa63/0x1850 [ 371.986130][ T9703] worker_thread+0x870/0xd30 [ 371.990789][ T9703] kthread+0x2f0/0x390 [ 371.995079][ T9703] ret_from_fork+0x4b/0x80 [ 371.999743][ T9703] ret_from_fork_asm+0x1a/0x30 [ 372.004658][ T9703] Modules linked in: [ 372.008898][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Not tainted 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 372.019811][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.029926][ T9703] Call Trace: [ 372.033346][ T9703] [ 372.036342][ T9703] dump_stack_lvl+0x241/0x360 [ 372.041176][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.046453][ T9703] ? __pfx_print_modules+0x10/0x10 [ 372.051637][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 372.057692][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.064101][ T9703] bad_page+0x166/0x1b0 [ 372.068334][ T9703] free_unref_page+0xed0/0xf20 [ 372.073162][ T9703] skb_release_data+0x6dc/0x8a0 [ 372.078090][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 372.083185][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 372.089061][ T9703] ? mark_lock+0x9a/0x360 [ 372.093539][ T9703] ? __lock_acquire+0x1384/0x2050 [ 372.098740][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 372.104873][ T9703] ? mark_lock+0x9a/0x360 [ 372.109274][ T9703] ? __lock_acquire+0x1384/0x2050 [ 372.114355][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 372.120371][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 372.127552][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 372.134093][ T9703] ? read_tsc+0x9/0x20 [ 372.138191][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 372.143428][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 372.149786][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 372.155976][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 372.162333][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 372.169048][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 372.174278][ T9703] ? __phys_addr+0xba/0x170 [ 372.178804][ T9703] ? build_skb_around+0x111/0x260 [ 372.183860][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 372.190328][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 372.196254][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 372.201750][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 372.207692][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 372.213298][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 372.219160][ T9703] ? synchronize_rcu+0x11b/0x360 [ 372.224130][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 372.229561][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 372.235883][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 372.241838][ T9703] ? _copy_from_user+0xa6/0xe0 [ 372.246910][ T9703] ? bpf_test_init+0x15a/0x180 [ 372.251860][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 372.258095][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 372.263533][ T9703] ? __pfx_lock_release+0x10/0x10 [ 372.268798][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 372.274828][ T9703] ? __fget_files+0x29/0x470 [ 372.279719][ T9703] ? fput+0x1a8/0x230 [ 372.283755][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 372.289693][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 372.294972][ T9703] __sys_bpf+0x48d/0x810 [ 372.299331][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 372.304236][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 372.310425][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.316874][ T9703] ? do_syscall_64+0x100/0x230 [ 372.321666][ T9703] __x64_sys_bpf+0x7c/0x90 [ 372.326148][ T9703] do_syscall_64+0xf3/0x230 [ 372.330677][ T9703] ? clear_bhb_loop+0x35/0x90 [ 372.335406][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.341601][ T9703] RIP: 0033:0x7f327af7dff9 [ 372.346083][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.366344][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.374911][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 372.383047][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 372.391577][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 372.399877][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.408047][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 372.416166][ T9703] [ 372.419445][ T9703] Disabling lock debugging due to kernel taint [ 372.425956][ T9703] BUG: Bad page state in process syz.4.1082 pfn:2fb52 [ 372.432977][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fb52b00 pfn:0x2fb52 [ 372.443304][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 372.450470][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 372.459133][ T9703] raw: ffff88802fb52b00 0000000000000001 00000000ffffffff 0000000000000000 [ 372.468127][ T9703] page dumped because: page_pool leak [ 372.473606][ T9703] page_owner tracks the page as allocated [ 372.479503][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771572051, free_ts 361612677186 [ 372.496705][ T9703] post_alloc_hook+0x1f3/0x230 [ 372.501530][ T9703] get_page_from_freelist+0x3045/0x3190 [ 372.507262][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 372.512894][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 372.518409][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 372.524422][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 372.529681][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 372.535176][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 372.540611][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 372.545727][ T9703] __sys_bpf+0x48d/0x810 [ 372.550077][ T9703] __x64_sys_bpf+0x7c/0x90 [ 372.554562][ T9703] do_syscall_64+0xf3/0x230 [ 372.559157][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.565144][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 372.571689][ T9703] free_unref_page+0xcfb/0xf20 [ 372.576915][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 372.582706][ T9703] __apply_to_page_range+0x806/0xde0 [ 372.588050][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 372.593322][ T9703] purge_vmap_node+0x417/0x810 [ 372.598131][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 372.603573][ T9703] drain_vmap_area_work+0x27/0x40 [ 372.608640][ T9703] process_scheduled_works+0xa63/0x1850 [ 372.614304][ T9703] worker_thread+0x870/0xd30 [ 372.619693][ T9703] kthread+0x2f0/0x390 [ 372.623936][ T9703] ret_from_fork+0x4b/0x80 [ 372.628531][ T9703] ret_from_fork_asm+0x1a/0x30 [ 372.633402][ T9703] Modules linked in: [ 372.637513][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 372.649784][ T9703] Tainted: [B]=BAD_PAGE [ 372.653966][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.664325][ T9703] Call Trace: [ 372.667616][ T9703] [ 372.670660][ T9703] dump_stack_lvl+0x241/0x360 [ 372.675533][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.680758][ T9703] ? __pfx_print_modules+0x10/0x10 [ 372.685908][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 372.692134][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.698652][ T9703] bad_page+0x166/0x1b0 [ 372.702864][ T9703] free_unref_page+0xed0/0xf20 [ 372.707855][ T9703] skb_release_data+0x6dc/0x8a0 [ 372.712999][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 372.718399][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 372.724199][ T9703] ? mark_lock+0x9a/0x360 [ 372.728706][ T9703] ? __lock_acquire+0x1384/0x2050 [ 372.734079][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 372.740284][ T9703] ? mark_lock+0x9a/0x360 [ 372.744670][ T9703] ? __lock_acquire+0x1384/0x2050 [ 372.749851][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 372.756215][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 372.762919][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 372.769903][ T9703] ? read_tsc+0x9/0x20 [ 372.774025][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 372.779709][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 372.786477][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 372.793765][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 372.800219][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 372.806981][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 372.812230][ T9703] ? __phys_addr+0xba/0x170 [ 372.817002][ T9703] ? build_skb_around+0x111/0x260 [ 372.822219][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 372.828504][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 372.833908][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 372.839465][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 372.845436][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 372.851027][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 372.857018][ T9703] ? synchronize_rcu+0x11b/0x360 [ 372.862176][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 372.867513][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 372.873891][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 372.879815][ T9703] ? _copy_from_user+0xa6/0xe0 [ 372.884648][ T9703] ? bpf_test_init+0x15a/0x180 [ 372.889617][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 372.895111][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 372.900646][ T9703] ? __pfx_lock_release+0x10/0x10 [ 372.905897][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 372.911764][ T9703] ? __fget_files+0x29/0x470 [ 372.916417][ T9703] ? fput+0x1a8/0x230 [ 372.920434][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 372.926495][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 372.931521][ T9703] __sys_bpf+0x48d/0x810 [ 372.935969][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 372.940812][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 372.946827][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.953282][ T9703] ? do_syscall_64+0x100/0x230 [ 372.958156][ T9703] __x64_sys_bpf+0x7c/0x90 [ 372.962803][ T9703] do_syscall_64+0xf3/0x230 [ 372.967450][ T9703] ? clear_bhb_loop+0x35/0x90 [ 372.972290][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.978219][ T9703] RIP: 0033:0x7f327af7dff9 [ 372.982660][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.002741][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.011209][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 373.019939][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 373.028028][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 373.036023][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.044017][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 373.052023][ T9703] [ 373.055179][ T9703] BUG: Bad page state in process syz.4.1082 pfn:27e5e [ 373.062192][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027e5ef00 pfn:0x27e5e [ 373.072341][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 373.079502][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 373.088183][ T9703] raw: ffff888027e5ef00 0000000000000001 00000000ffffffff 0000000000000000 [ 373.096832][ T9703] page dumped because: page_pool leak [ 373.102349][ T9703] page_owner tracks the page as allocated [ 373.108102][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771558953, free_ts 361612688796 [ 373.125602][ T9703] post_alloc_hook+0x1f3/0x230 [ 373.130453][ T9703] get_page_from_freelist+0x3045/0x3190 [ 373.136186][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 373.141441][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 373.146999][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 373.152983][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 373.158245][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 373.163705][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 373.169129][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 373.174139][ T9703] __sys_bpf+0x48d/0x810 [ 373.178492][ T9703] __x64_sys_bpf+0x7c/0x90 [ 373.183061][ T9703] do_syscall_64+0xf3/0x230 [ 373.187633][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.193629][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 373.200100][ T9703] free_unref_page+0xcfb/0xf20 [ 373.204947][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 373.210719][ T9703] __apply_to_page_range+0x806/0xde0 [ 373.216166][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 373.221328][ T9703] purge_vmap_node+0x417/0x810 [ 373.226201][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 373.232032][ T9703] drain_vmap_area_work+0x27/0x40 [ 373.237487][ T9703] process_scheduled_works+0xa63/0x1850 [ 373.243148][ T9703] worker_thread+0x870/0xd30 [ 373.247911][ T9703] kthread+0x2f0/0x390 [ 373.252155][ T9703] ret_from_fork+0x4b/0x80 [ 373.256628][ T9703] ret_from_fork_asm+0x1a/0x30 [ 373.261419][ T9703] Modules linked in: [ 373.265392][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 373.277763][ T9703] Tainted: [B]=BAD_PAGE [ 373.282033][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 373.292186][ T9703] Call Trace: [ 373.295506][ T9703] [ 373.298465][ T9703] dump_stack_lvl+0x241/0x360 [ 373.303163][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.308389][ T9703] ? __pfx_print_modules+0x10/0x10 [ 373.313782][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 373.319743][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.326962][ T9703] bad_page+0x166/0x1b0 [ 373.331147][ T9703] free_unref_page+0xed0/0xf20 [ 373.335939][ T9703] skb_release_data+0x6dc/0x8a0 [ 373.340827][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 373.345879][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 373.351648][ T9703] ? mark_lock+0x9a/0x360 [ 373.356007][ T9703] ? __lock_acquire+0x1384/0x2050 [ 373.361218][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 373.367419][ T9703] ? mark_lock+0x9a/0x360 [ 373.371995][ T9703] ? __lock_acquire+0x1384/0x2050 [ 373.377291][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 373.383312][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 373.390427][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 373.397063][ T9703] ? read_tsc+0x9/0x20 [ 373.401164][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 373.406428][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 373.412874][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 373.419070][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 373.425721][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 373.432459][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 373.437706][ T9703] ? __phys_addr+0xba/0x170 [ 373.442346][ T9703] ? build_skb_around+0x111/0x260 [ 373.447410][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 373.453367][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 373.458717][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 373.464355][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 373.470326][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 373.476256][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 373.482312][ T9703] ? synchronize_rcu+0x11b/0x360 [ 373.487305][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 373.492644][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 373.498936][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 373.504973][ T9703] ? _copy_from_user+0xa6/0xe0 [ 373.509763][ T9703] ? bpf_test_init+0x15a/0x180 [ 373.514554][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 373.520043][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 373.525818][ T9703] ? __pfx_lock_release+0x10/0x10 [ 373.530873][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 373.536884][ T9703] ? __fget_files+0x29/0x470 [ 373.541505][ T9703] ? fput+0x1a8/0x230 [ 373.545597][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 373.551487][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 373.556473][ T9703] __sys_bpf+0x48d/0x810 [ 373.560768][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 373.565671][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.571748][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.578212][ T9703] ? do_syscall_64+0x100/0x230 [ 373.583191][ T9703] __x64_sys_bpf+0x7c/0x90 [ 373.587718][ T9703] do_syscall_64+0xf3/0x230 [ 373.592271][ T9703] ? clear_bhb_loop+0x35/0x90 [ 373.597262][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.603223][ T9703] RIP: 0033:0x7f327af7dff9 [ 373.607761][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.627406][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.635886][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 373.643894][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 373.651991][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 373.659996][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.668164][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 373.676167][ T9703] [ 373.679305][ T9703] BUG: Bad page state in process syz.4.1082 pfn:793c1 [ 373.686422][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880793c1e00 pfn:0x793c1 [ 373.696555][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 373.703736][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 373.712488][ T9703] raw: ffff8880793c1e00 0000000000000001 00000000ffffffff 0000000000000000 [ 373.721312][ T9703] page dumped because: page_pool leak [ 373.726958][ T9703] page_owner tracks the page as allocated [ 373.732760][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771545960, free_ts 361612893274 [ 373.750325][ T9703] post_alloc_hook+0x1f3/0x230 [ 373.755206][ T9703] get_page_from_freelist+0x3045/0x3190 [ 373.760951][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 373.766404][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 373.772139][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 373.778276][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 373.783566][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 373.789131][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 373.794601][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 373.799599][ T9703] __sys_bpf+0x48d/0x810 [ 373.803953][ T9703] __x64_sys_bpf+0x7c/0x90 [ 373.808800][ T9703] do_syscall_64+0xf3/0x230 [ 373.813433][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.819391][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 373.825814][ T9703] free_unref_page+0xcfb/0xf20 [ 373.830717][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 373.836552][ T9703] __apply_to_page_range+0x806/0xde0 [ 373.842108][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 373.847491][ T9703] purge_vmap_node+0x417/0x810 [ 373.852359][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 373.857781][ T9703] drain_vmap_area_work+0x27/0x40 [ 373.862932][ T9703] process_scheduled_works+0xa63/0x1850 [ 373.868545][ T9703] worker_thread+0x870/0xd30 [ 373.873249][ T9703] kthread+0x2f0/0x390 [ 373.877461][ T9703] ret_from_fork+0x4b/0x80 [ 373.881961][ T9703] ret_from_fork_asm+0x1a/0x30 [ 373.886877][ T9703] Modules linked in: [ 373.890796][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 373.902972][ T9703] Tainted: [B]=BAD_PAGE [ 373.907143][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 373.917300][ T9703] Call Trace: [ 373.920588][ T9703] [ 373.923530][ T9703] dump_stack_lvl+0x241/0x360 [ 373.928224][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.933447][ T9703] ? __pfx_print_modules+0x10/0x10 [ 373.938630][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 373.944573][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.950976][ T9703] bad_page+0x166/0x1b0 [ 373.955183][ T9703] free_unref_page+0xed0/0xf20 [ 373.959970][ T9703] skb_release_data+0x6dc/0x8a0 [ 373.964842][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 373.969996][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 373.975828][ T9703] ? mark_lock+0x9a/0x360 [ 373.980220][ T9703] ? __lock_acquire+0x1384/0x2050 [ 373.985327][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 373.991465][ T9703] ? mark_lock+0x9a/0x360 [ 373.995819][ T9703] ? __lock_acquire+0x1384/0x2050 [ 374.000897][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 374.007042][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 374.013749][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 374.020471][ T9703] ? read_tsc+0x9/0x20 [ 374.024563][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 374.030262][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 374.036643][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 374.042932][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 374.049308][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 374.056007][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 374.061234][ T9703] ? __phys_addr+0xba/0x170 [ 374.065758][ T9703] ? build_skb_around+0x111/0x260 [ 374.070802][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 374.076904][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 374.082232][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 374.087752][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 374.093683][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 374.099363][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 374.105198][ T9703] ? synchronize_rcu+0x11b/0x360 [ 374.110209][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 374.115658][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 374.121980][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 374.128200][ T9703] ? _copy_from_user+0xa6/0xe0 [ 374.133009][ T9703] ? bpf_test_init+0x15a/0x180 [ 374.137832][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 374.143431][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 374.148943][ T9703] ? __pfx_lock_release+0x10/0x10 [ 374.154020][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 374.159891][ T9703] ? __fget_files+0x29/0x470 [ 374.164513][ T9703] ? fput+0x1a8/0x230 [ 374.168787][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 374.174724][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 374.179689][ T9703] __sys_bpf+0x48d/0x810 [ 374.184045][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 374.188844][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 374.194947][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 374.201310][ T9703] ? do_syscall_64+0x100/0x230 [ 374.206271][ T9703] __x64_sys_bpf+0x7c/0x90 [ 374.210964][ T9703] do_syscall_64+0xf3/0x230 [ 374.215586][ T9703] ? clear_bhb_loop+0x35/0x90 [ 374.220319][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.226427][ T9703] RIP: 0033:0x7f327af7dff9 [ 374.230904][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.250624][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.259149][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 374.267145][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 374.275190][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 374.283223][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.291585][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 374.299693][ T9703] [ 374.302827][ T9703] BUG: Bad page state in process syz.4.1082 pfn:581f7 [ 374.309979][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880581f7c00 pfn:0x581f7 [ 374.320398][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 374.327677][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 374.336423][ T9703] raw: ffff8880581f7c00 0000000000000001 00000000ffffffff 0000000000000000 [ 374.345081][ T9703] page dumped because: page_pool leak [ 374.350512][ T9703] page_owner tracks the page as allocated [ 374.356386][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771532827, free_ts 361612904027 [ 374.373569][ T9703] post_alloc_hook+0x1f3/0x230 [ 374.378413][ T9703] get_page_from_freelist+0x3045/0x3190 [ 374.384109][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 374.389441][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 374.394990][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 374.401103][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 374.406402][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 374.411887][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 374.417316][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 374.422332][ T9703] __sys_bpf+0x48d/0x810 [ 374.426625][ T9703] __x64_sys_bpf+0x7c/0x90 [ 374.431110][ T9703] do_syscall_64+0xf3/0x230 [ 374.435698][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.441653][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 374.448036][ T9703] free_unref_page+0xcfb/0xf20 [ 374.452886][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 374.458630][ T9703] __apply_to_page_range+0x806/0xde0 [ 374.463996][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 374.469148][ T9703] purge_vmap_node+0x417/0x810 [ 374.473979][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 374.479403][ T9703] drain_vmap_area_work+0x27/0x40 [ 374.484514][ T9703] process_scheduled_works+0xa63/0x1850 [ 374.490129][ T9703] worker_thread+0x870/0xd30 [ 374.494849][ T9703] kthread+0x2f0/0x390 [ 374.498957][ T9703] ret_from_fork+0x4b/0x80 [ 374.503467][ T9703] ret_from_fork_asm+0x1a/0x30 [ 374.508394][ T9703] Modules linked in: [ 374.512371][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 374.524569][ T9703] Tainted: [B]=BAD_PAGE [ 374.528758][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.538894][ T9703] Call Trace: [ 374.542214][ T9703] [ 374.545204][ T9703] dump_stack_lvl+0x241/0x360 [ 374.549922][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.555170][ T9703] ? __pfx_print_modules+0x10/0x10 [ 374.560434][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 374.566450][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.572892][ T9703] bad_page+0x166/0x1b0 [ 374.577107][ T9703] free_unref_page+0xed0/0xf20 [ 374.582040][ T9703] skb_release_data+0x6dc/0x8a0 [ 374.586922][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 374.591975][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 374.597724][ T9703] ? mark_lock+0x9a/0x360 [ 374.602093][ T9703] ? __lock_acquire+0x1384/0x2050 [ 374.607210][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 374.613334][ T9703] ? mark_lock+0x9a/0x360 [ 374.617752][ T9703] ? __lock_acquire+0x1384/0x2050 [ 374.623010][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 374.629029][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 374.635656][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 374.642510][ T9703] ? read_tsc+0x9/0x20 [ 374.646692][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 374.651946][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 374.658296][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 374.664472][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 374.670846][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 374.677591][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 374.682858][ T9703] ? __phys_addr+0xba/0x170 [ 374.687390][ T9703] ? build_skb_around+0x111/0x260 [ 374.692456][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 374.698486][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 374.703891][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 374.709387][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 374.715393][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 374.720980][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 374.726824][ T9703] ? synchronize_rcu+0x11b/0x360 [ 374.731827][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 374.737228][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 374.743511][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 374.749434][ T9703] ? _copy_from_user+0xa6/0xe0 [ 374.754326][ T9703] ? bpf_test_init+0x15a/0x180 [ 374.759202][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 374.764863][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 374.770310][ T9703] ? __pfx_lock_release+0x10/0x10 [ 374.775394][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 374.781237][ T9703] ? __fget_files+0x29/0x470 [ 374.785893][ T9703] ? fput+0x1a8/0x230 [ 374.789959][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 374.795817][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 374.800991][ T9703] __sys_bpf+0x48d/0x810 [ 374.805265][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 374.810083][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 374.816183][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 374.822546][ T9703] ? do_syscall_64+0x100/0x230 [ 374.827333][ T9703] __x64_sys_bpf+0x7c/0x90 [ 374.831768][ T9703] do_syscall_64+0xf3/0x230 [ 374.836325][ T9703] ? clear_bhb_loop+0x35/0x90 [ 374.841030][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.847048][ T9703] RIP: 0033:0x7f327af7dff9 [ 374.851537][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.871964][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.880681][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 374.888942][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 374.897295][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 374.905475][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.913823][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 374.922271][ T9703] [ 374.925483][ T9703] BUG: Bad page state in process syz.4.1082 pfn:5ab54 [ 374.932413][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ab54f00 pfn:0x5ab54 [ 374.942760][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 374.950120][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 374.958893][ T9703] raw: ffff88805ab54f00 0000000000000001 00000000ffffffff 0000000000000000 [ 374.967541][ T9703] page dumped because: page_pool leak [ 374.972963][ T9703] page_owner tracks the page as allocated [ 374.978795][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771518932, free_ts 361612913918 [ 374.996697][ T9703] post_alloc_hook+0x1f3/0x230 [ 375.001546][ T9703] get_page_from_freelist+0x3045/0x3190 [ 375.007170][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 375.012697][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 375.018201][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 375.024247][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 375.029608][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 375.035143][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 375.040566][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 375.045574][ T9703] __sys_bpf+0x48d/0x810 [ 375.049862][ T9703] __x64_sys_bpf+0x7c/0x90 [ 375.054453][ T9703] do_syscall_64+0xf3/0x230 [ 375.058999][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.065332][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 375.071924][ T9703] free_unref_page+0xcfb/0xf20 [ 375.076712][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 375.083300][ T9703] __apply_to_page_range+0x806/0xde0 [ 375.088714][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 375.093902][ T9703] purge_vmap_node+0x417/0x810 [ 375.098734][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 375.104222][ T9703] drain_vmap_area_work+0x27/0x40 [ 375.109311][ T9703] process_scheduled_works+0xa63/0x1850 [ 375.115050][ T9703] worker_thread+0x870/0xd30 [ 375.119809][ T9703] kthread+0x2f0/0x390 [ 375.124145][ T9703] ret_from_fork+0x4b/0x80 [ 375.128743][ T9703] ret_from_fork_asm+0x1a/0x30 [ 375.134046][ T9703] Modules linked in: [ 375.138002][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 375.150182][ T9703] Tainted: [B]=BAD_PAGE [ 375.154532][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 375.164679][ T9703] Call Trace: [ 375.168019][ T9703] [ 375.170973][ T9703] dump_stack_lvl+0x241/0x360 [ 375.175755][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.181109][ T9703] ? __pfx_print_modules+0x10/0x10 [ 375.186288][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 375.192247][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 375.198702][ T9703] bad_page+0x166/0x1b0 [ 375.202989][ T9703] free_unref_page+0xed0/0xf20 [ 375.207806][ T9703] skb_release_data+0x6dc/0x8a0 [ 375.212692][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 375.217744][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 375.223948][ T9703] ? mark_lock+0x9a/0x360 [ 375.229079][ T9703] ? __lock_acquire+0x1384/0x2050 [ 375.234848][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 375.241167][ T9703] ? mark_lock+0x9a/0x360 [ 375.245531][ T9703] ? __lock_acquire+0x1384/0x2050 [ 375.250741][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 375.256763][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 375.263399][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 375.269934][ T9703] ? read_tsc+0x9/0x20 [ 375.274035][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 375.279370][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 375.285726][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 375.291919][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 375.298395][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 375.305104][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 375.310593][ T9703] ? __phys_addr+0xba/0x170 [ 375.315133][ T9703] ? build_skb_around+0x111/0x260 [ 375.320179][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 375.326109][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 375.331505][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 375.337028][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 375.343213][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 375.348928][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 375.354886][ T9703] ? synchronize_rcu+0x11b/0x360 [ 375.359857][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 375.365218][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 375.371495][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 375.377520][ T9703] ? _copy_from_user+0xa6/0xe0 [ 375.382322][ T9703] ? bpf_test_init+0x15a/0x180 [ 375.387148][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 375.392638][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 375.398132][ T9703] ? __pfx_lock_release+0x10/0x10 [ 375.403205][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 375.409095][ T9703] ? __fget_files+0x29/0x470 [ 375.413725][ T9703] ? fput+0x1a8/0x230 [ 375.417739][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 375.423671][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 375.428823][ T9703] __sys_bpf+0x48d/0x810 [ 375.433146][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 375.437935][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 375.444206][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 375.450579][ T9703] ? do_syscall_64+0x100/0x230 [ 375.455381][ T9703] __x64_sys_bpf+0x7c/0x90 [ 375.459813][ T9703] do_syscall_64+0xf3/0x230 [ 375.464388][ T9703] ? clear_bhb_loop+0x35/0x90 [ 375.469117][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.475036][ T9703] RIP: 0033:0x7f327af7dff9 [ 375.479468][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.499189][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.507718][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 375.516079][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 375.524113][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 375.532114][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.540114][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 375.548128][ T9703] [ 375.551301][ T9703] BUG: Bad page state in process syz.4.1082 pfn:2f77a [ 375.558231][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f77ae00 pfn:0x2f77a [ 375.568455][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 375.575723][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 375.584364][ T9703] raw: ffff88802f77ae00 0000000000000001 00000000ffffffff 0000000000000000 [ 375.593001][ T9703] page dumped because: page_pool leak [ 375.598405][ T9703] page_owner tracks the page as allocated [ 375.604271][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771495957, free_ts 361612923838 [ 375.621366][ T9703] post_alloc_hook+0x1f3/0x230 [ 375.626311][ T9703] get_page_from_freelist+0x3045/0x3190 [ 375.632000][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 375.637353][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 375.642907][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 375.648849][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 375.654119][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 375.659556][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 375.665015][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 375.670134][ T9703] __sys_bpf+0x48d/0x810 [ 375.674581][ T9703] __x64_sys_bpf+0x7c/0x90 [ 375.679049][ T9703] do_syscall_64+0xf3/0x230 [ 375.683756][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.689809][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 375.696550][ T9703] free_unref_page+0xcfb/0xf20 [ 375.701377][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 375.707334][ T9703] __apply_to_page_range+0x806/0xde0 [ 375.712765][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 375.718203][ T9703] purge_vmap_node+0x417/0x810 [ 375.723038][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 375.728551][ T9703] drain_vmap_area_work+0x27/0x40 [ 375.733818][ T9703] process_scheduled_works+0xa63/0x1850 [ 375.739634][ T9703] worker_thread+0x870/0xd30 [ 375.744294][ T9703] kthread+0x2f0/0x390 [ 375.748471][ T9703] ret_from_fork+0x4b/0x80 [ 375.753112][ T9703] ret_from_fork_asm+0x1a/0x30 [ 375.757942][ T9703] Modules linked in: [ 375.761942][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 375.774139][ T9703] Tainted: [B]=BAD_PAGE [ 375.778303][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 375.788466][ T9703] Call Trace: [ 375.791784][ T9703] [ 375.794758][ T9703] dump_stack_lvl+0x241/0x360 [ 375.799522][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.804791][ T9703] ? __pfx_print_modules+0x10/0x10 [ 375.810194][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 375.816217][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 375.822681][ T9703] bad_page+0x166/0x1b0 [ 375.826985][ T9703] free_unref_page+0xed0/0xf20 [ 375.831794][ T9703] skb_release_data+0x6dc/0x8a0 [ 375.836768][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 375.841961][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 375.847711][ T9703] ? mark_lock+0x9a/0x360 [ 375.852215][ T9703] ? __lock_acquire+0x1384/0x2050 [ 375.857279][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 375.863372][ T9703] ? mark_lock+0x9a/0x360 [ 375.867718][ T9703] ? __lock_acquire+0x1384/0x2050 [ 375.872808][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 375.878813][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 375.885425][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 375.892046][ T9703] ? read_tsc+0x9/0x20 [ 375.896144][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 375.901393][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 375.907769][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 375.913949][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 375.920299][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 375.927015][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 375.932260][ T9703] ? __phys_addr+0xba/0x170 [ 375.936859][ T9703] ? build_skb_around+0x111/0x260 [ 375.941919][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 375.948037][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 375.953346][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 375.958851][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 375.964766][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 375.970457][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 375.976374][ T9703] ? synchronize_rcu+0x11b/0x360 [ 375.981427][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 375.986963][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 375.993350][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 375.999319][ T9703] ? _copy_from_user+0xa6/0xe0 [ 376.004232][ T9703] ? bpf_test_init+0x15a/0x180 [ 376.009033][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 376.014566][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 376.020155][ T9703] ? __pfx_lock_release+0x10/0x10 [ 376.025240][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 376.031086][ T9703] ? __fget_files+0x29/0x470 [ 376.035800][ T9703] ? fput+0x1a8/0x230 [ 376.039823][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 376.045660][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 376.050710][ T9703] __sys_bpf+0x48d/0x810 [ 376.054993][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 376.059790][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 376.065902][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.072327][ T9703] ? do_syscall_64+0x100/0x230 [ 376.077148][ T9703] __x64_sys_bpf+0x7c/0x90 [ 376.081586][ T9703] do_syscall_64+0xf3/0x230 [ 376.086131][ T9703] ? clear_bhb_loop+0x35/0x90 [ 376.090879][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.096803][ T9703] RIP: 0033:0x7f327af7dff9 [ 376.101265][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.120979][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.129820][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 376.137811][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 376.145831][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 376.153839][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.161890][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 376.169919][ T9703] [ 376.173078][ T9703] BUG: Bad page state in process syz.4.1082 pfn:303b7 [ 376.179995][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880303b7c00 pfn:0x303b7 [ 376.190450][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 376.197656][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 376.206322][ T9703] raw: ffff8880303b7c00 0000000000000001 00000000ffffffff 0000000000000000 [ 376.214979][ T9703] page dumped because: page_pool leak [ 376.220371][ T9703] page_owner tracks the page as allocated [ 376.226220][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771482299, free_ts 361612933996 [ 376.243309][ T9703] post_alloc_hook+0x1f3/0x230 [ 376.248101][ T9703] get_page_from_freelist+0x3045/0x3190 [ 376.253742][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 376.258978][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 376.264509][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 376.270469][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 376.275737][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 376.281204][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 376.286801][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 376.292249][ T9703] __sys_bpf+0x48d/0x810 [ 376.296535][ T9703] __x64_sys_bpf+0x7c/0x90 [ 376.301002][ T9703] do_syscall_64+0xf3/0x230 [ 376.305846][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.311988][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 376.318375][ T9703] free_unref_page+0xcfb/0xf20 [ 376.323236][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 376.329014][ T9703] __apply_to_page_range+0x806/0xde0 [ 376.334529][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 376.339905][ T9703] purge_vmap_node+0x417/0x810 [ 376.344836][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 376.350461][ T9703] drain_vmap_area_work+0x27/0x40 [ 376.355594][ T9703] process_scheduled_works+0xa63/0x1850 [ 376.361302][ T9703] worker_thread+0x870/0xd30 [ 376.365990][ T9703] kthread+0x2f0/0x390 [ 376.370149][ T9703] ret_from_fork+0x4b/0x80 [ 376.374713][ T9703] ret_from_fork_asm+0x1a/0x30 [ 376.379528][ T9703] Modules linked in: [ 376.383488][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 376.395978][ T9703] Tainted: [B]=BAD_PAGE [ 376.400383][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 376.410655][ T9703] Call Trace: [ 376.414596][ T9703] [ 376.417978][ T9703] dump_stack_lvl+0x241/0x360 [ 376.422817][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.428072][ T9703] ? __pfx_print_modules+0x10/0x10 [ 376.433228][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 376.439375][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 376.445745][ T9703] bad_page+0x166/0x1b0 [ 376.449946][ T9703] free_unref_page+0xed0/0xf20 [ 376.454768][ T9703] skb_release_data+0x6dc/0x8a0 [ 376.459765][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 376.464950][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 376.470700][ T9703] ? mark_lock+0x9a/0x360 [ 376.475054][ T9703] ? __lock_acquire+0x1384/0x2050 [ 376.480223][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 376.486502][ T9703] ? mark_lock+0x9a/0x360 [ 376.490915][ T9703] ? __lock_acquire+0x1384/0x2050 [ 376.495977][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 376.501994][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 376.508619][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 376.515178][ T9703] ? read_tsc+0x9/0x20 [ 376.519285][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 376.524633][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 376.531088][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 376.537305][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 376.543665][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 376.550397][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 376.555648][ T9703] ? __phys_addr+0xba/0x170 [ 376.560174][ T9703] ? build_skb_around+0x111/0x260 [ 376.565226][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 376.571236][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 376.576567][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 376.582156][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 376.588089][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 376.593685][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 376.599571][ T9703] ? synchronize_rcu+0x11b/0x360 [ 376.604541][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 376.609871][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 376.616163][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 376.622116][ T9703] ? _copy_from_user+0xa6/0xe0 [ 376.626910][ T9703] ? bpf_test_init+0x15a/0x180 [ 376.631700][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 376.637189][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 376.642613][ T9703] ? __pfx_lock_release+0x10/0x10 [ 376.648041][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 376.653892][ T9703] ? __fget_files+0x29/0x470 [ 376.658568][ T9703] ? fput+0x1a8/0x230 [ 376.662594][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 376.668457][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 376.673601][ T9703] __sys_bpf+0x48d/0x810 [ 376.677869][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 376.682668][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 376.688763][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.695217][ T9703] ? do_syscall_64+0x100/0x230 [ 376.700282][ T9703] __x64_sys_bpf+0x7c/0x90 [ 376.704817][ T9703] do_syscall_64+0xf3/0x230 [ 376.709351][ T9703] ? clear_bhb_loop+0x35/0x90 [ 376.714057][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.719981][ T9703] RIP: 0033:0x7f327af7dff9 [ 376.724449][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.744346][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.752799][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 376.760789][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 376.768936][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 376.776947][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.785149][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 376.793449][ T9703] [ 376.796658][ T9703] BUG: Bad page state in process syz.4.1082 pfn:2d8be [ 376.803617][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d8bef00 pfn:0x2d8be [ 376.814388][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 376.822034][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 376.830712][ T9703] raw: ffff88802d8bef00 0000000000000001 00000000ffffffff 0000000000000000 [ 376.839415][ T9703] page dumped because: page_pool leak [ 376.844851][ T9703] page_owner tracks the page as allocated [ 376.850724][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771469333, free_ts 361612945753 [ 376.867931][ T9703] post_alloc_hook+0x1f3/0x230 [ 376.872787][ T9703] get_page_from_freelist+0x3045/0x3190 [ 376.878402][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 376.883696][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 376.889820][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 376.895811][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 376.901109][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 376.906569][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 376.912105][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 376.917079][ T9703] __sys_bpf+0x48d/0x810 [ 376.921346][ T9703] __x64_sys_bpf+0x7c/0x90 [ 376.925851][ T9703] do_syscall_64+0xf3/0x230 [ 376.930710][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.936901][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 376.943401][ T9703] free_unref_page+0xcfb/0xf20 [ 376.948228][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 376.954021][ T9703] __apply_to_page_range+0x806/0xde0 [ 376.959418][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 376.964599][ T9703] purge_vmap_node+0x417/0x810 [ 376.969417][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 376.974867][ T9703] drain_vmap_area_work+0x27/0x40 [ 376.979945][ T9703] process_scheduled_works+0xa63/0x1850 [ 376.985579][ T9703] worker_thread+0x870/0xd30 [ 376.990924][ T9703] kthread+0x2f0/0x390 [ 376.995087][ T9703] ret_from_fork+0x4b/0x80 [ 376.999555][ T9703] ret_from_fork_asm+0x1a/0x30 [ 377.004390][ T9703] Modules linked in: [ 377.008346][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 377.020521][ T9703] Tainted: [B]=BAD_PAGE [ 377.024690][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 377.034768][ T9703] Call Trace: [ 377.038061][ T9703] [ 377.041023][ T9703] dump_stack_lvl+0x241/0x360 [ 377.045741][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.050984][ T9703] ? __pfx_print_modules+0x10/0x10 [ 377.056128][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 377.062088][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 377.068484][ T9703] bad_page+0x166/0x1b0 [ 377.072682][ T9703] free_unref_page+0xed0/0xf20 [ 377.077470][ T9703] skb_release_data+0x6dc/0x8a0 [ 377.082374][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 377.087425][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 377.093261][ T9703] ? mark_lock+0x9a/0x360 [ 377.097641][ T9703] ? __lock_acquire+0x1384/0x2050 [ 377.102710][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 377.108803][ T9703] ? mark_lock+0x9a/0x360 [ 377.113162][ T9703] ? __lock_acquire+0x1384/0x2050 [ 377.118238][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 377.124428][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 377.131131][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 377.137730][ T9703] ? read_tsc+0x9/0x20 [ 377.141926][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 377.147351][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 377.153828][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 377.160114][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 377.166510][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 377.173216][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 377.178439][ T9703] ? __phys_addr+0xba/0x170 [ 377.182957][ T9703] ? build_skb_around+0x111/0x260 [ 377.188020][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 377.194389][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 377.199816][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 377.205419][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 377.211379][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 377.217018][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 377.222905][ T9703] ? synchronize_rcu+0x11b/0x360 [ 377.227866][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 377.233204][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 377.239501][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 377.245519][ T9703] ? _copy_from_user+0xa6/0xe0 [ 377.250331][ T9703] ? bpf_test_init+0x15a/0x180 [ 377.255135][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 377.260634][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 377.266047][ T9703] ? __pfx_lock_release+0x10/0x10 [ 377.271192][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 377.277116][ T9703] ? __fget_files+0x29/0x470 [ 377.281741][ T9703] ? fput+0x1a8/0x230 [ 377.285759][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 377.291627][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 377.296609][ T9703] __sys_bpf+0x48d/0x810 [ 377.300879][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 377.305664][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 377.311663][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.318090][ T9703] ? do_syscall_64+0x100/0x230 [ 377.322900][ T9703] __x64_sys_bpf+0x7c/0x90 [ 377.327338][ T9703] do_syscall_64+0xf3/0x230 [ 377.331882][ T9703] ? clear_bhb_loop+0x35/0x90 [ 377.336689][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.342808][ T9703] RIP: 0033:0x7f327af7dff9 [ 377.347289][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.367022][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.375561][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 377.383574][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 377.391677][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 377.399749][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.407733][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 377.415814][ T9703] [ 377.418931][ T9703] BUG: Bad page state in process syz.4.1082 pfn:2d91e [ 377.425864][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d91ef50 pfn:0x2d91e [ 377.436190][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 377.443387][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 377.452091][ T9703] raw: ffff88802d91ef50 0000000000000001 00000000ffffffff 0000000000000000 [ 377.460978][ T9703] page dumped because: page_pool leak [ 377.466429][ T9703] page_owner tracks the page as allocated [ 377.472221][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771455952, free_ts 361612979638 [ 377.489466][ T9703] post_alloc_hook+0x1f3/0x230 [ 377.494335][ T9703] get_page_from_freelist+0x3045/0x3190 [ 377.499917][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 377.505178][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 377.510846][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 377.516811][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 377.522096][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 377.527524][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 377.533170][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 377.538166][ T9703] __sys_bpf+0x48d/0x810 [ 377.542468][ T9703] __x64_sys_bpf+0x7c/0x90 [ 377.546952][ T9703] do_syscall_64+0xf3/0x230 [ 377.551483][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.557448][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 377.564080][ T9703] free_unref_page+0xcfb/0xf20 [ 377.568870][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 377.574688][ T9703] __apply_to_page_range+0x806/0xde0 [ 377.580043][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 377.585245][ T9703] purge_vmap_node+0x417/0x810 [ 377.590083][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 377.595551][ T9703] drain_vmap_area_work+0x27/0x40 [ 377.600634][ T9703] process_scheduled_works+0xa63/0x1850 [ 377.606263][ T9703] worker_thread+0x870/0xd30 [ 377.610937][ T9703] kthread+0x2f0/0x390 [ 377.615312][ T9703] ret_from_fork+0x4b/0x80 [ 377.619892][ T9703] ret_from_fork_asm+0x1a/0x30 [ 377.624876][ T9703] Modules linked in: [ 377.628808][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 377.640978][ T9703] Tainted: [B]=BAD_PAGE [ 377.645200][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 377.655294][ T9703] Call Trace: [ 377.658595][ T9703] [ 377.661556][ T9703] dump_stack_lvl+0x241/0x360 [ 377.666259][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.671480][ T9703] ? __pfx_print_modules+0x10/0x10 [ 377.676632][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 377.682662][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 377.689023][ T9703] bad_page+0x166/0x1b0 [ 377.693219][ T9703] free_unref_page+0xed0/0xf20 [ 377.698050][ T9703] skb_release_data+0x6dc/0x8a0 [ 377.703111][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 377.708179][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 377.714059][ T9703] ? mark_lock+0x9a/0x360 [ 377.718519][ T9703] ? __lock_acquire+0x1384/0x2050 [ 377.723751][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 377.729927][ T9703] ? mark_lock+0x9a/0x360 [ 377.734457][ T9703] ? __lock_acquire+0x1384/0x2050 [ 377.739533][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 377.745749][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 377.752704][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 377.759533][ T9703] ? read_tsc+0x9/0x20 [ 377.763730][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 377.769113][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 377.776890][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 377.783184][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 377.789710][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 377.796422][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 377.801671][ T9703] ? __phys_addr+0xba/0x170 [ 377.806245][ T9703] ? build_skb_around+0x111/0x260 [ 377.811301][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 377.817229][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 377.822542][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 377.828112][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 377.834121][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 377.839688][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 377.845687][ T9703] ? synchronize_rcu+0x11b/0x360 [ 377.850643][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 377.855971][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 377.862244][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 377.868372][ T9703] ? _copy_from_user+0xa6/0xe0 [ 377.873187][ T9703] ? bpf_test_init+0x15a/0x180 [ 377.877985][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 377.883566][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 377.889014][ T9703] ? __pfx_lock_release+0x10/0x10 [ 377.894071][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 377.900020][ T9703] ? __fget_files+0x29/0x470 [ 377.904645][ T9703] ? fput+0x1a8/0x230 [ 377.908738][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 377.914707][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 377.919844][ T9703] __sys_bpf+0x48d/0x810 [ 377.924233][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 377.929152][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 377.935277][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.941642][ T9703] ? do_syscall_64+0x100/0x230 [ 377.946460][ T9703] __x64_sys_bpf+0x7c/0x90 [ 377.950904][ T9703] do_syscall_64+0xf3/0x230 [ 377.955516][ T9703] ? clear_bhb_loop+0x35/0x90 [ 377.960211][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.966344][ T9703] RIP: 0033:0x7f327af7dff9 [ 377.970787][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.990413][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.998850][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 378.006844][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 378.014920][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 378.023047][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.031155][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 378.039188][ T9703] [ 378.042312][ T9703] BUG: Bad page state in process syz.4.1082 pfn:245bb [ 378.049199][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880245bbf50 pfn:0x245bb [ 378.059358][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 378.066562][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 378.075333][ T9703] raw: ffff8880245bbf50 0000000000000001 00000000ffffffff 0000000000000000 [ 378.083983][ T9703] page dumped because: page_pool leak [ 378.089377][ T9703] page_owner tracks the page as allocated [ 378.095167][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771443193, free_ts 361612991415 [ 378.112255][ T9703] post_alloc_hook+0x1f3/0x230 [ 378.117150][ T9703] get_page_from_freelist+0x3045/0x3190 [ 378.122966][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 378.128666][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 378.134281][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 378.140316][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 378.145702][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 378.151251][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 378.156722][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 378.161707][ T9703] __sys_bpf+0x48d/0x810 [ 378.166033][ T9703] __x64_sys_bpf+0x7c/0x90 [ 378.170520][ T9703] do_syscall_64+0xf3/0x230 [ 378.175195][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.181146][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 378.187635][ T9703] free_unref_page+0xcfb/0xf20 [ 378.192455][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 378.198209][ T9703] __apply_to_page_range+0x806/0xde0 [ 378.203781][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 378.208937][ T9703] purge_vmap_node+0x417/0x810 [ 378.213850][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 378.219380][ T9703] drain_vmap_area_work+0x27/0x40 [ 378.224498][ T9703] process_scheduled_works+0xa63/0x1850 [ 378.230100][ T9703] worker_thread+0x870/0xd30 [ 378.234777][ T9703] kthread+0x2f0/0x390 [ 378.238991][ T9703] ret_from_fork+0x4b/0x80 [ 378.243507][ T9703] ret_from_fork_asm+0x1a/0x30 [ 378.248317][ T9703] Modules linked in: [ 378.252272][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 378.264458][ T9703] Tainted: [B]=BAD_PAGE [ 378.268619][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.278714][ T9703] Call Trace: [ 378.282027][ T9703] [ 378.284979][ T9703] dump_stack_lvl+0x241/0x360 [ 378.289668][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.294952][ T9703] ? __pfx_print_modules+0x10/0x10 [ 378.300253][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 378.306171][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 378.312610][ T9703] bad_page+0x166/0x1b0 [ 378.316795][ T9703] free_unref_page+0xed0/0xf20 [ 378.321587][ T9703] skb_release_data+0x6dc/0x8a0 [ 378.326457][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 378.331493][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 378.337241][ T9703] ? mark_lock+0x9a/0x360 [ 378.341612][ T9703] ? __lock_acquire+0x1384/0x2050 [ 378.346688][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 378.352799][ T9703] ? mark_lock+0x9a/0x360 [ 378.357173][ T9703] ? __lock_acquire+0x1384/0x2050 [ 378.362426][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 378.368543][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 378.375273][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 378.381890][ T9703] ? read_tsc+0x9/0x20 [ 378.385988][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 378.391212][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 378.397656][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 378.403984][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 378.410467][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 378.417208][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 378.422458][ T9703] ? __phys_addr+0xba/0x170 [ 378.426996][ T9703] ? build_skb_around+0x111/0x260 [ 378.432063][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 378.438092][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 378.443412][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 378.449073][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 378.454999][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 378.460572][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 378.466408][ T9703] ? synchronize_rcu+0x11b/0x360 [ 378.471371][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 378.476679][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 378.482946][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 378.488862][ T9703] ? _copy_from_user+0xa6/0xe0 [ 378.493648][ T9703] ? bpf_test_init+0x15a/0x180 [ 378.498440][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 378.503918][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 378.509316][ T9703] ? __pfx_lock_release+0x10/0x10 [ 378.514462][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 378.520301][ T9703] ? __fget_files+0x29/0x470 [ 378.524929][ T9703] ? fput+0x1a8/0x230 [ 378.528951][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 378.534974][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 378.539996][ T9703] __sys_bpf+0x48d/0x810 [ 378.544281][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 378.549068][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.555081][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.561429][ T9703] ? do_syscall_64+0x100/0x230 [ 378.566233][ T9703] __x64_sys_bpf+0x7c/0x90 [ 378.570772][ T9703] do_syscall_64+0xf3/0x230 [ 378.575426][ T9703] ? clear_bhb_loop+0x35/0x90 [ 378.580240][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.586168][ T9703] RIP: 0033:0x7f327af7dff9 [ 378.590608][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.610431][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.618884][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 378.626888][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 378.634913][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 378.642966][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.650965][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 378.659010][ T9703] [ 378.662217][ T9703] BUG: Bad page state in process syz.4.1082 pfn:78408 [ 378.669111][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078408000 pfn:0x78408 [ 378.679277][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 378.686948][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 378.695923][ T9703] raw: ffff888078408000 0000000000000001 00000000ffffffff 0000000000000000 [ 378.704576][ T9703] page dumped because: page_pool leak [ 378.709986][ T9703] page_owner tracks the page as allocated [ 378.715782][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771430274, free_ts 361613003616 [ 378.732883][ T9703] post_alloc_hook+0x1f3/0x230 [ 378.737683][ T9703] get_page_from_freelist+0x3045/0x3190 [ 378.743301][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 378.748541][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 378.754164][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 378.760195][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 378.765464][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 378.771232][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 378.776684][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 378.781690][ T9703] __sys_bpf+0x48d/0x810 [ 378.786089][ T9703] __x64_sys_bpf+0x7c/0x90 [ 378.790539][ T9703] do_syscall_64+0xf3/0x230 [ 378.795331][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.801282][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 378.807676][ T9703] free_unref_page+0xcfb/0xf20 [ 378.812520][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 378.818276][ T9703] __apply_to_page_range+0x806/0xde0 [ 378.823621][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 378.828769][ T9703] purge_vmap_node+0x417/0x810 [ 378.833688][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 378.839102][ T9703] drain_vmap_area_work+0x27/0x40 [ 378.844223][ T9703] process_scheduled_works+0xa63/0x1850 [ 378.849838][ T9703] worker_thread+0x870/0xd30 [ 378.854565][ T9703] kthread+0x2f0/0x390 [ 378.858677][ T9703] ret_from_fork+0x4b/0x80 [ 378.863178][ T9703] ret_from_fork_asm+0x1a/0x30 [ 378.867986][ T9703] Modules linked in: [ 378.871962][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 378.884336][ T9703] Tainted: [B]=BAD_PAGE [ 378.888519][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 378.898628][ T9703] Call Trace: [ 378.901945][ T9703] [ 378.904907][ T9703] dump_stack_lvl+0x241/0x360 [ 378.909735][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.915002][ T9703] ? __pfx_print_modules+0x10/0x10 [ 378.920152][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 378.926178][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 378.932542][ T9703] bad_page+0x166/0x1b0 [ 378.936740][ T9703] free_unref_page+0xed0/0xf20 [ 378.941522][ T9703] skb_release_data+0x6dc/0x8a0 [ 378.946476][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 378.951536][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 378.957280][ T9703] ? mark_lock+0x9a/0x360 [ 378.961628][ T9703] ? __lock_acquire+0x1384/0x2050 [ 378.966702][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 378.972812][ T9703] ? mark_lock+0x9a/0x360 [ 378.977194][ T9703] ? __lock_acquire+0x1384/0x2050 [ 378.982247][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 378.988284][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 378.994917][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 379.001459][ T9703] ? read_tsc+0x9/0x20 [ 379.005568][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 379.010813][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 379.017172][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 379.023391][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 379.029779][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 379.036574][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 379.041821][ T9703] ? __phys_addr+0xba/0x170 [ 379.046385][ T9703] ? build_skb_around+0x111/0x260 [ 379.051424][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 379.057340][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 379.062670][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 379.068610][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 379.074647][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 379.080277][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 379.086111][ T9703] ? synchronize_rcu+0x11b/0x360 [ 379.091103][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 379.096448][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 379.102735][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 379.108669][ T9703] ? _copy_from_user+0xa6/0xe0 [ 379.113471][ T9703] ? bpf_test_init+0x15a/0x180 [ 379.118259][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 379.123753][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 379.129180][ T9703] ? __pfx_lock_release+0x10/0x10 [ 379.134353][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 379.140220][ T9703] ? __fget_files+0x29/0x470 [ 379.144845][ T9703] ? fput+0x1a8/0x230 [ 379.148868][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 379.154701][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 379.159766][ T9703] __sys_bpf+0x48d/0x810 [ 379.164054][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 379.168844][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.174868][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.181313][ T9703] ? do_syscall_64+0x100/0x230 [ 379.186130][ T9703] __x64_sys_bpf+0x7c/0x90 [ 379.190569][ T9703] do_syscall_64+0xf3/0x230 [ 379.195173][ T9703] ? clear_bhb_loop+0x35/0x90 [ 379.200023][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.205948][ T9703] RIP: 0033:0x7f327af7dff9 [ 379.210486][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.230110][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.238840][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 379.246884][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 379.255069][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 379.263214][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.271211][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 379.279211][ T9703] [ 379.282458][ T9703] BUG: Bad page state in process syz.4.1082 pfn:7d304 [ 379.289373][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d304f50 pfn:0x7d304 [ 379.299509][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 379.306876][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 379.315595][ T9703] raw: ffff88807d304f50 0000000000000001 00000000ffffffff 0000000000000000 [ 379.324327][ T9703] page dumped because: page_pool leak [ 379.329750][ T9703] page_owner tracks the page as allocated [ 379.335537][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771416803, free_ts 361613015640 [ 379.352628][ T9703] post_alloc_hook+0x1f3/0x230 [ 379.357508][ T9703] get_page_from_freelist+0x3045/0x3190 [ 379.363130][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 379.368369][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 379.373909][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 379.379851][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 379.385202][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 379.390618][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 379.396073][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 379.401062][ T9703] __sys_bpf+0x48d/0x810 [ 379.405393][ T9703] __x64_sys_bpf+0x7c/0x90 [ 379.410809][ T9703] do_syscall_64+0xf3/0x230 [ 379.415921][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.421948][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 379.428315][ T9703] free_unref_page+0xcfb/0xf20 [ 379.433154][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 379.438926][ T9703] __apply_to_page_range+0x806/0xde0 [ 379.444299][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 379.449494][ T9703] purge_vmap_node+0x417/0x810 [ 379.454381][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 379.459796][ T9703] drain_vmap_area_work+0x27/0x40 [ 379.464898][ T9703] process_scheduled_works+0xa63/0x1850 [ 379.470538][ T9703] worker_thread+0x870/0xd30 [ 379.475405][ T9703] kthread+0x2f0/0x390 [ 379.479508][ T9703] ret_from_fork+0x4b/0x80 [ 379.483991][ T9703] ret_from_fork_asm+0x1a/0x30 [ 379.488799][ T9703] Modules linked in: [ 379.492935][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 379.505400][ T9703] Tainted: [B]=BAD_PAGE [ 379.509658][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 379.519818][ T9703] Call Trace: [ 379.523121][ T9703] [ 379.526063][ T9703] dump_stack_lvl+0x241/0x360 [ 379.530855][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.536134][ T9703] ? __pfx_print_modules+0x10/0x10 [ 379.541269][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 379.547181][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.553614][ T9703] bad_page+0x166/0x1b0 [ 379.557789][ T9703] free_unref_page+0xed0/0xf20 [ 379.562578][ T9703] skb_release_data+0x6dc/0x8a0 [ 379.567505][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 379.572573][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 379.578341][ T9703] ? mark_lock+0x9a/0x360 [ 379.582877][ T9703] ? __lock_acquire+0x1384/0x2050 [ 379.587940][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 379.594030][ T9703] ? mark_lock+0x9a/0x360 [ 379.598375][ T9703] ? __lock_acquire+0x1384/0x2050 [ 379.603463][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 379.609487][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 379.616096][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 379.622612][ T9703] ? read_tsc+0x9/0x20 [ 379.626698][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 379.631930][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 379.638311][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 379.644730][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 379.651106][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 379.657811][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 379.663128][ T9703] ? __phys_addr+0xba/0x170 [ 379.667670][ T9703] ? build_skb_around+0x111/0x260 [ 379.672835][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 379.678794][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 379.684129][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 379.689634][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 379.695559][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 379.701134][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 379.706988][ T9703] ? synchronize_rcu+0x11b/0x360 [ 379.711980][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 379.717302][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 379.723578][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 379.729500][ T9703] ? _copy_from_user+0xa6/0xe0 [ 379.734301][ T9703] ? bpf_test_init+0x15a/0x180 [ 379.739121][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 379.744607][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 379.750016][ T9703] ? __pfx_lock_release+0x10/0x10 [ 379.755201][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 379.761050][ T9703] ? __fget_files+0x29/0x470 [ 379.765674][ T9703] ? fput+0x1a8/0x230 [ 379.769673][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 379.775604][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 379.780589][ T9703] __sys_bpf+0x48d/0x810 [ 379.784859][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 379.789646][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.795715][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.802166][ T9703] ? do_syscall_64+0x100/0x230 [ 379.806956][ T9703] __x64_sys_bpf+0x7c/0x90 [ 379.811480][ T9703] do_syscall_64+0xf3/0x230 [ 379.816002][ T9703] ? clear_bhb_loop+0x35/0x90 [ 379.820780][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.826725][ T9703] RIP: 0033:0x7f327af7dff9 [ 379.831158][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.850794][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.859425][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 379.867598][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 379.875625][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 379.883614][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.891598][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 379.899594][ T9703] [ 379.902709][ T9703] BUG: Bad page state in process syz.4.1082 pfn:5923a [ 379.909641][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805923af50 pfn:0x5923a [ 379.919861][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 379.927041][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 379.935821][ T9703] raw: ffff88805923af50 0000000000000001 00000000ffffffff 0000000000000000 [ 379.944463][ T9703] page dumped because: page_pool leak [ 379.949871][ T9703] page_owner tracks the page as allocated [ 379.955688][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771403559, free_ts 361613029787 [ 379.973403][ T9703] post_alloc_hook+0x1f3/0x230 [ 379.978218][ T9703] get_page_from_freelist+0x3045/0x3190 [ 379.983846][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 379.989183][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 379.994721][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 380.000672][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 380.005968][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 380.011392][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 380.016947][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 380.021958][ T9703] __sys_bpf+0x48d/0x810 [ 380.026242][ T9703] __x64_sys_bpf+0x7c/0x90 [ 380.030762][ T9703] do_syscall_64+0xf3/0x230 [ 380.035414][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.042004][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 380.048522][ T9703] free_unref_page+0xcfb/0xf20 [ 380.053343][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 380.059119][ T9703] __apply_to_page_range+0x806/0xde0 [ 380.064484][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 380.069628][ T9703] purge_vmap_node+0x417/0x810 [ 380.074470][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 380.079894][ T9703] drain_vmap_area_work+0x27/0x40 [ 380.085001][ T9703] process_scheduled_works+0xa63/0x1850 [ 380.090602][ T9703] worker_thread+0x870/0xd30 [ 380.095348][ T9703] kthread+0x2f0/0x390 [ 380.099462][ T9703] ret_from_fork+0x4b/0x80 [ 380.103972][ T9703] ret_from_fork_asm+0x1a/0x30 [ 380.108798][ T9703] Modules linked in: [ 380.112869][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 380.125316][ T9703] Tainted: [B]=BAD_PAGE [ 380.129472][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.139537][ T9703] Call Trace: [ 380.142824][ T9703] [ 380.145791][ T9703] dump_stack_lvl+0x241/0x360 [ 380.150495][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.155710][ T9703] ? __pfx_print_modules+0x10/0x10 [ 380.160841][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.166799][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.173531][ T9703] bad_page+0x166/0x1b0 [ 380.177741][ T9703] free_unref_page+0xed0/0xf20 [ 380.182552][ T9703] skb_release_data+0x6dc/0x8a0 [ 380.187439][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 380.192474][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 380.198231][ T9703] ? mark_lock+0x9a/0x360 [ 380.202672][ T9703] ? __lock_acquire+0x1384/0x2050 [ 380.207802][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 380.213975][ T9703] ? mark_lock+0x9a/0x360 [ 380.218489][ T9703] ? __lock_acquire+0x1384/0x2050 [ 380.223553][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 380.229669][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 380.236303][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 380.242858][ T9703] ? read_tsc+0x9/0x20 [ 380.246959][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 380.252217][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 380.258563][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 380.264737][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 380.271095][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 380.277790][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 380.283021][ T9703] ? __phys_addr+0xba/0x170 [ 380.287557][ T9703] ? build_skb_around+0x111/0x260 [ 380.292599][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 380.298515][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 380.303820][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 380.309305][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 380.315222][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 380.320789][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 380.326648][ T9703] ? synchronize_rcu+0x11b/0x360 [ 380.331640][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 380.336988][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 380.343285][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 380.349204][ T9703] ? _copy_from_user+0xa6/0xe0 [ 380.354079][ T9703] ? bpf_test_init+0x15a/0x180 [ 380.358909][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 380.364453][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 380.369866][ T9703] ? __pfx_lock_release+0x10/0x10 [ 380.374921][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 380.380764][ T9703] ? __fget_files+0x29/0x470 [ 380.385481][ T9703] ? fput+0x1a8/0x230 [ 380.389509][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 380.395338][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 380.400299][ T9703] __sys_bpf+0x48d/0x810 [ 380.404560][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 380.409345][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.415389][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.421841][ T9703] ? do_syscall_64+0x100/0x230 [ 380.426629][ T9703] __x64_sys_bpf+0x7c/0x90 [ 380.431070][ T9703] do_syscall_64+0xf3/0x230 [ 380.435595][ T9703] ? clear_bhb_loop+0x35/0x90 [ 380.440290][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.446356][ T9703] RIP: 0033:0x7f327af7dff9 [ 380.450809][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.470558][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.479094][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 380.487083][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 380.495108][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 380.503124][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.511119][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 380.519118][ T9703] [ 380.522240][ T9703] BUG: Bad page state in process syz.4.1082 pfn:59084 [ 380.529129][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888059084f50 pfn:0x59084 [ 380.539262][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 380.546466][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 380.555109][ T9703] raw: ffff888059084f50 0000000000000001 00000000ffffffff 0000000000000000 [ 380.563834][ T9703] page dumped because: page_pool leak [ 380.569228][ T9703] page_owner tracks the page as allocated [ 380.575109][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771390121, free_ts 361613041046 [ 380.592201][ T9703] post_alloc_hook+0x1f3/0x230 [ 380.596997][ T9703] get_page_from_freelist+0x3045/0x3190 [ 380.602647][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 380.608123][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 380.613656][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 380.619609][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 380.624919][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 380.630340][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 380.635897][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 380.640896][ T9703] __sys_bpf+0x48d/0x810 [ 380.645298][ T9703] __x64_sys_bpf+0x7c/0x90 [ 380.649757][ T9703] do_syscall_64+0xf3/0x230 [ 380.654371][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.660408][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 380.666799][ T9703] free_unref_page+0xcfb/0xf20 [ 380.671755][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 380.677618][ T9703] __apply_to_page_range+0x806/0xde0 [ 380.683018][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 380.688197][ T9703] purge_vmap_node+0x417/0x810 [ 380.693079][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 380.698664][ T9703] drain_vmap_area_work+0x27/0x40 [ 380.703759][ T9703] process_scheduled_works+0xa63/0x1850 [ 380.709350][ T9703] worker_thread+0x870/0xd30 [ 380.714198][ T9703] kthread+0x2f0/0x390 [ 380.718317][ T9703] ret_from_fork+0x4b/0x80 [ 380.722917][ T9703] ret_from_fork_asm+0x1a/0x30 [ 380.727742][ T9703] Modules linked in: [ 380.731666][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 380.743948][ T9703] Tainted: [B]=BAD_PAGE [ 380.748141][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.758410][ T9703] Call Trace: [ 380.761845][ T9703] [ 380.764807][ T9703] dump_stack_lvl+0x241/0x360 [ 380.769502][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.774731][ T9703] ? __pfx_print_modules+0x10/0x10 [ 380.779873][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.785999][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.792380][ T9703] bad_page+0x166/0x1b0 [ 380.796565][ T9703] free_unref_page+0xed0/0xf20 [ 380.801385][ T9703] skb_release_data+0x6dc/0x8a0 [ 380.806254][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 380.811292][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 380.817073][ T9703] ? mark_lock+0x9a/0x360 [ 380.821440][ T9703] ? __lock_acquire+0x1384/0x2050 [ 380.826535][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 380.832664][ T9703] ? mark_lock+0x9a/0x360 [ 380.837034][ T9703] ? __lock_acquire+0x1384/0x2050 [ 380.842178][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 380.848249][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 380.854871][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 380.861403][ T9703] ? read_tsc+0x9/0x20 [ 380.865509][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 380.870730][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 380.877194][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 380.883397][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 380.889777][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 380.896492][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 380.901722][ T9703] ? __phys_addr+0xba/0x170 [ 380.906255][ T9703] ? build_skb_around+0x111/0x260 [ 380.911319][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 380.917272][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 380.922603][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 380.928150][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 380.934078][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 380.939674][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 380.945539][ T9703] ? synchronize_rcu+0x11b/0x360 [ 380.950506][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 380.955832][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 380.962119][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 380.968048][ T9703] ? _copy_from_user+0xa6/0xe0 [ 380.972845][ T9703] ? bpf_test_init+0x15a/0x180 [ 380.977646][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 380.983150][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 380.988558][ T9703] ? __pfx_lock_release+0x10/0x10 [ 380.993633][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 380.999616][ T9703] ? __fget_files+0x29/0x470 [ 381.004322][ T9703] ? fput+0x1a8/0x230 [ 381.008335][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 381.014176][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 381.019143][ T9703] __sys_bpf+0x48d/0x810 [ 381.023405][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 381.028248][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.034274][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.040652][ T9703] ? do_syscall_64+0x100/0x230 [ 381.045516][ T9703] __x64_sys_bpf+0x7c/0x90 [ 381.049953][ T9703] do_syscall_64+0xf3/0x230 [ 381.054477][ T9703] ? clear_bhb_loop+0x35/0x90 [ 381.059180][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.065112][ T9703] RIP: 0033:0x7f327af7dff9 [ 381.069536][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.089165][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.097617][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 381.105710][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 381.113872][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 381.121968][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.129953][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 381.137950][ T9703] [ 381.141065][ T9703] BUG: Bad page state in process syz.4.1082 pfn:5f5b6 [ 381.148001][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f5b6f00 pfn:0x5f5b6 [ 381.158236][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 381.165414][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 381.174063][ T9703] raw: ffff88805f5b6f00 0000000000000001 00000000ffffffff 0000000000000000 [ 381.182813][ T9703] page dumped because: page_pool leak [ 381.188226][ T9703] page_owner tracks the page as allocated [ 381.194008][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771376739, free_ts 361613052817 [ 381.211188][ T9703] post_alloc_hook+0x1f3/0x230 [ 381.216120][ T9703] get_page_from_freelist+0x3045/0x3190 [ 381.221738][ T9703] __alloc_pages_noprof+0x256/0x6c0 [ 381.227019][ T9703] alloc_pages_bulk_noprof+0x729/0xd40 [ 381.232542][ T9703] __page_pool_alloc_pages_slow+0x122/0x690 [ 381.238560][ T9703] page_pool_alloc_pages+0xd0/0x1c0 [ 381.243857][ T9703] bpf_test_run_xdp_live+0x950/0x2160 [ 381.249272][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 381.254723][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 381.259707][ T9703] __sys_bpf+0x48d/0x810 [ 381.264099][ T9703] __x64_sys_bpf+0x7c/0x90 [ 381.268744][ T9703] do_syscall_64+0xf3/0x230 [ 381.273533][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.279474][ T9703] page last free pid 5322 tgid 5322 stack trace: [ 381.285889][ T9703] free_unref_page+0xcfb/0xf20 [ 381.290858][ T9703] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 381.297163][ T9703] __apply_to_page_range+0x806/0xde0 [ 381.302511][ T9703] kasan_release_vmalloc+0x9a/0xb0 [ 381.307647][ T9703] purge_vmap_node+0x417/0x810 [ 381.312499][ T9703] __purge_vmap_area_lazy+0x708/0xae0 [ 381.318038][ T9703] drain_vmap_area_work+0x27/0x40 [ 381.323330][ T9703] process_scheduled_works+0xa63/0x1850 [ 381.328928][ T9703] worker_thread+0x870/0xd30 [ 381.333590][ T9703] kthread+0x2f0/0x390 [ 381.337800][ T9703] ret_from_fork+0x4b/0x80 [ 381.342297][ T9703] ret_from_fork_asm+0x1a/0x30 [ 381.347228][ T9703] Modules linked in: [ 381.351141][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1082 Tainted: G B 6.12.0-rc1-syzkaller-00229-gd521db38f339 #0 [ 381.363310][ T9703] Tainted: [B]=BAD_PAGE [ 381.367472][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.377549][ T9703] Call Trace: [ 381.380852][ T9703] [ 381.383797][ T9703] dump_stack_lvl+0x241/0x360 [ 381.388492][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.393705][ T9703] ? __pfx_print_modules+0x10/0x10 [ 381.399106][ T9703] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.405115][ T9703] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 381.411474][ T9703] bad_page+0x166/0x1b0 [ 381.415660][ T9703] free_unref_page+0xed0/0xf20 [ 381.420603][ T9703] skb_release_data+0x6dc/0x8a0 [ 381.425500][ T9703] sk_skb_reason_drop+0x1c9/0x380 [ 381.430559][ T9703] __netif_receive_skb_core+0x3edd/0x4570 [ 381.436331][ T9703] ? mark_lock+0x9a/0x360 [ 381.440698][ T9703] ? __lock_acquire+0x1384/0x2050 [ 381.445780][ T9703] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 381.451898][ T9703] ? mark_lock+0x9a/0x360 [ 381.456269][ T9703] ? __lock_acquire+0x1384/0x2050 [ 381.461341][ T9703] __netif_receive_skb_list_core+0x2b1/0x980 [ 381.467434][ T9703] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 381.474137][ T9703] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 381.480665][ T9703] ? read_tsc+0x9/0x20 [ 381.484757][ T9703] ? timekeeping_get_ns+0x2c0/0x420 [ 381.489994][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 381.496355][ T9703] netif_receive_skb_list_internal+0xa51/0xe30 [ 381.502546][ T9703] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 381.508939][ T9703] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 381.515641][ T9703] ? __pfx_eth_type_trans+0x10/0x10 [ 381.520875][ T9703] ? __phys_addr+0xba/0x170 [ 381.525449][ T9703] ? build_skb_around+0x111/0x260 [ 381.530491][ T9703] ? __xdp_build_skb_from_frame+0x338/0x650 [ 381.536496][ T9703] netif_receive_skb_list+0x55/0x4b0 [ 381.541848][ T9703] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 381.547351][ T9703] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 381.553365][ T9703] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 381.559055][ T9703] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 381.565059][ T9703] ? synchronize_rcu+0x11b/0x360 [ 381.570154][ T9703] ? __pfx_synchronize_rcu+0x10/0x10 [ 381.575554][ T9703] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 381.581856][ T9703] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 381.587785][ T9703] ? _copy_from_user+0xa6/0xe0 [ 381.592602][ T9703] ? bpf_test_init+0x15a/0x180 [ 381.597384][ T9703] ? xdp_convert_md_to_buff+0x5b/0x330 [ 381.602876][ T9703] bpf_prog_test_run_xdp+0x805/0x11e0 [ 381.608273][ T9703] ? __pfx_lock_release+0x10/0x10 [ 381.613319][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 381.619227][ T9703] ? __fget_files+0x29/0x470 [ 381.623831][ T9703] ? fput+0x1a8/0x230 [ 381.627827][ T9703] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 381.633672][ T9703] bpf_prog_test_run+0x2e4/0x360 [ 381.638640][ T9703] __sys_bpf+0x48d/0x810 [ 381.642913][ T9703] ? __pfx___sys_bpf+0x10/0x10 [ 381.647710][ T9703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.653735][ T9703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.660110][ T9703] ? do_syscall_64+0x100/0x230 [ 381.664954][ T9703] __x64_sys_bpf+0x7c/0x90 [ 381.669390][ T9703] do_syscall_64+0xf3/0x230 [ 381.673911][ T9703] ? clear_bhb_loop+0x35/0x90 [ 381.678700][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.684632][ T9703] RIP: 0033:0x7f327af7dff9 [ 381.689104][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.709013][ T9703] RSP: 002b:00007f327bdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.717711][ T9703] RAX: ffffffffffffffda RBX: 00007f327b136058 RCX: 00007f327af7dff9 [ 381.725886][ T9703] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 381.733991][ T9703] RBP: 00007f327aff0296 R08: 0000000000000000 R09: 0000000000000000 [ 381.741984][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.749968][ T9703] R13: 0000000000000000 R14: 00007f327b136058 R15: 00007ffdcbd8cdf8 [ 381.757974][ T9703] [ 381.761092][ T9703] BUG: Bad page state in process syz.4.1082 pfn:31c17 [ 381.768020][ T9703] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031c17f50 pfn:0x31c17 [ 381.778148][ T9703] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 381.785331][ T9703] raw: 00fff00000000000 dead000000000040 ffff88807e520000 0000000000000000 [ 381.794026][ T9703] raw: ffff888031c17f50 0000000000000001 00000000ffffffff 0000000000000000 [ 381.802699][ T9703] page dumped because: page_pool leak [ 381.808098][ T9703] page_owner tracks the page as allocated [ 381.813910][ T9703] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9703, tgid 9698 (syz.4.1082), ts 371771363843, free_ts 361613064667 [ 381.831040][ T9703] post_alloc_hook+0x1f3/0x230 [ 381.835901][ T9703] get_page_from_freelist+0x3045/0x3190