last executing test programs: 46.348254358s ago: executing program 3 (id=537): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb5, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={r0, r2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1b, 0x80000, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000400)={0x50c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xbb33, 0x1a}}}}, [@NL80211_ATTR_BEACON_HEAD={0x4ad, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_b, @random="c0fe70c432f6", {0x3, 0x5}, @value=@ver_80211n={0x0, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x100, @default, 0x4400, @void, @void, @val={0x3, 0x1, 0xa5}, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0xb1, {0xfa, 0x2a, 0x9, "b837031b4ca73910d870ab1e9f510bd26c97dd79ad0f0eb4638c5401ddd2f84bdd799f8465199692f63792af2d87131b147d576128cdfa59ef8479a309455f989f5310db69562f716ac7d70e0e432920406b9b6d97cc6242b18722bc006e103c58bf525c3ba72d06ef0e252ce76f3277e2d52a1a3a7f668d64f3a7a4b9fb2d33274b0b2b05de8ad602f8944d6d854fd1059acce1ed4d609a743e51fef19ae172b0860b169bcb2ba30a9049e102bc"}}, @val={0x25, 0x3, {0x1, 0x68, 0x5}}, @void, @void, @val={0x2d, 0x1a, {0x20, 0x3, 0x2, 0x0, {0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x6, 0x6}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x2, 0x4, 0x68}}, @void, [{0xdd, 0xe3, "3f0cc2b1fbaccc97cdffc914aba55d9494bebf7f4ae35519e7551d1abd06eb85cab2d583a3ef854257ea7ad0b4b3de24a6859a0528f47255d37da44f6b605482bb30d7e93cec9ab2f2385f73d055f3f1e39cba5220977501c3b757e330d069cf71bc55417cf7ef753fd4a4702f475cb5d9172117704a5effd803d208e45c4b1cc7ec531e5f0c5b13829953be709f343f37d3fd9962095b3063f27b5216f457757c958e2104c33c7fbc367ffd8d17b605f16f85e50be525329d468ab01eb6a7d507159df12a07731fa4afb44d8ed32b8c850fb16e88da7302408866b1cb2d976a74ea68"}, {0xdd, 0x82, "497897cd9ac2a7ea0a15d9203fe4c7a3c6bbc8bab145a9906df2ecd915f8d4ce7a6e94c90f9863770a614af743c6cd475406a8a56f75324af7686701569cf9f8f263ce4be1721c9ad9e3d0a82b740808081bd54d210d80e13af240ba02f26651c16caec2021df275a5b41b5b84e8c4a642c9235c003781df991c11230755bfb863d7"}, {0xdd, 0x26, "7aa0313f7a0cca7ba79eb89f1c7c2ee2ca9c16b78e2dbbec4b32aacac48c3df779ac9d58794f"}, {0xdd, 0x3e, "4964ebe5e98492e70bde2483103c6dca7b4f57bbcbd831cd51078e39e72c1b9a389f8e6722c6c7c9de90d3ee2b3b2bdf83cd7a65c7abac4299c20384fdbf"}, {0xdd, 0x63, "854643e3d2a19cf99ba5b6b360833f674372f4cc26998174df8ab89d276e69c7432999b29131177b3b5df0aee28aed20f96a6e754ab7e1d801b5de73cc0bdf5c79b22bb21d25ed9c95079b19b8f404abb8ba243fd2fa63a1f800c3f130cc887f8ca219"}, {0xdd, 0x7d, "af74e4234fafa6aad41f827b1c9c270453a572bbd5d6faabd9a9176af1f5582338dc0989e4c0de0d8094913e10c9ed71abdddf732ddbd0a3513915d14b2d618efb818bb6092ce24e1e9623faf607f7ff977e7b3b5d13c8c11540a4009e42308c62da012013aa26d8754be316dd1e49f8633dfed0081fcb8e8d61f1501a"}, {0xdd, 0xe6, "629dbad700f63d6d98912715cd3cc736f6103a46ad054c529c2ae1cc53689ab3919fe4decb7050de0fbff898c9dd3691123b2ddadc89b0fae549c273d6e74878b076cc55074e2c49732d03c3e5cf318ebf2e31404e6033c795d3452c07b5fffad6977fd6bcf311be36e6d09857db666ab3c1c7218caaca267dde1fbafbaca683c590396375ad5ac4a764c90439e6fe847e997ffafc6fef8b7277e63d44d64d6caee41264a7aeebf380a82485ffba04f186b0e66bd3dc04a5dac7e997e7b53962a3f6d448da2e316d9d492b799f960ed3aa965a6e87b1585756279f3fcf4428047f78b96e7c18"}]}}, @NL80211_ATTR_BEACON_TAIL={0x32, 0xf, [@ibss={0x6, 0x2, 0x8c5}, @mic={0x8c, 0x10, {0x12b, "42d61be22c26", @short="c9948eb19d5c93dc"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x5, @val=0x2, @void, @val="a658915f13602ff75e2dbaa9af2773aa"}}]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 45.266906597s ago: executing program 3 (id=547): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0xad) r4 = socket$inet6(0xa, 0x6, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000001080)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@srh={0x6}, @routing]}}}}}}}, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) listen(r4, 0x80080400) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r7, 0x0, r6, &(0x7f0000000000), 0x7fffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r5) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb5b0205bd96e341d}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000000) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x7a, &(0x7f0000000080)={r10, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={r10, 0x4ddd}, &(0x7f0000000040)=0x8) 44.999680288s ago: executing program 3 (id=548): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@private=0xa010100, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_auth={0x48, 0x1, {{'ghash-ce-sync\x00'}}}]}, 0x180}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0xe, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) 44.399361962s ago: executing program 3 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14}}}, 0x30}}, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/89, 0x59}) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}]}, 0x40}}, 0x0) 30.733467897s ago: executing program 3 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14}}}, 0x30}}, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/89, 0x59}) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}]}, 0x40}}, 0x0) 17.712684801s ago: executing program 3 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}, {0x14}}}, 0x30}}, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/89, 0x59}) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}]}, 0x40}}, 0x0) 2.47570977s ago: executing program 2 (id=806): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000000003c00000000000000010500000010000000010000000000000e01000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000320800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b2c000240000000050900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2f000064970e73334a2536449de9", @ANYRES16=r7, @ANYRES16=0x0], 0x34}}, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) mmap(&(0x7f00002ad000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) 2.259860664s ago: executing program 2 (id=809): socket$inet_dccp(0x2, 0x6, 0x0) unshare(0xa020480) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) 2.047776068s ago: executing program 2 (id=812): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf25040000000d000a0000000030323135340000000008"], 0xc0}}, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f7000000", @ANYRES16=r6, @ANYBLOB="37ef000000000000000005000000"], 0x14}}, 0x0) 1.727484237s ago: executing program 2 (id=818): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f00000025c0)=@updsa={0x368, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfb, {{@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x1, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0xd5, 0x0, r9}, {@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x4d3, 0x32}, @in6=@mcast2, {0x101, 0x0, 0x9, 0x380, 0x9, 0x1, 0xfffffffffffffffd, 0x3}, {0x1, 0x1, 0x7, 0x3}, {0x491e, 0x101}, 0x70bd29, 0x0, 0xa, 0x3, 0x8, 0x69}, [@etimer_thresh={0x8}, @migrate={0x180, 0x11, [{@in6=@mcast2, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in6=@empty, @in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x3c, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in6=@mcast2, @in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x0, 0x0, 0x3502, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@rand_addr=0x64010102, @in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6c, 0x4, 0x0, 0x3505, 0x0, 0xa}, {@in=@local, @in=@empty, @in=@local, @in=@loopback, 0x0, 0x1, 0x0, 0x0, 0x2, 0xa}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x40}, @migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in6=@mcast2, @in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3c, 0x4, 0x0, 0x3506, 0x2, 0xa}, {@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, @in6=@mcast2, 0x32, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in6=@loopback, @in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@rand_addr=0x64010101, 0x2b, 0x3, 0x0, 0x3502, 0xa, 0x2}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$TUNSETGROUP(r10, 0x400454ce, r12) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={r5, r9, r12}, 0xc) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r14, 0xee}, &(0x7f0000000080)=0x8) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r15, 0x400454d9, &(0x7f0000000040)={'nr0\x00', 0xa00}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, {0x2, 0x4e20, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @local}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) 1.564028232s ago: executing program 0 (id=822): socket$inet(0x2, 0x6, 0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = socket(0x848000000015, 0x805, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x40}], 0x1, 0x0, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000580)={{0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3}, 0x1, {[0x2, 0x9, 0x5, 0xfff, 0x6, 0x401, 0x9, 0x8]}}, 0x5c) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) close(r8) (async) close(r5) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r2, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) shutdown(r2, 0x1) (async) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 1.371809408s ago: executing program 0 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xffffffa6, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000050) 1.37140915s ago: executing program 1 (id=825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x3, 0x101, {{0x3f, 0x4, 0x0, 0x4, 0xfc, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x7, [{@loopback, 0x4}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @timestamp_addr={0x44, 0x14, 0x35, 0x1, 0x2, [{@remote, 0x7}, {@local, 0x94}]}, @rr={0x7, 0xb, 0x3f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0x8b, [@rand_addr=0x64010100, @multicast1, @local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0xc, 0x0, 0x3, [0x8]}, @timestamp_prespec={0x44, 0x2c, 0x79, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3cb}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x34, 0x25, 0x1, 0x2, [{@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7c}, {@rand_addr=0x64010102, 0x4c6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x40}, {@empty, 0x8}, {@local, 0x3}]}, @noop, @end]}}}}}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x15, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x9, 0x2, 0x9, 0xffffffffffffffe0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0xa, 0x6, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000000c0)='GPL\x00', 0xe31, 0x7d, &(0x7f0000000100)=""/125, 0x41000, 0x2, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x2, 0x3b9e073e, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r3, r4, r5], &(0x7f00000004c0)=[{0x0, 0x2, 0xd, 0x1}, {0x0, 0x5, 0x1, 0x9}, {0x4, 0x1, 0x1, 0x8}], 0x10, 0x7, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8000, 0x40, 0x3, 0x101, {{0x3f, 0x4, 0x0, 0x4, 0xfc, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x7, [{@loopback, 0x4}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @timestamp_addr={0x44, 0x14, 0x35, 0x1, 0x2, [{@remote, 0x7}, {@local, 0x94}]}, @rr={0x7, 0xb, 0x3f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0x8b, [@rand_addr=0x64010100, @multicast1, @local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0xc, 0x0, 0x3, [0x8]}, @timestamp_prespec={0x44, 0x2c, 0x79, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3cb}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x34, 0x25, 0x1, 0x2, [{@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7c}, {@rand_addr=0x64010102, 0x4c6}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x40}, {@empty, 0x8}, {@local, 0x3}]}, @noop, @end]}}}}}) (async) pipe(&(0x7f0000000100)) (async) close(r2) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x15, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x9, 0x2, 0x9, 0xffffffffffffffe0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0xa, 0x6, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000000c0)='GPL\x00', 0xe31, 0x7d, &(0x7f0000000100)=""/125, 0x41000, 0x2, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x2, 0x3b9e073e, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r3, r4, r5], &(0x7f00000004c0)=[{0x0, 0x2, 0xd, 0x1}, {0x0, 0x5, 0x1, 0x9}, {0x4, 0x1, 0x1, 0x8}], 0x10, 0x7, @void, @value}, 0x94) (async) 1.202173344s ago: executing program 1 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="7a00330080000000ffffffffffff080211"], 0x98}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000700)={{}, "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"}) (async) r7 = socket$inet6(0xa, 0x2, 0x8) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) socket$inet(0xa, 0x801, 0x84) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @local}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000dc0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x5e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x4}, @TCA_CODEL_TARGET={0x8}]}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r13 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x3, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 959.603904ms ago: executing program 4 (id=829): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000400)="7e37d28bd414daeaa30003483e86ba42b79fbae13eea9bf1aeca1b4983ca05e7380511259ccfe105", 0x28}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000600)=0xfff) recvmmsg(r3, &(0x7f00000021c0)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/70, 0x46}}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000001e00)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/125, 0x7d}, {&(0x7f0000001a40)=""/2, 0x2}, {&(0x7f0000001a80)=""/217, 0xd9}, {&(0x7f0000001b80)=""/37, 0x25}, {&(0x7f0000001bc0)=""/33, 0x21}, {&(0x7f0000001c00)=""/252, 0xfc}, {&(0x7f0000001d00)=""/255, 0xff}], 0x8, &(0x7f0000001e80)=""/166, 0xa6}, 0x9596}, {{&(0x7f0000001f40)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/250, 0xfa}], 0x1, &(0x7f0000002100)=""/131, 0x83}, 0x9}], 0x3, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x4) sendmsg$nl_route(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newlinkprop={0x28, 0x6c, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0xa030, 0x80}, [@IFLA_TXQLEN={0x8, 0xd, 0x766}]}, 0x28}}, 0x40) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x7b, &(0x7f0000000080)={r8}, 0x8) shutdown(r1, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r9, 0x0, 0x62, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000900)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r10, 0x100}, &(0x7f0000000080)=0x8) 833.4715ms ago: executing program 0 (id=830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 829.706443ms ago: executing program 4 (id=831): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8000}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x975}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) close(r5) (async) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001080)='>&', 0x2}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 771.806542ms ago: executing program 1 (id=832): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 771.416385ms ago: executing program 4 (id=833): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r3, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800124000000006050015001a0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x95ee}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xae81, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x74}, 0x1, 0xba01}, 0x810) 681.346535ms ago: executing program 1 (id=834): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x11, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x96}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0x3914}, {0x6, 0x2, 0x6}]}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000970300e0f0ffffff95"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 593.448949ms ago: executing program 0 (id=835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async, rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) gettid() (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) (async) listen(r2, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x26, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1c, 0x0, &(0x7f0000000100)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r10 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfffffdef}}, 0x1) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="5406cce5", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 455.678034ms ago: executing program 4 (id=836): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 32) r3 = openat$cgroup_procs(r1, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) (rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x4}, 0x1c) (async) shutdown(r4, 0x1) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6, 0x40, 0x4, 0x4}, &(0x7f0000000080)=0x10) (async, rerun: 32) r7 = getpid() (rerun: 32) write$cgroup_pid(r3, &(0x7f0000000380)=r7, 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000180), 0x4a) (async) r8 = socket$unix(0x1, 0xee6b6755392d8df7, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r9, 0x7f9) (async, rerun: 64) connect$unix(r8, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close(r9) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) pipe(&(0x7f0000000100)) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x16, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESHEX], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) 378.84211ms ago: executing program 1 (id=837): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "63057311b2d894db"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000002083f0000000000000000002866b3f4d1de850e18ed755fa04b2c5950725dca214b27c169961e67f02abec23f"], 0x80}}, 0x0) 351.855346ms ago: executing program 4 (id=838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 295.703868ms ago: executing program 0 (id=839): syz_init_net_socket$bt_sco(0x1f, 0x3, 0x4) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x37}]}]}, 0x5c}}, 0x40001) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x21, 0x2, 0x10000000000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 258.112029ms ago: executing program 4 (id=840): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xffffffffffffff31, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYRES16=r4, @ANYRESHEX=r0, @ANYRESHEX=0x0], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) close(0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @remote}}}}}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 222.681817ms ago: executing program 1 (id=841): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000003e0007010000000000000000017c00000400000010000180", @ANYRES64], 0x28}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4a) socket$inet(0x2, 0x2, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000901000000797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a01040000000000000000020000000c00064000000000000000020900020073797a32000000000900010073797a30"], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000a00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffef) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$sock(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000680)="490454cc5bb6fff252cba0a2cb8d8779458274ba739d86b71e76849c92d7deb9f4afe04705b0e0ae29c2706048d6a26aedd58a0746daa3544be619bb33393c7f98b4efe93fecdf136b0d385f0b6bb5f2cc1650ea270495317b7002bd6741a071c17aa96e1324d48e84f2101e4dbace9a69af2555bd1934f12003ca9a1c7b65acda4bd19183ab05b711ab26b5dfe219e3be13c576d709bc005c98414e70dd916f9ca99e9e7b7900210e75eb587b5e", 0xffffff94}, {&(0x7f00000003c0)="61376c4626295aaea4f4266b00c80f2d2491208378e493fb82e112e2ee9344", 0x1f}, {&(0x7f0000000940)="507f627fbc5712cf60b360c6717116a83d37404e607789318b99f639dac995f1fbc2105701764213daef1ec7d8aaec594c664b559e72e7bb723d8658315546ec55664e6fbba8a63111a12fe789dd7e2ebb8921271c3a337bac3cc57a817401cb3a76d9c017a607e8c395d54055651b57f88bfab581734b8f5ef22f38c80be7832cde247e2de662d6d47744598e50944ff59ebe3326d7091a9e6c17aac71cf910f5889ad42c6a8cd4af26108866001d8408b2f384bbdf7cddeab42e0db5067d16305851d28341af9479750b8036f331cab26b64ff4162f09cf4fde716178d6c915ca349572ca38b6ff6cee1e1f8c9f73e", 0xf0}], 0x4}, 0x0) socket(0xa, 0x0, 0xffffffff) socket(0x9, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000065"], &(0x7f0000000600)=""/4096, 0x82, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 99.625504ms ago: executing program 2 (id=842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@local, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @random="d7f298837a54", @dev={0xac, 0x14, 0x14, 0x23}, @remote, @empty}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) syz_extract_tcp_res(&(0x7f0000000300), 0x9, 0x8000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r7, 0xb03, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x20000004}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) 63.609419ms ago: executing program 2 (id=843): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x80005, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 0s ago: executing program 0 (id=844): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 50][ T6707] veth1_vlan: entered promiscuous mode [ 150.061384][ T6713] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.143952][ T6704] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.185551][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.192747][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.357106][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.364337][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.464443][ T6707] veth0_macvtap: entered promiscuous mode [ 150.594092][ T6707] veth1_macvtap: entered promiscuous mode [ 150.686193][ T52] hsr_slave_0: left promiscuous mode [ 150.692489][ T52] hsr_slave_1: left promiscuous mode [ 150.700938][ T52] batman_adv: batadv0: Removing interface: team0 [ 150.715797][ T52] hsr_slave_0: left promiscuous mode [ 150.723277][ T52] hsr_slave_1: left promiscuous mode [ 150.736887][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.744998][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.754600][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.762204][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.799915][ T52] veth1_macvtap: left promiscuous mode [ 150.805473][ T52] veth0_macvtap: left promiscuous mode [ 150.811281][ T52] veth1_vlan: left promiscuous mode [ 150.816649][ T52] veth0_vlan: left promiscuous mode [ 150.823393][ T52] veth1_macvtap: left promiscuous mode [ 150.829829][ T52] veth0_macvtap: left promiscuous mode [ 150.835401][ T52] veth1_vlan: left promiscuous mode [ 150.840795][ T52] veth0_vlan: left promiscuous mode [ 150.846703][ T52] veth1_macvtap: left promiscuous mode [ 150.853345][ T52] veth0_macvtap: left promiscuous mode [ 150.860752][ T52] veth1_vlan: left promiscuous mode [ 150.866226][ T52] veth0_vlan: left promiscuous mode [ 152.853390][ T52] team0 (unregistering): Port device team_slave_1 removed [ 152.896912][ T52] team0 (unregistering): Port device team_slave_0 removed [ 153.197674][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.223663][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.235791][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.273796][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.287327][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.316303][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.327124][ T6707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.335986][ T6707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.345328][ T6707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.355480][ T6707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.547823][ T6709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.600400][ T6709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.650763][ T6709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.696488][ T6709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.808008][ T6713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.846852][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.871711][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.889096][ T6713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.903210][ T6713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.950444][ T6713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.054336][ T6704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.066570][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.079083][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.174924][ T6711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.206290][ T6711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.269991][ T6852] xt_connbytes: Forcing CT accounting to be enabled [ 154.276743][ T6852] Cannot find set identified by id 0 to match [ 154.302346][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.317518][ T6711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.385658][ T6711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.463074][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.487033][ T6704] veth0_vlan: entered promiscuous mode [ 154.534681][ T6704] veth1_vlan: entered promiscuous mode [ 154.546212][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.553385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.583123][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.590494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.750686][ T6713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.863183][ T6704] veth0_macvtap: entered promiscuous mode [ 154.937510][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.952513][ T6704] veth1_macvtap: entered promiscuous mode [ 154.962756][ T6713] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.977112][ T6709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.013903][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.021126][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.056839][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.087999][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.108534][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.130819][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.163892][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.196907][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.224612][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.269747][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.288262][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.306672][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.331677][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.338875][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.383819][ T6711] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.414246][ T6704] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.429126][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'. [ 155.433422][ T6704] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.448866][ T6704] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.457653][ T6704] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.529932][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.537097][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.567439][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.574772][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.612337][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 155.647309][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.847247][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.868555][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.919572][ T6866] netlink: 'syz.0.388': attribute type 3 has an invalid length. [ 155.938509][ T6866] netlink: 666 bytes leftover after parsing attributes in process `syz.0.388'. [ 155.959328][ T6709] veth0_vlan: entered promiscuous mode [ 155.969180][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.011052][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.070744][ T6709] veth1_vlan: entered promiscuous mode [ 156.098156][ T6713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.217693][ T6709] veth0_macvtap: entered promiscuous mode [ 156.247769][ T6709] veth1_macvtap: entered promiscuous mode [ 156.287379][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.301104][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.311983][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.322737][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.333825][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.345609][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.370515][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.414140][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.438810][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.449600][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.460693][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.471178][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.484093][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.496136][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.522639][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.545653][ T6709] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.564958][ T6709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.589639][ T6709] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.610753][ T6709] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.854299][ T6713] veth0_vlan: entered promiscuous mode [ 156.870522][ T6711] veth0_vlan: entered promiscuous mode [ 156.882653][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.903476][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.903726][ T6711] veth1_vlan: entered promiscuous mode [ 156.921600][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 156.970602][ T6713] veth1_vlan: entered promiscuous mode [ 156.995924][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.021256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.043142][ T6711] veth0_macvtap: entered promiscuous mode [ 157.082820][ T6713] veth0_macvtap: entered promiscuous mode [ 157.112947][ T6711] veth1_macvtap: entered promiscuous mode [ 157.172196][ T6713] veth1_macvtap: entered promiscuous mode [ 157.194213][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.235806][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.269483][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.299576][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.320519][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.353017][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.375441][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.396815][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.423373][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.447119][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.464666][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.487454][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.516268][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.545641][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.564375][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.575998][ T6711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.595351][ T6711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.616671][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.625739][ T6900] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 157.663126][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.677767][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 157.688530][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.705480][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.717531][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.733822][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.747520][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.766515][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.785681][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.796080][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.814766][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.830025][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.845193][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.857066][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.878293][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.890016][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.906525][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.927549][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.949648][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.984583][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.008340][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.038293][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.063342][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.121727][ T6713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.159803][ T6713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.183424][ T6713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.214676][ T6713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.236353][ T6711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.258559][ T6711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.267341][ T6711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.286638][ T6711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.312324][ T6913] tipc: Enabling of bearer rejected, failed to enable media [ 158.545716][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.568394][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.682222][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.702488][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.712122][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.730514][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.784813][ T961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.795989][ T961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.093521][ T6934] netlink: 104 bytes leftover after parsing attributes in process `syz.4.384'. [ 159.303790][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 159.404767][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 159.614955][ T6960] xt_limit: Overflow, try lower: 65536/2147483648 [ 159.680030][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.411'. [ 159.690756][ T6967] ieee802154 phy1 wpan1: encryption failed: -22 [ 159.795645][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 160.050687][ T6979] netlink: 44 bytes leftover after parsing attributes in process `syz.2.416'. [ 160.106500][ T6977] Bluetooth: MGMT ver 1.23 [ 160.477179][ T6988] batadv0: entered promiscuous mode [ 160.505493][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.735701][ T7004] pimreg: entered allmulticast mode [ 160.924025][ T7009] __nla_validate_parse: 5 callbacks suppressed [ 160.924046][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.425'. [ 161.066663][ T7012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.428'. [ 161.076884][ T7013] netlink: 'syz.4.427': attribute type 10 has an invalid length. [ 161.106532][ T7013] hsr0: entered promiscuous mode [ 161.119518][ T7013] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 161.177699][ T7013] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 161.216639][ T7013] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 161.244091][ T7013] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 161.321835][ T7019] syz.3.429 uses old SIOCAX25GETINFO [ 161.485180][ T7022] netlink: 'syz.4.431': attribute type 21 has an invalid length. [ 161.501448][ T7022] netlink: 'syz.4.431': attribute type 6 has an invalid length. [ 161.511859][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 161.521851][ T7022] netlink: 64 bytes leftover after parsing attributes in process `syz.4.431'. [ 161.573131][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 162.035915][ T7027] team0 (unregistering): Port device team_slave_0 removed [ 162.055490][ T7027] team0 (unregistering): Port device team_slave_1 removed [ 162.724005][ T7075] tun0: tun_chr_ioctl cmd 1074025677 [ 162.730874][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 162.731922][ T7075] tun0: linktype set to 773 [ 163.049349][ T7081] IPv6: NLM_F_REPLACE set, but no existing node found! [ 163.403924][ T7103] netlink: 'syz.2.454': attribute type 10 has an invalid length. [ 163.476852][ T7103] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 163.489831][ T7106] bridge0: port 3(ip6gretap0) entered blocking state [ 163.536743][ T7106] bridge0: port 3(ip6gretap0) entered disabled state [ 163.544826][ T7106] ip6gretap0: entered allmulticast mode [ 163.552456][ T7106] ip6gretap0: entered promiscuous mode [ 163.561435][ T7106] bridge0: port 3(ip6gretap0) entered blocking state [ 163.568354][ T7106] bridge0: port 3(ip6gretap0) entered forwarding state [ 163.792968][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.458'. [ 163.805326][ T7117] netlink: 'syz.2.457': attribute type 8 has an invalid length. [ 163.846230][ T7117] netlink: 'syz.2.457': attribute type 8 has an invalid length. [ 164.035172][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 164.065689][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'. [ 164.098978][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 165.286727][ T7179] siw: device registration error -23 [ 166.249231][ T7215] __nla_validate_parse: 7 callbacks suppressed [ 166.249253][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 166.265044][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'. [ 166.464725][ T7234] netlink: 'syz.1.494': attribute type 32 has an invalid length. [ 166.600733][ T7234] bridge0: port 2(bridge_slave_1) entered listening state [ 166.856570][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 167.350421][ T7254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.503'. [ 170.780827][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 186.139334][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.123141][ T7270] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 196.448425][ T7270] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 196.456937][ T7270] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 198.728941][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.018742][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.178328][ T5239] Bluetooth: hci5: command 0x0406 tx timeout [ 263.184480][ T5239] Bluetooth: hci7: command 0x0406 tx timeout [ 263.192109][ T5239] Bluetooth: hci6: command 0x0406 tx timeout [ 263.198281][ T5239] Bluetooth: hci0: command 0x0406 tx timeout [ 263.204326][ T5239] Bluetooth: hci8: command 0x0406 tx timeout [ 317.380312][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.363990][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.365386][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.381946][ T5248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.391635][ T5248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.394204][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.399657][ T5248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.414027][ T5248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.421464][ T5248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.492792][ T5248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.588227][ T5248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.659827][ T5248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.671999][ T5248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.713071][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.731794][ T4627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.738350][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.747490][ T5249] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 337.747660][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.763842][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.771564][ T4627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.781181][ T5249] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 337.800342][ T4627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.814065][ T5249] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 337.818081][ T4627] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.826983][ T5249] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 337.829540][ T4627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.852778][ T5248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.862043][ T4627] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 337.871254][ T4627] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.875201][ T5248] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 337.879715][ T4627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.084044][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.167344][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.291241][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.386754][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.573429][ T7289] chnl_net:caif_netlink_parms(): no params data found [ 338.602756][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 338.634023][ T7294] chnl_net:caif_netlink_parms(): no params data found [ 338.931205][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 338.961210][ T11] bridge_slave_1: left allmulticast mode [ 338.967002][ T11] bridge_slave_1: left promiscuous mode [ 338.974061][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.985021][ T11] bridge_slave_0: left allmulticast mode [ 338.991631][ T11] bridge_slave_0: left promiscuous mode [ 338.997326][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.344680][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.356952][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.367887][ T11] bond0 (unregistering): Released all slaves [ 339.386818][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 339.473957][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.482594][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.490240][ T7289] bridge_slave_0: entered allmulticast mode [ 339.500313][ T7289] bridge_slave_0: entered promiscuous mode [ 339.514807][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.522280][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.530220][ T7289] bridge_slave_1: entered allmulticast mode [ 339.537025][ T7289] bridge_slave_1: entered promiscuous mode [ 339.564524][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.572050][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.580023][ T7294] bridge_slave_0: entered allmulticast mode [ 339.586918][ T7294] bridge_slave_0: entered promiscuous mode [ 339.595316][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.603167][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.610560][ T7290] bridge_slave_0: entered allmulticast mode [ 339.617345][ T7290] bridge_slave_0: entered promiscuous mode [ 339.663947][ T5252] Bluetooth: hci1: command tx timeout [ 339.704948][ T7289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.717974][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.728587][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.735874][ T7294] bridge_slave_1: entered allmulticast mode [ 339.747311][ T7294] bridge_slave_1: entered promiscuous mode [ 339.754945][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.762477][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.770393][ T7290] bridge_slave_1: entered allmulticast mode [ 339.777149][ T7290] bridge_slave_1: entered promiscuous mode [ 339.817696][ T7289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.830227][ T5252] Bluetooth: hci2: command tx timeout [ 339.899023][ T5252] Bluetooth: hci3: command tx timeout [ 339.978363][ T5252] Bluetooth: hci8: command tx timeout [ 339.978373][ T4627] Bluetooth: hci4: command tx timeout [ 340.039513][ T7289] team0: Port device team_slave_0 added [ 340.062261][ T7294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.095939][ T7294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.121405][ T7290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.154607][ T7290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.178700][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.185963][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.207043][ T7293] bridge_slave_0: entered allmulticast mode [ 340.228082][ T7293] bridge_slave_0: entered promiscuous mode [ 340.236875][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.255027][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.268770][ T7293] bridge_slave_1: entered allmulticast mode [ 340.275969][ T7293] bridge_slave_1: entered promiscuous mode [ 340.304868][ T7289] team0: Port device team_slave_1 added [ 340.439049][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.446055][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.473300][ T7289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.507206][ T7294] team0: Port device team_slave_0 added [ 340.540819][ T7290] team0: Port device team_slave_0 added [ 340.584559][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.592266][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.619486][ T7289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.638597][ T7294] team0: Port device team_slave_1 added [ 340.646757][ T7290] team0: Port device team_slave_1 added [ 340.660982][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.676402][ T11] hsr_slave_0: left promiscuous mode [ 340.684877][ T11] hsr_slave_1: left promiscuous mode [ 340.695361][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.703493][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.712391][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.720284][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.743077][ T11] veth1_macvtap: left promiscuous mode [ 340.748819][ T11] veth0_macvtap: left promiscuous mode [ 340.754437][ T11] veth1_vlan: left promiscuous mode [ 340.760459][ T11] veth0_vlan: left promiscuous mode [ 341.232764][ T11] team0 (unregistering): Port device team_slave_1 removed [ 341.277137][ T11] team0 (unregistering): Port device team_slave_0 removed [ 341.746957][ T5252] Bluetooth: hci1: command tx timeout [ 341.806200][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.819321][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.826533][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.844568][ T7295] bridge_slave_0: entered allmulticast mode [ 341.851922][ T7295] bridge_slave_0: entered promiscuous mode [ 341.870725][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.877719][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.904396][ T5252] Bluetooth: hci2: command tx timeout [ 341.910728][ T7294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.923856][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.931525][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.957628][ T7294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.985469][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.992750][ T5252] Bluetooth: hci3: command tx timeout [ 341.998902][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.026275][ T7290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.041059][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.048056][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.074369][ T5252] Bluetooth: hci4: command tx timeout [ 342.074419][ T4627] Bluetooth: hci8: command tx timeout [ 342.086048][ T7290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.116756][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.124269][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.132433][ T7295] bridge_slave_1: entered allmulticast mode [ 342.140223][ T7295] bridge_slave_1: entered promiscuous mode [ 342.150208][ T7289] hsr_slave_0: entered promiscuous mode [ 342.156856][ T7289] hsr_slave_1: entered promiscuous mode [ 342.174131][ T7289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.181891][ T7289] Cannot create hsr debugfs directory [ 342.224159][ T7293] team0: Port device team_slave_0 added [ 342.252197][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.267085][ T7293] team0: Port device team_slave_1 added [ 342.361668][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.402244][ T7294] hsr_slave_0: entered promiscuous mode [ 342.409649][ T7294] hsr_slave_1: entered promiscuous mode [ 342.415912][ T7294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.424636][ T7294] Cannot create hsr debugfs directory [ 342.506306][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.524254][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.552120][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.613040][ T7290] hsr_slave_0: entered promiscuous mode [ 342.620165][ T7290] hsr_slave_1: entered promiscuous mode [ 342.626693][ T7290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.635727][ T7290] Cannot create hsr debugfs directory [ 342.671540][ T7295] team0: Port device team_slave_0 added [ 342.682603][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.692541][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.744490][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.812382][ T7295] team0: Port device team_slave_1 added [ 342.967578][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.978346][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.016627][ T7295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.127313][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.138534][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.166778][ T7295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.255080][ T7293] hsr_slave_0: entered promiscuous mode [ 343.269407][ T7293] hsr_slave_1: entered promiscuous mode [ 343.275701][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.283825][ T7293] Cannot create hsr debugfs directory [ 343.384759][ T7289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.421812][ T7295] hsr_slave_0: entered promiscuous mode [ 343.429275][ T7295] hsr_slave_1: entered promiscuous mode [ 343.435865][ T7295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.444077][ T7295] Cannot create hsr debugfs directory [ 343.465152][ T7289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.571013][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.680424][ T7289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.818778][ T4627] Bluetooth: hci1: command tx timeout [ 343.844343][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.902082][ T7289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.978384][ T4627] Bluetooth: hci2: command tx timeout [ 344.015166][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.058543][ T4627] Bluetooth: hci3: command tx timeout [ 344.130173][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 344.140075][ T4627] Bluetooth: hci4: command tx timeout [ 344.140393][ T5252] Bluetooth: hci8: command tx timeout [ 344.175482][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.365866][ T7289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 344.449971][ T7290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.482866][ T7289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 344.573412][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.609079][ T7289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 344.670829][ T7290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.696818][ T7289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 344.747747][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.810814][ T7290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.865000][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.939641][ T7290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.979382][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.070931][ T7289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.136553][ T7289] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.183040][ T961] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.190307][ T961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.259154][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.266293][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.292802][ T11] ip6gretap0: left allmulticast mode [ 345.301578][ T11] ip6gretap0: left promiscuous mode [ 345.307031][ T11] bridge0: port 3(ip6gretap0) entered disabled state [ 345.315826][ T11] bridge_slave_1: left allmulticast mode [ 345.322617][ T11] bridge_slave_1: left promiscuous mode [ 345.328466][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.338902][ T11] bridge_slave_0: left allmulticast mode [ 345.344583][ T11] bridge_slave_0: left promiscuous mode [ 345.351072][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.367339][ T11] bridge_slave_1: left allmulticast mode [ 345.374683][ T11] bridge_slave_1: left promiscuous mode [ 345.381044][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.392922][ T11] bridge_slave_0: left allmulticast mode [ 345.400753][ T11] bridge_slave_0: left promiscuous mode [ 345.406543][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.417006][ T11] bridge_slave_1: left allmulticast mode [ 345.423022][ T11] bridge_slave_1: left promiscuous mode [ 345.429340][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.438354][ T11] bridge_slave_0: left allmulticast mode [ 345.444227][ T11] bridge_slave_0: left promiscuous mode [ 345.451348][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.463097][ T11] bridge_slave_1: left allmulticast mode [ 345.470382][ T11] bridge_slave_1: left promiscuous mode [ 345.476124][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.485376][ T11] bridge_slave_0: left allmulticast mode [ 345.491617][ T11] bridge_slave_0: left promiscuous mode [ 345.498242][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.898651][ T5252] Bluetooth: hci1: command tx timeout [ 346.061443][ T5252] Bluetooth: hci2: command tx timeout [ 346.138543][ T5252] Bluetooth: hci3: command tx timeout [ 346.218555][ T5252] Bluetooth: hci4: command tx timeout [ 346.234058][ T5252] Bluetooth: hci8: command tx timeout [ 346.779351][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.796697][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.811007][ T11] bond0 (unregistering): Released all slaves [ 346.919721][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.931581][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.944107][ T11] bond0 (unregistering): Released all slaves [ 347.059383][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.071797][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.083027][ T11] bond0 (unregistering): Released all slaves [ 347.201878][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.213347][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.226440][ T11] bond0 (unregistering): Released all slaves [ 347.241594][ T7290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.391885][ T7290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.411187][ T7290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.543350][ T7290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.027441][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.111484][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.184128][ T7290] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.195354][ T7294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.211679][ T7294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.251510][ T7294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.263608][ T7294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.365051][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.372256][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.384181][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.391406][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.794869][ T7290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.808004][ T7290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.860860][ T7289] veth0_vlan: entered promiscuous mode [ 349.161946][ T11] hsr_slave_0: left promiscuous mode [ 349.179057][ T11] hsr_slave_1: left promiscuous mode [ 349.199281][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.206784][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.217775][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.225392][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.237837][ T11] hsr_slave_0: left promiscuous mode [ 349.244425][ T11] hsr_slave_1: left promiscuous mode [ 349.252193][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.260797][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.270493][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.277921][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.290646][ T11] hsr_slave_0: left promiscuous mode [ 349.296681][ T11] hsr_slave_1: left promiscuous mode [ 349.305710][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.313475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.325131][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.333177][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.345791][ T11] hsr_slave_0: left promiscuous mode [ 349.352246][ T11] hsr_slave_1: left promiscuous mode [ 349.362027][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.369721][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.377580][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.385228][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.443302][ T11] veth1_macvtap: left promiscuous mode [ 349.449076][ T11] veth0_macvtap: left promiscuous mode [ 349.454728][ T11] veth1_vlan: left promiscuous mode [ 349.460367][ T11] veth0_vlan: left promiscuous mode [ 349.466986][ T11] veth1_macvtap: left promiscuous mode [ 349.472702][ T11] veth0_macvtap: left promiscuous mode [ 349.478489][ T11] veth1_vlan: left promiscuous mode [ 349.483825][ T11] veth0_vlan: left promiscuous mode [ 349.491767][ T11] veth1_macvtap: left promiscuous mode [ 349.497275][ T11] veth0_macvtap: left promiscuous mode [ 349.503459][ T11] veth1_vlan: left promiscuous mode [ 349.509749][ T11] veth0_vlan: left promiscuous mode [ 349.516212][ T11] veth1_macvtap: left promiscuous mode [ 349.521871][ T11] veth0_macvtap: left promiscuous mode [ 349.527483][ T11] veth1_vlan: left promiscuous mode [ 349.534689][ T11] veth0_vlan: left promiscuous mode [ 350.216806][ T11] team0 (unregistering): Port device team_slave_1 removed [ 350.260180][ T11] team0 (unregistering): Port device team_slave_0 removed [ 350.642596][ T11] pimreg (unregistering): left allmulticast mode [ 350.994457][ T11] team0 (unregistering): Port device team_slave_1 removed [ 351.037943][ T11] team0 (unregistering): Port device team_slave_0 removed [ 351.785329][ T11] team0 (unregistering): Port device team_slave_1 removed [ 351.828439][ T11] team0 (unregistering): Port device team_slave_0 removed [ 352.916036][ T7294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.017032][ T7289] veth1_vlan: entered promiscuous mode [ 353.122609][ T7294] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.206050][ T7290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.235772][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.243015][ T7386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.253865][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.260993][ T7386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.357289][ T7289] veth0_macvtap: entered promiscuous mode [ 353.373934][ T7295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.399955][ T7295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.414847][ T7289] veth1_macvtap: entered promiscuous mode [ 353.446700][ T7295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.473255][ T7295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.517195][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.527939][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.539935][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.585864][ T7289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.596892][ T7289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.609120][ T7289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.624545][ T7293] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.647322][ T7293] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.671740][ T7290] veth0_vlan: entered promiscuous mode [ 353.683495][ T7289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.694185][ T7289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.703512][ T7289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.715485][ T7289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.731563][ T7293] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.751665][ T7293] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.860858][ T7290] veth1_vlan: entered promiscuous mode [ 354.026654][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.117482][ T7290] veth0_macvtap: entered promiscuous mode [ 354.140780][ T7290] veth1_macvtap: entered promiscuous mode [ 354.165658][ T7294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.180448][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.193305][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.195943][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.265919][ T7386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.275715][ T2585] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.282899][ T2585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.289218][ T7386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.304761][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.337676][ T3037] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.344821][ T3037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.357029][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.368511][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.378942][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.391272][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.404652][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.414964][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.426022][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.436844][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.447771][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.461520][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.476159][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.520829][ T7290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.541156][ T7290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.551118][ T7290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.560166][ T7290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.694256][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.701441][ T7386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.770638][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.777776][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.794270][ T7294] veth0_vlan: entered promiscuous mode [ 354.947701][ T7294] veth1_vlan: entered promiscuous mode [ 355.051302][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.094653][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.166498][ T7294] veth0_macvtap: entered promiscuous mode [ 355.216607][ T2585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.242090][ T7294] veth1_macvtap: entered promiscuous mode [ 355.251773][ T2585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.280568][ T7295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.341943][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.358254][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.380208][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.408362][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.454535][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.485144][ T7467] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 355.487988][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.539737][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.576860][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 355.619893][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.646317][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.660090][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.677418][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.689835][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.704623][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.726911][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.762851][ T7294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.773135][ T7294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.798188][ T7294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.806951][ T7294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.847316][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.983073][ T7295] veth0_vlan: entered promiscuous mode [ 356.105128][ T7293] veth0_vlan: entered promiscuous mode [ 356.130023][ T7295] veth1_vlan: entered promiscuous mode [ 356.144392][ T7293] veth1_vlan: entered promiscuous mode [ 356.282610][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.291423][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.463006][ T7295] veth0_macvtap: entered promiscuous mode [ 356.502179][ T7293] veth0_macvtap: entered promiscuous mode [ 356.534300][ T7295] veth1_macvtap: entered promiscuous mode [ 356.563723][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.573172][ T7293] veth1_macvtap: entered promiscuous mode [ 356.611082][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.813919][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.850927][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.877328][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 356.878751][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.931244][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.942397][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.954070][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.964048][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.974597][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.986404][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.003386][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.023919][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.053646][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.129576][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.150046][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.174438][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.184867][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.195422][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.206882][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.214323][ T7513] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 357.278621][ T7516] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 357.299881][ T7513] team0: Port device team_slave_0 removed [ 357.317315][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.328571][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.338726][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.349303][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.361463][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.372260][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.382203][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.396082][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.407125][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.420601][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.435665][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.486468][ T7293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.498651][ T7293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.518217][ T7293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.526948][ T7293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.693938][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.735459][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.762443][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.788237][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.798097][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.810414][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.820430][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.832391][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.842494][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.853025][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.885085][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.941146][ T7295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.959753][ T7295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.985840][ T7295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.005154][ T7295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.262818][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.306041][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.341644][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.367619][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.456054][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.473228][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.493830][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.497165][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.853993][ T7549] xfrm1: entered allmulticast mode [ 360.365809][ T7574] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.465353][ T7576] tls_set_device_offload_rx: netdev not found [ 361.441655][ T7602] netlink: set zone limit has 4 unknown bytes [ 361.942275][ T7619] raw_sendmsg: syz.2.534 forgot to set AF_INET. Fix it! [ 362.525040][ T7639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.538'. [ 362.817169][ T5302] IPVS: starting estimator thread 0... [ 362.908494][ T7658] IPVS: using max 20 ests per chain, 48000 per kthread [ 363.014694][ T7668] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 363.027018][ T7668] netlink: 56 bytes leftover after parsing attributes in process `syz.2.544'. [ 363.361012][ T7680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'. [ 363.409958][ T7680] netlink: 100 bytes leftover after parsing attributes in process `syz.1.546'. [ 363.458836][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 363.492827][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 363.772392][ T7693] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 364.142830][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.170523][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.355513][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.362824][ T7709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.440150][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.447345][ T7709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.691060][ T7712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.727084][ T7712] batadv_slave_0: entered promiscuous mode [ 364.757156][ T7730] netlink: 72 bytes leftover after parsing attributes in process `syz.0.558'. [ 364.821308][ T7718] vlan2: entered allmulticast mode [ 364.938790][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 364.968434][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 365.010842][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 365.221786][ T961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.237486][ T4627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.256645][ T4627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.266023][ T4627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.275642][ T4627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.283384][ T4627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 365.291145][ T4627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.496351][ T7762] netlink: 'syz.2.564': attribute type 11 has an invalid length. [ 365.632272][ T961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.740658][ T7774] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 365.952716][ T7766] @ÿ: renamed from erspan0 (while UP) [ 365.966579][ T7769] team0: entered promiscuous mode [ 365.976542][ T7769] team_slave_0: entered promiscuous mode [ 365.991734][ T7769] team_slave_1: entered promiscuous mode [ 366.005167][ T7769] team0: left promiscuous mode [ 366.013210][ T7769] team_slave_0: left promiscuous mode [ 366.024209][ T7769] team_slave_1: left promiscuous mode [ 366.125050][ T961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.350852][ T7796] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 366.363945][ T7796] syz.4.570: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 366.381230][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.4.570 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 366.381485][ T961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.391843][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.391897][ T7796] Call Trace: [ 366.391907][ T7796] [ 366.391919][ T7796] dump_stack_lvl+0x241/0x360 [ 366.391971][ T7796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.392000][ T7796] ? __pfx__printk+0x10/0x10 [ 366.392048][ T7796] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 366.392075][ T7796] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 366.392107][ T7796] warn_alloc+0x278/0x410 [ 366.392131][ T7796] ? stack_depot_save_flags+0x6e4/0x830 [ 366.392167][ T7796] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 366.392191][ T7796] ? __pfx_warn_alloc+0x10/0x10 [ 366.392216][ T7796] ? kasan_save_track+0x3f/0x80 [ 366.392238][ T7796] ? __kasan_kmalloc+0x98/0xb0 [ 366.392264][ T7796] ? xsk_setsockopt+0x4ea/0x950 [ 366.392296][ T7796] ? do_sock_setsockopt+0x3af/0x720 [ 366.392321][ T7796] ? __sys_setsockopt+0x1a2/0x250 [ 366.392344][ T7796] ? __x64_sys_setsockopt+0xb5/0xd0 [ 366.497688][ T7796] ? do_syscall_64+0xf3/0x230 [ 366.502395][ T7796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.508482][ T7796] __vmalloc_node_range_noprof+0x126/0x13f0 [ 366.514508][ T7796] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 366.520939][ T7796] ? __kasan_kmalloc+0x98/0xb0 [ 366.525717][ T7796] ? xskq_create+0x54/0x170 [ 366.530232][ T7796] vmalloc_user_noprof+0x74/0x80 [ 366.535182][ T7796] ? xskq_create+0xb6/0x170 [ 366.539698][ T7796] xskq_create+0xb6/0x170 [ 366.544063][ T7796] xsk_init_queue+0xa1/0x100 [ 366.548680][ T7796] xsk_setsockopt+0x4ea/0x950 [ 366.553375][ T7796] ? __pfx_xsk_setsockopt+0x10/0x10 [ 366.558590][ T7796] ? __pfx_aa_sk_perm+0x10/0x10 [ 366.563476][ T7796] ? __pfx_lock_acquire+0x10/0x10 [ 366.568523][ T7796] ? aa_sock_opt_perm+0x79/0x120 [ 366.573480][ T7796] ? __pfx_xsk_setsockopt+0x10/0x10 [ 366.578752][ T7796] do_sock_setsockopt+0x3af/0x720 [ 366.583793][ T7796] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 366.589360][ T7796] ? __fget_files+0x29/0x470 [ 366.593967][ T7796] ? __fget_files+0x3f3/0x470 [ 366.598667][ T7796] ? __fget_files+0x29/0x470 [ 366.603277][ T7796] __sys_setsockopt+0x1a2/0x250 [ 366.608150][ T7796] __x64_sys_setsockopt+0xb5/0xd0 [ 366.613195][ T7796] do_syscall_64+0xf3/0x230 [ 366.617714][ T7796] ? clear_bhb_loop+0x35/0x90 [ 366.622418][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.628338][ T7796] RIP: 0033:0x7f954bb7dff9 [ 366.632780][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.652431][ T7796] RSP: 002b:00007f954c95b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 366.660874][ T7796] RAX: ffffffffffffffda RBX: 00007f954bd35f80 RCX: 00007f954bb7dff9 [ 366.668850][ T7796] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 366.676840][ T7796] RBP: 00007f954bbf0296 R08: 0000000000000004 R09: 0000000000000000 [ 366.684858][ T7796] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.692840][ T7796] R13: 0000000000000000 R14: 00007f954bd35f80 R15: 00007ffd3facb5d8 [ 366.700840][ T7796] [ 366.726160][ T7796] Mem-Info: [ 366.731166][ T7796] active_anon:4151 inactive_anon:0 isolated_anon:0 [ 366.731166][ T7796] active_file:1576 inactive_file:38256 isolated_file:0 [ 366.731166][ T7796] unevictable:768 dirty:243 writeback:0 [ 366.731166][ T7796] slab_reclaimable:9125 slab_unreclaimable:101718 [ 366.731166][ T7796] mapped:21056 shmem:1248 pagetables:702 [ 366.731166][ T7796] sec_pagetables:0 bounce:0 [ 366.731166][ T7796] kernel_misc_reclaimable:0 [ 366.731166][ T7796] free:1358057 free_pcp:333 free_cma:0 [ 366.832698][ T7796] Node 0 active_anon:16404kB inactive_anon:0kB active_file:6304kB inactive_file:152952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84524kB dirty:772kB writeback:100kB shmem:3456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10208kB pagetables:2808kB sec_pagetables:0kB all_unreclaimable? no [ 366.875665][ T7796] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 366.965083][ T7796] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.063369][ T7796] lowmem_reserve[]: 0 2465 2466 0 0 [ 367.105326][ T7796] Node 0 DMA32 free:1491584kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:16656kB inactive_anon:0kB active_file:6304kB inactive_file:152140kB unevictable:1536kB writepending:88kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:1196kB local_pcp:600kB free_cma:0kB [ 367.182399][ T961] bridge_slave_1: left allmulticast mode [ 367.196038][ T961] bridge_slave_1: left promiscuous mode [ 367.207008][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.233876][ T7796] lowmem_reserve[]: 0 0 0 0 0 [ 367.239327][ T7796] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 367.287115][ T961] bridge_slave_0: left allmulticast mode [ 367.294451][ T961] bridge_slave_0: left promiscuous mode [ 367.309490][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.317271][ T7796] lowmem_reserve[]: 0 0 0 0 0 [ 367.324489][ T7796] Node 1 [ 367.338450][ T4627] Bluetooth: hci0: command tx timeout [ 367.341761][ T7796] Normal free:3926000kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.341825][ T7796] lowmem_reserve[]: 0 0 0 0 0 [ 367.341883][ T7796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 367.418406][ T7796] Node 0 DMA32: 1*4kB (M) 131*8kB (ME) 1817*16kB (UME) 658*32kB (UME) 354*64kB (UME) 172*128kB (UME) 30*256kB (UME) 18*512kB (UME) 14*1024kB (UM) 11*2048kB (UME) 327*4096kB (M) = 1489004kB [ 367.437865][ T7796] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 367.450104][ T7796] Node 1 Normal: 166*4kB (UE) 47*8kB (UME) 34*16kB (UME) 154*32kB (UME) 74*64kB (UME) 26*128kB (UME) 7*256kB (UM) 8*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 950*4096kB (UM) = 3926000kB [ 367.474227][ T7796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.527088][ T7796] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.565290][ T7796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 367.620139][ T7796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.632358][ T7796] 41089 total pagecache pages [ 367.671170][ T7796] 0 pages in swap cache [ 367.675411][ T7796] Free swap = 124996kB [ 367.682323][ T7796] Total swap = 124996kB [ 367.686526][ T7796] 2097051 pages RAM [ 367.690988][ T7796] 0 pages HighMem/MovableOnly [ 367.695716][ T7796] 427078 pages reserved [ 367.701496][ T7796] 0 pages cma reserved [ 368.197791][ T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.214183][ T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.225607][ T961] bond0 (unregistering): Released all slaves [ 368.259944][ T7838] syzkaller0: tun_chr_ioctl cmd 35108 [ 368.311407][ T7848] netlink: 'syz.4.580': attribute type 1 has an invalid length. [ 368.346387][ T7848] __nla_validate_parse: 5 callbacks suppressed [ 368.346409][ T7848] netlink: 76 bytes leftover after parsing attributes in process `syz.4.580'. [ 368.392853][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.420164][ T7749] chnl_net:caif_netlink_parms(): no params data found [ 369.031962][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 369.100184][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.107477][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.158488][ T7749] bridge_slave_0: entered allmulticast mode [ 369.191443][ T7749] bridge_slave_0: entered promiscuous mode [ 369.210258][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.256485][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.268379][ T7749] bridge_slave_1: entered allmulticast mode [ 369.301474][ T7749] bridge_slave_1: entered promiscuous mode [ 369.432185][ T4627] Bluetooth: hci0: command tx timeout [ 369.554894][ T7749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.584175][ T7898] netlink: 52 bytes leftover after parsing attributes in process `syz.1.592'. [ 369.625596][ T961] hsr_slave_0: left promiscuous mode [ 369.636155][ T961] hsr_slave_1: left promiscuous mode [ 369.652951][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.664207][ T961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.676573][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.685109][ T961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.716284][ T961] veth1_macvtap: left promiscuous mode [ 369.722324][ T961] veth0_macvtap: left promiscuous mode [ 369.728832][ T961] veth1_vlan: left promiscuous mode [ 369.734525][ T961] veth0_vlan: left promiscuous mode [ 370.202813][ T961] team0 (unregistering): Port device team_slave_1 removed [ 370.245621][ T961] team0 (unregistering): Port device team_slave_0 removed [ 370.639153][ T7899] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 370.653197][ T7899] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 370.668947][ T7749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.743377][ T7911] batman_adv: batadv0: Adding interface: dummy0 [ 370.750227][ T7911] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.755475][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 370.776442][ T7911] batman_adv: batadv0: Interface activated: dummy0 [ 370.801630][ T7913] batadv0: mtu less than device minimum [ 370.802618][ T7917] netlink: 1140 bytes leftover after parsing attributes in process `syz.1.595'. [ 370.809608][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.829445][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.842164][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.854961][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.867534][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.880170][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 370.892991][ T7913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.231273][ T7749] team0: Port device team_slave_0 added [ 371.240636][ T7749] team0: Port device team_slave_1 added [ 371.307456][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.331423][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.430136][ T7749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.460967][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.467979][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.510964][ T4627] Bluetooth: hci0: command tx timeout [ 371.542798][ T7749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.683539][ T7749] hsr_slave_0: entered promiscuous mode [ 371.716227][ T7749] hsr_slave_1: entered promiscuous mode [ 371.741184][ T7749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.755924][ T7749] Cannot create hsr debugfs directory [ 371.784117][ T7951] geneve0: entered allmulticast mode [ 372.426801][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 372.637049][ T7980] pim6reg: entered allmulticast mode [ 373.104454][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 373.191195][ T8009] netlink: 'syz.0.621': attribute type 7 has an invalid length. [ 373.578306][ T4627] Bluetooth: hci0: command tx timeout [ 373.586834][ T7749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.631270][ T7749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.673515][ T7749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.750778][ T7749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.813701][ T8042] netlink: 'syz.1.626': attribute type 3 has an invalid length. [ 373.936666][ T8040] netlink: 'syz.0.629': attribute type 10 has an invalid length. [ 373.969627][ T8040] team0: Port device dummy0 added [ 374.070654][ T7749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.089457][ T7749] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.103019][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.110183][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.383096][ T3037] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.390314][ T3037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.424874][ T8049] nlmon0: entered promiscuous mode [ 374.444864][ T8049] vlan2: entered promiscuous mode [ 374.490223][ T8049] nlmon0: left promiscuous mode [ 374.733746][ T7749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.245801][ T7749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.410079][ T7749] veth0_vlan: entered promiscuous mode [ 375.502009][ T7749] veth1_vlan: entered promiscuous mode [ 375.657170][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 375.682916][ T8103] wg2: entered promiscuous mode [ 375.708598][ T8103] wg2: entered allmulticast mode [ 375.729070][ T7749] veth0_macvtap: entered promiscuous mode [ 375.776428][ T7749] veth1_macvtap: entered promiscuous mode [ 375.793481][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 375.852229][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.882438][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.910676][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.936595][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.960903][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.984859][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.016445][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.040347][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.064482][ T7749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.102940][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.134873][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.156791][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.191225][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.216999][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.256661][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.270304][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.297846][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.316389][ T7749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.334985][ T7749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.363912][ T7749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.399290][ T7749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.428469][ T7749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.447470][ T7749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.472981][ T7749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.824278][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 376.861957][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.905479][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.061712][ T8152] netlink: 'syz.4.654': attribute type 1 has an invalid length. [ 377.071342][ T2585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.079568][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 377.097055][ T2585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.106546][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 377.110046][ T8155] netlink: 'syz.0.655': attribute type 3 has an invalid length. [ 377.173002][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 377.187481][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 377.215657][ T8152] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.225610][ T8152] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.234910][ T8152] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.243759][ T8152] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.567575][ T8177] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 377.605611][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.660'. [ 377.638972][ T8177] veth0_vlan: entered allmulticast mode [ 377.655651][ T8177] bridge0: port 3(veth0_vlan) entered blocking state [ 377.675027][ T8177] bridge0: port 3(veth0_vlan) entered disabled state [ 377.699593][ T8177] net_ratelimit: 12 callbacks suppressed [ 377.699612][ T8177] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 378.093394][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.120299][ T8194] Bluetooth: MGMT ver 1.23 [ 378.185699][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 378.324727][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 378.497380][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.539575][ T5252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.566416][ T5252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.586653][ T5252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.602921][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.614285][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 378.624611][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.709564][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.780716][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.819117][ T8218] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 378.847139][ T8218] netlink: 'syz.1.667': attribute type 2 has an invalid length. [ 378.943834][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.084198][ T8230] netlink: 'syz.0.669': attribute type 11 has an invalid length. [ 379.498469][ T61] bridge_slave_1: left allmulticast mode [ 379.504198][ T61] bridge_slave_1: left promiscuous mode [ 379.510617][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.529496][ T61] bridge_slave_0: left allmulticast mode [ 379.535215][ T61] bridge_slave_0: left promiscuous mode [ 379.541284][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.170133][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.182227][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.197735][ T61] bond0 (unregistering): Released all slaves [ 380.230607][ T8211] chnl_net:caif_netlink_parms(): no params data found [ 380.276662][ T8262] netlink: 'syz.0.676': attribute type 4 has an invalid length. [ 380.639171][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.666771][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.679301][ T8211] bridge_slave_0: entered allmulticast mode [ 380.686213][ T8211] bridge_slave_0: entered promiscuous mode [ 380.698066][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.707979][ T4627] Bluetooth: hci0: command tx timeout [ 380.708052][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.721431][ T8211] bridge_slave_1: entered allmulticast mode [ 380.728722][ T8211] bridge_slave_1: entered promiscuous mode [ 380.937880][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.970048][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.985840][ T8287] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0x9 [ 381.024148][ T8274] netlink: 'syz.2.679': attribute type 4 has an invalid length. [ 381.033221][ T8274] __nla_validate_parse: 4 callbacks suppressed [ 381.033241][ T8274] netlink: 17 bytes leftover after parsing attributes in process `syz.2.679'. [ 381.095329][ T8211] team0: Port device team_slave_0 added [ 381.098272][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 381.111221][ T8289] openvswitch: netlink: Flow key attr not present in new flow. [ 381.125730][ T61] hsr_slave_0: left promiscuous mode [ 381.142979][ T61] hsr_slave_1: left promiscuous mode [ 381.156035][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.161951][ T7289] cgroup: fork rejected by pids controller in /syz4 [ 381.167337][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.187141][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.195409][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.239453][ T61] veth1_macvtap: left promiscuous mode [ 381.245074][ T61] veth0_macvtap: left promiscuous mode [ 381.250853][ T61] veth1_vlan: left promiscuous mode [ 381.256209][ T61] veth0_vlan: left promiscuous mode [ 381.706661][ T61] team0 (unregistering): Port device team_slave_1 removed [ 381.745884][ T61] team0 (unregistering): Port device team_slave_0 removed [ 382.148420][ T8211] team0: Port device team_slave_1 added [ 382.277974][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.286973][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.315423][ T8211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.334001][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.342748][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.376330][ T8211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.516294][ T8211] hsr_slave_0: entered promiscuous mode [ 382.536425][ T8211] hsr_slave_1: entered promiscuous mode [ 382.558549][ T8211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.571444][ T8211] Cannot create hsr debugfs directory [ 382.793400][ T4627] Bluetooth: hci0: command 0x041b tx timeout [ 382.839095][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.848252][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.856874][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.865096][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.907777][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 382.917989][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.944316][ T8296] tipc: Started in network mode [ 382.962913][ T8296] tipc: Node identity ac14140f, cluster identity 4711 [ 382.980132][ T8296] tipc: New replicast peer: 255.255.255.255 [ 382.999898][ T8296] tipc: Enabled bearer , priority 10 [ 383.299979][ T8303] sctp: [Deprecated]: syz.1.690 (pid 8303) Use of int in maxseg socket option. [ 383.299979][ T8303] Use struct sctp_assoc_value instead [ 383.451732][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.466228][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.615327][ T8314] FAULT_INJECTION: forcing a failure. [ 383.615327][ T8314] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 383.628817][ T8314] CPU: 0 UID: 0 PID: 8314 Comm: syz.1.692 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 383.639554][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.649644][ T8314] Call Trace: [ 383.652935][ T8314] [ 383.655874][ T8314] dump_stack_lvl+0x241/0x360 [ 383.660575][ T8314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.665787][ T8314] ? __pfx__printk+0x10/0x10 [ 383.670388][ T8314] ? __pfx_lock_release+0x10/0x10 [ 383.675438][ T8314] should_fail_ex+0x3b0/0x4e0 [ 383.680137][ T8314] _copy_from_user+0x2f/0xe0 [ 383.684750][ T8314] smc_setsockopt+0x452/0xe50 [ 383.689451][ T8314] ? __pfx_smc_setsockopt+0x10/0x10 [ 383.694664][ T8314] ? aa_sock_opt_perm+0x79/0x120 [ 383.699628][ T8314] ? __pfx_smc_setsockopt+0x10/0x10 [ 383.704831][ T8314] do_sock_setsockopt+0x3af/0x720 [ 383.709862][ T8314] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 383.715411][ T8314] ? __fget_files+0x29/0x470 [ 383.720003][ T8314] ? __fget_files+0x3f3/0x470 [ 383.724695][ T8314] ? __fget_files+0x29/0x470 [ 383.729304][ T8314] __sys_setsockopt+0x1a2/0x250 [ 383.734164][ T8314] __x64_sys_setsockopt+0xb5/0xd0 [ 383.739203][ T8314] do_syscall_64+0xf3/0x230 [ 383.743721][ T8314] ? clear_bhb_loop+0x35/0x90 [ 383.748422][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.754340][ T8314] RIP: 0033:0x7f4abc57dff9 [ 383.758781][ T8314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.778436][ T8314] RSP: 002b:00007f4abd2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.786883][ T8314] RAX: ffffffffffffffda RBX: 00007f4abc735f80 RCX: 00007f4abc57dff9 [ 383.794866][ T8314] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000003 [ 383.802850][ T8314] RBP: 00007f4abd2cf090 R08: 0000000000000004 R09: 0000000000000000 [ 383.810829][ T8314] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 383.818829][ T8314] R13: 0000000000000000 R14: 00007f4abc735f80 R15: 00007ffda5028d28 [ 383.826834][ T8314] [ 383.840467][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.861083][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.910051][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 383.991393][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.016145][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.030613][ T46] tipc: Node number set to 2886997007 [ 384.122021][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.137575][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.197966][ T8324] tun0: tun_chr_ioctl cmd 35111 [ 384.276926][ T8327] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 384.317168][ T8328] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 384.441554][ T8293] chnl_net:caif_netlink_parms(): no params data found [ 384.634362][ T61] bridge_slave_1: left allmulticast mode [ 384.643673][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 384.653240][ T61] bridge_slave_1: left promiscuous mode [ 384.660474][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.674657][ T61] bridge_slave_0: left allmulticast mode [ 384.681178][ T61] bridge_slave_0: left promiscuous mode [ 384.686921][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.753678][ T8354] FAULT_INJECTION: forcing a failure. [ 384.753678][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.770781][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.2.703 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 384.781429][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 384.791528][ T8354] Call Trace: [ 384.794848][ T8354] [ 384.797811][ T8354] dump_stack_lvl+0x241/0x360 [ 384.802559][ T8354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.807828][ T8354] ? __pfx__printk+0x10/0x10 [ 384.812477][ T8354] ? snprintf+0xda/0x120 [ 384.816776][ T8354] should_fail_ex+0x3b0/0x4e0 [ 384.821509][ T8354] _copy_to_user+0x2f/0xb0 [ 384.825978][ T8354] simple_read_from_buffer+0xca/0x150 [ 384.831413][ T8354] proc_fail_nth_read+0x1e9/0x250 [ 384.836498][ T8354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.841519][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 384.842089][ T8354] ? rw_verify_area+0x55e/0x6f0 [ 384.855716][ T8354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 384.861279][ T8354] vfs_read+0x201/0xbc0 [ 384.865479][ T8354] ? __pfx_lock_release+0x10/0x10 [ 384.870549][ T8354] ? __pfx_vfs_read+0x10/0x10 [ 384.875249][ T8354] ? __fget_files+0x3f3/0x470 [ 384.878678][ T5252] Bluetooth: hci0: command 0x041b tx timeout [ 384.879934][ T8354] ? fdget_pos+0x24e/0x320 [ 384.879967][ T8354] ksys_read+0x183/0x2b0 [ 384.894642][ T8354] ? __pfx_ksys_read+0x10/0x10 [ 384.899449][ T8354] ? do_syscall_64+0x100/0x230 [ 384.904251][ T8354] ? do_syscall_64+0xb6/0x230 [ 384.908961][ T8354] do_syscall_64+0xf3/0x230 [ 384.913483][ T8354] ? clear_bhb_loop+0x35/0x90 [ 384.918173][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.924184][ T8354] RIP: 0033:0x7fea2b37ca3c [ 384.928630][ T8354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 384.948279][ T8354] RSP: 002b:00007fea2c15f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 384.956721][ T8354] RAX: ffffffffffffffda RBX: 00007fea2b535f80 RCX: 00007fea2b37ca3c [ 384.964733][ T8354] RDX: 000000000000000f RSI: 00007fea2c15f0a0 RDI: 0000000000000004 [ 384.972739][ T8354] RBP: 00007fea2c15f090 R08: 0000000000000000 R09: 0000000000000000 [ 384.980770][ T8354] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 384.988865][ T8354] R13: 0000000000000000 R14: 00007fea2b535f80 R15: 00007ffebfc7e1e8 [ 384.997010][ T8354] [ 385.018690][ T5252] Bluetooth: hci1: command tx timeout [ 385.214788][ T8365] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 385.566211][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.577611][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.589077][ T61] bond0 (unregistering): Released all slaves [ 385.716316][ T8211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 385.740477][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 385.803647][ T8211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 385.965589][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.982421][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.993672][ T8293] bridge_slave_0: entered allmulticast mode [ 386.003558][ T8293] bridge_slave_0: entered promiscuous mode [ 386.013828][ T8211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.031729][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 386.046934][ T8393] netlink: 108 bytes leftover after parsing attributes in process `syz.0.715'. [ 386.098525][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.118330][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.126432][ T8293] bridge_slave_1: entered allmulticast mode [ 386.147955][ T8293] bridge_slave_1: entered promiscuous mode [ 386.175896][ T8211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 386.187462][ T8393] bridge0: port 3(bond0) entered blocking state [ 386.197254][ T8393] bridge0: port 3(bond0) entered disabled state [ 386.212107][ T8393] bond0: entered allmulticast mode [ 386.217674][ T8393] bond_slave_0: entered allmulticast mode [ 386.230259][ T8393] bond_slave_1: entered allmulticast mode [ 386.247814][ T8393] bond0: entered promiscuous mode [ 386.255653][ T8393] bond_slave_0: entered promiscuous mode [ 386.268372][ T8393] bond_slave_1: entered promiscuous mode [ 386.274902][ T8393] bridge0: port 3(bond0) entered blocking state [ 386.281318][ T8393] bridge0: port 3(bond0) entered forwarding state [ 386.396815][ T8293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.423092][ T8293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.516167][ T8293] team0: Port device team_slave_0 added [ 386.552744][ T61] hsr_slave_0: left promiscuous mode [ 386.564776][ T61] hsr_slave_1: left promiscuous mode [ 386.572046][ T61] batman_adv: batadv0: Interface deactivated: dummy0 [ 386.588344][ T61] batman_adv: batadv0: Removing interface: dummy0 [ 386.607607][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.617850][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.635459][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.673075][ T61] veth1_macvtap: left promiscuous mode [ 386.678974][ T61] veth0_macvtap: left promiscuous mode [ 386.684673][ T61] veth1_vlan: left promiscuous mode [ 386.690359][ T61] veth0_vlan: left promiscuous mode [ 386.938653][ T5252] Bluetooth: hci0: command 0x041b tx timeout [ 387.112708][ T5252] Bluetooth: hci1: command tx timeout [ 387.182456][ T61] team0 (unregistering): Port device team_slave_1 removed [ 387.242813][ T61] team0 (unregistering): Port device team_slave_0 removed [ 387.643814][ T8293] team0: Port device team_slave_1 added [ 387.794741][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.806999][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.834476][ T8293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.855758][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.878188][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.909185][ T8293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.045240][ T8293] hsr_slave_0: entered promiscuous mode [ 388.054067][ T8293] hsr_slave_1: entered promiscuous mode [ 388.061441][ T8293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.069206][ T8293] Cannot create hsr debugfs directory [ 388.491082][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.536017][ T8432] vlan2: entered promiscuous mode [ 388.645646][ T8211] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.674388][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.681861][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.743152][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.750384][ T7386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.881781][ T8211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.023262][ T5252] Bluetooth: hci0: command 0x041b tx timeout [ 389.075793][ T8293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.150216][ T8293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.190470][ T4627] Bluetooth: hci1: command tx timeout [ 389.199441][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 389.216771][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.224396][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.237445][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.245552][ T8459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.308221][ T8293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.332571][ T8293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.411807][ T8468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.738'. [ 389.425101][ T8211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.522147][ T8470] netlink: 56 bytes leftover after parsing attributes in process `syz.2.739'. [ 389.544924][ T8211] veth0_vlan: entered promiscuous mode [ 389.557299][ T8211] veth1_vlan: entered promiscuous mode [ 389.582484][ T8211] veth0_macvtap: entered promiscuous mode [ 389.591894][ T8211] veth1_macvtap: entered promiscuous mode [ 389.607329][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.618325][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.628611][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.639477][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.649651][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.662658][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.675192][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.685615][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.696155][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.706412][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.717511][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.728050][ T8211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.738833][ T8211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.753807][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.764124][ T8211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.772990][ T8211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.781848][ T8211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.790671][ T8211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.837963][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.845154][ T8475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'. [ 389.875515][ T8475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 389.917594][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.919981][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 389.999424][ T3037] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.006662][ T3037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.046840][ T3037] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.054148][ T3037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.083790][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.110669][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.171155][ T8483] sctp: [Deprecated]: syz.2.744 (pid 8483) Use of int in max_burst socket option deprecated. [ 390.171155][ T8483] Use struct sctp_assoc_value instead [ 390.178656][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 390.229662][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.255165][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.463410][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'. [ 390.650103][ T8498] netlink: 76 bytes leftover after parsing attributes in process `syz.1.748'. [ 390.740244][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.977886][ T961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.037152][ T8516] IPv6: sit1: Disabled Multicast RS [ 391.187326][ T961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.235803][ T8520] netlink: 'syz.2.753': attribute type 4 has an invalid length. [ 391.287020][ T4627] Bluetooth: hci1: command tx timeout [ 391.387081][ T961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.450683][ T8519] __nla_validate_parse: 1 callbacks suppressed [ 391.450703][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 391.477217][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 391.487032][ T8532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.495865][ T8532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.506608][ T8532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.516453][ T8532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.604345][ T961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.623273][ T5252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.634191][ T5252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.642938][ T5252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.652904][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.669387][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 391.676828][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.754249][ T8293] veth0_vlan: entered promiscuous mode [ 391.768375][ T8293] veth1_vlan: entered promiscuous mode [ 391.880404][ T8293] veth0_macvtap: entered promiscuous mode [ 391.942963][ T8293] veth1_macvtap: entered promiscuous mode [ 392.018501][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.038277][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.049872][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.060870][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.071423][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.081898][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.093415][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.104278][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 392.132795][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.143995][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.154504][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.167623][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.178793][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.189641][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.201097][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.211780][ T8293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.225343][ T8293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.234163][ T8293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.243057][ T8293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.431792][ T2585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.442218][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 392.452808][ T2585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.467088][ T961] bridge_slave_1: left allmulticast mode [ 392.470452][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 392.473449][ T961] bridge_slave_1: left promiscuous mode [ 392.490731][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.512973][ T8551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.524257][ T961] bridge_slave_0: left allmulticast mode [ 392.550627][ T961] bridge_slave_0: left promiscuous mode [ 392.556964][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.956727][ T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.970114][ T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.983961][ T961] bond0 (unregistering): Released all slaves [ 393.094758][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.137162][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.169525][ T8535] chnl_net:caif_netlink_parms(): no params data found [ 393.262984][ T8565] ipvlan2: entered promiscuous mode [ 393.416241][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.763'. [ 393.477312][ T8576] netlink: 'syz.0.765': attribute type 3 has an invalid length. [ 393.531445][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 393.575298][ T961] hsr_slave_0: left promiscuous mode [ 393.597295][ T961] hsr_slave_1: left promiscuous mode [ 393.610299][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.617901][ T961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.628259][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.635721][ T961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.676310][ T961] veth1_macvtap: left promiscuous mode [ 393.686075][ T961] veth0_macvtap: left promiscuous mode [ 393.691914][ T961] veth1_vlan: left promiscuous mode [ 393.697371][ T961] veth0_vlan: left promiscuous mode [ 394.184090][ T961] team0 (unregistering): Port device team_slave_1 removed [ 394.265521][ T961] team0 (unregistering): Port device team_slave_0 removed [ 394.840425][ T8577] netlink: 'syz.4.766': attribute type 21 has an invalid length. [ 394.848428][ T8577] netlink: 152 bytes leftover after parsing attributes in process `syz.4.766'. [ 394.899850][ T8584] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.937717][ T8585] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 395.092375][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.120923][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.161770][ T8535] bridge_slave_0: entered allmulticast mode [ 395.184432][ T8535] bridge_slave_0: entered promiscuous mode [ 395.215090][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.252217][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.272678][ T8535] bridge_slave_1: entered allmulticast mode [ 395.294652][ T8535] bridge_slave_1: entered promiscuous mode [ 395.416004][ T8535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.445110][ T8535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.563194][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 395.574717][ T8618] netlink: 'syz.4.778': attribute type 4 has an invalid length. [ 395.608051][ T8535] team0: Port device team_slave_0 added [ 395.618329][ T8535] team0: Port device team_slave_1 added [ 395.652454][ T8535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.666211][ T8535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.697957][ T8535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.289221][ T8535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.296292][ T8535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.322516][ T8535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.466015][ T8535] hsr_slave_0: entered promiscuous mode [ 404.495457][ T8535] hsr_slave_1: entered promiscuous mode [ 404.519505][ T8535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.527134][ T8535] Cannot create hsr debugfs directory [ 404.548200][ T8641] netlink: 'syz.0.787': attribute type 15 has an invalid length. [ 404.613459][ T8647] netlink: 'syz.4.786': attribute type 4 has an invalid length. [ 404.726348][ T8657] netlink: 'syz.0.790': attribute type 10 has an invalid length. [ 404.752014][ T8657] netlink: 156 bytes leftover after parsing attributes in process `syz.0.790'. [ 404.856098][ T8664] netlink: 68 bytes leftover after parsing attributes in process `syz.2.793'. [ 404.882584][ T8664] openvswitch: netlink: Key 0 has unexpected len 8 expected 0 [ 404.982964][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.795'. [ 404.992467][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 405.008805][ T8662] bridge0: port 3(vlan2) entered blocking state [ 405.015408][ T8662] bridge0: port 3(vlan2) entered disabled state [ 405.038944][ T8662] vlan2: entered allmulticast mode [ 405.057986][ T8662] vlan2: left allmulticast mode [ 405.248795][ T8677] hsr0: entered allmulticast mode [ 405.260184][ T8677] hsr_slave_0: entered allmulticast mode [ 405.274965][ T8677] hsr_slave_1: entered allmulticast mode [ 405.297610][ T8677] hsr_slave_0: left promiscuous mode [ 405.307692][ T8677] hsr_slave_1: left promiscuous mode [ 405.346657][ T8677] hsr0 (unregistering): left allmulticast mode [ 405.444499][ T8535] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 405.471138][ T8535] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.491054][ T8535] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.504653][ T8535] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.556489][ T8686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.800'. [ 405.576862][ T8687] tipc: Enabling of bearer rejected, failed to enable media [ 405.770388][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 405.819389][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.800'. [ 405.931045][ T8535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.965696][ T8535] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.992863][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.000093][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.062540][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.069757][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.091901][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 406.231076][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 406.392564][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 406.496019][ T8535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.600502][ T8535] veth0_vlan: entered promiscuous mode [ 406.652512][ T8730] netlink: 'syz.2.812': attribute type 10 has an invalid length. [ 406.735616][ T8535] veth1_vlan: entered promiscuous mode [ 406.811410][ T8535] veth0_macvtap: entered promiscuous mode [ 406.951040][ T8743] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.023781][ T8535] veth1_macvtap: entered promiscuous mode [ 407.090525][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.124869][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.162718][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.173426][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.183697][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.194253][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.205674][ T8535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.282963][ T8743] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.347494][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.360462][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.370697][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.381266][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.391775][ T8535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.402401][ T8535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.413852][ T8535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.426827][ T8535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.436267][ T8535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.446167][ T8535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.455242][ T8535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.584267][ T8743] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.809190][ T8743] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.875525][ T8794] bridge0: port 3(vlan2) entered blocking state [ 407.894488][ T8794] bridge0: port 3(vlan2) entered disabled state [ 407.901828][ T8794] vlan2: entered allmulticast mode [ 407.916455][ T8794] vlan2: left allmulticast mode [ 407.947785][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.967594][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.985957][ T8798] netlink: 'syz.1.834': attribute type 4 has an invalid length. [ 408.037123][ T8803] netlink: 'syz.1.834': attribute type 4 has an invalid length. [ 408.075109][ T8802] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 408.105583][ T961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.127802][ T961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.147569][ T8743] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.201225][ T8743] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.279803][ T8743] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.323333][ T8743] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.346365][ T8813] team_slave_1: entered promiscuous mode [ 408.352646][ T8813] dummy0: entered promiscuous mode [ 408.367498][ T8813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 408.391392][ T8813] team_slave_1: left promiscuous mode [ 408.397110][ T8813] dummy0: left promiscuous mode [ 408.447097][ T8823] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 408.619887][ T8828] BUG: Bad page state in process syz.4.840 pfn:68ca0 [ 408.627101][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888068ca0e10 pfn:0x68ca0 [ 408.637333][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 408.644561][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 408.653281][ T8828] raw: ffff888068ca0e10 0000000000000001 00000000ffffffff 0000000000000000 [ 408.662005][ T8828] page dumped because: page_pool leak [ 408.667432][ T8828] page_owner tracks the page as allocated [ 408.673290][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596580638, free_ts 408242304283 [ 408.690385][ T8828] post_alloc_hook+0x1f3/0x230 [ 408.695217][ T8828] get_page_from_freelist+0x3045/0x3190 [ 408.700918][ T8828] __alloc_pages_noprof+0x292/0x710 [ 408.706139][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 408.711826][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 408.717795][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 408.723116][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 408.728700][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 408.734295][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 408.739387][ T8828] __sys_bpf+0x48d/0x810 [ 408.743670][ T8828] __x64_sys_bpf+0x7c/0x90 [ 408.748205][ T8828] do_syscall_64+0xf3/0x230 [ 408.752761][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.758814][ T8828] page last free pid 5288 tgid 5288 stack trace: [ 408.765161][ T8828] free_unref_page+0xcfb/0xf20 [ 408.770063][ T8828] __put_partials+0xeb/0x130 [ 408.774704][ T8828] put_cpu_partial+0x17c/0x250 [ 408.779618][ T8828] __slab_free+0x2ea/0x3d0 [ 408.784180][ T8828] qlist_free_all+0x9a/0x140 [ 408.788939][ T8828] kasan_quarantine_reduce+0x14f/0x170 [ 408.794448][ T8828] __kasan_slab_alloc+0x23/0x80 [ 408.799453][ T8828] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 408.805408][ T8828] __alloc_skb+0x1c3/0x440 [ 408.810080][ T8828] alloc_skb_with_frags+0xc3/0x820 [ 408.815247][ T8828] sock_alloc_send_pskb+0x91a/0xa60 [ 408.820618][ T8828] mld_newpack+0x1c3/0xa90 [ 408.825090][ T8828] add_grec+0x1492/0x19a0 [ 408.829581][ T8828] mld_send_initial_cr+0x228/0x4b0 [ 408.834759][ T8828] mld_dad_work+0x44/0x500 [ 408.839339][ T8828] process_scheduled_works+0xa63/0x1850 [ 408.844941][ T8828] Modules linked in: [ 408.848993][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 408.859628][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 408.869719][ T8828] Call Trace: [ 408.873035][ T8828] [ 408.875999][ T8828] dump_stack_lvl+0x241/0x360 [ 408.880728][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.885980][ T8828] ? __pfx_print_modules+0x10/0x10 [ 408.891148][ T8828] ? __lock_acquire+0x1384/0x2050 [ 408.896238][ T8828] bad_page+0x166/0x1b0 [ 408.900451][ T8828] free_unref_page+0xed0/0xf20 [ 408.905280][ T8828] skb_release_data+0x6dc/0x8a0 [ 408.910197][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 408.915273][ T8828] ? packet_rcv+0x159/0x14b0 [ 408.919914][ T8828] packet_rcv+0x16f/0x14b0 [ 408.924362][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 408.929261][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 408.935275][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 408.941889][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 408.948415][ T8828] ? read_tsc+0x9/0x20 [ 408.952580][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 408.957823][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 408.964190][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 408.970395][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 408.976981][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 408.983695][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 408.988922][ T8828] ? __phys_addr+0xba/0x170 [ 408.993445][ T8828] ? build_skb_around+0x111/0x260 [ 408.998495][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 409.004439][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 409.009766][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 409.015256][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 409.021189][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 409.026779][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 409.032610][ T8828] ? synchronize_rcu+0x11b/0x360 [ 409.037830][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 409.043149][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 409.049423][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 409.055350][ T8828] ? _copy_from_user+0xa6/0xe0 [ 409.060153][ T8828] ? bpf_test_init+0x15a/0x180 [ 409.064941][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 409.070423][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 409.075823][ T8828] ? __pfx_lock_release+0x10/0x10 [ 409.080907][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 409.086725][ T8828] ? __fget_files+0x29/0x470 [ 409.091346][ T8828] ? fput+0x1a8/0x230 [ 409.095341][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 409.101182][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 409.106145][ T8828] __sys_bpf+0x48d/0x810 [ 409.110410][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 409.115202][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.121216][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.127915][ T8828] ? do_syscall_64+0x100/0x230 [ 409.132709][ T8828] __x64_sys_bpf+0x7c/0x90 [ 409.137140][ T8828] do_syscall_64+0xf3/0x230 [ 409.141659][ T8828] ? clear_bhb_loop+0x35/0x90 [ 409.146359][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.152269][ T8828] RIP: 0033:0x7f20bc97dff9 [ 409.156699][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.176498][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.184950][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 409.192946][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 409.200931][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 409.208920][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.216902][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 409.224900][ T8828] [ 409.228087][ T8828] Disabling lock debugging due to kernel taint [ 409.234373][ T8828] BUG: Bad page state in process syz.4.840 pfn:52b08 [ 409.241270][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888052b08d20 pfn:0x52b08 [ 409.251481][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 409.258738][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 409.267354][ T8828] raw: ffff888052b08d20 0000000000000001 00000000ffffffff 0000000000000000 [ 409.276046][ T8828] page dumped because: page_pool leak [ 409.281537][ T8828] page_owner tracks the page as allocated [ 409.287359][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596568234, free_ts 408242321850 [ 409.304438][ T8828] post_alloc_hook+0x1f3/0x230 [ 409.309367][ T8828] get_page_from_freelist+0x3045/0x3190 [ 409.315050][ T8828] __alloc_pages_noprof+0x292/0x710 [ 409.320393][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 409.325887][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 409.331937][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 409.337270][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 409.342781][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 409.348293][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 409.353272][ T8828] __sys_bpf+0x48d/0x810 [ 409.357552][ T8828] __x64_sys_bpf+0x7c/0x90 [ 409.362063][ T8828] do_syscall_64+0xf3/0x230 [ 409.366578][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.372857][ T8828] page last free pid 5288 tgid 5288 stack trace: [ 409.379296][ T8828] free_unref_page+0xcfb/0xf20 [ 409.384105][ T8828] __slab_free+0x31b/0x3d0 [ 409.388584][ T8828] qlist_free_all+0x9a/0x140 [ 409.393231][ T8828] kasan_quarantine_reduce+0x14f/0x170 [ 409.398750][ T8828] __kasan_slab_alloc+0x23/0x80 [ 409.403663][ T8828] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 409.409628][ T8828] __alloc_skb+0x1c3/0x440 [ 409.414078][ T8828] alloc_skb_with_frags+0xc3/0x820 [ 409.419254][ T8828] sock_alloc_send_pskb+0x91a/0xa60 [ 409.424484][ T8828] mld_newpack+0x1c3/0xa90 [ 409.428958][ T8828] add_grec+0x1492/0x19a0 [ 409.433316][ T8828] mld_send_initial_cr+0x228/0x4b0 [ 409.438492][ T8828] mld_dad_work+0x44/0x500 [ 409.442941][ T8828] process_scheduled_works+0xa63/0x1850 [ 409.448550][ T8828] worker_thread+0x870/0xd30 [ 409.453171][ T8828] kthread+0x2f0/0x390 [ 409.457267][ T8828] Modules linked in: [ 409.461289][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 409.473397][ T8828] Tainted: [B]=BAD_PAGE [ 409.477573][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 409.487665][ T8828] Call Trace: [ 409.490975][ T8828] [ 409.493918][ T8828] dump_stack_lvl+0x241/0x360 [ 409.498614][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.503829][ T8828] ? __pfx_print_modules+0x10/0x10 [ 409.508957][ T8828] bad_page+0x166/0x1b0 [ 409.513129][ T8828] free_unref_page+0xed0/0xf20 [ 409.517919][ T8828] skb_release_data+0x6dc/0x8a0 [ 409.522813][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 409.527845][ T8828] ? packet_rcv+0x159/0x14b0 [ 409.532451][ T8828] packet_rcv+0x16f/0x14b0 [ 409.536885][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 409.541755][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 409.547784][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 409.554382][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 409.560898][ T8828] ? read_tsc+0x9/0x20 [ 409.564987][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 409.570200][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 409.576538][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 409.582713][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 409.589061][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 409.595750][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 409.600960][ T8828] ? __phys_addr+0xba/0x170 [ 409.605475][ T8828] ? build_skb_around+0x111/0x260 [ 409.610688][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 409.616604][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 409.621910][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 409.627374][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 409.633280][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 409.638836][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 409.644648][ T8828] ? synchronize_rcu+0x11b/0x360 [ 409.649593][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 409.654898][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 409.661160][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 409.667067][ T8828] ? _copy_from_user+0xa6/0xe0 [ 409.671845][ T8828] ? bpf_test_init+0x15a/0x180 [ 409.676613][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 409.682086][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 409.687472][ T8828] ? __pfx_lock_release+0x10/0x10 [ 409.692519][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 409.698336][ T8828] ? __fget_files+0x29/0x470 [ 409.702941][ T8828] ? fput+0x1a8/0x230 [ 409.706936][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 409.712773][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 409.717723][ T8828] __sys_bpf+0x48d/0x810 [ 409.721989][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 409.726768][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.732787][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.739163][ T8828] ? do_syscall_64+0x100/0x230 [ 409.743957][ T8828] __x64_sys_bpf+0x7c/0x90 [ 409.748403][ T8828] do_syscall_64+0xf3/0x230 [ 409.752986][ T8828] ? clear_bhb_loop+0x35/0x90 [ 409.757695][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.763628][ T8828] RIP: 0033:0x7f20bc97dff9 [ 409.768058][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.787685][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.796127][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 409.804116][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 409.812093][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 409.820177][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.828154][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 409.836145][ T8828] [ 409.839292][ T8828] BUG: Bad page state in process syz.4.840 pfn:56c1f [ 409.846081][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056c1f3c0 pfn:0x56c1f [ 409.856243][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 409.863438][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 409.872105][ T8828] raw: ffff888056c1f3c0 0000000000000001 00000000ffffffff 0000000000000000 [ 409.880776][ T8828] page dumped because: page_pool leak [ 409.886170][ T8828] page_owner tracks the page as allocated [ 409.892054][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596555611, free_ts 408242350526 [ 409.909069][ T8828] post_alloc_hook+0x1f3/0x230 [ 409.913874][ T8828] get_page_from_freelist+0x3045/0x3190 [ 409.919489][ T8828] __alloc_pages_noprof+0x292/0x710 [ 409.924901][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 409.930508][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 409.936436][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 409.941691][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 409.947157][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 409.952620][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 409.957637][ T8828] __sys_bpf+0x48d/0x810 [ 409.961942][ T8828] __x64_sys_bpf+0x7c/0x90 [ 409.966366][ T8828] do_syscall_64+0xf3/0x230 [ 409.970933][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.976868][ T8828] page last free pid 5288 tgid 5288 stack trace: [ 409.983233][ T8828] free_unref_page+0xcfb/0xf20 [ 409.988022][ T8828] __slab_free+0x31b/0x3d0 [ 409.992502][ T8828] qlist_free_all+0x9a/0x140 [ 409.997125][ T8828] kasan_quarantine_reduce+0x14f/0x170 [ 410.002679][ T8828] __kasan_slab_alloc+0x23/0x80 [ 410.007541][ T8828] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 410.013517][ T8828] __alloc_skb+0x1c3/0x440 [ 410.017951][ T8828] alloc_skb_with_frags+0xc3/0x820 [ 410.023143][ T8828] sock_alloc_send_pskb+0x91a/0xa60 [ 410.028618][ T8828] mld_newpack+0x1c3/0xa90 [ 410.033067][ T8828] add_grec+0x1492/0x19a0 [ 410.037463][ T8828] mld_send_initial_cr+0x228/0x4b0 [ 410.043185][ T8828] mld_dad_work+0x44/0x500 [ 410.047622][ T8828] process_scheduled_works+0xa63/0x1850 [ 410.053246][ T8828] worker_thread+0x870/0xd30 [ 410.057858][ T8828] kthread+0x2f0/0x390 [ 410.061990][ T8828] Modules linked in: [ 410.065902][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 410.077980][ T8828] Tainted: [B]=BAD_PAGE [ 410.082136][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.092208][ T8828] Call Trace: [ 410.095505][ T8828] [ 410.098435][ T8828] dump_stack_lvl+0x241/0x360 [ 410.103133][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.108371][ T8828] ? __pfx_print_modules+0x10/0x10 [ 410.113532][ T8828] bad_page+0x166/0x1b0 [ 410.117726][ T8828] free_unref_page+0xed0/0xf20 [ 410.122506][ T8828] skb_release_data+0x6dc/0x8a0 [ 410.127374][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 410.132407][ T8828] ? packet_rcv+0x159/0x14b0 [ 410.137009][ T8828] packet_rcv+0x16f/0x14b0 [ 410.141469][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 410.146343][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 410.152346][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 410.158952][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 410.165469][ T8828] ? read_tsc+0x9/0x20 [ 410.169560][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 410.174775][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 410.181119][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 410.187287][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 410.193639][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 410.200344][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 410.205560][ T8828] ? __phys_addr+0xba/0x170 [ 410.210068][ T8828] ? build_skb_around+0x111/0x260 [ 410.215102][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 410.221014][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 410.226311][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 410.231779][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 410.237686][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 410.243239][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 410.249054][ T8828] ? synchronize_rcu+0x11b/0x360 [ 410.254001][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 410.259307][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 410.265566][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 410.271518][ T8828] ? _copy_from_user+0xa6/0xe0 [ 410.276297][ T8828] ? bpf_test_init+0x15a/0x180 [ 410.281067][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 410.286532][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 410.291926][ T8828] ? __pfx_lock_release+0x10/0x10 [ 410.296975][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 410.302797][ T8828] ? __fget_files+0x29/0x470 [ 410.307488][ T8828] ? fput+0x1a8/0x230 [ 410.311484][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 410.317316][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 410.322268][ T8828] __sys_bpf+0x48d/0x810 [ 410.326539][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 410.331340][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.337335][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.343687][ T8828] ? do_syscall_64+0x100/0x230 [ 410.348464][ T8828] __x64_sys_bpf+0x7c/0x90 [ 410.352887][ T8828] do_syscall_64+0xf3/0x230 [ 410.357416][ T8828] ? clear_bhb_loop+0x35/0x90 [ 410.362105][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.368189][ T8828] RIP: 0033:0x7f20bc97dff9 [ 410.372615][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.392234][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.400674][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 410.408686][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 410.416768][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 410.424835][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.432829][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 410.440836][ T8828] [ 410.443979][ T8828] BUG: Bad page state in process syz.4.840 pfn:27c1d [ 410.450841][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027c1d5d0 pfn:0x27c1d [ 410.461010][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 410.468219][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 410.476845][ T8828] raw: ffff888027c1d5d0 0000000000000001 00000000ffffffff 0000000000000000 [ 410.485507][ T8828] page dumped because: page_pool leak [ 410.490944][ T8828] page_owner tracks the page as allocated [ 410.496653][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596542714, free_ts 408242653386 [ 410.513659][ T8828] post_alloc_hook+0x1f3/0x230 [ 410.518533][ T8828] get_page_from_freelist+0x3045/0x3190 [ 410.524117][ T8828] __alloc_pages_noprof+0x292/0x710 [ 410.529582][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 410.535086][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 410.541040][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 410.546274][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 410.551738][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 410.557224][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 410.562216][ T8828] __sys_bpf+0x48d/0x810 [ 410.566464][ T8828] __x64_sys_bpf+0x7c/0x90 [ 410.570994][ T8828] do_syscall_64+0xf3/0x230 [ 410.575522][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.581500][ T8828] page last free pid 5288 tgid 5288 stack trace: [ 410.587849][ T8828] free_unref_page+0xcfb/0xf20 [ 410.592708][ T8828] vfree+0x186/0x2e0 [ 410.596633][ T8828] delayed_vfree_work+0x56/0x80 [ 410.601652][ T8828] process_scheduled_works+0xa63/0x1850 [ 410.607232][ T8828] worker_thread+0x870/0xd30 [ 410.611925][ T8828] kthread+0x2f0/0x390 [ 410.616016][ T8828] ret_from_fork+0x4b/0x80 [ 410.620697][ T8828] ret_from_fork_asm+0x1a/0x30 [ 410.625480][ T8828] Modules linked in: [ 410.629573][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 410.641762][ T8828] Tainted: [B]=BAD_PAGE [ 410.645912][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.656058][ T8828] Call Trace: [ 410.659347][ T8828] [ 410.662294][ T8828] dump_stack_lvl+0x241/0x360 [ 410.666983][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.672190][ T8828] ? __pfx_print_modules+0x10/0x10 [ 410.677311][ T8828] bad_page+0x166/0x1b0 [ 410.681492][ T8828] free_unref_page+0xed0/0xf20 [ 410.686269][ T8828] skb_release_data+0x6dc/0x8a0 [ 410.691143][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 410.696280][ T8828] ? packet_rcv+0x159/0x14b0 [ 410.700881][ T8828] packet_rcv+0x16f/0x14b0 [ 410.705313][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 410.710181][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 410.716184][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 410.722785][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 410.729307][ T8828] ? read_tsc+0x9/0x20 [ 410.733388][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 410.738601][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 410.744937][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 410.751103][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 410.757469][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 410.764209][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 410.769434][ T8828] ? __phys_addr+0xba/0x170 [ 410.773954][ T8828] ? build_skb_around+0x111/0x260 [ 410.778988][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 410.784903][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 410.790202][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 410.795668][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 410.801601][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 410.807158][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 410.812973][ T8828] ? synchronize_rcu+0x11b/0x360 [ 410.817926][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 410.823266][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 410.829563][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 410.835645][ T8828] ? _copy_from_user+0xa6/0xe0 [ 410.840421][ T8828] ? bpf_test_init+0x15a/0x180 [ 410.845197][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 410.850668][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 410.856049][ T8828] ? __pfx_lock_release+0x10/0x10 [ 410.861097][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 410.866909][ T8828] ? __fget_files+0x29/0x470 [ 410.871514][ T8828] ? fput+0x1a8/0x230 [ 410.875507][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 410.881318][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 410.886287][ T8828] __sys_bpf+0x48d/0x810 [ 410.890539][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 410.895345][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.901342][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.907712][ T8828] ? do_syscall_64+0x100/0x230 [ 410.912591][ T8828] __x64_sys_bpf+0x7c/0x90 [ 410.917019][ T8828] do_syscall_64+0xf3/0x230 [ 410.921545][ T8828] ? clear_bhb_loop+0x35/0x90 [ 410.926245][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.932185][ T8828] RIP: 0033:0x7f20bc97dff9 [ 410.936603][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.956337][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.964777][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 410.972765][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 410.980761][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 410.988763][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.996740][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 411.004735][ T8828] [ 411.007883][ T8828] BUG: Bad page state in process syz.4.840 pfn:7bb62 [ 411.014757][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bb62ee0 pfn:0x7bb62 [ 411.024938][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 411.032165][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 411.040865][ T8828] raw: ffff88807bb62ee0 0000000000000001 00000000ffffffff 0000000000000000 [ 411.049553][ T8828] page dumped because: page_pool leak [ 411.054951][ T8828] page_owner tracks the page as allocated [ 411.060734][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596529904, free_ts 408242664874 [ 411.077734][ T8828] post_alloc_hook+0x1f3/0x230 [ 411.082585][ T8828] get_page_from_freelist+0x3045/0x3190 [ 411.088255][ T8828] __alloc_pages_noprof+0x292/0x710 [ 411.093495][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 411.099023][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 411.104943][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 411.110311][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 411.115709][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 411.121209][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 411.126160][ T8828] __sys_bpf+0x48d/0x810 [ 411.130509][ T8828] __x64_sys_bpf+0x7c/0x90 [ 411.134947][ T8828] do_syscall_64+0xf3/0x230 [ 411.139525][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.145426][ T8828] page last free pid 5288 tgid 5288 stack trace: [ 411.151848][ T8828] free_unref_page+0xcfb/0xf20 [ 411.156632][ T8828] vfree+0x186/0x2e0 [ 411.160628][ T8828] delayed_vfree_work+0x56/0x80 [ 411.165533][ T8828] process_scheduled_works+0xa63/0x1850 [ 411.171179][ T8828] worker_thread+0x870/0xd30 [ 411.175803][ T8828] kthread+0x2f0/0x390 [ 411.179962][ T8828] ret_from_fork+0x4b/0x80 [ 411.184391][ T8828] ret_from_fork_asm+0x1a/0x30 [ 411.189279][ T8828] Modules linked in: [ 411.193198][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 411.205270][ T8828] Tainted: [B]=BAD_PAGE [ 411.209508][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.219589][ T8828] Call Trace: [ 411.222866][ T8828] [ 411.225801][ T8828] dump_stack_lvl+0x241/0x360 [ 411.230517][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.235747][ T8828] ? __pfx_print_modules+0x10/0x10 [ 411.240873][ T8828] bad_page+0x166/0x1b0 [ 411.245053][ T8828] free_unref_page+0xed0/0xf20 [ 411.249871][ T8828] skb_release_data+0x6dc/0x8a0 [ 411.254752][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 411.259787][ T8828] ? packet_rcv+0x159/0x14b0 [ 411.264389][ T8828] packet_rcv+0x16f/0x14b0 [ 411.268835][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 411.273742][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 411.279763][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 411.286543][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 411.293059][ T8828] ? read_tsc+0x9/0x20 [ 411.297252][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 411.302483][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 411.308915][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 411.315347][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 411.321714][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 411.328416][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 411.333647][ T8828] ? __phys_addr+0xba/0x170 [ 411.338175][ T8828] ? build_skb_around+0x111/0x260 [ 411.343218][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 411.349133][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 411.354454][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 411.359942][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 411.365872][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 411.371436][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 411.377895][ T8828] ? synchronize_rcu+0x11b/0x360 [ 411.382844][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 411.388164][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 411.394427][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 411.400342][ T8828] ? _copy_from_user+0xa6/0xe0 [ 411.405144][ T8828] ? bpf_test_init+0x15a/0x180 [ 411.409915][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 411.415384][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 411.420769][ T8828] ? __pfx_lock_release+0x10/0x10 [ 411.425817][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 411.431639][ T8828] ? __fget_files+0x29/0x470 [ 411.436247][ T8828] ? fput+0x1a8/0x230 [ 411.440243][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 411.446141][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 411.451092][ T8828] __sys_bpf+0x48d/0x810 [ 411.455352][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 411.460134][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.466130][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.472478][ T8828] ? do_syscall_64+0x100/0x230 [ 411.477341][ T8828] __x64_sys_bpf+0x7c/0x90 [ 411.481939][ T8828] do_syscall_64+0xf3/0x230 [ 411.486449][ T8828] ? clear_bhb_loop+0x35/0x90 [ 411.491161][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.497061][ T8828] RIP: 0033:0x7f20bc97dff9 [ 411.501492][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.521196][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.529653][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 411.537830][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 411.545809][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 411.553790][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.561764][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 411.569767][ T8828] [ 411.572943][ T8828] BUG: Bad page state in process syz.4.840 pfn:2cdcf [ 411.579824][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cdcf [ 411.588799][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 411.595959][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 411.604672][ T8828] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 411.613640][ T8828] page dumped because: page_pool leak [ 411.619156][ T8828] page_owner tracks the page as allocated [ 411.624887][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596517263, free_ts 408242673680 [ 411.641996][ T8828] post_alloc_hook+0x1f3/0x230 [ 411.646779][ T8828] get_page_from_freelist+0x3045/0x3190 [ 411.652402][ T8828] __alloc_pages_noprof+0x292/0x710 [ 411.657641][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 411.663195][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 411.669293][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 411.674527][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 411.679997][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 411.685399][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 411.690460][ T8828] __sys_bpf+0x48d/0x810 [ 411.694737][ T8828] __x64_sys_bpf+0x7c/0x90 [ 411.699254][ T8828] do_syscall_64+0xf3/0x230 [ 411.703767][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.709782][ T8828] page last free pid 5288 tgid 5288 stack trace: [ 411.716136][ T8828] free_unref_page+0xcfb/0xf20 [ 411.720979][ T8828] vfree+0x186/0x2e0 [ 411.724895][ T8828] delayed_vfree_work+0x56/0x80 [ 411.729882][ T8828] process_scheduled_works+0xa63/0x1850 [ 411.735486][ T8828] worker_thread+0x870/0xd30 [ 411.740212][ T8828] kthread+0x2f0/0x390 [ 411.744311][ T8828] ret_from_fork+0x4b/0x80 [ 411.748949][ T8828] ret_from_fork_asm+0x1a/0x30 [ 411.753757][ T8828] Modules linked in: [ 411.757666][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 411.769743][ T8828] Tainted: [B]=BAD_PAGE [ 411.773902][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.783954][ T8828] Call Trace: [ 411.787233][ T8828] [ 411.790183][ T8828] dump_stack_lvl+0x241/0x360 [ 411.794901][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.800123][ T8828] ? __pfx_print_modules+0x10/0x10 [ 411.805277][ T8828] bad_page+0x166/0x1b0 [ 411.809627][ T8828] free_unref_page+0xed0/0xf20 [ 411.814520][ T8828] skb_release_data+0x6dc/0x8a0 [ 411.819383][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 411.824417][ T8828] ? packet_rcv+0x159/0x14b0 [ 411.829028][ T8828] packet_rcv+0x16f/0x14b0 [ 411.833494][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 411.838385][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 411.844436][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 411.851044][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 411.857560][ T8828] ? read_tsc+0x9/0x20 [ 411.861646][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 411.866871][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 411.873220][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 411.879430][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 411.885801][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 411.892510][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 411.897752][ T8828] ? __phys_addr+0xba/0x170 [ 411.902270][ T8828] ? build_skb_around+0x111/0x260 [ 411.907309][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 411.913226][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 411.918531][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 411.924006][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 411.929915][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 411.935479][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 411.941301][ T8828] ? synchronize_rcu+0x11b/0x360 [ 411.946253][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 411.951647][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 411.957905][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 411.963816][ T8828] ? _copy_from_user+0xa6/0xe0 [ 411.968596][ T8828] ? bpf_test_init+0x15a/0x180 [ 411.973391][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 411.978884][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 411.984359][ T8828] ? __pfx_lock_release+0x10/0x10 [ 411.989424][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 411.995248][ T8828] ? __fget_files+0x29/0x470 [ 411.999949][ T8828] ? fput+0x1a8/0x230 [ 412.003947][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.009768][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 412.014745][ T8828] __sys_bpf+0x48d/0x810 [ 412.019002][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 412.023798][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 412.029809][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 412.036239][ T8828] ? do_syscall_64+0x100/0x230 [ 412.041024][ T8828] __x64_sys_bpf+0x7c/0x90 [ 412.045457][ T8828] do_syscall_64+0xf3/0x230 [ 412.049973][ T8828] ? clear_bhb_loop+0x35/0x90 [ 412.054673][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.060586][ T8828] RIP: 0033:0x7f20bc97dff9 [ 412.065003][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.084644][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.093068][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 412.101046][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 412.109021][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 412.116996][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.124983][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 412.132968][ T8828] [ 412.136140][ T8828] BUG: Bad page state in process syz.4.840 pfn:734ce [ 412.143036][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200f9 pfn:0x734ce [ 412.152271][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 412.159559][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 412.168310][ T8828] raw: 00000000000200f9 0000000000000001 00000000ffffffff 0000000000000000 [ 412.176930][ T8828] page dumped because: page_pool leak [ 412.182432][ T8828] page_owner tracks the page as allocated [ 412.188285][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596504843, free_ts 408276700720 [ 412.205320][ T8828] post_alloc_hook+0x1f3/0x230 [ 412.210172][ T8828] get_page_from_freelist+0x3045/0x3190 [ 412.215723][ T8828] __alloc_pages_noprof+0x292/0x710 [ 412.221005][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 412.226478][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 412.232461][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 412.237686][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 412.243192][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 412.248696][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 412.253672][ T8828] __sys_bpf+0x48d/0x810 [ 412.257930][ T8828] __x64_sys_bpf+0x7c/0x90 [ 412.262432][ T8828] do_syscall_64+0xf3/0x230 [ 412.266961][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.272991][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 412.279369][ T8828] free_unref_folios+0xf12/0x18d0 [ 412.284433][ T8828] folios_put_refs+0x76c/0x860 [ 412.289268][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 412.294945][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 412.299602][ T8828] tlb_finish_mmu+0xd4/0x200 [ 412.304247][ T8828] exit_mmap+0x496/0xc40 [ 412.308562][ T8828] __mmput+0x115/0x390 [ 412.312676][ T8828] exit_mm+0x220/0x310 [ 412.316755][ T8828] do_exit+0x9b2/0x28e0 [ 412.320970][ T8828] do_group_exit+0x207/0x2c0 [ 412.325560][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 412.330617][ T8828] x64_sys_call+0x2634/0x2640 [ 412.335304][ T8828] do_syscall_64+0xf3/0x230 [ 412.339839][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.345744][ T8828] Modules linked in: [ 412.349709][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 412.361795][ T8828] Tainted: [B]=BAD_PAGE [ 412.365941][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 412.375994][ T8828] Call Trace: [ 412.379295][ T8828] [ 412.382255][ T8828] dump_stack_lvl+0x241/0x360 [ 412.386939][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.392143][ T8828] ? __pfx_print_modules+0x10/0x10 [ 412.397276][ T8828] bad_page+0x166/0x1b0 [ 412.401438][ T8828] free_unref_page+0xed0/0xf20 [ 412.406215][ T8828] skb_release_data+0x6dc/0x8a0 [ 412.411186][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 412.416211][ T8828] ? packet_rcv+0x159/0x14b0 [ 412.420814][ T8828] packet_rcv+0x16f/0x14b0 [ 412.425253][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 412.430118][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 412.436128][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 412.442742][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 412.449329][ T8828] ? read_tsc+0x9/0x20 [ 412.453429][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 412.458653][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 412.465022][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 412.471195][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 412.477547][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 412.484238][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 412.489460][ T8828] ? __phys_addr+0xba/0x170 [ 412.493969][ T8828] ? build_skb_around+0x111/0x260 [ 412.499004][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 412.504914][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 412.510232][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 412.515700][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 412.521697][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 412.527262][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 412.533074][ T8828] ? synchronize_rcu+0x11b/0x360 [ 412.538021][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 412.543334][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 412.549719][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 412.555629][ T8828] ? _copy_from_user+0xa6/0xe0 [ 412.560409][ T8828] ? bpf_test_init+0x15a/0x180 [ 412.565178][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 412.570645][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 412.576030][ T8828] ? __pfx_lock_release+0x10/0x10 [ 412.582204][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.588018][ T8828] ? __fget_files+0x29/0x470 [ 412.592628][ T8828] ? fput+0x1a8/0x230 [ 412.596664][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.602491][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 412.607457][ T8828] __sys_bpf+0x48d/0x810 [ 412.611727][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 412.616520][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 412.622635][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 412.629002][ T8828] ? do_syscall_64+0x100/0x230 [ 412.633790][ T8828] __x64_sys_bpf+0x7c/0x90 [ 412.638313][ T8828] do_syscall_64+0xf3/0x230 [ 412.642830][ T8828] ? clear_bhb_loop+0x35/0x90 [ 412.647523][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.653693][ T8828] RIP: 0033:0x7f20bc97dff9 [ 412.658121][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.677751][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.686191][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 412.694343][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 412.702324][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 412.710319][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.718294][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 412.726298][ T8828] [ 412.729422][ T8828] BUG: Bad page state in process syz.4.840 pfn:734cd [ 412.736212][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200f8 pfn:0x734cd [ 412.745420][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 412.752628][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 412.761283][ T8828] raw: 00000000000200f8 0000000000000001 00000000ffffffff 0000000000000000 [ 412.769927][ T8828] page dumped because: page_pool leak [ 412.775305][ T8828] page_owner tracks the page as allocated [ 412.781046][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596492444, free_ts 408276710495 [ 412.798161][ T8828] post_alloc_hook+0x1f3/0x230 [ 412.802962][ T8828] get_page_from_freelist+0x3045/0x3190 [ 412.808572][ T8828] __alloc_pages_noprof+0x292/0x710 [ 412.813797][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 412.819285][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 412.825183][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 412.830433][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 412.835802][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 412.841213][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 412.846152][ T8828] __sys_bpf+0x48d/0x810 [ 412.850430][ T8828] __x64_sys_bpf+0x7c/0x90 [ 412.854843][ T8828] do_syscall_64+0xf3/0x230 [ 412.859392][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.865292][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 412.871690][ T8828] free_unref_folios+0xf12/0x18d0 [ 412.876734][ T8828] folios_put_refs+0x76c/0x860 [ 412.881534][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 412.887163][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 412.891827][ T8828] tlb_finish_mmu+0xd4/0x200 [ 412.896441][ T8828] exit_mmap+0x496/0xc40 [ 412.900719][ T8828] __mmput+0x115/0x390 [ 412.904810][ T8828] exit_mm+0x220/0x310 [ 412.908943][ T8828] do_exit+0x9b2/0x28e0 [ 412.913119][ T8828] do_group_exit+0x207/0x2c0 [ 412.917705][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 412.922759][ T8828] x64_sys_call+0x2634/0x2640 [ 412.927458][ T8828] do_syscall_64+0xf3/0x230 [ 412.932021][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.938005][ T8828] Modules linked in: [ 412.941954][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 412.954812][ T8828] Tainted: [B]=BAD_PAGE [ 412.959002][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 412.969090][ T8828] Call Trace: [ 412.972393][ T8828] [ 412.975368][ T8828] dump_stack_lvl+0x241/0x360 [ 412.980054][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.985348][ T8828] ? __pfx_print_modules+0x10/0x10 [ 412.990487][ T8828] bad_page+0x166/0x1b0 [ 412.994647][ T8828] free_unref_page+0xed0/0xf20 [ 412.999450][ T8828] skb_release_data+0x6dc/0x8a0 [ 413.004331][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 413.009370][ T8828] ? packet_rcv+0x159/0x14b0 [ 413.013973][ T8828] packet_rcv+0x16f/0x14b0 [ 413.018404][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 413.023266][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 413.029271][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 413.035882][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 413.042394][ T8828] ? read_tsc+0x9/0x20 [ 413.046472][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 413.051701][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 413.058042][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 413.064213][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 413.070559][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 413.077248][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 413.082489][ T8828] ? __phys_addr+0xba/0x170 [ 413.086999][ T8828] ? build_skb_around+0x111/0x260 [ 413.092033][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 413.097944][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 413.103260][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 413.108733][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 413.114674][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 413.120223][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 413.126032][ T8828] ? synchronize_rcu+0x11b/0x360 [ 413.130987][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 413.136285][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 413.142539][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 413.148496][ T8828] ? _copy_from_user+0xa6/0xe0 [ 413.153364][ T8828] ? bpf_test_init+0x15a/0x180 [ 413.158133][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 413.163607][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 413.168991][ T8828] ? __pfx_lock_release+0x10/0x10 [ 413.174034][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 413.179851][ T8828] ? __fget_files+0x29/0x470 [ 413.184452][ T8828] ? fput+0x1a8/0x230 [ 413.188529][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 413.194357][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 413.199312][ T8828] __sys_bpf+0x48d/0x810 [ 413.203565][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 413.208344][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 413.214352][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.220692][ T8828] ? do_syscall_64+0x100/0x230 [ 413.225462][ T8828] __x64_sys_bpf+0x7c/0x90 [ 413.229891][ T8828] do_syscall_64+0xf3/0x230 [ 413.234400][ T8828] ? clear_bhb_loop+0x35/0x90 [ 413.239083][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.244979][ T8828] RIP: 0033:0x7f20bc97dff9 [ 413.249399][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.269037][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.277461][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 413.285448][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 413.293426][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 413.301491][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.309466][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 413.317454][ T8828] [ 413.320591][ T8828] BUG: Bad page state in process syz.4.840 pfn:734cc [ 413.327380][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200f7 pfn:0x734cc [ 413.336593][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 413.343826][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 413.352716][ T8828] raw: 00000000000200f7 0000000000000001 00000000ffffffff 0000000000000000 [ 413.361386][ T8828] page dumped because: page_pool leak [ 413.366764][ T8828] page_owner tracks the page as allocated [ 413.372535][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596479874, free_ts 408276720315 [ 413.389516][ T8828] post_alloc_hook+0x1f3/0x230 [ 413.394294][ T8828] get_page_from_freelist+0x3045/0x3190 [ 413.399921][ T8828] __alloc_pages_noprof+0x292/0x710 [ 413.405140][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 413.410678][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 413.416597][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 413.421871][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 413.427246][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 413.432678][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 413.437634][ T8828] __sys_bpf+0x48d/0x810 [ 413.441926][ T8828] __x64_sys_bpf+0x7c/0x90 [ 413.446345][ T8828] do_syscall_64+0xf3/0x230 [ 413.450893][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.456809][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 413.463211][ T8828] free_unref_folios+0xf12/0x18d0 [ 413.468319][ T8828] folios_put_refs+0x76c/0x860 [ 413.473100][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 413.478840][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 413.483451][ T8828] tlb_finish_mmu+0xd4/0x200 [ 413.488050][ T8828] exit_mmap+0x496/0xc40 [ 413.492347][ T8828] __mmput+0x115/0x390 [ 413.496444][ T8828] exit_mm+0x220/0x310 [ 413.500599][ T8828] do_exit+0x9b2/0x28e0 [ 413.504765][ T8828] do_group_exit+0x207/0x2c0 [ 413.509420][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 413.514474][ T8828] x64_sys_call+0x2634/0x2640 [ 413.519286][ T8828] do_syscall_64+0xf3/0x230 [ 413.523833][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.529804][ T8828] Modules linked in: [ 413.533803][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 413.545900][ T8828] Tainted: [B]=BAD_PAGE [ 413.550043][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 413.560106][ T8828] Call Trace: [ 413.563393][ T8828] [ 413.566408][ T8828] dump_stack_lvl+0x241/0x360 [ 413.571095][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.576350][ T8828] ? __pfx_print_modules+0x10/0x10 [ 413.581501][ T8828] bad_page+0x166/0x1b0 [ 413.585665][ T8828] free_unref_page+0xed0/0xf20 [ 413.590474][ T8828] skb_release_data+0x6dc/0x8a0 [ 413.595366][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 413.600425][ T8828] ? packet_rcv+0x159/0x14b0 [ 413.605063][ T8828] packet_rcv+0x16f/0x14b0 [ 413.609519][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 413.614403][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 413.620408][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 413.627015][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 413.633561][ T8828] ? read_tsc+0x9/0x20 [ 413.637645][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 413.642871][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 413.649225][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 413.655487][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 413.661831][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 413.668634][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 413.673842][ T8828] ? __phys_addr+0xba/0x170 [ 413.678362][ T8828] ? build_skb_around+0x111/0x260 [ 413.683412][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 413.689326][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 413.694637][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 413.700106][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 413.706018][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 413.711575][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 413.717388][ T8828] ? synchronize_rcu+0x11b/0x360 [ 413.722333][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 413.727631][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 413.733885][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 413.739881][ T8828] ? _copy_from_user+0xa6/0xe0 [ 413.744654][ T8828] ? bpf_test_init+0x15a/0x180 [ 413.749608][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 413.755076][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 413.760461][ T8828] ? __pfx_lock_release+0x10/0x10 [ 413.765526][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 413.771542][ T8828] ? __fget_files+0x29/0x470 [ 413.776256][ T8828] ? fput+0x1a8/0x230 [ 413.780261][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 413.786092][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 413.791049][ T8828] __sys_bpf+0x48d/0x810 [ 413.795309][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 413.800092][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 413.806084][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.812428][ T8828] ? do_syscall_64+0x100/0x230 [ 413.817206][ T8828] __x64_sys_bpf+0x7c/0x90 [ 413.821628][ T8828] do_syscall_64+0xf3/0x230 [ 413.826314][ T8828] ? clear_bhb_loop+0x35/0x90 [ 413.831004][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.836906][ T8828] RIP: 0033:0x7f20bc97dff9 [ 413.841334][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.860987][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.869434][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 413.877503][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 413.885496][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 413.893488][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.901484][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 413.909516][ T8828] [ 413.912667][ T8828] BUG: Bad page state in process syz.4.840 pfn:5cecd [ 413.919542][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805cecdf50 pfn:0x5cecd [ 413.929712][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 413.936870][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 413.945534][ T8828] raw: ffff88805cecdf50 0000000000000001 00000000ffffffff 0000000000000000 [ 413.954191][ T8828] page dumped because: page_pool leak [ 413.959626][ T8828] page_owner tracks the page as allocated [ 413.965341][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596467452, free_ts 408276730186 [ 413.982391][ T8828] post_alloc_hook+0x1f3/0x230 [ 413.987191][ T8828] get_page_from_freelist+0x3045/0x3190 [ 413.992796][ T8828] __alloc_pages_noprof+0x292/0x710 [ 413.997996][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 414.003524][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 414.009609][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 414.014836][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 414.020281][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 414.025658][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 414.030677][ T8828] __sys_bpf+0x48d/0x810 [ 414.034924][ T8828] __x64_sys_bpf+0x7c/0x90 [ 414.039431][ T8828] do_syscall_64+0xf3/0x230 [ 414.043958][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.050031][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 414.056456][ T8828] free_unref_folios+0xf12/0x18d0 [ 414.061559][ T8828] folios_put_refs+0x76c/0x860 [ 414.066323][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 414.072011][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 414.076604][ T8828] tlb_finish_mmu+0xd4/0x200 [ 414.081244][ T8828] exit_mmap+0x496/0xc40 [ 414.085502][ T8828] __mmput+0x115/0x390 [ 414.089684][ T8828] exit_mm+0x220/0x310 [ 414.093789][ T8828] do_exit+0x9b2/0x28e0 [ 414.097955][ T8828] do_group_exit+0x207/0x2c0 [ 414.102642][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 414.107663][ T8828] x64_sys_call+0x2634/0x2640 [ 414.112412][ T8828] do_syscall_64+0xf3/0x230 [ 414.116933][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.122880][ T8828] Modules linked in: [ 414.126772][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 414.138849][ T8828] Tainted: [B]=BAD_PAGE [ 414.143011][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 414.153065][ T8828] Call Trace: [ 414.156338][ T8828] [ 414.159273][ T8828] dump_stack_lvl+0x241/0x360 [ 414.163968][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.169177][ T8828] ? __pfx_print_modules+0x10/0x10 [ 414.174300][ T8828] bad_page+0x166/0x1b0 [ 414.178467][ T8828] free_unref_page+0xed0/0xf20 [ 414.183256][ T8828] skb_release_data+0x6dc/0x8a0 [ 414.188125][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 414.193166][ T8828] ? packet_rcv+0x159/0x14b0 [ 414.197768][ T8828] packet_rcv+0x16f/0x14b0 [ 414.202201][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 414.207064][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 414.213060][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 414.219656][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 414.226166][ T8828] ? read_tsc+0x9/0x20 [ 414.230251][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 414.235458][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 414.241795][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 414.247957][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 414.254296][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 414.260984][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 414.266192][ T8828] ? __phys_addr+0xba/0x170 [ 414.270696][ T8828] ? build_skb_around+0x111/0x260 [ 414.275723][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 414.281632][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 414.286924][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 414.292391][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 414.298309][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 414.303960][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 414.309774][ T8828] ? synchronize_rcu+0x11b/0x360 [ 414.314721][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 414.320021][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 414.326296][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 414.332204][ T8828] ? _copy_from_user+0xa6/0xe0 [ 414.336986][ T8828] ? bpf_test_init+0x15a/0x180 [ 414.341758][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 414.347226][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 414.352614][ T8828] ? __pfx_lock_release+0x10/0x10 [ 414.357655][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 414.363813][ T8828] ? __fget_files+0x29/0x470 [ 414.368415][ T8828] ? fput+0x1a8/0x230 [ 414.372406][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 414.378230][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 414.383202][ T8828] __sys_bpf+0x48d/0x810 [ 414.387462][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 414.392253][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 414.398268][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 414.404658][ T8828] ? do_syscall_64+0x100/0x230 [ 414.409456][ T8828] __x64_sys_bpf+0x7c/0x90 [ 414.413883][ T8828] do_syscall_64+0xf3/0x230 [ 414.418399][ T8828] ? clear_bhb_loop+0x35/0x90 [ 414.423086][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.429040][ T8828] RIP: 0033:0x7f20bc97dff9 [ 414.433460][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.453076][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.461510][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 414.469493][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 414.477550][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 414.485518][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.493491][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 414.501480][ T8828] [ 414.504629][ T8828] BUG: Bad page state in process syz.4.840 pfn:5cecc [ 414.511510][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ceccf50 pfn:0x5cecc [ 414.521707][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 414.528929][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 414.537536][ T8828] raw: ffff88805ceccf50 0000000000000001 00000000ffffffff 0000000000000000 [ 414.546183][ T8828] page dumped because: page_pool leak [ 414.551609][ T8828] page_owner tracks the page as allocated [ 414.557332][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596454804, free_ts 408276740545 [ 414.574342][ T8828] post_alloc_hook+0x1f3/0x230 [ 414.579214][ T8828] get_page_from_freelist+0x3045/0x3190 [ 414.584765][ T8828] __alloc_pages_noprof+0x292/0x710 [ 414.590063][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 414.595541][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 414.601514][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 414.606724][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 414.612169][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 414.617566][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 414.622579][ T8828] __sys_bpf+0x48d/0x810 [ 414.626828][ T8828] __x64_sys_bpf+0x7c/0x90 [ 414.631333][ T8828] do_syscall_64+0xf3/0x230 [ 414.635844][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.641833][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 414.648272][ T8828] free_unref_folios+0xf12/0x18d0 [ 414.653328][ T8828] folios_put_refs+0x76c/0x860 [ 414.658215][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 414.663875][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 414.668526][ T8828] tlb_finish_mmu+0xd4/0x200 [ 414.673115][ T8828] exit_mmap+0x496/0xc40 [ 414.677352][ T8828] __mmput+0x115/0x390 [ 414.681485][ T8828] exit_mm+0x220/0x310 [ 414.685550][ T8828] do_exit+0x9b2/0x28e0 [ 414.689762][ T8828] do_group_exit+0x207/0x2c0 [ 414.694348][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 414.699464][ T8828] x64_sys_call+0x2634/0x2640 [ 414.704165][ T8828] do_syscall_64+0xf3/0x230 [ 414.708737][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.714631][ T8828] Modules linked in: [ 414.718626][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 414.730709][ T8828] Tainted: [B]=BAD_PAGE [ 414.734944][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 414.745001][ T8828] Call Trace: [ 414.748289][ T8828] [ 414.751322][ T8828] dump_stack_lvl+0x241/0x360 [ 414.756009][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.761214][ T8828] ? __pfx_print_modules+0x10/0x10 [ 414.766342][ T8828] bad_page+0x166/0x1b0 [ 414.770595][ T8828] free_unref_page+0xed0/0xf20 [ 414.775492][ T8828] skb_release_data+0x6dc/0x8a0 [ 414.780374][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 414.785410][ T8828] ? packet_rcv+0x159/0x14b0 [ 414.790015][ T8828] packet_rcv+0x16f/0x14b0 [ 414.794447][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 414.799310][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 414.805313][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 414.811919][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 414.818450][ T8828] ? read_tsc+0x9/0x20 [ 414.822530][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 414.827743][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 414.834081][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 414.840337][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 414.846695][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 414.853384][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 414.858595][ T8828] ? __phys_addr+0xba/0x170 [ 414.863103][ T8828] ? build_skb_around+0x111/0x260 [ 414.868159][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 414.874590][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 414.879887][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 414.885351][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 414.891266][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 414.896822][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 414.902653][ T8828] ? synchronize_rcu+0x11b/0x360 [ 414.907599][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 414.912906][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 414.919190][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 414.925110][ T8828] ? _copy_from_user+0xa6/0xe0 [ 414.929926][ T8828] ? bpf_test_init+0x15a/0x180 [ 414.934706][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 414.940182][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 414.945589][ T8828] ? __pfx_lock_release+0x10/0x10 [ 414.950729][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 414.956561][ T8828] ? __fget_files+0x29/0x470 [ 414.961170][ T8828] ? fput+0x1a8/0x230 [ 414.965169][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 414.971003][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 414.975949][ T8828] __sys_bpf+0x48d/0x810 [ 414.980232][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 414.985027][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 414.991034][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 414.997385][ T8828] ? do_syscall_64+0x100/0x230 [ 415.002192][ T8828] __x64_sys_bpf+0x7c/0x90 [ 415.006634][ T8828] do_syscall_64+0xf3/0x230 [ 415.011191][ T8828] ? clear_bhb_loop+0x35/0x90 [ 415.015891][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.021887][ T8828] RIP: 0033:0x7f20bc97dff9 [ 415.026314][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.046131][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.054570][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 415.062569][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 415.070561][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 415.078639][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.086626][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 415.094725][ T8828] [ 415.097920][ T8828] BUG: Bad page state in process syz.4.840 pfn:695b9 [ 415.104830][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200ec pfn:0x695b9 [ 415.114093][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 415.121384][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 415.130191][ T8828] raw: 00000000000200ec 0000000000000001 00000000ffffffff 0000000000000000 [ 415.138875][ T8828] page dumped because: page_pool leak [ 415.144274][ T8828] page_owner tracks the page as allocated [ 415.150035][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596442426, free_ts 408276751483 [ 415.167004][ T8828] post_alloc_hook+0x1f3/0x230 [ 415.171816][ T8828] get_page_from_freelist+0x3045/0x3190 [ 415.177385][ T8828] __alloc_pages_noprof+0x292/0x710 [ 415.182623][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 415.188172][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 415.194118][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 415.199380][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 415.204772][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 415.210215][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 415.215207][ T8828] __sys_bpf+0x48d/0x810 [ 415.219510][ T8828] __x64_sys_bpf+0x7c/0x90 [ 415.223944][ T8828] do_syscall_64+0xf3/0x230 [ 415.228507][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.234400][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 415.240749][ T8828] free_unref_folios+0xf12/0x18d0 [ 415.245773][ T8828] folios_put_refs+0x76c/0x860 [ 415.250595][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 415.256245][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 415.260907][ T8828] tlb_finish_mmu+0xd4/0x200 [ 415.265535][ T8828] exit_mmap+0x496/0xc40 [ 415.269845][ T8828] __mmput+0x115/0x390 [ 415.273955][ T8828] exit_mm+0x220/0x310 [ 415.278017][ T8828] do_exit+0x9b2/0x28e0 [ 415.282210][ T8828] do_group_exit+0x207/0x2c0 [ 415.286796][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 415.291850][ T8828] x64_sys_call+0x2634/0x2640 [ 415.296529][ T8828] do_syscall_64+0xf3/0x230 [ 415.301064][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.306978][ T8828] Modules linked in: [ 415.310929][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 415.322999][ T8828] Tainted: [B]=BAD_PAGE [ 415.327139][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.337195][ T8828] Call Trace: [ 415.340472][ T8828] [ 415.343398][ T8828] dump_stack_lvl+0x241/0x360 [ 415.348078][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.353287][ T8828] ? __pfx_print_modules+0x10/0x10 [ 415.358424][ T8828] bad_page+0x166/0x1b0 [ 415.362609][ T8828] free_unref_page+0xed0/0xf20 [ 415.367382][ T8828] skb_release_data+0x6dc/0x8a0 [ 415.372239][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 415.377263][ T8828] ? packet_rcv+0x159/0x14b0 [ 415.381862][ T8828] packet_rcv+0x16f/0x14b0 [ 415.386299][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 415.391163][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 415.397189][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 415.403786][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 415.410388][ T8828] ? read_tsc+0x9/0x20 [ 415.414466][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 415.419685][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 415.426026][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 415.432198][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 415.438539][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 415.445226][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 415.450437][ T8828] ? __phys_addr+0xba/0x170 [ 415.454957][ T8828] ? build_skb_around+0x111/0x260 [ 415.459985][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 415.465885][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 415.471201][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 415.476685][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 415.482594][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 415.488152][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 415.493970][ T8828] ? synchronize_rcu+0x11b/0x360 [ 415.498964][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 415.504269][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 415.510538][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 415.516442][ T8828] ? _copy_from_user+0xa6/0xe0 [ 415.521215][ T8828] ? bpf_test_init+0x15a/0x180 [ 415.526028][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 415.531496][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 415.536880][ T8828] ? __pfx_lock_release+0x10/0x10 [ 415.541930][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 415.547740][ T8828] ? __fget_files+0x29/0x470 [ 415.552342][ T8828] ? fput+0x1a8/0x230 [ 415.556334][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 415.562144][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 415.567099][ T8828] __sys_bpf+0x48d/0x810 [ 415.571350][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 415.576127][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 415.582122][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 415.588466][ T8828] ? do_syscall_64+0x100/0x230 [ 415.593243][ T8828] __x64_sys_bpf+0x7c/0x90 [ 415.597665][ T8828] do_syscall_64+0xf3/0x230 [ 415.602187][ T8828] ? clear_bhb_loop+0x35/0x90 [ 415.606873][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.612774][ T8828] RIP: 0033:0x7f20bc97dff9 [ 415.617198][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.636833][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.645258][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 415.653422][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 415.661405][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 415.669407][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.677381][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 415.685368][ T8828] [ 415.688595][ T8828] BUG: Bad page state in process syz.4.840 pfn:695ba [ 415.695385][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200ed pfn:0x695ba [ 415.704572][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 415.711767][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 415.720417][ T8828] raw: 00000000000200ed 0000000000000001 00000000ffffffff 0000000000000000 [ 415.729074][ T8828] page dumped because: page_pool leak [ 415.734450][ T8828] page_owner tracks the page as allocated [ 415.740221][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596430031, free_ts 408276761382 [ 415.757329][ T8828] post_alloc_hook+0x1f3/0x230 [ 415.762148][ T8828] get_page_from_freelist+0x3045/0x3190 [ 415.767696][ T8828] __alloc_pages_noprof+0x292/0x710 [ 415.772939][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 415.778436][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 415.784429][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 415.789712][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 415.795126][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 415.800550][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 415.805522][ T8828] __sys_bpf+0x48d/0x810 [ 415.809849][ T8828] __x64_sys_bpf+0x7c/0x90 [ 415.814284][ T8828] do_syscall_64+0xf3/0x230 [ 415.818857][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.824773][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 415.831186][ T8828] free_unref_folios+0xf12/0x18d0 [ 415.836237][ T8828] folios_put_refs+0x76c/0x860 [ 415.841051][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 415.846692][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 415.851329][ T8828] tlb_finish_mmu+0xd4/0x200 [ 415.855940][ T8828] exit_mmap+0x496/0xc40 [ 415.860214][ T8828] __mmput+0x115/0x390 [ 415.864287][ T8828] exit_mm+0x220/0x310 [ 415.868433][ T8828] do_exit+0x9b2/0x28e0 [ 415.872630][ T8828] do_group_exit+0x207/0x2c0 [ 415.877217][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 415.882277][ T8828] x64_sys_call+0x2634/0x2640 [ 415.886956][ T8828] do_syscall_64+0xf3/0x230 [ 415.891505][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.897400][ T8828] Modules linked in: [ 415.901374][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 415.913460][ T8828] Tainted: [B]=BAD_PAGE [ 415.917608][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.927662][ T8828] Call Trace: [ 415.930945][ T8828] [ 415.933881][ T8828] dump_stack_lvl+0x241/0x360 [ 415.938595][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.943828][ T8828] ? __pfx_print_modules+0x10/0x10 [ 415.948979][ T8828] bad_page+0x166/0x1b0 [ 415.953157][ T8828] free_unref_page+0xed0/0xf20 [ 415.957975][ T8828] skb_release_data+0x6dc/0x8a0 [ 415.962859][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 415.967895][ T8828] ? packet_rcv+0x159/0x14b0 [ 415.972518][ T8828] packet_rcv+0x16f/0x14b0 [ 415.976964][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 415.981823][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 415.987819][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 415.994415][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 416.000949][ T8828] ? read_tsc+0x9/0x20 [ 416.005028][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 416.010241][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 416.016580][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 416.022746][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 416.029087][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 416.035784][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 416.040997][ T8828] ? __phys_addr+0xba/0x170 [ 416.045508][ T8828] ? build_skb_around+0x111/0x260 [ 416.050539][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 416.056448][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 416.061747][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 416.067221][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 416.073137][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 416.078695][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 416.084510][ T8828] ? synchronize_rcu+0x11b/0x360 [ 416.089454][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 416.094754][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 416.101016][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 416.106922][ T8828] ? _copy_from_user+0xa6/0xe0 [ 416.111697][ T8828] ? bpf_test_init+0x15a/0x180 [ 416.116465][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 416.121933][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 416.127327][ T8828] ? __pfx_lock_release+0x10/0x10 [ 416.132385][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 416.138211][ T8828] ? __fget_files+0x29/0x470 [ 416.142860][ T8828] ? fput+0x1a8/0x230 [ 416.146853][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 416.152664][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 416.157615][ T8828] __sys_bpf+0x48d/0x810 [ 416.161868][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 416.166643][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 416.172638][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 416.178979][ T8828] ? do_syscall_64+0x100/0x230 [ 416.183780][ T8828] __x64_sys_bpf+0x7c/0x90 [ 416.188471][ T8828] do_syscall_64+0xf3/0x230 [ 416.192985][ T8828] ? clear_bhb_loop+0x35/0x90 [ 416.197678][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.203585][ T8828] RIP: 0033:0x7f20bc97dff9 [ 416.208004][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.227619][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.236045][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 416.244054][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 416.252066][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 416.260047][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.268037][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 416.276017][ T8828] [ 416.279151][ T8828] BUG: Bad page state in process syz.4.840 pfn:695bb [ 416.285936][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200ee pfn:0x695bb [ 416.295112][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 416.302276][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 416.310904][ T8828] raw: 00000000000200ee 0000000000000001 00000000ffffffff 0000000000000000 [ 416.319561][ T8828] page dumped because: page_pool leak [ 416.325023][ T8828] page_owner tracks the page as allocated [ 416.330780][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596417822, free_ts 408276772158 [ 416.347761][ T8828] post_alloc_hook+0x1f3/0x230 [ 416.352605][ T8828] get_page_from_freelist+0x3045/0x3190 [ 416.358215][ T8828] __alloc_pages_noprof+0x292/0x710 [ 416.363425][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 416.369016][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 416.374916][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 416.380196][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 416.385574][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 416.391153][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 416.396114][ T8828] __sys_bpf+0x48d/0x810 [ 416.400415][ T8828] __x64_sys_bpf+0x7c/0x90 [ 416.404828][ T8828] do_syscall_64+0xf3/0x230 [ 416.409377][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.415273][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 416.421655][ T8828] free_unref_folios+0xf12/0x18d0 [ 416.426674][ T8828] folios_put_refs+0x76c/0x860 [ 416.431479][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 416.437118][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 416.441798][ T8828] tlb_finish_mmu+0xd4/0x200 [ 416.446437][ T8828] exit_mmap+0x496/0xc40 [ 416.450741][ T8828] __mmput+0x115/0x390 [ 416.454838][ T8828] exit_mm+0x220/0x310 [ 416.458989][ T8828] do_exit+0x9b2/0x28e0 [ 416.463173][ T8828] do_group_exit+0x207/0x2c0 [ 416.467759][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 416.472830][ T8828] x64_sys_call+0x2634/0x2640 [ 416.477509][ T8828] do_syscall_64+0xf3/0x230 [ 416.482063][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.487980][ T8828] Modules linked in: [ 416.491927][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 416.503993][ T8828] Tainted: [B]=BAD_PAGE [ 416.508144][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 416.518299][ T8828] Call Trace: [ 416.521627][ T8828] [ 416.524557][ T8828] dump_stack_lvl+0x241/0x360 [ 416.529244][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.534447][ T8828] ? __pfx_print_modules+0x10/0x10 [ 416.539580][ T8828] bad_page+0x166/0x1b0 [ 416.543801][ T8828] free_unref_page+0xed0/0xf20 [ 416.548595][ T8828] skb_release_data+0x6dc/0x8a0 [ 416.553467][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 416.558505][ T8828] ? packet_rcv+0x159/0x14b0 [ 416.563135][ T8828] packet_rcv+0x16f/0x14b0 [ 416.567585][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 416.572446][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 416.578487][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 416.585088][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 416.591602][ T8828] ? read_tsc+0x9/0x20 [ 416.595702][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 416.600914][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 416.607253][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 416.613432][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 416.619783][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 416.626472][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 416.631682][ T8828] ? __phys_addr+0xba/0x170 [ 416.636190][ T8828] ? build_skb_around+0x111/0x260 [ 416.641223][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 416.647133][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 416.652438][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 416.657909][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 416.663820][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 416.669376][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 416.675211][ T8828] ? synchronize_rcu+0x11b/0x360 [ 416.680228][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 416.685558][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 416.691815][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 416.697732][ T8828] ? _copy_from_user+0xa6/0xe0 [ 416.702515][ T8828] ? bpf_test_init+0x15a/0x180 [ 416.707315][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 416.712782][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 416.718170][ T8828] ? __pfx_lock_release+0x10/0x10 [ 416.723219][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 416.729033][ T8828] ? __fget_files+0x29/0x470 [ 416.733640][ T8828] ? fput+0x1a8/0x230 [ 416.737632][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 416.743460][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 416.748433][ T8828] __sys_bpf+0x48d/0x810 [ 416.752718][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 416.757500][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 416.763498][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 416.769840][ T8828] ? do_syscall_64+0x100/0x230 [ 416.774632][ T8828] __x64_sys_bpf+0x7c/0x90 [ 416.779073][ T8828] do_syscall_64+0xf3/0x230 [ 416.783608][ T8828] ? clear_bhb_loop+0x35/0x90 [ 416.788311][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.794228][ T8828] RIP: 0033:0x7f20bc97dff9 [ 416.798655][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.818277][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.826702][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 416.834684][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 416.842764][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 416.850754][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.859101][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 416.867094][ T8828] [ 416.870242][ T8828] BUG: Bad page state in process syz.4.840 pfn:695bc [ 416.877043][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200ef pfn:0x695bc [ 416.886286][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 416.893521][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 416.902233][ T8828] raw: 00000000000200ef 0000000000000001 00000000ffffffff 0000000000000000 [ 416.910890][ T8828] page dumped because: page_pool leak [ 416.916363][ T8828] page_owner tracks the page as allocated [ 416.922145][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596405257, free_ts 408276781836 [ 416.939174][ T8828] post_alloc_hook+0x1f3/0x230 [ 416.943997][ T8828] get_page_from_freelist+0x3045/0x3190 [ 416.949607][ T8828] __alloc_pages_noprof+0x292/0x710 [ 416.954818][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 416.960365][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 416.966281][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 416.971564][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 416.977084][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 416.982522][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 416.987465][ T8828] __sys_bpf+0x48d/0x810 [ 416.991776][ T8828] __x64_sys_bpf+0x7c/0x90 [ 416.996279][ T8828] do_syscall_64+0xf3/0x230 [ 417.000843][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.006757][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 417.013183][ T8828] free_unref_folios+0xf12/0x18d0 [ 417.018334][ T8828] folios_put_refs+0x76c/0x860 [ 417.023212][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 417.028908][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 417.033517][ T8828] tlb_finish_mmu+0xd4/0x200 [ 417.038202][ T8828] exit_mmap+0x496/0xc40 [ 417.042462][ T8828] __mmput+0x115/0x390 [ 417.046531][ T8828] exit_mm+0x220/0x310 [ 417.050662][ T8828] do_exit+0x9b2/0x28e0 [ 417.054841][ T8828] do_group_exit+0x207/0x2c0 [ 417.059555][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 417.064603][ T8828] x64_sys_call+0x2634/0x2640 [ 417.069462][ T8828] do_syscall_64+0xf3/0x230 [ 417.073972][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.079982][ T8828] Modules linked in: [ 417.083902][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 417.096069][ T8828] Tainted: [B]=BAD_PAGE [ 417.100233][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 417.110304][ T8828] Call Trace: [ 417.113583][ T8828] [ 417.116510][ T8828] dump_stack_lvl+0x241/0x360 [ 417.121199][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.126407][ T8828] ? __pfx_print_modules+0x10/0x10 [ 417.131535][ T8828] bad_page+0x166/0x1b0 [ 417.135709][ T8828] free_unref_page+0xed0/0xf20 [ 417.140491][ T8828] skb_release_data+0x6dc/0x8a0 [ 417.145361][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 417.150391][ T8828] ? packet_rcv+0x159/0x14b0 [ 417.154992][ T8828] packet_rcv+0x16f/0x14b0 [ 417.159431][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 417.164310][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 417.170306][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 417.176903][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 417.183422][ T8828] ? read_tsc+0x9/0x20 [ 417.187506][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 417.192718][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 417.199060][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 417.205225][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 417.211562][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 417.218336][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 417.223542][ T8828] ? __phys_addr+0xba/0x170 [ 417.228051][ T8828] ? build_skb_around+0x111/0x260 [ 417.233082][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 417.238988][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 417.244291][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 417.249753][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 417.255654][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 417.261206][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 417.267015][ T8828] ? synchronize_rcu+0x11b/0x360 [ 417.271968][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 417.277278][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 417.283532][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 417.289443][ T8828] ? _copy_from_user+0xa6/0xe0 [ 417.294230][ T8828] ? bpf_test_init+0x15a/0x180 [ 417.298995][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 417.304465][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 417.309845][ T8828] ? __pfx_lock_release+0x10/0x10 [ 417.314885][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 417.320695][ T8828] ? __fget_files+0x29/0x470 [ 417.325297][ T8828] ? fput+0x1a8/0x230 [ 417.329310][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 417.335119][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 417.340079][ T8828] __sys_bpf+0x48d/0x810 [ 417.344344][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 417.349122][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 417.355114][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.361552][ T8828] ? do_syscall_64+0x100/0x230 [ 417.366342][ T8828] __x64_sys_bpf+0x7c/0x90 [ 417.370769][ T8828] do_syscall_64+0xf3/0x230 [ 417.375282][ T8828] ? clear_bhb_loop+0x35/0x90 [ 417.379972][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.385881][ T8828] RIP: 0033:0x7f20bc97dff9 [ 417.390302][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.409912][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.418334][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 417.426341][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 417.434317][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 417.442291][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.450277][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 417.458260][ T8828] [ 417.461413][ T8828] BUG: Bad page state in process syz.4.840 pfn:695bd [ 417.468292][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200f0 pfn:0x695bd [ 417.477433][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 417.484675][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 417.493389][ T8828] raw: 00000000000200f0 0000000000000001 00000000ffffffff 0000000000000000 [ 417.502136][ T8828] page dumped because: page_pool leak [ 417.507561][ T8828] page_owner tracks the page as allocated [ 417.513339][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596392855, free_ts 408276791736 [ 417.530360][ T8828] post_alloc_hook+0x1f3/0x230 [ 417.535135][ T8828] get_page_from_freelist+0x3045/0x3190 [ 417.540745][ T8828] __alloc_pages_noprof+0x292/0x710 [ 417.545938][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 417.551455][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 417.557356][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 417.562635][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 417.568032][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 417.573498][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 417.578543][ T8828] __sys_bpf+0x48d/0x810 [ 417.582812][ T8828] __x64_sys_bpf+0x7c/0x90 [ 417.587225][ T8828] do_syscall_64+0xf3/0x230 [ 417.591798][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.597690][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 417.604079][ T8828] free_unref_folios+0xf12/0x18d0 [ 417.609207][ T8828] folios_put_refs+0x76c/0x860 [ 417.614012][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 417.619758][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 417.624368][ T8828] tlb_finish_mmu+0xd4/0x200 [ 417.629036][ T8828] exit_mmap+0x496/0xc40 [ 417.633279][ T8828] __mmput+0x115/0x390 [ 417.637350][ T8828] exit_mm+0x220/0x310 [ 417.641480][ T8828] do_exit+0x9b2/0x28e0 [ 417.645641][ T8828] do_group_exit+0x207/0x2c0 [ 417.650279][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 417.655302][ T8828] x64_sys_call+0x2634/0x2640 [ 417.660033][ T8828] do_syscall_64+0xf3/0x230 [ 417.664537][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.670494][ T8828] Modules linked in: [ 417.674413][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 417.686480][ T8828] Tainted: [B]=BAD_PAGE [ 417.690631][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 417.700682][ T8828] Call Trace: [ 417.703954][ T8828] [ 417.706879][ T8828] dump_stack_lvl+0x241/0x360 [ 417.711560][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.716757][ T8828] ? __pfx_print_modules+0x10/0x10 [ 417.721875][ T8828] bad_page+0x166/0x1b0 [ 417.726054][ T8828] free_unref_page+0xed0/0xf20 [ 417.730859][ T8828] skb_release_data+0x6dc/0x8a0 [ 417.735715][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 417.740753][ T8828] ? packet_rcv+0x159/0x14b0 [ 417.745403][ T8828] packet_rcv+0x16f/0x14b0 [ 417.749844][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 417.754700][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 417.760693][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 417.767284][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 417.773806][ T8828] ? read_tsc+0x9/0x20 [ 417.777878][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 417.783089][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 417.789434][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 417.795614][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 417.801973][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 417.808697][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 417.813907][ T8828] ? __phys_addr+0xba/0x170 [ 417.818422][ T8828] ? build_skb_around+0x111/0x260 [ 417.823473][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 417.829390][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 417.834690][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 417.840156][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 417.846064][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 417.851630][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 417.857441][ T8828] ? synchronize_rcu+0x11b/0x360 [ 417.862386][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 417.867684][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 417.873940][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 417.879854][ T8828] ? _copy_from_user+0xa6/0xe0 [ 417.884623][ T8828] ? bpf_test_init+0x15a/0x180 [ 417.889416][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 417.894878][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 417.900257][ T8828] ? __pfx_lock_release+0x10/0x10 [ 417.905306][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 417.911117][ T8828] ? __fget_files+0x29/0x470 [ 417.915716][ T8828] ? fput+0x1a8/0x230 [ 417.919708][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 417.925539][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 417.930491][ T8828] __sys_bpf+0x48d/0x810 [ 417.934754][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 417.939533][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 417.945533][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.951895][ T8828] ? do_syscall_64+0x100/0x230 [ 417.956674][ T8828] __x64_sys_bpf+0x7c/0x90 [ 417.961096][ T8828] do_syscall_64+0xf3/0x230 [ 417.965610][ T8828] ? clear_bhb_loop+0x35/0x90 [ 417.970296][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.976206][ T8828] RIP: 0033:0x7f20bc97dff9 [ 417.980644][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.000531][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.008966][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 418.016946][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 418.024945][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 418.032931][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.040914][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 418.049003][ T8828] [ 418.052181][ T8828] BUG: Bad page state in process syz.4.840 pfn:695be [ 418.059024][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200f1 pfn:0x695be [ 418.068210][ T8828] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 418.075355][ T8828] raw: 00fff00000000000 dead000000000040 ffff88807ecc1000 0000000000000000 [ 418.084014][ T8828] raw: 00000000000200f1 0000000000000001 00000000ffffffff 0000000000000000 [ 418.092681][ T8828] page dumped because: page_pool leak [ 418.098072][ T8828] page_owner tracks the page as allocated [ 418.103834][ T8828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8828, tgid 8816 (syz.4.840), ts 408596380509, free_ts 408276801064 [ 418.121259][ T8828] post_alloc_hook+0x1f3/0x230 [ 418.126144][ T8828] get_page_from_freelist+0x3045/0x3190 [ 418.131750][ T8828] __alloc_pages_noprof+0x292/0x710 [ 418.136961][ T8828] alloc_pages_bulk_noprof+0x729/0xd40 [ 418.142459][ T8828] __page_pool_alloc_pages_slow+0x122/0x690 [ 418.148429][ T8828] page_pool_alloc_pages+0xd0/0x1c0 [ 418.153659][ T8828] bpf_test_run_xdp_live+0x950/0x2160 [ 418.159100][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 418.164495][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 418.169470][ T8828] __sys_bpf+0x48d/0x810 [ 418.173713][ T8828] __x64_sys_bpf+0x7c/0x90 [ 418.178181][ T8828] do_syscall_64+0xf3/0x230 [ 418.182712][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.188674][ T8828] page last free pid 8535 tgid 8535 stack trace: [ 418.195009][ T8828] free_unref_folios+0xf12/0x18d0 [ 418.200131][ T8828] folios_put_refs+0x76c/0x860 [ 418.204913][ T8828] free_pages_and_swap_cache+0x2ea/0x690 [ 418.210591][ T8828] tlb_flush_mmu+0x3a3/0x680 [ 418.215179][ T8828] tlb_finish_mmu+0xd4/0x200 [ 418.219799][ T8828] exit_mmap+0x496/0xc40 [ 418.224040][ T8828] __mmput+0x115/0x390 [ 418.228182][ T8828] exit_mm+0x220/0x310 [ 418.232282][ T8828] do_exit+0x9b2/0x28e0 [ 418.236448][ T8828] do_group_exit+0x207/0x2c0 [ 418.241090][ T8828] __x64_sys_exit_group+0x3f/0x40 [ 418.246123][ T8828] x64_sys_call+0x2634/0x2640 [ 418.250846][ T8828] do_syscall_64+0xf3/0x230 [ 418.255372][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.261305][ T8828] Modules linked in: [ 418.265200][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.4.840 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 418.277267][ T8828] Tainted: [B]=BAD_PAGE [ 418.281427][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.291511][ T8828] Call Trace: [ 418.294792][ T8828] [ 418.297722][ T8828] dump_stack_lvl+0x241/0x360 [ 418.302434][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.307644][ T8828] ? __pfx_print_modules+0x10/0x10 [ 418.312771][ T8828] bad_page+0x166/0x1b0 [ 418.316942][ T8828] free_unref_page+0xed0/0xf20 [ 418.321816][ T8828] skb_release_data+0x6dc/0x8a0 [ 418.326680][ T8828] sk_skb_reason_drop+0x1c9/0x380 [ 418.331713][ T8828] ? packet_rcv+0x159/0x14b0 [ 418.336322][ T8828] packet_rcv+0x16f/0x14b0 [ 418.340755][ T8828] ? __pfx_packet_rcv+0x10/0x10 [ 418.345615][ T8828] __netif_receive_skb_list_core+0x8b7/0x980 [ 418.351618][ T8828] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 418.358216][ T8828] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 418.364729][ T8828] ? read_tsc+0x9/0x20 [ 418.368810][ T8828] ? timekeeping_get_ns+0x2c0/0x420 [ 418.374018][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 418.380359][ T8828] netif_receive_skb_list_internal+0xa51/0xe30 [ 418.386529][ T8828] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 418.392872][ T8828] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 418.399589][ T8828] ? __pfx_eth_type_trans+0x10/0x10 [ 418.404802][ T8828] ? __phys_addr+0xba/0x170 [ 418.409338][ T8828] ? build_skb_around+0x111/0x260 [ 418.414475][ T8828] ? __xdp_build_skb_from_frame+0x338/0x650 [ 418.420405][ T8828] netif_receive_skb_list+0x55/0x4b0 [ 418.425702][ T8828] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 418.431170][ T8828] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 418.437078][ T8828] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 418.442631][ T8828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 418.448440][ T8828] ? synchronize_rcu+0x11b/0x360 [ 418.453385][ T8828] ? __pfx_synchronize_rcu+0x10/0x10 [ 418.458696][ T8828] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 418.464973][ T8828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 418.470905][ T8828] ? _copy_from_user+0xa6/0xe0 [ 418.475687][ T8828] ? bpf_test_init+0x15a/0x180 [ 418.480455][ T8828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 418.485938][ T8828] bpf_prog_test_run_xdp+0x805/0x11e0 [ 418.491320][ T8828] ? __pfx_lock_release+0x10/0x10 [ 418.496369][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.502187][ T8828] ? __fget_files+0x29/0x470 [ 418.506792][ T8828] ? fput+0x1a8/0x230 [ 418.510782][ T8828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.516681][ T8828] bpf_prog_test_run+0x2e4/0x360 [ 418.521632][ T8828] __sys_bpf+0x48d/0x810 [ 418.525884][ T8828] ? __pfx___sys_bpf+0x10/0x10 [ 418.530666][ T8828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.536660][ T8828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.543023][ T8828] ? do_syscall_64+0x100/0x230 [ 418.547797][ T8828] __x64_sys_bpf+0x7c/0x90 [ 418.552222][ T8828] do_syscall_64+0xf3/0x230 [ 418.556733][ T8828] ? clear_bhb_loop+0x35/0x90 [ 418.561426][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.567354][ T8828] RIP: 0033:0x7f20bc97dff9 [ 418.571788][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.591491][ T8828] RSP: 002b:00007f20bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.599927][ T8828] RAX: ffffffffffffffda RBX: 00007f20bcb36208 RCX: 00007f20bc97dff9 [ 418.607907][ T8828] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 418.615893][ T8828] RBP: 00007f20bc9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 418.623889][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.632670][ T8828] R13: 0000000000000000 R14: 00007f20bcb36208 R15: 00007fff26c644d8 [ 418.640669][ T8828] [ 418.643808][ T8828] BUG: Bad page state in process syz.4.840 pfn:68ca4 [ 418.650666][ T8828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200c7 pfn:0x68ca4