last executing test programs: 1m35.718838636s ago: executing program 4 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000016540000cdc900925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m26.438523903s ago: executing program 3 (id=2286): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000440)) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-arm64)\x00'}, 0xfffffffffffffeaa) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1m25.187700612s ago: executing program 4 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000016540000cdc900925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m22.741389625s ago: executing program 0 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x7, 0x34, @mcast1, @private2, 0x10, 0x8, 0x6, 0x80000000}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000003000000000000000002000009050005000a00000005000500010000000500050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb8, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400002}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43e}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x541}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a40)=@deltaction={0xd4, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff59}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd4}}, 0x166b1ab5eb710134) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe4d}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000000)={r11, 0x0, 0x1, "cd"}, 0x9) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}]}, 0x30}}, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="9a7b824246dccbe6af355875930a2c0273a803ddd6d723074a77ed992da3726eaad6124f7e97be4fcaab4392dbae5e439a579ee9ed1bba565f6651b25d89c9209424bbcd2c993c9bf4c7ef481e44a5a184cc8937f8e36a57d6ecd75944507a79087c45a9f276b881436b4df80a95e9dccec5608a650fdc97dcd227d4cfd5d9d25ac8ebcaa143970d34f17993f2b21f6416b04068b122804685318bf2c7c295709b036375e5d802dabf93752fa85b9d6309b85d35c7770f3d8e708ee622c5f75492551bdfb1e94f90fbe847f5e80287d445f2fa333b06db5862a590a60f27cc58004f4ec07b717d61499ac839cd1a610572681b5441ad", 0xf6, 0x40021, &(0x7f0000000540)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1m13.402470259s ago: executing program 3 (id=2286): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000440)) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-arm64)\x00'}, 0xfffffffffffffeaa) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1m12.528507447s ago: executing program 4 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000016540000cdc900925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m11.722056203s ago: executing program 0 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x7, 0x34, @mcast1, @private2, 0x10, 0x8, 0x6, 0x80000000}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000003000000000000000002000009050005000a00000005000500010000000500050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb8, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400002}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43e}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x541}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a40)=@deltaction={0xd4, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff59}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd4}}, 0x166b1ab5eb710134) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe4d}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000000)={r11, 0x0, 0x1, "cd"}, 0x9) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}]}, 0x30}}, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="9a7b824246dccbe6af355875930a2c0273a803ddd6d723074a77ed992da3726eaad6124f7e97be4fcaab4392dbae5e439a579ee9ed1bba565f6651b25d89c9209424bbcd2c993c9bf4c7ef481e44a5a184cc8937f8e36a57d6ecd75944507a79087c45a9f276b881436b4df80a95e9dccec5608a650fdc97dcd227d4cfd5d9d25ac8ebcaa143970d34f17993f2b21f6416b04068b122804685318bf2c7c295709b036375e5d802dabf93752fa85b9d6309b85d35c7770f3d8e708ee622c5f75492551bdfb1e94f90fbe847f5e80287d445f2fa333b06db5862a590a60f27cc58004f4ec07b717d61499ac839cd1a610572681b5441ad", 0xf6, 0x40021, &(0x7f0000000540)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) 51.233377434s ago: executing program 3 (id=2286): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000440)) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-arm64)\x00'}, 0xfffffffffffffeaa) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 47.456389704s ago: executing program 0 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x7, 0x34, @mcast1, @private2, 0x10, 0x8, 0x6, 0x80000000}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000003000000000000000002000009050005000a00000005000500010000000500050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb8, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400002}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43e}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x541}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a40)=@deltaction={0xd4, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff59}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd4}}, 0x166b1ab5eb710134) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe4d}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000000)={r11, 0x0, 0x1, "cd"}, 0x9) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}]}, 0x30}}, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="9a7b824246dccbe6af355875930a2c0273a803ddd6d723074a77ed992da3726eaad6124f7e97be4fcaab4392dbae5e439a579ee9ed1bba565f6651b25d89c9209424bbcd2c993c9bf4c7ef481e44a5a184cc8937f8e36a57d6ecd75944507a79087c45a9f276b881436b4df80a95e9dccec5608a650fdc97dcd227d4cfd5d9d25ac8ebcaa143970d34f17993f2b21f6416b04068b122804685318bf2c7c295709b036375e5d802dabf93752fa85b9d6309b85d35c7770f3d8e708ee622c5f75492551bdfb1e94f90fbe847f5e80287d445f2fa333b06db5862a590a60f27cc58004f4ec07b717d61499ac839cd1a610572681b5441ad", 0xf6, 0x40021, &(0x7f0000000540)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) 47.138989709s ago: executing program 4 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000016540000cdc900925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 37.571260434s ago: executing program 3 (id=2286): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000440)) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-arm64)\x00'}, 0xfffffffffffffeaa) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 35.446868736s ago: executing program 0 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x7, 0x34, @mcast1, @private2, 0x10, 0x8, 0x6, 0x80000000}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000003000000000000000002000009050005000a00000005000500010000000500050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb8, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400002}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43e}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x541}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a40)=@deltaction={0xd4, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff59}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd4}}, 0x166b1ab5eb710134) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe4d}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000000)={r11, 0x0, 0x1, "cd"}, 0x9) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}]}, 0x30}}, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="9a7b824246dccbe6af355875930a2c0273a803ddd6d723074a77ed992da3726eaad6124f7e97be4fcaab4392dbae5e439a579ee9ed1bba565f6651b25d89c9209424bbcd2c993c9bf4c7ef481e44a5a184cc8937f8e36a57d6ecd75944507a79087c45a9f276b881436b4df80a95e9dccec5608a650fdc97dcd227d4cfd5d9d25ac8ebcaa143970d34f17993f2b21f6416b04068b122804685318bf2c7c295709b036375e5d802dabf93752fa85b9d6309b85d35c7770f3d8e708ee622c5f75492551bdfb1e94f90fbe847f5e80287d445f2fa333b06db5862a590a60f27cc58004f4ec07b717d61499ac839cd1a610572681b5441ad", 0xf6, 0x40021, &(0x7f0000000540)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) 34.555459016s ago: executing program 4 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000016540000cdc900925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 24.480058204s ago: executing program 3 (id=2286): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000440)) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-arm64)\x00'}, 0xfffffffffffffeaa) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 23.213055149s ago: executing program 0 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x7, 0x34, @mcast1, @private2, 0x10, 0x8, 0x6, 0x80000000}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000003000000000000000002000009050005000a00000005000500010000000500050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb8, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400002}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43e}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x541}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a40)=@deltaction={0xd4, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff59}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd4}}, 0x166b1ab5eb710134) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe4d}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000000)={r11, 0x0, 0x1, "cd"}, 0x9) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}]}, 0x30}}, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="9a7b824246dccbe6af355875930a2c0273a803ddd6d723074a77ed992da3726eaad6124f7e97be4fcaab4392dbae5e439a579ee9ed1bba565f6651b25d89c9209424bbcd2c993c9bf4c7ef481e44a5a184cc8937f8e36a57d6ecd75944507a79087c45a9f276b881436b4df80a95e9dccec5608a650fdc97dcd227d4cfd5d9d25ac8ebcaa143970d34f17993f2b21f6416b04068b122804685318bf2c7c295709b036375e5d802dabf93752fa85b9d6309b85d35c7770f3d8e708ee622c5f75492551bdfb1e94f90fbe847f5e80287d445f2fa333b06db5862a590a60f27cc58004f4ec07b717d61499ac839cd1a610572681b5441ad", 0xf6, 0x40021, &(0x7f0000000540)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) 20.961845808s ago: executing program 4 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000016540000cdc900925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12.059101209s ago: executing program 3 (id=2286): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, 0x0, &(0x7f0000000440)) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(aes-arm64)\x00'}, 0xfffffffffffffeaa) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 10.496166692s ago: executing program 0 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x1, 0x7, 0x34, @mcast1, @private2, 0x10, 0x8, 0x6, 0x80000000}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000003000000000000000002000009050005000a00000005000500010000000500050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xb8, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400002}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43e}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x541}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a40)=@deltaction={0xd4, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff59}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd4}}, 0x166b1ab5eb710134) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe4d}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48051}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000000)={r11, 0x0, 0x1, "cd"}, 0x9) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}]}, 0x30}}, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="9a7b824246dccbe6af355875930a2c0273a803ddd6d723074a77ed992da3726eaad6124f7e97be4fcaab4392dbae5e439a579ee9ed1bba565f6651b25d89c9209424bbcd2c993c9bf4c7ef481e44a5a184cc8937f8e36a57d6ecd75944507a79087c45a9f276b881436b4df80a95e9dccec5608a650fdc97dcd227d4cfd5d9d25ac8ebcaa143970d34f17993f2b21f6416b04068b122804685318bf2c7c295709b036375e5d802dabf93752fa85b9d6309b85d35c7770f3d8e708ee622c5f75492551bdfb1e94f90fbe847f5e80287d445f2fa333b06db5862a590a60f27cc58004f4ec07b717d61499ac839cd1a610572681b5441ad", 0xf6, 0x40021, &(0x7f0000000540)={0xa, 0x4e22, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.687808087s ago: executing program 1 (id=3253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe803500121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.679997846s ago: executing program 2 (id=3254): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022, 0x0, 0x0, 0x3}], 0x10, 0x0, @void, @value}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd201400006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.62191805s ago: executing program 2 (id=3255): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000, 0x400003c1}, 0xc1030040}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) 2.571991592s ago: executing program 1 (id=3256): r0 = socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 409.417798ms ago: executing program 2 (id=3257): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001380)={&(0x7f0000000540)=@abs={0x1, 0x0, 0x60}, 0x6e, 0x0}, 0x40) 350.873629ms ago: executing program 1 (id=3258): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x21, 0x5, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0xd, 0x0, 0x0) 309.712817ms ago: executing program 2 (id=3259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 159.86672ms ago: executing program 1 (id=3260): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 158.018189ms ago: executing program 2 (id=3261): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="27050200d40f00000600002fb96dbc", 0xf}, {&(0x7f0000002480)="854dbca39c496b88a8", 0x9}], 0x2}, 0x0) 113.806772ms ago: executing program 1 (id=3262): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208001e000000040104001600400001400300", 0x3a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a400", 0x36}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000006e1065000000000097400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 58.773782ms ago: executing program 2 (id=3263): socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=3264): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x80) kernel console output (not intermixed with test programs): nded to keep mac addresses unique to avoid problems! [ 348.673475][T15607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.684172][T15607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.695544][T15607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.707910][T15607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.718188][T15607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.727037][T15607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.741620][T15607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.777859][ T6417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.790626][ T4624] Bluetooth: hci3: command tx timeout [ 348.896512][ T6413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.920162][ T6413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.978121][ T6417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.025095][ T6399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.044463][ T6399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.107906][ T6417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.303890][ T6417] bridge_slave_1: left allmulticast mode [ 349.309595][ T6417] bridge_slave_1: left promiscuous mode [ 349.317762][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.332493][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.345157][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.345669][ T6417] bridge_slave_0: left allmulticast mode [ 349.358883][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.364907][ T6417] bridge_slave_0: left promiscuous mode [ 349.372709][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.380676][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.388355][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 349.396068][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.763611][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.778056][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.796578][ T6417] bond0 (unregistering): Released all slaves [ 349.892312][T15784] lo speed is unknown, defaulting to 1000 [ 350.156268][ T6417] hsr_slave_0: left promiscuous mode [ 350.156667][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.173412][ T6417] hsr_slave_1: left promiscuous mode [ 350.179165][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.187573][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.195299][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.195314][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.212585][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.213057][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.228624][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.237109][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.260116][ T6417] veth1_macvtap: left promiscuous mode [ 350.265912][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.272817][ T6417] veth0_macvtap: left promiscuous mode [ 350.278572][ T6417] veth1_vlan: left promiscuous mode [ 350.284929][ T6417] veth0_vlan: left promiscuous mode [ 350.726901][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 350.768667][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 351.185372][T15795] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2937'. [ 351.393321][T15784] chnl_net:caif_netlink_parms(): no params data found [ 351.427534][T15799] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.436753][T15799] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.445718][T15799] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.454796][T15799] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.470274][ T5240] Bluetooth: hci1: command tx timeout [ 351.484788][T15789] lo speed is unknown, defaulting to 1000 [ 351.506981][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.517751][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.530514][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.559246][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.579591][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.587389][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.718322][T15804] lo speed is unknown, defaulting to 1000 [ 351.847921][T15817] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2942'. [ 351.858647][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.866230][T14977] IPVS: starting estimator thread 0... [ 351.872650][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.879827][T15784] bridge_slave_0: entered allmulticast mode [ 351.893936][T15784] bridge_slave_0: entered promiscuous mode [ 351.908262][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.931853][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.939119][T15784] bridge_slave_1: entered allmulticast mode [ 351.960492][T15818] IPVS: using max 21 ests per chain, 50400 per kthread [ 351.968565][T15784] bridge_slave_1: entered promiscuous mode [ 352.098031][T15784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.116777][T15830] x_tables: duplicate underflow at hook 1 [ 352.160889][T15784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.170272][T15789] chnl_net:caif_netlink_parms(): no params data found [ 352.190900][T15832] netlink: 'syz.2.2946': attribute type 1 has an invalid length. [ 352.311351][ T5240] Bluetooth: hci2: command tx timeout [ 352.405305][T15784] team0: Port device team_slave_0 added [ 352.445138][T15784] team0: Port device team_slave_1 added [ 352.623594][ T6417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.672532][T15789] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.683578][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.692718][T15789] bridge_slave_0: entered allmulticast mode [ 352.699506][T15789] bridge_slave_0: entered promiscuous mode [ 352.705966][T15859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.755537][T15784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.787354][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.814989][T15784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.827080][T15789] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.835432][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.845155][T15789] bridge_slave_1: entered allmulticast mode [ 352.852409][T15789] bridge_slave_1: entered promiscuous mode [ 352.889196][ T6417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.910687][T15804] chnl_net:caif_netlink_parms(): no params data found [ 352.925871][T15784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.934040][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.967249][T15784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.996364][ T6417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.034325][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 353.056410][T15789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.128849][T15872] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 353.140312][T15872] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2954'. [ 353.156073][T15872] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 353.223468][ T6417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.295608][T15789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.511256][ T5240] Bluetooth: hci1: command tx timeout [ 353.671035][ T5240] Bluetooth: hci3: command tx timeout [ 354.012253][T15784] hsr_slave_0: entered promiscuous mode [ 354.031845][T15784] hsr_slave_1: entered promiscuous mode [ 354.038273][T15784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.051582][T15784] Cannot create hsr debugfs directory [ 354.124991][T15789] team0: Port device team_slave_0 added [ 354.143302][T15789] team0: Port device team_slave_1 added [ 354.253590][T15804] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.261222][T15804] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.268416][T15804] bridge_slave_0: entered allmulticast mode [ 354.278426][T15804] bridge_slave_0: entered promiscuous mode [ 354.317881][T15789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.329811][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.374790][T15894] SET target dimension over the limit! [ 354.382609][T15789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.405036][ T5240] Bluetooth: hci2: command tx timeout [ 354.406337][T15804] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.443543][T15804] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.451006][T15804] bridge_slave_1: entered allmulticast mode [ 354.458151][T15804] bridge_slave_1: entered promiscuous mode [ 354.478806][T15789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.487678][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.517386][T15789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.555603][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2961'. [ 354.628856][ T6417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.656019][T15804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.773183][ T6417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.793252][T15804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.851456][T15789] hsr_slave_0: entered promiscuous mode [ 354.858052][T15789] hsr_slave_1: entered promiscuous mode [ 354.867581][T15789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.881591][T15789] Cannot create hsr debugfs directory [ 354.911154][ T6417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.928727][T15910] netlink: 4088 bytes leftover after parsing attributes in process `syz.1.2965'. [ 354.939203][T15910] openvswitch: netlink: Actions may not be safe on all matching packets [ 354.983354][T15912] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2966'. [ 354.985316][ T6417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.014797][T15804] team0: Port device team_slave_0 added [ 355.024327][T15804] team0: Port device team_slave_1 added [ 355.130031][T15804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.140189][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.166710][T15804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.204770][T15916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2967'. [ 355.234125][T15804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.250204][T15804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.283306][T15804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.414026][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2970'. [ 355.424542][T15927] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2970'. [ 355.449857][T15804] hsr_slave_0: entered promiscuous mode [ 355.457482][T15804] hsr_slave_1: entered promiscuous mode [ 355.463977][T15804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.473157][T15804] Cannot create hsr debugfs directory [ 355.487312][T15930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.517072][T15931] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 355.568726][T15929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.585350][ T6417] bridge_slave_1: left allmulticast mode [ 355.593643][ T6417] bridge_slave_1: left promiscuous mode [ 355.599324][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.608604][ T5240] Bluetooth: hci1: command tx timeout [ 355.616128][ T6417] bridge_slave_0: left allmulticast mode [ 355.622127][ T6417] bridge_slave_0: left promiscuous mode [ 355.627906][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.637352][T15929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.649775][ T6417] bridge_slave_1: left allmulticast mode [ 355.659775][ T6417] bridge_slave_1: left promiscuous mode [ 355.665789][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.677091][ T6417] bridge_slave_0: left allmulticast mode [ 355.683062][ T6417] bridge_slave_0: left promiscuous mode [ 355.688821][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.760942][ T5240] Bluetooth: hci3: command tx timeout [ 356.289556][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.303778][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.315658][ T6417] bond0 (unregistering): Released all slaves [ 356.439604][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.454382][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.468432][ T6417] bond0 (unregistering): Released all slaves [ 356.475304][ T5240] Bluetooth: hci2: command tx timeout [ 356.604788][T15938] netlink: 'syz.2.2974': attribute type 1 has an invalid length. [ 356.755105][T15939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2973'. [ 356.859406][T15784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.899902][T15784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.910797][T15784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.953140][T15946] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2977'. [ 356.969575][T15784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.066699][T15948] tipc: Enabling of bearer rejected, failed to enable media [ 357.289381][T15784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.304435][T15962] x_tables: (null)_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 96 [ 357.336878][T15784] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.378437][ T6417] hsr_slave_0: left promiscuous mode [ 357.385650][ T6417] hsr_slave_1: left promiscuous mode [ 357.395976][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.403574][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.418804][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.427655][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.441360][ T6417] hsr_slave_0: left promiscuous mode [ 357.447476][ T6417] hsr_slave_1: left promiscuous mode [ 357.454076][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.461682][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.469504][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.477694][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.519725][ T6417] veth1_macvtap: left promiscuous mode [ 357.525674][ T6417] veth0_macvtap: left promiscuous mode [ 357.531569][ T6417] veth1_vlan: left promiscuous mode [ 357.536921][ T6417] veth0_vlan: left promiscuous mode [ 357.543645][ T6417] veth1_macvtap: left promiscuous mode [ 357.549183][ T6417] veth0_macvtap: left promiscuous mode [ 357.554958][ T6417] veth1_vlan: left promiscuous mode [ 357.561713][ T6417] veth0_vlan: left promiscuous mode [ 357.682801][ T5240] Bluetooth: hci1: command tx timeout [ 357.835674][ T5240] Bluetooth: hci3: command tx timeout [ 358.132204][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 358.191751][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 358.560165][ T5240] Bluetooth: hci2: command tx timeout [ 358.986204][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 359.037107][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 359.499903][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.507274][ T6406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.529211][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.536364][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.742515][T15789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.783206][T15976] netlink: 'syz.2.2988': attribute type 10 has an invalid length. [ 359.806695][T15976] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2988'. [ 359.828075][T15976] batman_adv: batadv0: Interface deactivated: dummy0 [ 359.842954][T15976] batman_adv: batadv0: Removing interface: dummy0 [ 359.851802][T15976] bridge0: port 1(dummy0) entered blocking state [ 359.858475][T15976] bridge0: port 1(dummy0) entered disabled state [ 359.865183][T15976] dummy0: entered allmulticast mode [ 359.872733][T15976] dummy0: entered promiscuous mode [ 359.878979][T15789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.893747][T15978] netlink: 'syz.2.2988': attribute type 10 has an invalid length. [ 359.902883][T15978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2988'. [ 359.913128][ T5240] Bluetooth: hci3: command tx timeout [ 359.956737][T15980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2989'. [ 359.969142][T15789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.022907][T15789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.222792][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'. [ 360.227462][T15991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2993'. [ 360.283658][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'. [ 360.290588][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'. [ 360.462249][T15789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.492559][T15784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.506467][T15789] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.522935][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.530052][ T6399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.640507][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.647657][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.134899][T15784] veth0_vlan: entered promiscuous mode [ 369.146617][T15784] veth1_vlan: entered promiscuous mode [ 369.169179][T15784] veth0_macvtap: entered promiscuous mode [ 369.180047][T15784] veth1_macvtap: entered promiscuous mode [ 369.193156][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.204075][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.214454][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.225005][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.236191][T15784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.246228][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.256935][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.266889][T15784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.277840][T15784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.289004][T15784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.298943][T15784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.308448][T15784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.317399][T15784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.326458][T15784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.341132][T15804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 369.378831][T15804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.393772][T15804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.414497][T15804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 369.504531][T15789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.705128][ T6413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.720027][ T6413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.762979][T15804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.806851][ T6417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.817246][ T6417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.837770][T15804] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.879171][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.886342][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.913238][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.920419][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.938480][T16046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3005'. [ 370.005430][T15789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.465265][ T6417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.505616][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 370.528975][T15804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.568020][ T6417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.646969][ T6417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.675703][T15789] veth0_vlan: entered promiscuous mode [ 370.685339][T15804] veth0_vlan: entered promiscuous mode [ 370.698954][T15789] veth1_vlan: entered promiscuous mode [ 370.708132][T15804] veth1_vlan: entered promiscuous mode [ 370.752086][T15804] veth0_macvtap: entered promiscuous mode [ 370.767227][T15789] veth0_macvtap: entered promiscuous mode [ 370.776865][T15804] veth1_macvtap: entered promiscuous mode [ 370.788950][T15789] veth1_macvtap: entered promiscuous mode [ 370.817715][ T6417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.845126][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.855898][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.866211][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.877854][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.887764][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.898248][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.909613][T15804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.923387][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.934234][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.945839][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.957818][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.968553][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.979105][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.989213][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.999982][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.012222][T15789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.021317][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.032259][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.044637][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.055446][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.065338][T15804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.078636][T15804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.089670][T15804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.103536][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.116073][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.126097][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.136704][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.146811][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.158347][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.168205][T15789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.178938][T15789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.190165][T15789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.203050][T15804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.212803][T15804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.222579][T15804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.232155][T15804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.273658][T15789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.286593][T15789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.295673][T15789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.307967][T15789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.328532][ T6417] bridge_slave_1: left allmulticast mode [ 371.334299][ T6417] bridge_slave_1: left promiscuous mode [ 371.340000][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.352492][ T6417] bridge_slave_0: left allmulticast mode [ 371.358168][ T6417] bridge_slave_0: left promiscuous mode [ 371.365282][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.784713][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.796956][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.809377][ T6417] bond0 (unregistering): Released all slaves [ 371.908024][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.935944][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.944932][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.960823][ T4624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.969808][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 371.977315][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.009578][T16087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3013'. [ 372.036187][T16089] sctp: [Deprecated]: syz.2.3014 (pid 16089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.036187][T16089] Use struct sctp_sack_info instead [ 372.225876][T16084] lo speed is unknown, defaulting to 1000 [ 372.328185][ T6399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.366742][ T6399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.381592][ T6417] hsr_slave_0: left promiscuous mode [ 372.387656][ T6417] hsr_slave_1: left promiscuous mode [ 372.393953][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.401680][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.409301][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.416882][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.439590][ T6417] veth1_macvtap: left promiscuous mode [ 372.447872][ T6417] veth0_macvtap: left promiscuous mode [ 372.454211][ T6417] veth1_vlan: left promiscuous mode [ 372.459590][ T6417] veth0_vlan: left promiscuous mode [ 372.909852][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 372.961955][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 373.461132][ T6413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.468964][ T6413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.489006][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 373.586989][ T6399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.596041][ T6399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.611871][T16113] "syz.1.3021" (16113) uses obsolete ecb(arc4) skcipher [ 373.617083][T16112] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.3021'. [ 373.712430][ T6404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.725315][ T6404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.836522][T16117] netlink: 'syz.2.3022': attribute type 5 has an invalid length. [ 373.892870][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'. [ 373.971277][T16084] chnl_net:caif_netlink_parms(): no params data found [ 374.029540][T16123] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 374.077880][ T5240] Bluetooth: hci1: command tx timeout [ 374.210677][T16084] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.217831][T16084] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.225214][T16084] bridge_slave_0: entered allmulticast mode [ 374.233416][T16084] bridge_slave_0: entered promiscuous mode [ 374.243357][T16084] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.250854][T16084] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.258124][T16084] bridge_slave_1: entered allmulticast mode [ 374.266180][T16084] bridge_slave_1: entered promiscuous mode [ 374.382501][ T6417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.489229][T16136] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3027'. [ 374.534665][T16137] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3027'. [ 374.549156][T16137] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 374.604444][ T6417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.619721][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.629289][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.635917][T16084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.639527][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.655918][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.658367][T16084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.664109][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.687661][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.709769][T16084] team0: Port device team_slave_0 added [ 374.719761][T16084] team0: Port device team_slave_1 added [ 374.752152][ T6417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.782065][T16084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.789038][T16084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.816432][T16084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.836215][T16084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.843581][T16084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.871666][T16084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.897632][ T6417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.917208][T16139] lo speed is unknown, defaulting to 1000 [ 374.939421][T16084] hsr_slave_0: entered promiscuous mode [ 374.949235][T16084] hsr_slave_1: entered promiscuous mode [ 374.958311][T16084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.966568][T16084] Cannot create hsr debugfs directory [ 375.069763][ T6417] bridge_slave_1: left allmulticast mode [ 375.075809][ T6417] bridge_slave_1: left promiscuous mode [ 375.082270][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.091029][ T6417] bridge_slave_0: left allmulticast mode [ 375.096672][ T6417] bridge_slave_0: left promiscuous mode [ 375.104765][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.347333][T16147] netlink: 'syz.1.3028': attribute type 1 has an invalid length. [ 375.369835][T16147] netlink: 'syz.1.3028': attribute type 1 has an invalid length. [ 375.589175][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.598674][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.600494][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.618630][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.626737][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.638403][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.647189][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 375.655027][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.656950][ T6417] bond0 (unregistering): Released all slaves [ 375.687639][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3029'. [ 375.862590][T16160] bridge0: entered allmulticast mode [ 375.953734][T16155] lo speed is unknown, defaulting to 1000 [ 376.039980][ T6417] hsr_slave_0: left promiscuous mode [ 376.046501][ T6417] hsr_slave_1: left promiscuous mode [ 376.052556][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.059967][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.068333][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.076078][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.099646][ T6417] veth1_macvtap: left promiscuous mode [ 376.105469][ T6417] veth0_macvtap: left promiscuous mode [ 376.111191][ T6417] veth1_vlan: left promiscuous mode [ 376.116506][ T6417] veth0_vlan: left promiscuous mode [ 376.150451][ T5240] Bluetooth: hci1: command tx timeout [ 376.566733][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 376.609307][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 376.721621][ T5240] Bluetooth: hci2: command tx timeout [ 377.142788][T16173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3035'. [ 377.221657][T16139] chnl_net:caif_netlink_parms(): no params data found [ 377.242926][T16180] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 377.257386][T16177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3036'. [ 377.275121][T16180] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3037'. [ 377.394417][T16187] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3038'. [ 377.527195][T16193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3039'. [ 377.543267][T16193] netlink: 'syz.1.3039': attribute type 10 has an invalid length. [ 377.620707][T16155] chnl_net:caif_netlink_parms(): no params data found [ 377.646168][T16139] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.675288][T16139] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.683457][ T5240] Bluetooth: hci3: command tx timeout [ 377.692249][T16139] bridge_slave_0: entered allmulticast mode [ 377.699383][T16139] bridge_slave_0: entered promiscuous mode [ 377.701065][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 377.708928][T16139] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.722039][T16139] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.729457][T16139] bridge_slave_1: entered allmulticast mode [ 377.736572][T16139] bridge_slave_1: entered promiscuous mode [ 377.740579][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'. [ 377.842792][T16204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.918160][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.959559][T16139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.984256][T16139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.037300][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.103772][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.117488][T16155] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.127233][T16155] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.135059][T16155] bridge_slave_0: entered allmulticast mode [ 378.147371][T16155] bridge_slave_0: entered promiscuous mode [ 378.167457][T16139] team0: Port device team_slave_0 added [ 378.187060][T16155] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.198925][T16155] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.206486][T16155] bridge_slave_1: entered allmulticast mode [ 378.214583][T16155] bridge_slave_1: entered promiscuous mode [ 378.231811][ T5240] Bluetooth: hci1: command tx timeout [ 378.267100][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.289151][T16139] team0: Port device team_slave_1 added [ 378.313592][T16224] x_tables: duplicate underflow at hook 3 [ 378.333344][T16155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.387892][T16155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.395981][T16228] netlink: 'syz.2.3050': attribute type 1 has an invalid length. [ 378.405809][T16228] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3050'. [ 378.416330][T16228] netlink: 'syz.2.3050': attribute type 8 has an invalid length. [ 378.426613][T16228] netlink: 'syz.2.3050': attribute type 1 has an invalid length. [ 378.426758][T16139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.434911][T16228] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3050'. [ 378.449484][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.451595][T16228] netlink: 'syz.2.3050': attribute type 8 has an invalid length. [ 378.485908][T16139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.498835][T16084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 378.542764][T16155] team0: Port device team_slave_0 added [ 378.549458][T16139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.557893][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.584480][T16139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.597217][T16084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.619421][T16155] team0: Port device team_slave_1 added [ 378.639171][T16084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 378.648554][T16084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.687142][T16155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.694310][T16155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.721243][T16155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.746154][T16234] tap0: tun_chr_ioctl cmd 1074025677 [ 378.752734][T16234] tap0: linktype set to 65534 [ 378.777426][T16139] hsr_slave_0: entered promiscuous mode [ 378.784250][T16139] hsr_slave_1: entered promiscuous mode [ 378.793639][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.800192][ T5240] Bluetooth: hci2: command tx timeout [ 378.810250][T16139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.826344][T16139] Cannot create hsr debugfs directory [ 378.836083][T16155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.867558][T16155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.945920][T16155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.112475][ T62] bridge_slave_1: left allmulticast mode [ 379.134086][ T62] bridge_slave_1: left promiscuous mode [ 379.160312][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.192977][ T62] bridge_slave_0: left allmulticast mode [ 379.201095][ T62] bridge_slave_0: left promiscuous mode [ 379.211458][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.751887][ T5240] Bluetooth: hci3: command tx timeout [ 379.886013][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.898388][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.913041][ T62] bond0 (unregistering): Released all slaves [ 379.936856][T16243] netlink: 'syz.2.3054': attribute type 11 has an invalid length. [ 380.017544][T16155] hsr_slave_0: entered promiscuous mode [ 380.043314][T16155] hsr_slave_1: entered promiscuous mode [ 380.049634][T16155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.057421][T16155] Cannot create hsr debugfs directory [ 380.310519][ T5240] Bluetooth: hci1: command tx timeout [ 380.556271][ T62] hsr_slave_0: left promiscuous mode [ 380.571322][ T62] hsr_slave_1: left promiscuous mode [ 380.583100][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.605783][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.614637][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.630771][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.668851][ T62] veth1_macvtap: left promiscuous mode [ 380.692093][ T62] veth0_macvtap: left promiscuous mode [ 380.697726][ T62] veth1_vlan: left promiscuous mode [ 380.703150][ T62] veth0_vlan: left promiscuous mode [ 380.890280][ T5240] Bluetooth: hci2: command tx timeout [ 381.344440][ T62] team0 (unregistering): Port device team_slave_1 removed [ 381.392848][ T62] team0 (unregistering): Port device team_slave_0 removed [ 381.843922][ T5240] Bluetooth: hci3: command tx timeout [ 381.942466][T16290] __nla_validate_parse: 2 callbacks suppressed [ 381.942486][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 381.959547][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 382.004207][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 382.104859][T16084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.141992][T16084] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.171566][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.178682][ T6404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.222205][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.229366][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.487106][T16308] pim6reg1: entered allmulticast mode [ 382.494688][T16139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.562932][T16315] vlan3: entered promiscuous mode [ 382.584036][T16139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.627449][T16139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.637358][T16319] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.3071'. [ 382.651154][T16139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.696756][T16084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.817480][T16084] veth0_vlan: entered promiscuous mode [ 382.886726][T16139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.915417][T16139] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.949084][T16084] veth1_vlan: entered promiscuous mode [ 382.950429][ T5240] Bluetooth: hci2: command tx timeout [ 382.993857][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.001023][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.026824][T16155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.038590][T16155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.070126][T16084] veth0_macvtap: entered promiscuous mode [ 383.083080][T16155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.095072][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.102252][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.123782][T16084] veth1_macvtap: entered promiscuous mode [ 383.133558][T16155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.172868][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.185504][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.197056][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.207883][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.226501][T16084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.237234][T16331] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 383.264889][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.276017][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.290582][T16084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.305439][T16084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.316788][T16084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.346772][T16084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.358940][T16084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.375751][T16084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.385960][T16084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.412402][T16334] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.542818][ T6404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.565211][ T6404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.612010][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.619231][T16139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.626805][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.668951][T16155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.740846][T16343] xt_HMARK: proto mask must be zero with L3 mode [ 383.740925][T16155] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.826551][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.833757][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.844609][T16139] veth0_vlan: entered promiscuous mode [ 383.853012][T16347] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3082'. [ 383.871135][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.878302][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.929635][ T5240] Bluetooth: hci3: command tx timeout [ 383.945691][T16139] veth1_vlan: entered promiscuous mode [ 384.129578][ T6404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.214112][T16139] veth0_macvtap: entered promiscuous mode [ 384.273441][ T6404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.289694][T16139] veth1_macvtap: entered promiscuous mode [ 384.309816][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.323976][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.334071][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.344806][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.354913][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.365531][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.376594][T16139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.386446][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.397301][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.407915][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.418607][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.428713][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.440102][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.452647][T16139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.469592][T16139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.478714][T16139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.488093][T16139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.497126][T16139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.513625][T16155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.587779][ T6404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.675066][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.683152][ T6417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.692375][ T6417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.702105][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.732512][ T6404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.867664][T16155] veth0_vlan: entered promiscuous mode [ 384.878201][T16155] veth1_vlan: entered promiscuous mode [ 384.905687][T16155] veth0_macvtap: entered promiscuous mode [ 384.915165][T16155] veth1_macvtap: entered promiscuous mode [ 384.929700][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.940962][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.956662][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.967342][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.978502][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.989927][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.000025][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.012836][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.024305][T16155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.054108][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.065220][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.075336][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.086625][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.096652][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.107110][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.117769][T16155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.129270][T16155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.141011][T16155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.158463][T16155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.167573][T16155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.176370][T16155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.185192][T16155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.265294][ T6404] bridge_slave_1: left allmulticast mode [ 385.271961][ T6404] bridge_slave_1: left promiscuous mode [ 385.277637][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.286140][ T6404] bridge_slave_0: left allmulticast mode [ 385.292247][ T6404] bridge_slave_0: left promiscuous mode [ 385.297954][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.696583][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.715566][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.730936][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.738905][ T4624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.748139][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.756580][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.839133][ T6404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.852522][ T6404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.864071][ T6404] bond0 (unregistering): Released all slaves [ 385.972363][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.983428][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.029140][T16374] lo speed is unknown, defaulting to 1000 [ 386.155490][T16383] netlink: 'syz.2.3088': attribute type 1 has an invalid length. [ 386.193486][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.204694][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.428666][ T6404] hsr_slave_0: left promiscuous mode [ 386.434880][ T6404] hsr_slave_1: left promiscuous mode [ 386.444447][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.453190][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.463345][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.475015][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.496090][ T6404] veth1_macvtap: left promiscuous mode [ 386.502056][ T6404] veth0_macvtap: left promiscuous mode [ 386.507587][ T6404] veth1_vlan: left promiscuous mode [ 386.512957][ T6404] veth0_vlan: left promiscuous mode [ 387.040396][T16389] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3090'. [ 387.057768][ T6404] team0 (unregistering): Port device team_slave_1 removed [ 387.146495][ T6404] team0 (unregistering): Port device team_slave_0 removed [ 387.276091][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.288512][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.307391][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.327583][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.336072][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 387.349001][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.741521][T16391] lo speed is unknown, defaulting to 1000 [ 387.831213][ T5240] Bluetooth: hci1: command tx timeout [ 387.849189][T16374] chnl_net:caif_netlink_parms(): no params data found [ 387.927901][T16391] chnl_net:caif_netlink_parms(): no params data found [ 387.946392][T16374] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.954177][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.961636][T16374] bridge_slave_0: entered allmulticast mode [ 387.968226][T16374] bridge_slave_0: entered promiscuous mode [ 387.980721][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.989821][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.020523][T16374] bridge_slave_1: entered allmulticast mode [ 388.027574][T16374] bridge_slave_1: entered promiscuous mode [ 388.222620][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.237850][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.250387][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.258424][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.266843][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.275204][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 388.286932][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.315195][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.382357][T16374] team0: Port device team_slave_0 added [ 388.405273][T16374] team0: Port device team_slave_1 added [ 388.498723][ T6404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.500500][T16423] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.532838][T16391] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.539997][T16391] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.557531][T16391] bridge_slave_0: entered allmulticast mode [ 388.564782][T16391] bridge_slave_0: entered promiscuous mode [ 388.579966][T16391] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.589071][T16391] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.609471][T16391] bridge_slave_1: entered allmulticast mode [ 388.616607][T16391] bridge_slave_1: entered promiscuous mode [ 388.634764][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.644630][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.671867][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.702077][ T6404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.730048][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.737265][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.764113][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.811122][T16412] lo speed is unknown, defaulting to 1000 [ 388.834599][ T6404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.900918][T16391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.924073][T16391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.989895][ T6404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.039601][T16374] hsr_slave_0: entered promiscuous mode [ 389.055056][T16374] hsr_slave_1: entered promiscuous mode [ 389.061666][T16374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.069736][T16374] Cannot create hsr debugfs directory [ 389.098019][T16391] team0: Port device team_slave_0 added [ 389.109970][T16391] team0: Port device team_slave_1 added [ 389.236250][T16391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.243637][T16391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.273760][T16391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.314250][T16391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.321501][T16391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.348338][T16391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.431280][ T4624] Bluetooth: hci2: command tx timeout [ 389.455568][T16391] hsr_slave_0: entered promiscuous mode [ 389.469333][T16391] hsr_slave_1: entered promiscuous mode [ 389.475685][T16391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.483977][T16391] Cannot create hsr debugfs directory [ 389.546936][ T6404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.677605][ T6404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.706948][T16456] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3102'. [ 389.730505][T16412] chnl_net:caif_netlink_parms(): no params data found [ 389.758786][ T6404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.879709][ T6404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.910415][ T4624] Bluetooth: hci1: command tx timeout [ 390.017421][T16412] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.032682][T16412] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.040403][T16412] bridge_slave_0: entered allmulticast mode [ 390.047466][T16412] bridge_slave_0: entered promiscuous mode [ 390.059532][T16412] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.068470][T16412] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.076460][T16412] bridge_slave_1: entered allmulticast mode [ 390.083476][T16412] bridge_slave_1: entered promiscuous mode [ 390.119682][T16412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.148201][T16412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.217699][T16412] team0: Port device team_slave_0 added [ 390.244713][T16412] team0: Port device team_slave_1 added [ 390.302985][ T6404] bridge_slave_1: left allmulticast mode [ 390.310256][ T4624] Bluetooth: hci3: command tx timeout [ 390.319031][ T6404] bridge_slave_1: left promiscuous mode [ 390.336582][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.349654][ T6404] bridge_slave_0: left allmulticast mode [ 390.365034][ T6404] bridge_slave_0: left promiscuous mode [ 390.372875][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.382867][ T6404] bridge_slave_1: left allmulticast mode [ 390.388519][ T6404] bridge_slave_1: left promiscuous mode [ 390.398281][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.406848][ T6404] bridge_slave_0: left allmulticast mode [ 390.413565][ T6404] bridge_slave_0: left promiscuous mode [ 390.419250][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.036331][ T6404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.051593][ T6404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.062589][ T6404] bond0 (unregistering): Released all slaves [ 391.189055][ T6404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.207897][ T6404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.218647][ T6404] bond0 (unregistering): Released all slaves [ 391.228779][T16412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.235838][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.262764][T16412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.275552][T16412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.282861][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.309197][T16412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.509430][T16412] hsr_slave_0: entered promiscuous mode [ 391.518732][ T4624] Bluetooth: hci2: command tx timeout [ 391.528660][T16412] hsr_slave_1: entered promiscuous mode [ 391.543152][T16412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.551604][T16412] Cannot create hsr debugfs directory [ 391.663148][T16374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.689805][T16374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.713772][T16374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.725459][T16374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.739890][T16485] netlink: 'syz.2.3111': attribute type 32 has an invalid length. [ 391.761237][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 391.774916][T16485] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 391.990862][ T4624] Bluetooth: hci1: command tx timeout [ 392.080258][ T6404] hsr_slave_0: left promiscuous mode [ 392.089818][ T6404] hsr_slave_1: left promiscuous mode [ 392.098901][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.108063][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.119057][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.127367][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.142544][ T6404] hsr_slave_0: left promiscuous mode [ 392.148556][ T6404] hsr_slave_1: left promiscuous mode [ 392.155265][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.163498][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.171711][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.179160][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.218890][ T6404] veth1_macvtap: left promiscuous mode [ 392.224651][ T6404] veth0_macvtap: left promiscuous mode [ 392.232688][ T6404] veth1_vlan: left promiscuous mode [ 392.237998][ T6404] veth0_vlan: left promiscuous mode [ 392.244276][ T6404] veth1_macvtap: left promiscuous mode [ 392.250017][ T6404] veth0_macvtap: left promiscuous mode [ 392.256588][ T6404] veth1_vlan: left promiscuous mode [ 392.262556][ T6404] veth0_vlan: left promiscuous mode [ 392.401265][ T4624] Bluetooth: hci3: command tx timeout [ 392.887762][ T6404] team0 (unregistering): Port device team_slave_1 removed [ 392.939073][ T6404] team0 (unregistering): Port device team_slave_0 removed [ 393.592054][ T4624] Bluetooth: hci2: command tx timeout [ 393.734854][ T6404] team0 (unregistering): Port device team_slave_1 removed [ 393.779518][ T6404] team0 (unregistering): Port device team_slave_0 removed [ 394.075360][ T4624] Bluetooth: hci1: command tx timeout [ 394.224123][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 394.245133][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 394.472595][ T4624] Bluetooth: hci3: command tx timeout [ 394.646136][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.673806][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.685401][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.692572][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.753396][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.760586][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.157042][T16391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.185845][T16391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.208596][T16533] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3122'. [ 395.231926][T16391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.243621][T16391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.302825][T16412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.318241][T16412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.339354][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.347019][T16412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.363378][T16412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.504343][T16374] veth0_vlan: entered promiscuous mode [ 395.517485][T16391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.543905][T16374] veth1_vlan: entered promiscuous mode [ 395.578951][T16374] veth0_macvtap: entered promiscuous mode [ 395.606036][T16374] veth1_macvtap: entered promiscuous mode [ 395.634000][T16391] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.656755][T16412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.664134][T16542] tipc: Disabling bearer [ 395.671578][ T4624] Bluetooth: hci2: command tx timeout [ 395.685954][T16542] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 395.686408][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.708932][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.718891][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.729541][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.741300][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.757647][T16542] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 395.770701][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.777873][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.798813][T16412] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.812988][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.820150][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.837975][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.856892][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.890564][T16374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.915608][T16374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.928434][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.952441][T16374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.966698][T16374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.977376][T16374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.999827][T16374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.013929][ T1809] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.021100][ T1809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.041431][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.048553][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.099156][T16549] netlink: 'syz.2.3128': attribute type 11 has an invalid length. [ 396.128407][T16549] netlink: 211132 bytes leftover after parsing attributes in process `syz.2.3128'. [ 396.139908][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 396.259064][T16557] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3132'. [ 396.270299][T16557] openvswitch: netlink: Key type 4112 is out of range max 32 [ 396.296522][ T1809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.319543][ T1809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.396579][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.439671][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.556828][ T4624] Bluetooth: hci3: command tx timeout [ 396.587503][T16391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.589461][T16571] netlink: 'syz.2.3135': attribute type 11 has an invalid length. [ 396.726445][T16412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.817450][T16391] veth0_vlan: entered promiscuous mode [ 396.882545][T16391] veth1_vlan: entered promiscuous mode [ 396.986744][T16391] veth0_macvtap: entered promiscuous mode [ 397.026622][T16391] veth1_macvtap: entered promiscuous mode [ 397.232190][ T2918] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.273291][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.306216][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.327248][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.338506][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.355903][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.368970][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.380631][T16391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.396155][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.407847][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.419150][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.431775][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.441713][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.452707][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.464166][T16391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.497155][ T2918] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.513619][T16391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.526290][T16391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.535365][T16391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.545354][T16391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.608932][ T2918] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.662699][T16412] veth0_vlan: entered promiscuous mode [ 397.700324][ T2918] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.715761][ T1809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.722278][T16412] veth1_vlan: entered promiscuous mode [ 397.737117][ T1809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.760859][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.768712][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.831635][T16412] veth0_macvtap: entered promiscuous mode [ 397.845497][T16412] veth1_macvtap: entered promiscuous mode [ 397.868907][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.879508][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.889482][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.902468][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.912694][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.923463][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.937483][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.948128][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.970938][T16412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.013602][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.024295][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.034974][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.045592][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.055487][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.066052][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.076114][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.087146][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.098335][T16412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.115888][T16412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.125809][T16412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.134716][T16412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.143685][T16412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.183213][ T2918] bridge_slave_1: left allmulticast mode [ 398.188996][ T2918] bridge_slave_1: left promiscuous mode [ 398.196034][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.222488][ T2918] bridge_slave_0: left allmulticast mode [ 398.228186][ T2918] bridge_slave_0: left promiscuous mode [ 398.234345][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.558578][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.570023][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.578158][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.601886][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.617913][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 398.625460][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.727413][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.738824][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.749588][ T2918] bond0 (unregistering): Released all slaves [ 398.804310][T16594] lo speed is unknown, defaulting to 1000 [ 398.869752][ T6404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.883283][ T6404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.939120][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.947569][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.085473][ T2918] hsr_slave_0: left promiscuous mode [ 399.093310][ T2918] hsr_slave_1: left promiscuous mode [ 399.099421][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.107709][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.116294][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.125224][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.143989][ T2918] veth1_macvtap: left promiscuous mode [ 399.149507][ T2918] veth0_macvtap: left promiscuous mode [ 399.158841][ T2918] veth1_vlan: left promiscuous mode [ 399.164246][ T2918] veth0_vlan: left promiscuous mode [ 399.598880][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 399.642348][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 399.917396][T16599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3140'. [ 400.100748][T16607] xt_ecn: cannot match TCP bits for non-tcp packets [ 400.169573][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.195494][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.215587][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.233986][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.246064][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 400.254861][T16615] netlink: 'syz.2.3141': attribute type 2 has an invalid length. [ 400.262883][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.511353][T16609] lo speed is unknown, defaulting to 1000 [ 400.553497][T16594] chnl_net:caif_netlink_parms(): no params data found [ 400.621160][T16621] syzkaller1: entered allmulticast mode [ 400.716369][ T4624] Bluetooth: hci1: command tx timeout [ 400.824039][T16594] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.834391][T16594] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.841997][T16594] bridge_slave_0: entered allmulticast mode [ 400.848561][T16594] bridge_slave_0: entered promiscuous mode [ 400.856524][T16594] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.863880][T16594] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.872565][T16594] bridge_slave_1: entered allmulticast mode [ 400.879189][T16594] bridge_slave_1: entered promiscuous mode [ 400.910928][T16594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.922668][T16594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.955654][T16594] team0: Port device team_slave_0 added [ 400.966111][T16594] team0: Port device team_slave_1 added [ 400.993548][T16594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.003651][T16594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.030809][T16594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.043437][T16594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.051318][T16594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.077784][T16594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.183125][ T2918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.204154][T16594] hsr_slave_0: entered promiscuous mode [ 401.214247][T16594] hsr_slave_1: entered promiscuous mode [ 401.220866][T16594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.228448][T16594] Cannot create hsr debugfs directory [ 401.236986][T16609] chnl_net:caif_netlink_parms(): no params data found [ 401.264538][ T2918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.320012][ T2918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.413069][ T2918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.427696][T16609] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.435361][T16609] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.442988][T16609] bridge_slave_0: entered allmulticast mode [ 401.450924][T16609] bridge_slave_0: entered promiscuous mode [ 401.468617][T16609] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.479942][T16609] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.487351][T16609] bridge_slave_1: entered allmulticast mode [ 401.495338][T16609] bridge_slave_1: entered promiscuous mode [ 401.553366][T16609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.584090][T16609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.633349][T16609] team0: Port device team_slave_0 added [ 401.667484][ T2918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.687306][T16609] team0: Port device team_slave_1 added [ 401.711496][T16609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.718459][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.756792][T16609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.788230][ T2918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.801979][T16609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.808949][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.837098][T16609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.878410][ T2918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.958504][T16638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3146'. [ 401.977043][T16636] sctp: [Deprecated]: syz.2.3147 (pid 16636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.977043][T16636] Use struct sctp_sack_info instead [ 402.006309][T16609] hsr_slave_0: entered promiscuous mode [ 402.017671][T16609] hsr_slave_1: entered promiscuous mode [ 402.028712][T16609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.045699][T16609] Cannot create hsr debugfs directory [ 402.126572][ T2918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.363538][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.373697][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.385765][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.398069][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.406017][ T5247] Bluetooth: hci2: command tx timeout [ 402.412852][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 402.421102][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.459013][T16594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.497136][ T2918] bridge_slave_1: left allmulticast mode [ 402.510266][ T2918] bridge_slave_1: left promiscuous mode [ 402.516019][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.543447][ T2918] bridge_slave_0: left allmulticast mode [ 402.556982][ T2918] bridge_slave_0: left promiscuous mode [ 402.563337][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.574384][ T2918] bridge_slave_1: left allmulticast mode [ 402.580054][ T2918] bridge_slave_1: left promiscuous mode [ 402.586184][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.597116][ T2918] bridge_slave_0: left allmulticast mode [ 402.605146][ T2918] bridge_slave_0: left promiscuous mode [ 402.613265][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.640942][T16663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3154'. [ 402.790389][ T5240] Bluetooth: hci1: command tx timeout [ 403.233527][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.247220][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.258326][ T2918] bond0 (unregistering): Released all slaves [ 403.389511][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.403667][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.415161][ T2918] bond0 (unregistering): Released all slaves [ 403.429068][T16594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 403.448237][T16663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'. [ 403.546346][T16594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 403.586279][T16650] lo speed is unknown, defaulting to 1000 [ 403.665930][T16594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 404.216915][ T2918] hsr_slave_0: left promiscuous mode [ 404.224560][ T2918] hsr_slave_1: left promiscuous mode [ 404.232443][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.239934][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.248354][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.255940][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.267703][ T2918] hsr_slave_0: left promiscuous mode [ 404.273682][ T2918] hsr_slave_1: left promiscuous mode [ 404.279610][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.287331][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.295457][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.303808][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.337924][ T2918] veth1_macvtap: left promiscuous mode [ 404.343646][ T2918] veth0_macvtap: left promiscuous mode [ 404.349260][ T2918] veth1_vlan: left promiscuous mode [ 404.354674][ T2918] veth0_vlan: left promiscuous mode [ 404.363938][ T2918] veth1_macvtap: left promiscuous mode [ 404.369448][ T2918] veth0_macvtap: left promiscuous mode [ 404.375027][ T2918] veth1_vlan: left promiscuous mode [ 404.380599][ T2918] veth0_vlan: left promiscuous mode [ 404.470396][ T4624] Bluetooth: hci3: command tx timeout [ 404.476385][ T5240] Bluetooth: hci2: command tx timeout [ 404.877245][ T5240] Bluetooth: hci1: command tx timeout [ 405.021237][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 405.109451][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 405.964162][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 406.026482][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 406.455917][T16709] netlink: 'syz.1.3167': attribute type 12 has an invalid length. [ 406.472792][T16709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3167'. [ 406.509715][T16650] chnl_net:caif_netlink_parms(): no params data found [ 406.538397][T16609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.558348][ T5240] Bluetooth: hci3: command tx timeout [ 406.564196][ T4624] Bluetooth: hci2: command tx timeout [ 406.624691][T16609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.637746][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'. [ 406.648110][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3170'. [ 406.650767][T16609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.668821][T16609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.676591][T16717] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3170'. [ 406.785399][T16650] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.793164][T16650] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.801264][T16650] bridge_slave_0: entered allmulticast mode [ 406.808318][T16650] bridge_slave_0: entered promiscuous mode [ 406.816315][T16650] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.823884][T16650] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.831776][T16650] bridge_slave_1: entered allmulticast mode [ 406.838822][T16650] bridge_slave_1: entered promiscuous mode [ 406.860022][T16718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3169'. [ 406.905623][T16594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.930886][T16650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.949922][T16650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.951328][ T5240] Bluetooth: hci1: command tx timeout [ 407.078023][T16594] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.102201][T16650] team0: Port device team_slave_0 added [ 407.137244][T16650] team0: Port device team_slave_1 added [ 407.197304][T16650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.206449][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.247160][T16650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.274050][T16650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.288991][T16650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.317259][T16650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.333575][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.340838][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.375435][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.382733][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.547241][T16650] hsr_slave_0: entered promiscuous mode [ 407.554603][T16650] hsr_slave_1: entered promiscuous mode [ 407.567531][T16650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.584267][T16650] Cannot create hsr debugfs directory [ 407.645656][T16609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.732292][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 407.798470][T16609] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.892210][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.899316][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.992453][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.999615][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.042065][T16769] netlink: 'syz.1.3184': attribute type 3 has an invalid length. [ 408.060938][T16769] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3184'. [ 408.070183][T16594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.246883][T16594] veth0_vlan: entered promiscuous mode [ 408.260396][T16594] veth1_vlan: entered promiscuous mode [ 408.328180][T16594] veth0_macvtap: entered promiscuous mode [ 408.339913][T16594] veth1_macvtap: entered promiscuous mode [ 408.370028][T16782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3187'. [ 408.405592][T16594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.424007][T16594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.434365][T16594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.445412][T16594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.456794][T16594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.467311][T16609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.489765][T16594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.500990][T16594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.511578][T16594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.522202][T16594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.533247][T16594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.553046][T16594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.562647][T16594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.571877][T16594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.581028][T16594] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.630401][ T5240] Bluetooth: hci3: command tx timeout [ 408.635865][ T4624] Bluetooth: hci2: command tx timeout [ 408.658008][T16650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.684001][T16650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.699190][T16650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.708744][T16650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.758991][T16609] veth0_vlan: entered promiscuous mode [ 408.774956][ T6399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.784477][ T6399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.820168][ T6404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.828086][ T6404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.844875][T16609] veth1_vlan: entered promiscuous mode [ 408.942855][T16609] veth0_macvtap: entered promiscuous mode [ 408.983429][T16609] veth1_macvtap: entered promiscuous mode [ 409.030017][T16650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.048348][T16609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.060634][T16609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.072332][T16609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.082939][T16609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.093476][T16609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.104486][T16609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.117841][T16609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.136159][T16609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.147487][T16609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.157661][T16609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.168615][T16609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.179261][T16609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.191622][T16609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.203225][T16609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.229767][T16650] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.246483][T16609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.256918][T16609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.266309][T16609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.276833][T16609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.305215][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.313017][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.372533][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.379655][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.451620][T16795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3191'. [ 409.465834][T16796] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3191'. [ 409.837965][ T6399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.938401][ T6417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.967712][ T6417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.027008][ T6399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.117546][ T6404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.144582][ T6404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.207060][ T6399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.274156][T16650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.426251][T16650] veth0_vlan: entered promiscuous mode [ 410.436996][T16650] veth1_vlan: entered promiscuous mode [ 410.463592][T16650] veth0_macvtap: entered promiscuous mode [ 410.475766][T16650] veth1_macvtap: entered promiscuous mode [ 410.489334][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.501417][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.511403][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.522296][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.532281][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.542777][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.552990][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.563628][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.575219][T16650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.590023][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.602174][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.612510][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.623003][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.634089][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.645113][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.654959][T16650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.665463][T16650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.676600][T16650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.693273][T16650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.703546][T16650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.710717][ T4624] Bluetooth: hci3: command tx timeout [ 410.713111][T16650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.727556][T16650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.783883][ T1809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.792911][ T1809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.820541][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.828424][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.898561][ T6399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.184551][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.196495][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.209098][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.218247][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.231357][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 411.233837][ T6399] bridge_slave_1: left allmulticast mode [ 411.238798][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.244200][ T6399] bridge_slave_1: left promiscuous mode [ 411.244377][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.268895][ T6399] bridge_slave_0: left allmulticast mode [ 411.279382][ T6399] bridge_slave_0: left promiscuous mode [ 411.288531][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.701992][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.712750][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.726473][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.744074][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.760678][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 411.774780][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.875293][ T6399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.886949][ T6399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.898361][ T6399] bond0 (unregistering): Released all slaves [ 411.979106][T16808] lo speed is unknown, defaulting to 1000 [ 411.994603][T16816] lo speed is unknown, defaulting to 1000 [ 412.194813][ T6399] hsr_slave_0: left promiscuous mode [ 412.201884][ T6399] hsr_slave_1: left promiscuous mode [ 412.207706][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.215629][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.223694][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.232190][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.254701][ T6399] veth1_macvtap: left promiscuous mode [ 412.260654][ T6399] veth0_macvtap: left promiscuous mode [ 412.266266][ T6399] veth1_vlan: left promiscuous mode [ 412.272075][ T6399] veth0_vlan: left promiscuous mode [ 412.705787][ T6399] team0 (unregistering): Port device team_slave_1 removed [ 412.915102][ T6399] team0 (unregistering): Port device team_slave_0 removed [ 412.956194][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.968069][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.977259][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.986544][T16831] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3196'. [ 412.986726][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.020901][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.028850][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.350559][ T5240] Bluetooth: hci1: command tx timeout [ 413.749447][T16808] chnl_net:caif_netlink_parms(): no params data found [ 413.831527][ T5240] Bluetooth: hci2: command tx timeout [ 413.856681][T16829] lo speed is unknown, defaulting to 1000 [ 413.906941][T16816] chnl_net:caif_netlink_parms(): no params data found [ 414.101823][T16808] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.113847][T16808] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.122684][T16808] bridge_slave_0: entered allmulticast mode [ 414.129335][T16808] bridge_slave_0: entered promiscuous mode [ 414.140048][T16808] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.149894][T16808] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.157430][T16808] bridge_slave_1: entered allmulticast mode [ 414.164528][T16808] bridge_slave_1: entered promiscuous mode [ 414.199530][T16876] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.214849][T16876] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.226711][T16876] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.245271][T16876] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.270560][T16876] geneve2: entered promiscuous mode [ 414.275907][T16876] geneve2: entered allmulticast mode [ 414.291750][T16876] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 414.301626][T16876] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 414.311417][T16876] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 414.320586][T16876] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 414.381400][T16887] team0: Device ip6tnl0 is of different type [ 414.424611][T16816] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.449435][T16816] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.470337][T16816] bridge_slave_0: entered allmulticast mode [ 414.477487][T16816] bridge_slave_0: entered promiscuous mode [ 414.518462][T16808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.532216][T16816] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.551244][T16816] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.566085][T16816] bridge_slave_1: entered allmulticast mode [ 414.574204][T16816] bridge_slave_1: entered promiscuous mode [ 414.606101][T16808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.634037][T16816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.645033][T16899] netlink: 'syz.1.3213': attribute type 13 has an invalid length. [ 414.669981][T16899] netlink: 'syz.1.3213': attribute type 58 has an invalid length. [ 414.678357][T16899] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3213'. [ 414.731319][T16816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.808426][T16808] team0: Port device team_slave_0 added [ 414.861890][T16808] team0: Port device team_slave_1 added [ 414.893405][T16816] team0: Port device team_slave_0 added [ 414.903410][T16816] team0: Port device team_slave_1 added [ 414.943234][ T6399] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.031457][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3218'. [ 415.042341][T16914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3218'. [ 415.051721][T16914] tipc: Invalid UDP bearer configuration [ 415.051756][T16914] tipc: Enabling of bearer rejected, failed to enable media [ 415.068815][T16808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.069201][T16908] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3216'. [ 415.075954][T16808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.075984][T16808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.077802][T16808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.111939][ T5240] Bluetooth: hci3: command tx timeout [ 415.147237][T16808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.175098][T16808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.203344][ T6399] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.219424][T16816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.226537][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.255005][T16816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.268806][T16816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.281190][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.311477][T16816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.386235][T16829] chnl_net:caif_netlink_parms(): no params data found [ 415.421966][T16923] netlink: 200836 bytes leftover after parsing attributes in process `syz.1.3220'. [ 415.430562][ T5240] Bluetooth: hci1: command tx timeout [ 415.432423][T16923] openvswitch: netlink: Duplicate key (type 0). [ 415.488813][ T6399] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.505670][T16925] x_tables: duplicate underflow at hook 1 [ 415.533831][T16816] hsr_slave_0: entered promiscuous mode [ 415.560494][T16816] hsr_slave_1: entered promiscuous mode [ 415.566833][T16816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.578710][T16816] Cannot create hsr debugfs directory [ 415.663266][ T6399] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.803632][T16808] hsr_slave_0: entered promiscuous mode [ 415.826532][T16808] hsr_slave_1: entered promiscuous mode [ 415.856693][T16946] netlink: 'syz.1.3227': attribute type 1 has an invalid length. [ 415.871284][T16808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.884916][T16946] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.3227'. [ 415.894179][T16808] Cannot create hsr debugfs directory [ 415.908297][T16946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3227'. [ 415.919401][ T5240] Bluetooth: hci2: command tx timeout [ 415.925313][T16946] netlink: 'syz.1.3227': attribute type 1 has an invalid length. [ 416.059799][T16829] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.078259][T16829] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.089175][T16829] bridge_slave_0: entered allmulticast mode [ 416.103739][T16829] bridge_slave_0: entered promiscuous mode [ 416.112220][T16829] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.119338][T16829] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.127746][T16829] bridge_slave_1: entered allmulticast mode [ 416.134981][T16829] bridge_slave_1: entered promiscuous mode [ 416.232601][T16829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.334374][ T6399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.366557][T16829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.431187][ T6399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.477023][T16829] team0: Port device team_slave_0 added [ 416.490883][T16829] team0: Port device team_slave_1 added [ 416.516394][T16965] netlink: 'syz.1.3234': attribute type 32 has an invalid length. [ 416.543419][ T6399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.585660][T16829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.596078][T16829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.633507][T16829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.678556][ T6399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.692255][T16829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.699367][T16829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.725678][T16829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.763311][T16829] hsr_slave_0: entered promiscuous mode [ 416.769899][T16829] hsr_slave_1: entered promiscuous mode [ 416.777711][T16829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.791122][T16829] Cannot create hsr debugfs directory [ 416.902089][ T6399] bridge_slave_1: left allmulticast mode [ 416.907778][ T6399] bridge_slave_1: left promiscuous mode [ 416.914553][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.924320][ T6399] bridge_slave_0: left allmulticast mode [ 416.930029][ T6399] bridge_slave_0: left promiscuous mode [ 416.940497][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.952896][ T6399] bridge_slave_1: left allmulticast mode [ 416.958786][ T6399] bridge_slave_1: left promiscuous mode [ 416.964595][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.977973][ T6399] bridge_slave_0: left allmulticast mode [ 416.984202][ T6399] bridge_slave_0: left promiscuous mode [ 416.989841][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.192353][ T5240] Bluetooth: hci3: command tx timeout [ 417.510324][ T5240] Bluetooth: hci1: command tx timeout [ 417.676836][ T6399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.688428][ T6399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.700976][ T6399] bond0 (unregistering): Released all slaves [ 417.823499][ T6399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.841319][ T6399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.857104][ T6399] bond0 (unregistering): Released all slaves [ 417.902672][T16970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3236'. [ 417.991384][ T5240] Bluetooth: hci2: command tx timeout [ 418.616328][T16816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.617680][T16996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.684496][T16816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.717532][T16816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 418.808267][T17004] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 418.814983][T17004] 0·: hsr_addr_subst_dest: Unknown node [ 418.834098][T16816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.958440][ T6399] hsr_slave_0: left promiscuous mode [ 418.976155][ T6399] hsr_slave_1: left promiscuous mode [ 418.982550][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.990256][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.998284][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.006007][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.016714][ T6399] hsr_slave_0: left promiscuous mode [ 419.026261][ T6399] hsr_slave_1: left promiscuous mode [ 419.032496][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.040358][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.055425][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.063060][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.101628][ T6399] veth1_macvtap: left promiscuous mode [ 419.107168][ T6399] veth0_macvtap: left promiscuous mode [ 419.113047][ T6399] veth1_vlan: left promiscuous mode [ 419.118406][ T6399] veth0_vlan: left promiscuous mode [ 419.125382][ T6399] veth1_macvtap: left promiscuous mode [ 419.131046][ T6399] veth0_macvtap: left promiscuous mode [ 419.136638][ T6399] veth1_vlan: left promiscuous mode [ 419.142030][ T6399] veth0_vlan: left promiscuous mode [ 419.270986][ T5240] Bluetooth: hci3: command tx timeout [ 419.590402][ T5240] Bluetooth: hci1: command tx timeout [ 419.695995][ T6399] team0 (unregistering): Port device team_slave_1 removed [ 419.744486][ T6399] team0 (unregistering): Port device team_slave_0 removed [ 420.075258][ T5240] Bluetooth: hci2: command tx timeout [ 420.585411][ T6399] team0 (unregistering): Port device team_slave_1 removed [ 420.635098][ T6399] team0 (unregistering): Port device team_slave_0 removed [ 421.080623][T17012] netlink: 'syz.1.3256': attribute type 25 has an invalid length. [ 421.217780][T16808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.243040][T16808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.347964][T16808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.350493][ T5240] Bluetooth: hci3: command tx timeout [ 421.374923][T16808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.457559][T17024] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3262'. [ 421.567536][T17026] BUG: Bad page state in process syz.2.3263 pfn:599b5 [ 421.574507][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880599b5280 pfn:0x599b5 [ 421.584672][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 421.591863][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 421.600569][T17026] raw: ffff8880599b5280 0000000000000001 00000000ffffffff 0000000000000000 [ 421.609167][T17026] page dumped because: page_pool leak [ 421.614612][T17026] page_owner tracks the page as allocated [ 421.620392][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540332708, free_ts 421329008985 [ 421.637678][T17026] post_alloc_hook+0x1f3/0x230 [ 421.642532][T17026] get_page_from_freelist+0x3045/0x3190 [ 421.648120][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 421.653387][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 421.658881][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 421.665283][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 421.670561][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 421.675974][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 421.681417][T17026] bpf_prog_test_run+0x2e4/0x360 [ 421.686384][T17026] __sys_bpf+0x48d/0x810 [ 421.690703][T17026] __x64_sys_bpf+0x7c/0x90 [ 421.695146][T17026] do_syscall_64+0xf3/0x230 [ 421.699670][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.705629][T17026] page last free pid 17017 tgid 17016 stack trace: [ 421.712182][T17026] free_unref_folios+0xf12/0x18d0 [ 421.717227][T17026] folios_put_refs+0x76c/0x860 [ 421.722048][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 421.727709][T17026] tlb_flush_mmu+0x3a3/0x680 [ 421.732367][T17026] tlb_finish_mmu+0xd4/0x200 [ 421.736985][T17026] exit_mmap+0x496/0xc40 [ 421.741296][T17026] __mmput+0x115/0x390 [ 421.745388][T17026] exit_mm+0x220/0x310 [ 421.749480][T17026] do_exit+0x9b2/0x28e0 [ 421.753704][T17026] do_group_exit+0x207/0x2c0 [ 421.758345][T17026] get_signal+0x16a3/0x1740 [ 421.763001][T17026] arch_do_signal_or_restart+0x96/0x860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 421.768572][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 421.774186][T17026] do_syscall_64+0x100/0x230 [ 421.778795][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.784770][T17026] Modules linked in: [ 421.788701][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 421.799474][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 421.809540][T17026] Call Trace: [ 421.812822][T17026] [ 421.815751][T17026] dump_stack_lvl+0x241/0x360 [ 421.820437][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.825630][T17026] ? __pfx_print_modules+0x10/0x10 [ 421.830747][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 421.836647][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.842981][T17026] bad_page+0x166/0x1b0 [ 421.847137][T17026] free_unref_page+0xed0/0xf20 [ 421.851929][T17026] skb_release_data+0x6dc/0x8a0 [ 421.856813][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 421.861861][T17026] packet_rcv+0x16f/0x14b0 [ 421.866301][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 421.871168][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 421.877187][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 421.883714][T17026] ? read_tsc+0x9/0x20 [ 421.887794][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 421.893006][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 421.899351][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 421.905522][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 421.911858][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 421.918539][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 421.923762][T17026] ? __phys_addr+0xba/0x170 [ 421.928267][T17026] ? build_skb_around+0x111/0x260 [ 421.933290][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 421.939186][T17026] netif_receive_skb_list+0x55/0x4b0 [ 421.944473][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 421.949936][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 421.955842][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 421.961395][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 421.967233][T17026] ? synchronize_rcu+0x11b/0x360 [ 421.972186][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 421.977496][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 421.983756][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 421.989663][T17026] ? _copy_from_user+0xa6/0xe0 [ 421.994608][T17026] ? bpf_test_init+0x15a/0x180 [ 421.999387][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 422.004858][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 422.010240][T17026] ? __pfx_lock_release+0x10/0x10 [ 422.015282][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 422.021089][T17026] ? __fget_files+0x29/0x470 [ 422.025688][T17026] ? fput+0x1a8/0x230 [ 422.029667][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 422.035495][T17026] bpf_prog_test_run+0x2e4/0x360 [ 422.040452][T17026] __sys_bpf+0x48d/0x810 [ 422.044790][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 422.049558][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.055543][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.061877][T17026] ? do_syscall_64+0x100/0x230 [ 422.066646][T17026] __x64_sys_bpf+0x7c/0x90 [ 422.071083][T17026] do_syscall_64+0xf3/0x230 [ 422.075609][T17026] ? clear_bhb_loop+0x35/0x90 [ 422.080300][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.086217][T17026] RIP: 0033:0x7f73cc37dff9 [ 422.090632][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.110283][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.118701][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 422.126680][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 422.134657][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 422.142622][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.150593][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 422.158573][T17026] [ 422.161684][T17026] Disabling lock debugging due to kernel taint [ 422.167404][T16808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.167836][T17026] BUG: Bad page state in process syz.2.3263 pfn:55aa4 [ 422.181312][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055aa41e0 pfn:0x55aa4 [ 422.191441][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 422.198583][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 422.207222][T17026] raw: ffff888055aa41e0 0000000000000001 00000000ffffffff 0000000000000000 [ 422.215846][T17026] page dumped because: page_pool leak [ 422.221257][T17026] page_owner tracks the page as allocated [ 422.226999][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540322986, free_ts 421329018065 [ 422.244232][T17026] post_alloc_hook+0x1f3/0x230 [ 422.248987][T17026] get_page_from_freelist+0x3045/0x3190 [ 422.254539][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 422.259720][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 422.265180][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 422.271103][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 422.276308][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 422.281688][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 422.287044][T17026] bpf_prog_test_run+0x2e4/0x360 [ 422.291980][T17026] __sys_bpf+0x48d/0x810 [ 422.296214][T17026] __x64_sys_bpf+0x7c/0x90 [ 422.300642][T17026] do_syscall_64+0xf3/0x230 [ 422.305145][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.311066][T17026] page last free pid 17017 tgid 17016 stack trace: [ 422.317560][T17026] free_unref_folios+0xf12/0x18d0 [ 422.322611][T17026] folios_put_refs+0x76c/0x860 [ 422.327377][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 422.333017][T17026] tlb_flush_mmu+0x3a3/0x680 [ 422.337590][T17026] tlb_finish_mmu+0xd4/0x200 [ 422.342182][T17026] exit_mmap+0x496/0xc40 [ 422.346406][T17026] __mmput+0x115/0x390 [ 422.350488][T17026] exit_mm+0x220/0x310 [ 422.354566][T17026] do_exit+0x9b2/0x28e0 [ 422.358701][T17026] do_group_exit+0x207/0x2c0 [ 422.363294][T17026] get_signal+0x16a3/0x1740 [ 422.367781][T17026] arch_do_signal_or_restart+0x96/0x860 [ 422.373346][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 422.378930][T17026] do_syscall_64+0x100/0x230 [ 422.383551][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.389467][T17026] Modules linked in: [ 422.393380][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 422.405604][T17026] Tainted: [B]=BAD_PAGE [ 422.409735][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.419774][T17026] Call Trace: [ 422.423042][T17026] [ 422.425956][T17026] dump_stack_lvl+0x241/0x360 [ 422.430629][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.435827][T17026] ? __pfx_print_modules+0x10/0x10 [ 422.440938][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 422.446839][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 422.453156][T17026] bad_page+0x166/0x1b0 [ 422.457299][T17026] free_unref_page+0xed0/0xf20 [ 422.462058][T17026] skb_release_data+0x6dc/0x8a0 [ 422.466901][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 422.471917][T17026] packet_rcv+0x16f/0x14b0 [ 422.476340][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 422.481219][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 422.487206][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 422.493711][T17026] ? read_tsc+0x9/0x20 [ 422.497784][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 422.502986][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 422.509308][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 422.515462][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 422.521783][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 422.528474][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 422.533677][T17026] ? __phys_addr+0xba/0x170 [ 422.538186][T17026] ? build_skb_around+0x111/0x260 [ 422.543204][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 422.549100][T17026] netif_receive_skb_list+0x55/0x4b0 [ 422.554390][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 422.559848][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 422.565748][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 422.571294][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 422.577105][T17026] ? synchronize_rcu+0x11b/0x360 [ 422.582036][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 422.587319][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 422.593575][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 422.599485][T17026] ? _copy_from_user+0xa6/0xe0 [ 422.604256][T17026] ? bpf_test_init+0x15a/0x180 [ 422.609027][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 422.614488][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 422.619862][T17026] ? __pfx_lock_release+0x10/0x10 [ 422.624888][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 422.630713][T17026] ? __fget_files+0x29/0x470 [ 422.635302][T17026] ? fput+0x1a8/0x230 [ 422.639274][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 422.645076][T17026] bpf_prog_test_run+0x2e4/0x360 [ 422.650006][T17026] __sys_bpf+0x48d/0x810 [ 422.654244][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 422.659005][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.664981][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.671306][T17026] ? do_syscall_64+0x100/0x230 [ 422.676088][T17026] __x64_sys_bpf+0x7c/0x90 [ 422.680497][T17026] do_syscall_64+0xf3/0x230 [ 422.684987][T17026] ? clear_bhb_loop+0x35/0x90 [ 422.689654][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.695543][T17026] RIP: 0033:0x7f73cc37dff9 [ 422.699946][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.719567][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.727988][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 422.735962][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 422.744011][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 422.751973][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.759930][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 422.767897][T17026] [ 422.771008][T17026] BUG: Bad page state in process syz.2.3263 pfn:49449 [ 422.777867][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049449f00 pfn:0x49449 [ 422.787982][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 422.795120][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 422.803741][T17026] raw: ffff888049449f00 0000000000000001 00000000ffffffff 0000000000000000 [ 422.812336][T17026] page dumped because: page_pool leak [ 422.817685][T17026] page_owner tracks the page as allocated [ 422.823408][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540311829, free_ts 421329036048 [ 422.841042][T17026] post_alloc_hook+0x1f3/0x230 [ 422.845797][T17026] get_page_from_freelist+0x3045/0x3190 [ 422.851355][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 422.856551][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 422.862012][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 422.867890][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 422.873093][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 422.878451][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 422.883881][T17026] bpf_prog_test_run+0x2e4/0x360 [ 422.888819][T17026] __sys_bpf+0x48d/0x810 [ 422.893082][T17026] __x64_sys_bpf+0x7c/0x90 [ 422.897484][T17026] do_syscall_64+0xf3/0x230 [ 422.902005][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.907895][T17026] page last free pid 17017 tgid 17016 stack trace: [ 422.914422][T17026] free_unref_folios+0xf12/0x18d0 [ 422.919458][T17026] folios_put_refs+0x76c/0x860 [ 422.924242][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 422.929882][T17026] tlb_flush_mmu+0x3a3/0x680 [ 422.934529][T17026] tlb_finish_mmu+0xd4/0x200 [ 422.939112][T17026] exit_mmap+0x496/0xc40 [ 422.943364][T17026] __mmput+0x115/0x390 [ 422.947419][T17026] exit_mm+0x220/0x310 [ 422.951530][T17026] do_exit+0x9b2/0x28e0 [ 422.955779][T17026] do_group_exit+0x207/0x2c0 [ 422.960412][T17026] get_signal+0x16a3/0x1740 [ 422.964939][T17026] arch_do_signal_or_restart+0x96/0x860 [ 422.970518][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 422.976128][T17026] do_syscall_64+0x100/0x230 [ 422.980740][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.986634][T17026] Modules linked in: [ 422.990648][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 423.002893][T17026] Tainted: [B]=BAD_PAGE [ 423.007025][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.017099][T17026] Call Trace: [ 423.020373][T17026] [ 423.023328][T17026] dump_stack_lvl+0x241/0x360 [ 423.028008][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.033220][T17026] ? __pfx_print_modules+0x10/0x10 [ 423.038323][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 423.044208][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.050543][T17026] bad_page+0x166/0x1b0 [ 423.054705][T17026] free_unref_page+0xed0/0xf20 [ 423.059451][T17026] skb_release_data+0x6dc/0x8a0 [ 423.064287][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 423.069293][T17026] packet_rcv+0x16f/0x14b0 [ 423.073715][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 423.078576][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 423.084573][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 423.091080][T17026] ? read_tsc+0x9/0x20 [ 423.095328][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 423.100530][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 423.106858][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 423.113016][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 423.119340][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 423.126011][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 423.131202][T17026] ? __phys_addr+0xba/0x170 [ 423.135696][T17026] ? build_skb_around+0x111/0x260 [ 423.140735][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 423.146640][T17026] netif_receive_skb_list+0x55/0x4b0 [ 423.151923][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 423.157378][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 423.163271][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 423.168816][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 423.174616][T17026] ? synchronize_rcu+0x11b/0x360 [ 423.179631][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 423.184936][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 423.191178][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 423.197068][T17026] ? _copy_from_user+0xa6/0xe0 [ 423.201828][T17026] ? bpf_test_init+0x15a/0x180 [ 423.206589][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 423.212045][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 423.217422][T17026] ? __pfx_lock_release+0x10/0x10 [ 423.222466][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.228269][T17026] ? __fget_files+0x29/0x470 [ 423.232857][T17026] ? fput+0x1a8/0x230 [ 423.236833][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.242642][T17026] bpf_prog_test_run+0x2e4/0x360 [ 423.247592][T17026] __sys_bpf+0x48d/0x810 [ 423.251827][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 423.256588][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.262566][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.268891][T17026] ? do_syscall_64+0x100/0x230 [ 423.273649][T17026] __x64_sys_bpf+0x7c/0x90 [ 423.278057][T17026] do_syscall_64+0xf3/0x230 [ 423.282553][T17026] ? clear_bhb_loop+0x35/0x90 [ 423.287225][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.293113][T17026] RIP: 0033:0x7f73cc37dff9 [ 423.297524][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.317140][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.325551][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 423.333515][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 423.341479][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 423.349438][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.357408][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 423.365381][T17026] [ 423.368474][T17026] BUG: Bad page state in process syz.2.3263 pfn:4aeff [ 423.375378][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804aeff0d8 pfn:0x4aeff [ 423.385474][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 423.392624][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 423.401231][T17026] raw: ffff88804aeff0d8 0000000000000001 00000000ffffffff 0000000000000000 [ 423.409816][T17026] page dumped because: page_pool leak [ 423.415219][T17026] page_owner tracks the page as allocated [ 423.420938][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540302328, free_ts 421329105632 [ 423.438228][T17026] post_alloc_hook+0x1f3/0x230 [ 423.443010][T17026] get_page_from_freelist+0x3045/0x3190 [ 423.448542][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 423.453744][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 423.459186][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 423.465089][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 423.470301][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 423.475680][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 423.481066][T17026] bpf_prog_test_run+0x2e4/0x360 [ 423.485984][T17026] __sys_bpf+0x48d/0x810 [ 423.490232][T17026] __x64_sys_bpf+0x7c/0x90 [ 423.494649][T17026] do_syscall_64+0xf3/0x230 [ 423.499154][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.505085][T17026] page last free pid 17017 tgid 17016 stack trace: [ 423.511614][T17026] free_unref_folios+0xf12/0x18d0 [ 423.516673][T17026] folios_put_refs+0x76c/0x860 [ 423.521459][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 423.527073][T17026] tlb_flush_mmu+0x3a3/0x680 [ 423.531688][T17026] tlb_finish_mmu+0xd4/0x200 [ 423.536310][T17026] exit_mmap+0x496/0xc40 [ 423.540555][T17026] __mmput+0x115/0x390 [ 423.544608][T17026] exit_mm+0x220/0x310 [ 423.548666][T17026] do_exit+0x9b2/0x28e0 [ 423.552837][T17026] do_group_exit+0x207/0x2c0 [ 423.557415][T17026] get_signal+0x16a3/0x1740 [ 423.561928][T17026] arch_do_signal_or_restart+0x96/0x860 [ 423.567506][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 423.573095][T17026] do_syscall_64+0x100/0x230 [ 423.577682][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.583610][T17026] Modules linked in: [ 423.587509][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 423.599889][T17026] Tainted: [B]=BAD_PAGE [ 423.604047][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.614112][T17026] Call Trace: [ 423.617379][T17026] [ 423.620320][T17026] dump_stack_lvl+0x241/0x360 [ 423.625001][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.630196][T17026] ? __pfx_print_modules+0x10/0x10 [ 423.635333][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 423.641230][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 423.647554][T17026] bad_page+0x166/0x1b0 [ 423.651703][T17026] free_unref_page+0xed0/0xf20 [ 423.656457][T17026] skb_release_data+0x6dc/0x8a0 [ 423.661305][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 423.666324][T17026] packet_rcv+0x16f/0x14b0 [ 423.670737][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 423.675580][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 423.681556][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 423.688048][T17026] ? read_tsc+0x9/0x20 [ 423.692282][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 423.697478][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 423.703800][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 423.709958][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 423.716281][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 423.722951][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 423.728140][T17026] ? __phys_addr+0xba/0x170 [ 423.732635][T17026] ? build_skb_around+0x111/0x260 [ 423.737647][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 423.743534][T17026] netif_receive_skb_list+0x55/0x4b0 [ 423.748815][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 423.754276][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 423.760183][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 423.765733][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 423.771534][T17026] ? synchronize_rcu+0x11b/0x360 [ 423.776472][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 423.781845][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 423.788084][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 423.793969][T17026] ? _copy_from_user+0xa6/0xe0 [ 423.798724][T17026] ? bpf_test_init+0x15a/0x180 [ 423.803482][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 423.808938][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 423.814306][T17026] ? __pfx_lock_release+0x10/0x10 [ 423.819330][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.825131][T17026] ? __fget_files+0x29/0x470 [ 423.829716][T17026] ? fput+0x1a8/0x230 [ 423.833690][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 423.839498][T17026] bpf_prog_test_run+0x2e4/0x360 [ 423.844432][T17026] __sys_bpf+0x48d/0x810 [ 423.848670][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 423.853430][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.859426][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.865748][T17026] ? do_syscall_64+0x100/0x230 [ 423.870501][T17026] __x64_sys_bpf+0x7c/0x90 [ 423.874908][T17026] do_syscall_64+0xf3/0x230 [ 423.879400][T17026] ? clear_bhb_loop+0x35/0x90 [ 423.884070][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.889958][T17026] RIP: 0033:0x7f73cc37dff9 [ 423.894363][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.913976][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.922404][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 423.930387][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 423.938363][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 423.946347][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.954319][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 423.962386][T17026] [ 423.965495][T17026] BUG: Bad page state in process syz.2.3263 pfn:6364c [ 423.972405][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806364cc30 pfn:0x6364c [ 423.982607][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 423.989730][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 423.998421][T17026] raw: ffff88806364cc30 0000000000000001 00000000ffffffff 0000000000000000 [ 424.007045][T17026] page dumped because: page_pool leak [ 424.012421][T17026] page_owner tracks the page as allocated [ 424.018119][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540291985, free_ts 421329116498 [ 424.035344][T17026] post_alloc_hook+0x1f3/0x230 [ 424.040144][T17026] get_page_from_freelist+0x3045/0x3190 [ 424.045724][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 424.050932][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 424.056373][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 424.062275][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 424.067461][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 424.072841][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 424.078208][T17026] bpf_prog_test_run+0x2e4/0x360 [ 424.083153][T17026] __sys_bpf+0x48d/0x810 [ 424.087380][T17026] __x64_sys_bpf+0x7c/0x90 [ 424.091824][T17026] do_syscall_64+0xf3/0x230 [ 424.096404][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.102326][T17026] page last free pid 17017 tgid 17016 stack trace: [ 424.108825][T17026] free_unref_folios+0xf12/0x18d0 [ 424.113870][T17026] folios_put_refs+0x76c/0x860 [ 424.118646][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 424.124296][T17026] tlb_flush_mmu+0x3a3/0x680 [ 424.128874][T17026] tlb_finish_mmu+0xd4/0x200 [ 424.133469][T17026] exit_mmap+0x496/0xc40 [ 424.137695][T17026] __mmput+0x115/0x390 [ 424.141779][T17026] exit_mm+0x220/0x310 [ 424.145847][T17026] do_exit+0x9b2/0x28e0 [ 424.150098][T17026] do_group_exit+0x207/0x2c0 [ 424.154682][T17026] get_signal+0x16a3/0x1740 [ 424.159165][T17026] arch_do_signal_or_restart+0x96/0x860 [ 424.164742][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 424.170328][T17026] do_syscall_64+0x100/0x230 [ 424.174910][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.180821][T17026] Modules linked in: [ 424.184716][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 424.196939][T17026] Tainted: [B]=BAD_PAGE [ 424.201079][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.211134][T17026] Call Trace: [ 424.214399][T17026] [ 424.217312][T17026] dump_stack_lvl+0x241/0x360 [ 424.221981][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.227175][T17026] ? __pfx_print_modules+0x10/0x10 [ 424.232284][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 424.238173][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.244496][T17026] bad_page+0x166/0x1b0 [ 424.248646][T17026] free_unref_page+0xed0/0xf20 [ 424.253400][T17026] skb_release_data+0x6dc/0x8a0 [ 424.258249][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 424.263265][T17026] packet_rcv+0x16f/0x14b0 [ 424.267682][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 424.272532][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 424.278508][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 424.285002][T17026] ? read_tsc+0x9/0x20 [ 424.289064][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 424.294258][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 424.300578][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 424.306728][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 424.313057][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 424.319728][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 424.324919][T17026] ? __phys_addr+0xba/0x170 [ 424.329413][T17026] ? build_skb_around+0x111/0x260 [ 424.334426][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 424.340403][T17026] netif_receive_skb_list+0x55/0x4b0 [ 424.345679][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 424.351135][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 424.357039][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 424.362584][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 424.368382][T17026] ? synchronize_rcu+0x11b/0x360 [ 424.373309][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 424.378591][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 424.384829][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 424.390716][T17026] ? _copy_from_user+0xa6/0xe0 [ 424.395475][T17026] ? bpf_test_init+0x15a/0x180 [ 424.400235][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 424.405688][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 424.411057][T17026] ? __pfx_lock_release+0x10/0x10 [ 424.416086][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 424.421892][T17026] ? __fget_files+0x29/0x470 [ 424.426479][T17026] ? fput+0x1a8/0x230 [ 424.430455][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 424.436256][T17026] bpf_prog_test_run+0x2e4/0x360 [ 424.441212][T17026] __sys_bpf+0x48d/0x810 [ 424.445447][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 424.450212][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.456199][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.462536][T17026] ? do_syscall_64+0x100/0x230 [ 424.467390][T17026] __x64_sys_bpf+0x7c/0x90 [ 424.471795][T17026] do_syscall_64+0xf3/0x230 [ 424.476296][T17026] ? clear_bhb_loop+0x35/0x90 [ 424.480986][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.486873][T17026] RIP: 0033:0x7f73cc37dff9 [ 424.491277][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.510874][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.519280][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 424.527242][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 424.535220][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 424.543210][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.551174][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 424.559146][T17026] [ 424.562231][T17026] BUG: Bad page state in process syz.2.3263 pfn:5417c [ 424.569089][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805417cf00 pfn:0x5417c [ 424.579200][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 424.586358][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 424.594940][T17026] raw: ffff88805417cf00 0000000000000001 00000000ffffffff 0000000000000000 [ 424.603525][T17026] page dumped because: page_pool leak [ 424.608871][T17026] page_owner tracks the page as allocated [ 424.614583][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540281875, free_ts 421329127146 [ 424.631779][T17026] post_alloc_hook+0x1f3/0x230 [ 424.636535][T17026] get_page_from_freelist+0x3045/0x3190 [ 424.642097][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 424.647305][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 424.652759][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 424.658636][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 424.663847][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 424.669290][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 424.674669][T17026] bpf_prog_test_run+0x2e4/0x360 [ 424.679590][T17026] __sys_bpf+0x48d/0x810 [ 424.683850][T17026] __x64_sys_bpf+0x7c/0x90 [ 424.688266][T17026] do_syscall_64+0xf3/0x230 [ 424.692770][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.698662][T17026] page last free pid 17017 tgid 17016 stack trace: [ 424.705155][T17026] free_unref_folios+0xf12/0x18d0 [ 424.710196][T17026] folios_put_refs+0x76c/0x860 [ 424.715054][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 424.720708][T17026] tlb_flush_mmu+0x3a3/0x680 [ 424.725300][T17026] tlb_finish_mmu+0xd4/0x200 [ 424.729871][T17026] exit_mmap+0x496/0xc40 [ 424.734117][T17026] __mmput+0x115/0x390 [ 424.738169][T17026] exit_mm+0x220/0x310 [ 424.742256][T17026] do_exit+0x9b2/0x28e0 [ 424.746392][T17026] do_group_exit+0x207/0x2c0 [ 424.750979][T17026] get_signal+0x16a3/0x1740 [ 424.755467][T17026] arch_do_signal_or_restart+0x96/0x860 [ 424.761029][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 424.766583][T17026] do_syscall_64+0x100/0x230 [ 424.771196][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.777087][T17026] Modules linked in: [ 424.781001][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 424.793246][T17026] Tainted: [B]=BAD_PAGE [ 424.797374][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.807412][T17026] Call Trace: [ 424.810678][T17026] [ 424.813592][T17026] dump_stack_lvl+0x241/0x360 [ 424.818250][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.823432][T17026] ? __pfx_print_modules+0x10/0x10 [ 424.828529][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 424.834414][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.840744][T17026] bad_page+0x166/0x1b0 [ 424.845068][T17026] free_unref_page+0xed0/0xf20 [ 424.849822][T17026] skb_release_data+0x6dc/0x8a0 [ 424.854674][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 424.859687][T17026] packet_rcv+0x16f/0x14b0 [ 424.864097][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 424.868961][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 424.874963][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 424.881471][T17026] ? read_tsc+0x9/0x20 [ 424.885540][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 424.890739][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 424.897062][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 424.903214][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 424.909532][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 424.916198][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 424.921390][T17026] ? __phys_addr+0xba/0x170 [ 424.925884][T17026] ? build_skb_around+0x111/0x260 [ 424.930913][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 424.936815][T17026] netif_receive_skb_list+0x55/0x4b0 [ 424.942109][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 424.947571][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 424.953469][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 424.959018][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 424.964824][T17026] ? synchronize_rcu+0x11b/0x360 [ 424.969755][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 424.975040][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 424.981279][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 424.987168][T17026] ? _copy_from_user+0xa6/0xe0 [ 424.991925][T17026] ? bpf_test_init+0x15a/0x180 [ 424.996684][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 425.002140][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 425.007511][T17026] ? __pfx_lock_release+0x10/0x10 [ 425.012534][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.018338][T17026] ? __fget_files+0x29/0x470 [ 425.022923][T17026] ? fput+0x1a8/0x230 [ 425.026897][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.032700][T17026] bpf_prog_test_run+0x2e4/0x360 [ 425.037633][T17026] __sys_bpf+0x48d/0x810 [ 425.041868][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 425.046737][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.052713][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 425.059040][T17026] ? do_syscall_64+0x100/0x230 [ 425.063796][T17026] __x64_sys_bpf+0x7c/0x90 [ 425.068230][T17026] do_syscall_64+0xf3/0x230 [ 425.073172][T17026] ? clear_bhb_loop+0x35/0x90 [ 425.077860][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.083767][T17026] RIP: 0033:0x7f73cc37dff9 [ 425.088190][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.107806][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.116231][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 425.124207][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 425.132173][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 425.140225][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.148186][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 425.156163][T17026] [ 425.159270][T17026] BUG: Bad page state in process syz.2.3263 pfn:272b1 [ 425.166176][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880272b1780 pfn:0x272b1 [ 425.176274][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 425.183432][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 425.192048][T17026] raw: ffff8880272b1780 0000000000000001 00000000ffffffff 0000000000000000 [ 425.200648][T17026] page dumped because: page_pool leak [ 425.206010][T17026] page_owner tracks the page as allocated [ 425.211731][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540270746, free_ts 421329146432 [ 425.228930][T17026] post_alloc_hook+0x1f3/0x230 [ 425.233711][T17026] get_page_from_freelist+0x3045/0x3190 [ 425.239246][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 425.244450][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 425.249905][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 425.255806][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 425.261025][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 425.266407][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 425.271799][T17026] bpf_prog_test_run+0x2e4/0x360 [ 425.276742][T17026] __sys_bpf+0x48d/0x810 [ 425.281011][T17026] __x64_sys_bpf+0x7c/0x90 [ 425.285432][T17026] do_syscall_64+0xf3/0x230 [ 425.289922][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.295840][T17026] page last free pid 17017 tgid 17016 stack trace: [ 425.302393][T17026] free_unref_folios+0xf12/0x18d0 [ 425.307439][T17026] folios_put_refs+0x76c/0x860 [ 425.312211][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 425.317841][T17026] tlb_flush_mmu+0x3a3/0x680 [ 425.322440][T17026] tlb_finish_mmu+0xd4/0x200 [ 425.327013][T17026] exit_mmap+0x496/0xc40 [ 425.331255][T17026] __mmput+0x115/0x390 [ 425.335307][T17026] exit_mm+0x220/0x310 [ 425.339364][T17026] do_exit+0x9b2/0x28e0 [ 425.343525][T17026] do_group_exit+0x207/0x2c0 [ 425.348093][T17026] get_signal+0x16a3/0x1740 [ 425.352595][T17026] arch_do_signal_or_restart+0x96/0x860 [ 425.358124][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 425.363677][T17026] do_syscall_64+0x100/0x230 [ 425.368247][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.374147][T17026] Modules linked in: [ 425.378041][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 425.390287][T17026] Tainted: [B]=BAD_PAGE [ 425.394439][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 425.404525][T17026] Call Trace: [ 425.407805][T17026] [ 425.410733][T17026] dump_stack_lvl+0x241/0x360 [ 425.415412][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.420607][T17026] ? __pfx_print_modules+0x10/0x10 [ 425.425719][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 425.431635][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.437971][T17026] bad_page+0x166/0x1b0 [ 425.442214][T17026] free_unref_page+0xed0/0xf20 [ 425.446979][T17026] skb_release_data+0x6dc/0x8a0 [ 425.451913][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 425.456944][T17026] packet_rcv+0x16f/0x14b0 [ 425.461359][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 425.466202][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 425.472187][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 425.478688][T17026] ? read_tsc+0x9/0x20 [ 425.482763][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 425.487957][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 425.494277][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 425.500428][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 425.506751][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 425.513458][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 425.518655][T17026] ? __phys_addr+0xba/0x170 [ 425.523149][T17026] ? build_skb_around+0x111/0x260 [ 425.528162][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 425.534050][T17026] netif_receive_skb_list+0x55/0x4b0 [ 425.539356][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 425.544833][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 425.550739][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 425.556289][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 425.562301][T17026] ? synchronize_rcu+0x11b/0x360 [ 425.567233][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 425.572519][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 425.578759][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 425.584646][T17026] ? _copy_from_user+0xa6/0xe0 [ 425.589410][T17026] ? bpf_test_init+0x15a/0x180 [ 425.594260][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 425.599723][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 425.605097][T17026] ? __pfx_lock_release+0x10/0x10 [ 425.610123][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.615922][T17026] ? __fget_files+0x29/0x470 [ 425.620510][T17026] ? fput+0x1a8/0x230 [ 425.624488][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 425.630293][T17026] bpf_prog_test_run+0x2e4/0x360 [ 425.635226][T17026] __sys_bpf+0x48d/0x810 [ 425.639458][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 425.644218][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.650280][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 425.656692][T17026] ? do_syscall_64+0x100/0x230 [ 425.661447][T17026] __x64_sys_bpf+0x7c/0x90 [ 425.665865][T17026] do_syscall_64+0xf3/0x230 [ 425.670366][T17026] ? clear_bhb_loop+0x35/0x90 [ 425.675035][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.680928][T17026] RIP: 0033:0x7f73cc37dff9 [ 425.685331][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.704929][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.713336][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 425.721390][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 425.729350][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 425.737310][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.746484][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 425.754466][T17026] [ 425.757555][T17026] BUG: Bad page state in process syz.2.3263 pfn:531dd [ 425.764448][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880531dd3c0 pfn:0x531dd [ 425.774542][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 425.781692][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 425.790392][T17026] raw: ffff8880531dd3c0 0000000000000001 00000000ffffffff 0000000000000000 [ 425.798968][T17026] page dumped because: page_pool leak [ 425.804335][T17026] page_owner tracks the page as allocated [ 425.810024][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540259420, free_ts 421329155564 [ 425.827229][T17026] post_alloc_hook+0x1f3/0x230 [ 425.832023][T17026] get_page_from_freelist+0x3045/0x3190 [ 425.837571][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 425.842766][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 425.848205][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 425.854118][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 425.862660][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 425.869845][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 425.875230][T17026] bpf_prog_test_run+0x2e4/0x360 [ 425.880196][T17026] __sys_bpf+0x48d/0x810 [ 425.884429][T17026] __x64_sys_bpf+0x7c/0x90 [ 425.888824][T17026] do_syscall_64+0xf3/0x230 [ 425.893371][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.899309][T17026] page last free pid 17017 tgid 17016 stack trace: [ 425.905821][T17026] free_unref_folios+0xf12/0x18d0 [ 425.910868][T17026] folios_put_refs+0x76c/0x860 [ 425.915640][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 425.921371][T17026] tlb_flush_mmu+0x3a3/0x680 [ 425.925948][T17026] tlb_finish_mmu+0xd4/0x200 [ 425.930560][T17026] exit_mmap+0x496/0xc40 [ 425.934805][T17026] __mmput+0x115/0x390 [ 425.938857][T17026] exit_mm+0x220/0x310 [ 425.942936][T17026] do_exit+0x9b2/0x28e0 [ 425.947082][T17026] do_group_exit+0x207/0x2c0 [ 425.951694][T17026] get_signal+0x16a3/0x1740 [ 425.956214][T17026] arch_do_signal_or_restart+0x96/0x860 [ 425.961808][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 425.967361][T17026] do_syscall_64+0x100/0x230 [ 425.971967][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.978068][T17026] Modules linked in: [ 425.981970][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 425.994400][T17026] Tainted: [B]=BAD_PAGE [ 425.998544][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 426.008584][T17026] Call Trace: [ 426.011867][T17026] [ 426.014793][T17026] dump_stack_lvl+0x241/0x360 [ 426.019463][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.024643][T17026] ? __pfx_print_modules+0x10/0x10 [ 426.029827][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 426.035710][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.042026][T17026] bad_page+0x166/0x1b0 [ 426.046165][T17026] free_unref_page+0xed0/0xf20 [ 426.050925][T17026] skb_release_data+0x6dc/0x8a0 [ 426.055782][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 426.060795][T17026] packet_rcv+0x16f/0x14b0 [ 426.065207][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 426.070059][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 426.076092][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 426.082611][T17026] ? read_tsc+0x9/0x20 [ 426.086689][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 426.091894][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 426.098229][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 426.104385][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 426.110710][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 426.117376][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 426.122566][T17026] ? __phys_addr+0xba/0x170 [ 426.127063][T17026] ? build_skb_around+0x111/0x260 [ 426.132090][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 426.138007][T17026] netif_receive_skb_list+0x55/0x4b0 [ 426.143289][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 426.148749][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 426.154659][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 426.160226][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 426.166202][T17026] ? synchronize_rcu+0x11b/0x360 [ 426.171132][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 426.176416][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 426.182655][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 426.188544][T17026] ? _copy_from_user+0xa6/0xe0 [ 426.193305][T17026] ? bpf_test_init+0x15a/0x180 [ 426.198063][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 426.203519][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 426.208939][T17026] ? __pfx_lock_release+0x10/0x10 [ 426.214010][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 426.219826][T17026] ? __fget_files+0x29/0x470 [ 426.224446][T17026] ? fput+0x1a8/0x230 [ 426.228432][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 426.234253][T17026] bpf_prog_test_run+0x2e4/0x360 [ 426.239201][T17026] __sys_bpf+0x48d/0x810 [ 426.243446][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 426.248242][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.254253][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.260603][T17026] ? do_syscall_64+0x100/0x230 [ 426.265379][T17026] __x64_sys_bpf+0x7c/0x90 [ 426.269801][T17026] do_syscall_64+0xf3/0x230 [ 426.274305][T17026] ? clear_bhb_loop+0x35/0x90 [ 426.278980][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.284872][T17026] RIP: 0033:0x7f73cc37dff9 [ 426.289302][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.308918][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.317333][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 426.325300][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 426.333294][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 426.341257][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.349223][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 426.357196][T17026] [ 426.360293][T17026] BUG: Bad page state in process syz.2.3263 pfn:5f964 [ 426.367165][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f964c80 pfn:0x5f964 [ 426.377275][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 426.384421][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 426.393011][T17026] raw: ffff88805f964c80 0000000000000001 00000000ffffffff 0000000000000000 [ 426.401608][T17026] page dumped because: page_pool leak [ 426.406973][T17026] page_owner tracks the page as allocated [ 426.412707][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540247706, free_ts 421329164398 [ 426.429905][T17026] post_alloc_hook+0x1f3/0x230 [ 426.434676][T17026] get_page_from_freelist+0x3045/0x3190 [ 426.440237][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 426.445441][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 426.450906][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 426.456796][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 426.462123][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 426.467513][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 426.472901][T17026] bpf_prog_test_run+0x2e4/0x360 [ 426.477838][T17026] __sys_bpf+0x48d/0x810 [ 426.482101][T17026] __x64_sys_bpf+0x7c/0x90 [ 426.486517][T17026] do_syscall_64+0xf3/0x230 [ 426.491043][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.496923][T17026] page last free pid 17017 tgid 17016 stack trace: [ 426.503419][T17026] free_unref_folios+0xf12/0x18d0 [ 426.508422][T17026] folios_put_refs+0x76c/0x860 [ 426.513179][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 426.518791][T17026] tlb_flush_mmu+0x3a3/0x680 [ 426.523392][T17026] tlb_finish_mmu+0xd4/0x200 [ 426.528015][T17026] exit_mmap+0x496/0xc40 [ 426.532254][T17026] __mmput+0x115/0x390 [ 426.536308][T17026] exit_mm+0x220/0x310 [ 426.540392][T17026] do_exit+0x9b2/0x28e0 [ 426.544546][T17026] do_group_exit+0x207/0x2c0 [ 426.549134][T17026] get_signal+0x16a3/0x1740 [ 426.553647][T17026] arch_do_signal_or_restart+0x96/0x860 [ 426.559177][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 426.565251][T17026] do_syscall_64+0x100/0x230 [ 426.569847][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.575782][T17026] Modules linked in: [ 426.579672][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 426.591900][T17026] Tainted: [B]=BAD_PAGE [ 426.596054][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 426.606093][T17026] Call Trace: [ 426.609355][T17026] [ 426.612275][T17026] dump_stack_lvl+0x241/0x360 [ 426.616940][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.622132][T17026] ? __pfx_print_modules+0x10/0x10 [ 426.627253][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 426.633137][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.639450][T17026] bad_page+0x166/0x1b0 [ 426.643596][T17026] free_unref_page+0xed0/0xf20 [ 426.648348][T17026] skb_release_data+0x6dc/0x8a0 [ 426.653184][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 426.658190][T17026] packet_rcv+0x16f/0x14b0 [ 426.662595][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 426.667435][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 426.673401][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 426.679883][T17026] ? read_tsc+0x9/0x20 [ 426.683941][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 426.689140][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 426.695553][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 426.701704][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 426.708023][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 426.714694][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 426.719888][T17026] ? __phys_addr+0xba/0x170 [ 426.724402][T17026] ? build_skb_around+0x111/0x260 [ 426.729444][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 426.735364][T17026] netif_receive_skb_list+0x55/0x4b0 [ 426.740666][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 426.746132][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 426.752033][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 426.757579][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 426.763379][T17026] ? synchronize_rcu+0x11b/0x360 [ 426.768319][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 426.773604][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 426.779841][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 426.785732][T17026] ? _copy_from_user+0xa6/0xe0 [ 426.790500][T17026] ? bpf_test_init+0x15a/0x180 [ 426.795269][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 426.800724][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 426.806092][T17026] ? __pfx_lock_release+0x10/0x10 [ 426.811138][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 426.816947][T17026] ? __fget_files+0x29/0x470 [ 426.821535][T17026] ? fput+0x1a8/0x230 [ 426.825510][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 426.831315][T17026] bpf_prog_test_run+0x2e4/0x360 [ 426.836335][T17026] __sys_bpf+0x48d/0x810 [ 426.840570][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 426.845330][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.851307][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.857631][T17026] ? do_syscall_64+0x100/0x230 [ 426.862499][T17026] __x64_sys_bpf+0x7c/0x90 [ 426.866905][T17026] do_syscall_64+0xf3/0x230 [ 426.871405][T17026] ? clear_bhb_loop+0x35/0x90 [ 426.876076][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.881970][T17026] RIP: 0033:0x7f73cc37dff9 [ 426.886376][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.905973][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.914431][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 426.922423][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 426.930395][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 426.938363][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.946326][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 426.954301][T17026] [ 426.957388][T17026] BUG: Bad page state in process syz.2.3263 pfn:59c79 [ 426.964283][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888059c79dc0 pfn:0x59c79 [ 426.974384][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 426.981542][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 426.990249][T17026] raw: ffff888059c79dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 426.998854][T17026] page dumped because: page_pool leak [ 427.004231][T17026] page_owner tracks the page as allocated [ 427.009964][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540236728, free_ts 421329175335 [ 427.027174][T17026] post_alloc_hook+0x1f3/0x230 [ 427.031960][T17026] get_page_from_freelist+0x3045/0x3190 [ 427.037504][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 427.042707][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 427.048156][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 427.054076][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 427.059271][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 427.064743][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 427.070126][T17026] bpf_prog_test_run+0x2e4/0x360 [ 427.075094][T17026] __sys_bpf+0x48d/0x810 [ 427.079343][T17026] __x64_sys_bpf+0x7c/0x90 [ 427.083789][T17026] do_syscall_64+0xf3/0x230 [ 427.088279][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.094222][T17026] page last free pid 17017 tgid 17016 stack trace: [ 427.100756][T17026] free_unref_folios+0xf12/0x18d0 [ 427.105788][T17026] folios_put_refs+0x76c/0x860 [ 427.110586][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 427.116248][T17026] tlb_flush_mmu+0x3a3/0x680 [ 427.120912][T17026] tlb_finish_mmu+0xd4/0x200 [ 427.125515][T17026] exit_mmap+0x496/0xc40 [ 427.129761][T17026] __mmput+0x115/0x390 [ 427.133869][T17026] exit_mm+0x220/0x310 [ 427.137971][T17026] do_exit+0x9b2/0x28e0 [ 427.142155][T17026] do_group_exit+0x207/0x2c0 [ 427.146775][T17026] get_signal+0x16a3/0x1740 [ 427.151326][T17026] arch_do_signal_or_restart+0x96/0x860 [ 427.156860][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 427.162420][T17026] do_syscall_64+0x100/0x230 [ 427.166995][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.172929][T17026] Modules linked in: [ 427.176824][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 427.189064][T17026] Tainted: [B]=BAD_PAGE [ 427.193208][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.203262][T17026] Call Trace: [ 427.206559][T17026] [ 427.209498][T17026] dump_stack_lvl+0x241/0x360 [ 427.214165][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.219400][T17026] ? __pfx_print_modules+0x10/0x10 [ 427.224518][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 427.230412][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 427.236753][T17026] bad_page+0x166/0x1b0 [ 427.240915][T17026] free_unref_page+0xed0/0xf20 [ 427.245693][T17026] skb_release_data+0x6dc/0x8a0 [ 427.250558][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 427.255619][T17026] packet_rcv+0x16f/0x14b0 [ 427.260130][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 427.264979][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 427.270994][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 427.277506][T17026] ? read_tsc+0x9/0x20 [ 427.281572][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 427.286772][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 427.293095][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 427.299265][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 427.305585][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 427.312255][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 427.317443][T17026] ? __phys_addr+0xba/0x170 [ 427.321940][T17026] ? build_skb_around+0x111/0x260 [ 427.326955][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 427.332843][T17026] netif_receive_skb_list+0x55/0x4b0 [ 427.338124][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 427.343580][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 427.349472][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 427.355013][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 427.360823][T17026] ? synchronize_rcu+0x11b/0x360 [ 427.365754][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 427.371038][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 427.377276][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 427.383164][T17026] ? _copy_from_user+0xa6/0xe0 [ 427.387953][T17026] ? bpf_test_init+0x15a/0x180 [ 427.392713][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 427.398169][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 427.403541][T17026] ? __pfx_lock_release+0x10/0x10 [ 427.408653][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 427.414457][T17026] ? __fget_files+0x29/0x470 [ 427.419044][T17026] ? fput+0x1a8/0x230 [ 427.423029][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 427.428835][T17026] bpf_prog_test_run+0x2e4/0x360 [ 427.433780][T17026] __sys_bpf+0x48d/0x810 [ 427.438024][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 427.442788][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 427.448764][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.455089][T17026] ? do_syscall_64+0x100/0x230 [ 427.459844][T17026] __x64_sys_bpf+0x7c/0x90 [ 427.464252][T17026] do_syscall_64+0xf3/0x230 [ 427.468742][T17026] ? clear_bhb_loop+0x35/0x90 [ 427.473413][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.479303][T17026] RIP: 0033:0x7f73cc37dff9 [ 427.483708][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.503313][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.511723][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 427.519682][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 427.527642][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 427.535602][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.543562][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 427.551530][T17026] [ 427.554626][T17026] BUG: Bad page state in process syz.2.3263 pfn:4ce67 [ 427.561521][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804ce67f00 pfn:0x4ce67 [ 427.571615][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 427.578738][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 427.587353][T17026] raw: ffff88804ce67f00 0000000000000001 00000000ffffffff 0000000000000000 [ 427.595948][T17026] page dumped because: page_pool leak [ 427.601317][T17026] page_owner tracks the page as allocated [ 427.607010][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540226473, free_ts 421329183776 [ 427.624215][T17026] post_alloc_hook+0x1f3/0x230 [ 427.628975][T17026] get_page_from_freelist+0x3045/0x3190 [ 427.634556][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 427.639738][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 427.645195][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 427.651110][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 427.656313][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 427.661691][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 427.667057][T17026] bpf_prog_test_run+0x2e4/0x360 [ 427.672018][T17026] __sys_bpf+0x48d/0x810 [ 427.676266][T17026] __x64_sys_bpf+0x7c/0x90 [ 427.680710][T17026] do_syscall_64+0xf3/0x230 [ 427.685211][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.691124][T17026] page last free pid 17017 tgid 17016 stack trace: [ 427.697630][T17026] free_unref_folios+0xf12/0x18d0 [ 427.702682][T17026] folios_put_refs+0x76c/0x860 [ 427.707444][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 427.713102][T17026] tlb_flush_mmu+0x3a3/0x680 [ 427.717675][T17026] tlb_finish_mmu+0xd4/0x200 [ 427.722264][T17026] exit_mmap+0x496/0xc40 [ 427.726486][T17026] __mmput+0x115/0x390 [ 427.730577][T17026] exit_mm+0x220/0x310 [ 427.734648][T17026] do_exit+0x9b2/0x28e0 [ 427.738788][T17026] do_group_exit+0x207/0x2c0 [ 427.743380][T17026] get_signal+0x16a3/0x1740 [ 427.747868][T17026] arch_do_signal_or_restart+0x96/0x860 [ 427.753421][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 427.758953][T17026] do_syscall_64+0x100/0x230 [ 427.763539][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.769419][T17026] Modules linked in: [ 427.773316][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 427.785535][T17026] Tainted: [B]=BAD_PAGE [ 427.789667][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 427.799707][T17026] Call Trace: [ 427.802971][T17026] [ 427.805886][T17026] dump_stack_lvl+0x241/0x360 [ 427.810558][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.815758][T17026] ? __pfx_print_modules+0x10/0x10 [ 427.820871][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 427.826762][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 427.833089][T17026] bad_page+0x166/0x1b0 [ 427.837241][T17026] free_unref_page+0xed0/0xf20 [ 427.842010][T17026] skb_release_data+0x6dc/0x8a0 [ 427.846860][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 427.851908][T17026] packet_rcv+0x16f/0x14b0 [ 427.856320][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 427.861167][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 427.867153][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 427.873648][T17026] ? read_tsc+0x9/0x20 [ 427.877711][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 427.882905][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 427.889225][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 427.895372][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 427.901693][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 427.908449][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 427.913641][T17026] ? __phys_addr+0xba/0x170 [ 427.918135][T17026] ? build_skb_around+0x111/0x260 [ 427.923173][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 427.929061][T17026] netif_receive_skb_list+0x55/0x4b0 [ 427.934350][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 427.939823][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 427.945717][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 427.951263][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 427.957093][T17026] ? synchronize_rcu+0x11b/0x360 [ 427.962037][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 427.967321][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 427.973556][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 427.979445][T17026] ? _copy_from_user+0xa6/0xe0 [ 427.984203][T17026] ? bpf_test_init+0x15a/0x180 [ 427.988982][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 427.994442][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 427.999913][T17026] ? __pfx_lock_release+0x10/0x10 [ 428.004942][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.010750][T17026] ? __fget_files+0x29/0x470 [ 428.015336][T17026] ? fput+0x1a8/0x230 [ 428.019310][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.025113][T17026] bpf_prog_test_run+0x2e4/0x360 [ 428.030044][T17026] __sys_bpf+0x48d/0x810 [ 428.034287][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 428.039049][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.045027][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.051350][T17026] ? do_syscall_64+0x100/0x230 [ 428.056106][T17026] __x64_sys_bpf+0x7c/0x90 [ 428.060514][T17026] do_syscall_64+0xf3/0x230 [ 428.065025][T17026] ? clear_bhb_loop+0x35/0x90 [ 428.069725][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.075639][T17026] RIP: 0033:0x7f73cc37dff9 [ 428.080065][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.099671][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.108083][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 428.116048][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 428.124011][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 428.131976][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.139936][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 428.147907][T17026] [ 428.150992][T17026] BUG: Bad page state in process syz.2.3263 pfn:595f0 [ 428.157909][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880595f0a50 pfn:0x595f0 [ 428.168029][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 428.175178][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 428.183760][T17026] raw: ffff8880595f0a50 0000000000000001 00000000ffffffff 0000000000000000 [ 428.192348][T17026] page dumped because: page_pool leak [ 428.197713][T17026] page_owner tracks the page as allocated [ 428.203450][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540215317, free_ts 421329192499 [ 428.220664][T17026] post_alloc_hook+0x1f3/0x230 [ 428.225420][T17026] get_page_from_freelist+0x3045/0x3190 [ 428.230991][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 428.236194][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 428.241674][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 428.247566][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 428.252800][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 428.258179][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 428.263580][T17026] bpf_prog_test_run+0x2e4/0x360 [ 428.268518][T17026] __sys_bpf+0x48d/0x810 [ 428.272798][T17026] __x64_sys_bpf+0x7c/0x90 [ 428.277220][T17026] do_syscall_64+0xf3/0x230 [ 428.281751][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.287670][T17026] page last free pid 17017 tgid 17016 stack trace: [ 428.294174][T17026] free_unref_folios+0xf12/0x18d0 [ 428.299178][T17026] folios_put_refs+0x76c/0x860 [ 428.303936][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 428.309564][T17026] tlb_flush_mmu+0x3a3/0x680 [ 428.314189][T17026] tlb_finish_mmu+0xd4/0x200 [ 428.318780][T17026] exit_mmap+0x496/0xc40 [ 428.323057][T17026] __mmput+0x115/0x390 [ 428.327130][T17026] exit_mm+0x220/0x310 [ 428.331214][T17026] do_exit+0x9b2/0x28e0 [ 428.335382][T17026] do_group_exit+0x207/0x2c0 [ 428.339967][T17026] get_signal+0x16a3/0x1740 [ 428.344469][T17026] arch_do_signal_or_restart+0x96/0x860 [ 428.350114][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 428.355666][T17026] do_syscall_64+0x100/0x230 [ 428.360255][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.366138][T17026] Modules linked in: [ 428.370015][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 428.382236][T17026] Tainted: [B]=BAD_PAGE [ 428.386369][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.396413][T17026] Call Trace: [ 428.399678][T17026] [ 428.402594][T17026] dump_stack_lvl+0x241/0x360 [ 428.407255][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.412439][T17026] ? __pfx_print_modules+0x10/0x10 [ 428.417555][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 428.423460][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 428.429793][T17026] bad_page+0x166/0x1b0 [ 428.433947][T17026] free_unref_page+0xed0/0xf20 [ 428.438706][T17026] skb_release_data+0x6dc/0x8a0 [ 428.443551][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 428.448566][T17026] packet_rcv+0x16f/0x14b0 [ 428.452979][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 428.457822][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 428.463803][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 428.470297][T17026] ? read_tsc+0x9/0x20 [ 428.474358][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 428.479550][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 428.485869][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 428.492014][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 428.498335][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 428.505003][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 428.510194][T17026] ? __phys_addr+0xba/0x170 [ 428.514688][T17026] ? build_skb_around+0x111/0x260 [ 428.519702][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 428.525593][T17026] netif_receive_skb_list+0x55/0x4b0 [ 428.530889][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 428.536341][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 428.542234][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 428.547780][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 428.553583][T17026] ? synchronize_rcu+0x11b/0x360 [ 428.558514][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 428.563798][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 428.570036][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 428.575939][T17026] ? _copy_from_user+0xa6/0xe0 [ 428.580698][T17026] ? bpf_test_init+0x15a/0x180 [ 428.585454][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 428.590910][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 428.596279][T17026] ? __pfx_lock_release+0x10/0x10 [ 428.601391][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.607200][T17026] ? __fget_files+0x29/0x470 [ 428.611786][T17026] ? fput+0x1a8/0x230 [ 428.615774][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 428.621578][T17026] bpf_prog_test_run+0x2e4/0x360 [ 428.626520][T17026] __sys_bpf+0x48d/0x810 [ 428.630771][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 428.635532][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 428.641525][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.647884][T17026] ? do_syscall_64+0x100/0x230 [ 428.652652][T17026] __x64_sys_bpf+0x7c/0x90 [ 428.657097][T17026] do_syscall_64+0xf3/0x230 [ 428.661596][T17026] ? clear_bhb_loop+0x35/0x90 [ 428.666267][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.672159][T17026] RIP: 0033:0x7f73cc37dff9 [ 428.676567][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.696182][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.704614][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 428.712583][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 428.720548][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 428.728508][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.736467][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 428.744435][T17026] [ 428.747529][T17026] BUG: Bad page state in process syz.2.3263 pfn:24404 [ 428.754424][T17026] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024404f00 pfn:0x24404 [ 428.764522][T17026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 428.771676][T17026] raw: 00fff00000000000 dead000000000040 ffff888063d4e000 0000000000000000 [ 428.780291][T17026] raw: ffff888024404f00 0000000000000001 00000000ffffffff 0000000000000000 [ 428.788880][T17026] page dumped because: page_pool leak [ 428.794247][T17026] page_owner tracks the page as allocated [ 428.799938][T17026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 17026, tgid 17025 (syz.2.3263), ts 421540204554, free_ts 421329201584 [ 428.817152][T17026] post_alloc_hook+0x1f3/0x230 [ 428.821946][T17026] get_page_from_freelist+0x3045/0x3190 [ 428.827481][T17026] __alloc_pages_noprof+0x256/0x6c0 [ 428.832676][T17026] alloc_pages_bulk_noprof+0x729/0xd40 [ 428.838117][T17026] __page_pool_alloc_pages_slow+0x122/0x690 [ 428.844017][T17026] page_pool_alloc_pages+0xd0/0x1c0 [ 428.849199][T17026] bpf_test_run_xdp_live+0x950/0x2160 [ 428.854572][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 428.859930][T17026] bpf_prog_test_run+0x2e4/0x360 [ 428.864890][T17026] __sys_bpf+0x48d/0x810 [ 428.869116][T17026] __x64_sys_bpf+0x7c/0x90 [ 428.873543][T17026] do_syscall_64+0xf3/0x230 [ 428.878046][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.883968][T17026] page last free pid 17017 tgid 17016 stack trace: [ 428.890497][T17026] free_unref_folios+0xf12/0x18d0 [ 428.895504][T17026] folios_put_refs+0x76c/0x860 [ 428.900294][T17026] free_pages_and_swap_cache+0x5c8/0x690 [ 428.905941][T17026] tlb_flush_mmu+0x3a3/0x680 [ 428.910544][T17026] tlb_finish_mmu+0xd4/0x200 [ 428.915121][T17026] exit_mmap+0x496/0xc40 [ 428.919361][T17026] __mmput+0x115/0x390 [ 428.923462][T17026] exit_mm+0x220/0x310 [ 428.927530][T17026] do_exit+0x9b2/0x28e0 [ 428.931687][T17026] do_group_exit+0x207/0x2c0 [ 428.936259][T17026] get_signal+0x16a3/0x1740 [ 428.940783][T17026] arch_do_signal_or_restart+0x96/0x860 [ 428.946335][T17026] syscall_exit_to_user_mode+0xc9/0x370 [ 428.951887][T17026] do_syscall_64+0x100/0x230 [ 428.956459][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.962363][T17026] Modules linked in: [ 428.966242][T17026] CPU: 1 UID: 0 PID: 17026 Comm: syz.2.3263 Tainted: G B 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 428.978483][T17026] Tainted: [B]=BAD_PAGE [ 428.982620][T17026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.992658][T17026] Call Trace: [ 428.995919][T17026] [ 428.998831][T17026] dump_stack_lvl+0x241/0x360 [ 429.003497][T17026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.008674][T17026] ? __pfx_print_modules+0x10/0x10 [ 429.013771][T17026] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 429.019654][T17026] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 429.025999][T17026] bad_page+0x166/0x1b0 [ 429.030160][T17026] free_unref_page+0xed0/0xf20 [ 429.034938][T17026] skb_release_data+0x6dc/0x8a0 [ 429.039804][T17026] sk_skb_reason_drop+0x1c9/0x380 [ 429.044847][T17026] packet_rcv+0x16f/0x14b0 [ 429.049292][T17026] ? __pfx_packet_rcv+0x10/0x10 [ 429.054153][T17026] __netif_receive_skb_list_core+0x4ed/0x980 [ 429.060146][T17026] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 429.066667][T17026] ? read_tsc+0x9/0x20 [ 429.070795][T17026] ? timekeeping_get_ns+0x2c0/0x420 [ 429.076030][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 429.082368][T17026] netif_receive_skb_list_internal+0xa51/0xe30 [ 429.088527][T17026] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 429.094859][T17026] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 429.101530][T17026] ? __pfx_eth_type_trans+0x10/0x10 [ 429.106745][T17026] ? __phys_addr+0xba/0x170 [ 429.111243][T17026] ? build_skb_around+0x111/0x260 [ 429.116259][T17026] ? __xdp_build_skb_from_frame+0x313/0x650 [ 429.122234][T17026] netif_receive_skb_list+0x55/0x4b0 [ 429.127513][T17026] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 429.133064][T17026] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 429.138979][T17026] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 429.144526][T17026] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 429.150328][T17026] ? synchronize_rcu+0x11b/0x360 [ 429.155264][T17026] ? __pfx_synchronize_rcu+0x10/0x10 [ 429.160568][T17026] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 429.166806][T17026] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 429.172783][T17026] ? _copy_from_user+0xa6/0xe0 [ 429.177541][T17026] ? bpf_test_init+0x15a/0x180 [ 429.182388][T17026] ? xdp_convert_md_to_buff+0x5b/0x330 [ 429.187840][T17026] bpf_prog_test_run_xdp+0x805/0x11e0 [ 429.193211][T17026] ? __pfx_lock_release+0x10/0x10 [ 429.198233][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 429.204033][T17026] ? __fget_files+0x29/0x470 [ 429.208618][T17026] ? fput+0x1a8/0x230 [ 429.212593][T17026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 429.218392][T17026] bpf_prog_test_run+0x2e4/0x360 [ 429.223327][T17026] __sys_bpf+0x48d/0x810 [ 429.227565][T17026] ? __pfx___sys_bpf+0x10/0x10 [ 429.232326][T17026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 429.238303][T17026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.244712][T17026] ? do_syscall_64+0x100/0x230 [ 429.249471][T17026] __x64_sys_bpf+0x7c/0x90 [ 429.253880][T17026] do_syscall_64+0xf3/0x230 [ 429.258372][T17026] ? clear_bhb_loop+0x35/0x90 [ 429.263044][T17026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.268932][T17026] RIP: 0033:0x7f73cc37dff9 [ 429.273339][T17026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.292935][T17026] RSP: 002b:00007f73cd1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.301343][T17026] RAX: ffffffffffffffda RBX: 00007f73cc535f80 RCX: 00007f73cc37dff9 [ 429.309302][T17026] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 429.317259][T17026] RBP: 00007f73cc3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 429.325217][T17026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.333177][T17026] R13: 0000000000000000 R14: 00007f73cc535f80 R15: 00007ffdee934cd8 [ 429.341145][T17026] [ 429.962037][ T6399] bridge_slave_1: left allmulticast mode [ 429.967686][ T6399] bridge_slave_1: left promiscuous mode [ 429.973734][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.981658][ T6399] bridge_slave_0: left allmulticast mode [ 429.987292][ T6399] bridge_slave_0: left promiscuous mode [ 429.993380][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.046221][ T6399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.056766][ T6399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.066641][ T6399] bond0 (unregistering): Released all slaves [ 430.174224][ T6399] hsr_slave_0: left promiscuous mode [ 430.180114][ T6399] hsr_slave_1: left promiscuous mode [ 430.185901][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.193895][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.278475][ T6399] team0 (unregistering): Port device team_slave_1 removed [ 430.304591][ T6399] team0 (unregistering): Port device team_slave_0 removed [ 430.831463][ T6399] bridge_slave_1: left allmulticast mode [ 430.837116][ T6399] bridge_slave_1: left promiscuous mode [ 430.842926][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.850849][ T6399] bridge_slave_0: left allmulticast mode [ 430.856481][ T6399] bridge_slave_0: left promiscuous mode [ 430.862836][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.954544][ T6399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.964948][ T6399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.974734][ T6399] bond0 (unregistering): Released all slaves [ 431.053185][ T6399] hsr_slave_0: left promiscuous mode [ 431.058880][ T6399] hsr_slave_1: left promiscuous mode [ 431.064676][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.074817][ T6399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.156768][ T6399] team0 (unregistering): Port device team_slave_1 removed [ 431.182067][ T6399] team0 (unregistering): Port device team_slave_0 removed