last executing test programs: 2.710950076s ago: executing program 4 (id=129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000240), 0x4) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/59, 0x8}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @multicast1=0xe0000300}, 0x10) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 2.290297241s ago: executing program 1 (id=130): socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x40000000015, 0x805, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000009c0)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eabeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c139b1f", 0x35}], 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=@newtfilter={0x2bc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x284, 0x2, [@TCA_FLOW_EMATCHES={0x280, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x20, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x1}, "ed09000044cfb92ef6629151c4c3314200"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb8, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x7}, "0e887e3174c9ba846637edad004e88480ceb3ba83fe627ddec02d71469f46a71ed307ff97180b6cf452a2064eddf1f2c7503ff934449de192a8f10073e146122632b22676eef1f7b072dd70f5a19031ca016ff08f7f2513e0dc244f23de34c2d81781763637c08ae5356421782c3b49f35cbb8bc24aa1ccdd49950d898eece937fa2d8f1f12396735c82642886e28b7fae042f827fb1a2babfeed2af70911e0ca1650f5f01b5814878"}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x100}, {0xfb8}}}]}, @TCA_EMATCH_TREE_LIST={0x16c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x0, 0x0, 0x0, {{0x3}, [@TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="7b647f", @TCF_META_TYPE_VAR="b4c0"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPT={0x13c, 0x0, 0x0, 0x0, {{0x4, 0x9, 0x1586}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xec, 0x5, "032b3848a9735cd2bec360448067edc46ab9354c15e7a57eb0c7492d66daf3246ec59c0082db554e60967abee2d5523a9381f55b1b13e59848d9a7db7d72d7e6f2860d8385b336b03e4b963205dc191f255632fb23f1cefc57dd0ac8b88d352b1954fbc0a5fd20a2f59e758232948d920ca127b50c100b94e66b50c55cf6d0f012b158c6acb376f62e38c08ab88e4c7ff08221e8673b3d4d63cac6e202076ad4893295a863d0ed93b0a39fca64e96c7285ac107f3dbf7d3660700bb76487d9e05bf2eac52f52ce087c8bce46fafdb74968263fbf888787f29f59a8a20d92335511961622f49ad623"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4a}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2bc}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000006c0)=0x100000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x30) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x885}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 2.021170137s ago: executing program 4 (id=132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64=r4], 0x40}}, 0x0) 1.970273041s ago: executing program 3 (id=133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000406000000000000000050ecac7b44ac9500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000001700)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x8, 'macvlan0\x00'}) 1.889543267s ago: executing program 0 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xf9, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x480c0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00fc00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0xfffffffffffffdfb, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}]}}}]}, 0x48}}, 0x0) 1.814324525s ago: executing program 3 (id=135): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000140)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r3, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}}, 0x0) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad89000000000018000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x10000000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800d20000", @ANYRES16=r2, @ANYBLOB="010000000000000000003800000008000300", @ANYRES32, @ANYBLOB="0c005800feffffffffffffff"], 0x28}}, 0x0) socket$inet6(0xa, 0x4, 0x2f) 1.64829357s ago: executing program 1 (id=136): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/4096, 0x1000}}], 0x1, 0x2000, 0x0) 1.568196281s ago: executing program 0 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x5, 0x0, &(0x7f0000000140)="c33e71922c", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000008c40)={'filter\x00', 0x4, 0x4, 0x3f8, 0x100, 0x200, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0xfe, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010101, @local, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000008940)=0xb, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000090c0)=ANY=[@ANYBLOB="1e00000009000000090000000000000004000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB], 0x50) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xa7, 0x1, 0x0, 0x7, 0x1, 0x75, 0x80000001, {0x0, @in={{0x2, 0x4e23, @local}}, 0x50c, 0x8, 0x2d, 0xa, 0xcdbb}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000780)={0x4a, 0x201, 0x3ac34000, 0x9, 0x0}, &(0x7f0000000280)=0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008ac0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000008bc0)={0x0, 0x0, &(0x7f0000008b80)={&(0x7f0000008b00)={0x14, r8, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1880) r9 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r9, &(0x7f0000008700)=[{{&(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/96, 0x60}], 0x1, &(0x7f0000000500)=""/143, 0x8f}, 0x3}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/91, 0x5b}, {&(0x7f00000005c0)=""/48, 0x30}, {&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000000800)=""/177, 0xb1}, {&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000000980)=""/216, 0xd8}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x7, &(0x7f0000001b00)=""/97, 0x61}, 0xfffffff9}, {{&(0x7f0000001b80)=@can, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/31, 0x1f}, {&(0x7f0000001c40)=""/153, 0x99}, {&(0x7f0000001d00)=""/241, 0xf1}], 0x3, &(0x7f0000001e40)=""/151, 0x97}, 0x6}, {{&(0x7f0000001f00)=@isdn, 0x80, &(0x7f0000002200)=[{&(0x7f0000001f80)=""/96, 0x60}, {&(0x7f0000002000)=""/8, 0x8}, {&(0x7f0000002040)=""/169, 0xa9}, {&(0x7f0000002100)=""/238, 0xee}], 0x4, &(0x7f0000002240)=""/17, 0x11}}, {{&(0x7f0000002280)=@isdn, 0x80, &(0x7f0000002900)=[{&(0x7f0000002300)=""/125, 0x7d}, {&(0x7f0000002380)=""/119, 0x77}, {&(0x7f0000002400)=""/93, 0x5d}, {&(0x7f0000002480)=""/131, 0x83}, {&(0x7f0000002540)=""/217, 0xd9}, {&(0x7f0000002640)=""/96, 0x60}, {&(0x7f00000026c0)=""/89, 0x59}, {&(0x7f0000002740)=""/64, 0x40}, {&(0x7f00000027c0)=""/154, 0x9a}, {&(0x7f0000002880)=""/105, 0x69}], 0xa, &(0x7f00000029c0)=""/143, 0x8f}, 0xe}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000009140)=""/249, 0xf9}, {&(0x7f0000002b80)=""/141, 0x8d}], 0x2, &(0x7f0000002c80)=""/194, 0xc2}, 0x63}, {{&(0x7f0000004e40)=@alg, 0x80, &(0x7f0000008280)=[{&(0x7f0000004ec0)=""/240, 0xf0}, {&(0x7f00000050c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000007200)=""/34, 0x22}, {&(0x7f0000007240)=""/4080, 0xff0}, {&(0x7f0000008240)=""/28, 0x1c}], 0x9}, 0x1}, {{&(0x7f0000008400)=@nfc_llcp, 0x80, &(0x7f0000008640)=[{&(0x7f0000008480)=""/154, 0x9a}, {&(0x7f0000008540)=""/129, 0x81}, {&(0x7f0000008600)=""/53, 0x35}], 0x3, &(0x7f0000008680)=""/93, 0x5d}, 0x281}], 0x8, 0x102, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000008c00)={'veth1_virt_wifi\x00', {0x2, 0x4e23, @loopback}}) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000002c0)={r6, 0x10000, 0x6, 0x31, 0x0, 0x5, 0xce5, 0x4, {r7, @in={{0x2, 0x4e21, @broadcast}}, 0x80000001, 0x9, 0x3, 0x7, 0x1ff}}, &(0x7f0000000380)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x8) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x20040) 1.509035353s ago: executing program 4 (id=138): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x20}}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x1, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @fwd={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xa284fb9bd5e6bb6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc6, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.484570856s ago: executing program 2 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x20}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1.3462439s ago: executing program 1 (id=140): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000540)={0x30, r2, 0xb05, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3b}}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) (fail_nth: 5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0xad) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180), 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0xa207, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0xf00}, 0x4840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x25}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xfffffc01}]}, &(0x7f0000000180)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000004c0)={r9}, &(0x7f0000000000)=0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r6, 0xfffffffffffffeae, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffefb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x54f, '\x00', r10, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x1ff, 0x8}, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32=r11, @ANYBLOB="00000000000000000000000000000000000e0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380), 0x5, r12}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r11, &(0x7f0000000140)="103ad589"}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f0000000300)='6', &(0x7f0000000000), 0x2}, 0x20) 1.336143941s ago: executing program 3 (id=141): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000540)={'ip6erspan0\x00', 0x600}) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100266e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000080"], 0x64}}, 0x24008044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r7}) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000380), &(0x7f0000000400)=0x20) sendmsg$netlink(r0, &(0x7f0000000880), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,', 0x0}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup(r10, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r12, 0x6, 0x4, 0x0, &(0x7f0000000080)=0x4830df4f9c0e264) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc000000000000000000000005000002003e090000"], 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r13, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r11, @ANYBLOB="b5", @ANYRES8=r6, @ANYRESOCT, @ANYRES32=r6, @ANYRES32=0x0, @ANYRESHEX=r9, @ANYRESDEC=r13, @ANYRES32=r1, @ANYBLOB="f155534e1024a35ec9a788698928f6aa9574ad8bc485cb89afd69dfbb6a2f2c2373479c398dd0f3e412eb98934bed4210ad113e58b4de5fcc2c5a0db5fe678e7083478c9076a1c16160c8db1ba0bfcecffff2d0f31650af4332fee0f10554135872731409ce07ff692a30fbc2fe62ed1ee221710928c27498e4fe890c36ddda7aa67a42e4ba00911a5405105f02d7bd35691698fc82f9ef3fe8295998df4e3a84058160a9f55541cf3dc98e0d3f1424cb5eaa2a351014896c9ca4d9d8b"], 0x154}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 973.352588ms ago: executing program 4 (id=142): socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="44007c001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7f7010000000000140012800b0001006d616373656300000404028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 910.362541ms ago: executing program 2 (id=143): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc3ff, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x78, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffff8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4000000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x243, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x78}}, 0x0) 906.780818ms ago: executing program 0 (id=144): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r1) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) accept4$nfc_llcp(r1, &(0x7f0000000440), &(0x7f0000000500)=0x60, 0x800) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000800)=ANY=[@ANYBLOB="0b7c80d0f48366436ff05d42d5443778752f375979beb6b1893e1cc5336ece213e9536c105c689aa90751768b2b89460a981bec8bbcf44c9c28682ba96d8ab73a9ddf615c0c3784a75f5f767e099f586335d85d8220b06a9acbbc18327b004cc439af65add561522af80b6ac5271e82a432a1a68ebe61534662814a6b1143e892b4c6505cf3c873165fba8b111652b19f2a3e0c84e0d420817bd9fe70d0e6100"/171, @ANYRES16=r5, @ANYBLOB="0100000000000000000013000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6e10}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="30000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000000060202c17d5a934718340202020208000c006400000008000d000000000005"], 0x64}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000a}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r8, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}}, 0x40) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010003e033fb000000000a00000000004e2200000000000000000000000000000000000000000a000000c0e1673800000000", @ANYRES32=0x0, @ANYBLOB="01000000ff7f000000000000ff0100000800030011000000"], 0x54}}, 0x40028c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000630124000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000040)=0x6e) 845.174205ms ago: executing program 1 (id=145): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4000, @loopback}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x1405, 0x200, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000) 837.773493ms ago: executing program 4 (id=146): socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x40000000015, 0x805, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000009c0)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eabeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c139b1f", 0x35}], 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=@newtfilter={0x2bc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x284, 0x2, [@TCA_FLOW_EMATCHES={0x280, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x20, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x1}, "ed09000044cfb92ef6629151c4c3314200"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb8, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x7}, "0e887e3174c9ba846637edad004e88480ceb3ba83fe627ddec02d71469f46a71ed307ff97180b6cf452a2064eddf1f2c7503ff934449de192a8f10073e146122632b22676eef1f7b072dd70f5a19031ca016ff08f7f2513e0dc244f23de34c2d81781763637c08ae5356421782c3b49f35cbb8bc24aa1ccdd49950d898eece937fa2d8f1f12396735c82642886e28b7fae042f827fb1a2babfeed2af70911e0ca1650f5f01b5814878"}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x100}, {0xfb8}}}]}, @TCA_EMATCH_TREE_LIST={0x16c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x0, 0x0, 0x0, {{0x3}, [@TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="7b647f", @TCF_META_TYPE_VAR="b4c0"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPT={0x13c, 0x0, 0x0, 0x0, {{0x4, 0x9, 0x1586}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xec, 0x5, "032b3848a9735cd2bec360448067edc46ab9354c15e7a57eb0c7492d66daf3246ec59c0082db554e60967abee2d5523a9381f55b1b13e59848d9a7db7d72d7e6f2860d8385b336b03e4b963205dc191f255632fb23f1cefc57dd0ac8b88d352b1954fbc0a5fd20a2f59e758232948d920ca127b50c100b94e66b50c55cf6d0f012b158c6acb376f62e38c08ab88e4c7ff08221e8673b3d4d63cac6e202076ad4893295a863d0ed93b0a39fca64e96c7285ac107f3dbf7d3660700bb76487d9e05bf2eac52f52ce087c8bce46fafdb74968263fbf888787f29f59a8a20d92335511961622f49ad623"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4a}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2bc}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'veth1_to_team\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000006c0)=0x100000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000200)=0x30) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000"], 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x885}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 758.983078ms ago: executing program 3 (id=147): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100004e20502500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x1b}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xb0}}, 0x0) 650.418006ms ago: executing program 0 (id=148): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='tlb_flush\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r1, 0xffff220c11000000) 650.119053ms ago: executing program 2 (id=149): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000005180)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x1000000}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029"], 0x30}}], 0x2, 0x0) 534.37288ms ago: executing program 1 (id=150): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=""/4096, 0x1000}}], 0x1, 0x2000, 0x0) 509.35384ms ago: executing program 3 (id=151): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x2f}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty, 0x64}, 0x1c, 0x0}}], 0x1, 0x0) 497.601069ms ago: executing program 2 (id=152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, 0x0, 0xf23e37f228e7f8aa, 0x6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x4}]}}}]}, 0x3c}}, 0x40004) 378.438839ms ago: executing program 0 (id=153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 376.797259ms ago: executing program 1 (id=154): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) unshare(0x22020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r5, &(0x7f00000003c0)=@abs={0x1}, 0x2) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000001f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200, 0x7, 0x2}}, @authinfo={0x12, 0x84, 0x6, {0x7}}], 0x38, 0x80}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000003380)=ANY=[@ANYBLOB="804f0000", @ANYRES16=r7, @ANYBLOB="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"], 0x4f80}, 0x1, 0x0, 0x0, 0x44801}, 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r10 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r10, 0x0, 0x0, 0x0) 302.011979ms ago: executing program 3 (id=155): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESHEX=r3, @ANYRES64=r3], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x18, &(0x7f0000000000)=""/24, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000380), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000cc0)="02"}, 0x20) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) accept(r8, &(0x7f0000000440)=@in={0x2, 0x0, @local}, &(0x7f0000000580)=0x80) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000380), &(0x7f00000003c0)=0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x3, 0x18}, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000d00)) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d8c795dd0ab0", 0x31}], 0x1}, 0x8400) sendmsg$inet(r7, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="6e4602e2", 0x4}], 0x1}, 0x0) 282.174882ms ago: executing program 2 (id=156): syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c9"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 166.148235ms ago: executing program 0 (id=157): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r1) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) accept4$nfc_llcp(r1, &(0x7f0000000440), &(0x7f0000000500)=0x60, 0x800) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000800)=ANY=[@ANYBLOB="0b7c80d0f48366436ff05d42d5443778752f375979beb6b1893e1cc5336ece213e9536c105c689aa90751768b2b89460a981bec8bbcf44c9c28682ba96d8ab73a9ddf615c0c3784a75f5f767e099f586335d85d8220b06a9acbbc18327b004cc439af65add561522af80b6ac5271e82a432a1a68ebe61534662814a6b1143e892b4c6505cf3c873165fba8b111652b19f2a3e0c84e0d420817bd9fe70d0e6100"/171, @ANYRES16=r5, @ANYBLOB="0100000000000000000013000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6e10}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="30000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000000060202c17d5a934718340202020208000c006400000008000d000000000005"], 0x64}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000a}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r8, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}}, 0x40) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010003e033fb000000000a00000000004e2200000000000000000000000000000000000000000a000000c0e1673800000000", @ANYRES32=0x0, @ANYBLOB="01000000ff7f000000000000ff0100000800030011000000"], 0x54}}, 0x40028c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000630124000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000040)=0x6e) 155.887735ms ago: executing program 4 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r2, 0x3, {0x1}, 0x1}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x8, 0x2, 0x5862, 0x2, 0x1, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_CORR={0x10, 0x1, {0x8000, 0x7, 0x3}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x5, 0x3}}]}}}]}, 0x70}}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4008802) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 0s ago: executing program 2 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xc00, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) listen(r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) syz_emit_ethernet(0x3ca, &(0x7f00000005c0)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "318c62", 0x394, 0x3a, 0xff, @mcast1, @mcast2, {[@dstopts={0x0, 0x25, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x6, 0xfffd, [0x7, 0x9, 0xe]}}, @generic={0x26, 0xd7, "24bf57923c8c776d7e000cb3852af4275117cf4ca223c06e00d0a6edbed5fd87492cec515895e072a865282ce8bdd6b3ed4db4da96c5a4c5c597cd604f2679aa6f3b8bbb3ceeb7ab6555565fea6ed90d6d83f5f40d9236810aed3e3ad03eb55f1509254ce88917a6352545d5e60cd612f478f28d88c6191519c02023ef2463061059ea9b700ed00db0e11efb3505f3a80e0bf0db4cb2d0c3846cefa3563059246e3e010c828d14e8e26434c50255148785b270cf9fe545dd490de1fa77b93f14a987447b689e4a5a60e4d728041120bd82d15d87a22bef"}, @jumbo={0xc2, 0x4, 0xffffffff}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xf}, @calipso={0x7, 0x10, {0x1, 0x2, 0xc, 0x9, [0x6]}}]}, @fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x64}, @srh={0xc, 0x2, 0x4, 0x1, 0x6, 0x68, 0x2, [@private2]}, @srh={0x11, 0x10, 0x4, 0x8, 0x9, 0x0, 0x8, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private0, @mcast1, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x87, 0x10, 0x3, 0x2, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @private2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0]}, @srh={0x87, 0x0, 0x4, 0x0, 0xad, 0x70, 0x6}, @routing={0x8, 0xe, 0x2, 0x15, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x3a, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68}, @fragment={0x88, 0x0, 0xdd, 0x1, 0x0, 0x2, 0x64}], @mlv2_query={0x82, 0x0, 0x0, 0x81, 0xe49, @local, 0x2, 0x1, 0x3, 0x0, 0x8, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @local, @loopback, @mcast2]}}}}}}, 0x0) write(r5, &(0x7f0000000140)="1036b1d729a91a6dc38b5ed7ad4daac5efc5a2d7d9aea46754a73b9b2356911ef93492b2f36b7029be56cbc24e13f638d57e094707fee67ea43b9f4c372c3a09970552503a1d1ae06a43f302af80f00e7fe4e63a499eeac63b87452e22d925d5ba4a3425a7a8fa2e94728e4939e3351e193681d7", 0x74) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 58.072028][ T5216] cgroup: Unknown subsys name 'net' [ 58.217867][ T5216] cgroup: Unknown subsys name 'cpuset' [ 58.226834][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.819948][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.031812][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.040193][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.047966][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.065495][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.072378][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.080709][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.081764][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.095142][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.098520][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.113287][ T4622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.130919][ T4622] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.152741][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.161937][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.162453][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.176829][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.184899][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.194076][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.203475][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.203785][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.211561][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.225468][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.226295][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.233079][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.242092][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.246999][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.254280][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.268066][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.277030][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.290005][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.297656][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.765581][ T5258] modprobe (5258) used greatest stack depth: 18680 bytes left [ 62.778722][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 62.817500][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 62.828252][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 62.852749][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 62.951703][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 62.962258][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.970652][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.978508][ T5231] bridge_slave_0: entered allmulticast mode [ 62.986525][ T5231] bridge_slave_0: entered promiscuous mode [ 63.039757][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.047223][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.054520][ T5231] bridge_slave_1: entered allmulticast mode [ 63.061255][ T5231] bridge_slave_1: entered promiscuous mode [ 63.162642][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.181878][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.189240][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.200335][ T5237] bridge_slave_0: entered allmulticast mode [ 63.207575][ T5237] bridge_slave_0: entered promiscuous mode [ 63.230120][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.237461][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.244789][ T5236] bridge_slave_0: entered allmulticast mode [ 63.251527][ T5236] bridge_slave_0: entered promiscuous mode [ 63.260274][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.267433][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.275017][ T5236] bridge_slave_1: entered allmulticast mode [ 63.281720][ T5236] bridge_slave_1: entered promiscuous mode [ 63.290010][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.308828][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.318451][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.326256][ T5226] bridge_slave_0: entered allmulticast mode [ 63.332985][ T5226] bridge_slave_0: entered promiscuous mode [ 63.342127][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.349799][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.357335][ T5237] bridge_slave_1: entered allmulticast mode [ 63.364598][ T5237] bridge_slave_1: entered promiscuous mode [ 63.396625][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.403844][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.411145][ T5226] bridge_slave_1: entered allmulticast mode [ 63.418306][ T5226] bridge_slave_1: entered promiscuous mode [ 63.462576][ T5231] team0: Port device team_slave_0 added [ 63.490626][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.502192][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.509803][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.517611][ T5235] bridge_slave_0: entered allmulticast mode [ 63.524718][ T5235] bridge_slave_0: entered promiscuous mode [ 63.533880][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.545232][ T5231] team0: Port device team_slave_1 added [ 63.552893][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.564989][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.576694][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.586625][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.594317][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.601506][ T5235] bridge_slave_1: entered allmulticast mode [ 63.608716][ T5235] bridge_slave_1: entered promiscuous mode [ 63.617761][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.694701][ T5236] team0: Port device team_slave_0 added [ 63.720094][ T5226] team0: Port device team_slave_0 added [ 63.728768][ T5237] team0: Port device team_slave_0 added [ 63.737418][ T5237] team0: Port device team_slave_1 added [ 63.752553][ T5236] team0: Port device team_slave_1 added [ 63.768236][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.775466][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.802219][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.816946][ T5226] team0: Port device team_slave_1 added [ 63.823245][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.830808][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.856945][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.885413][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.925870][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.935982][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.942950][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.969199][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.991104][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.998198][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.024616][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.037420][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.047066][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.073370][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.092132][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.099289][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.125222][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.146734][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.153869][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.179847][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.184903][ T5233] Bluetooth: hci0: command tx timeout [ 64.190484][ T5244] Bluetooth: hci1: command tx timeout [ 64.203174][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.210295][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.236568][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.271290][ T5231] hsr_slave_0: entered promiscuous mode [ 64.277667][ T5231] hsr_slave_1: entered promiscuous mode [ 64.297553][ T5235] team0: Port device team_slave_0 added [ 64.307632][ T5235] team0: Port device team_slave_1 added [ 64.343741][ T5233] Bluetooth: hci2: command tx timeout [ 64.349461][ T5244] Bluetooth: hci3: command tx timeout [ 64.349472][ T5233] Bluetooth: hci4: command tx timeout [ 64.375109][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.382083][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.408088][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.448559][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.458696][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.485312][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.530669][ T5226] hsr_slave_0: entered promiscuous mode [ 64.536965][ T5226] hsr_slave_1: entered promiscuous mode [ 64.543011][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.551010][ T5226] Cannot create hsr debugfs directory [ 64.573122][ T5237] hsr_slave_0: entered promiscuous mode [ 64.579715][ T5237] hsr_slave_1: entered promiscuous mode [ 64.585968][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.593988][ T5237] Cannot create hsr debugfs directory [ 64.602625][ T5236] hsr_slave_0: entered promiscuous mode [ 64.609936][ T5236] hsr_slave_1: entered promiscuous mode [ 64.616605][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.624643][ T5236] Cannot create hsr debugfs directory [ 64.733301][ T5235] hsr_slave_0: entered promiscuous mode [ 64.740128][ T5235] hsr_slave_1: entered promiscuous mode [ 64.746766][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.755085][ T5235] Cannot create hsr debugfs directory [ 65.035186][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.046557][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.061920][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.076418][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.107507][ T5236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.117936][ T5236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.130405][ T5236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.140794][ T5236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.230496][ T5237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.246398][ T5237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.269650][ T5237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.292618][ T5237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.333302][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.352291][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.362663][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.385910][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.397339][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.450349][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.493303][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.507839][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.536227][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.543698][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.556054][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.571323][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.578474][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.602772][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.646018][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.709525][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.740284][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.794119][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.801237][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.829288][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.849571][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.877053][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.884776][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.902228][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.909673][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.952248][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.978293][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.985445][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.007258][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.014433][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.030188][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.042118][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.049380][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.112017][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.211593][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.238769][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.245963][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.263782][ T5244] Bluetooth: hci0: command tx timeout [ 66.274229][ T5244] Bluetooth: hci1: command tx timeout [ 66.290821][ T5231] veth0_vlan: entered promiscuous mode [ 66.324072][ T2921] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.331182][ T2921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.397410][ T5231] veth1_vlan: entered promiscuous mode [ 66.423989][ T4622] Bluetooth: hci2: command tx timeout [ 66.433528][ T5233] Bluetooth: hci3: command tx timeout [ 66.439338][ T5244] Bluetooth: hci4: command tx timeout [ 66.571244][ T5231] veth0_macvtap: entered promiscuous mode [ 66.606610][ T5231] veth1_macvtap: entered promiscuous mode [ 66.621907][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.669799][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.688322][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.712402][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.746708][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.775352][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.785341][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.796155][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.811192][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.937384][ T5236] veth0_vlan: entered promiscuous mode [ 66.960217][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.012529][ T5226] veth0_vlan: entered promiscuous mode [ 67.026028][ T5236] veth1_vlan: entered promiscuous mode [ 67.062306][ T5226] veth1_vlan: entered promiscuous mode [ 67.076658][ T1297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.109993][ T1297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.156221][ T5236] veth0_macvtap: entered promiscuous mode [ 67.180728][ T5236] veth1_macvtap: entered promiscuous mode [ 67.212927][ T5226] veth0_macvtap: entered promiscuous mode [ 67.220959][ T5235] veth0_vlan: entered promiscuous mode [ 67.234869][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.240083][ T5226] veth1_macvtap: entered promiscuous mode [ 67.250125][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.258327][ T5235] veth1_vlan: entered promiscuous mode [ 67.269304][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.281556][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.293071][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.311191][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.323717][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.334114][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.346891][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.358820][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.379326][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.390445][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.402640][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.427672][ T5231] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.429348][ T5236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.454720][ T5236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.463815][ T5236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.472559][ T5236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.488535][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.500062][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.510099][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.520621][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.532104][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.543805][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.552778][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.561829][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.570906][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.613570][ T5235] veth0_macvtap: entered promiscuous mode [ 67.654347][ T5235] veth1_macvtap: entered promiscuous mode [ 67.695643][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.707396][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.717550][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.728394][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.738404][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.750239][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.761967][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.809377][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.827511][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.837530][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.848021][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.858171][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.869328][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.881306][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.881490][ T5313] Bluetooth: MGMT ver 1.23 [ 67.895185][ T5312] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 67.911703][ T5312] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.942328][ T5237] veth0_vlan: entered promiscuous mode [ 67.966025][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.974840][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.984091][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.993028][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.018336][ T5313] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 68.054128][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.062255][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.081272][ T5237] veth1_vlan: entered promiscuous mode [ 68.123281][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.138290][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.152369][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.184966][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.290566][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.301679][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.330457][ T5237] veth0_macvtap: entered promiscuous mode [ 68.345711][ T4622] Bluetooth: hci1: command tx timeout [ 68.345747][ T5233] Bluetooth: hci0: command tx timeout [ 68.375099][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.383191][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.385430][ T5316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'. [ 68.437339][ T5237] veth1_macvtap: entered promiscuous mode [ 68.456423][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.469543][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.494129][ T5320] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 68.504234][ T5233] Bluetooth: hci4: command tx timeout [ 68.504364][ T4622] Bluetooth: hci2: command tx timeout [ 68.509665][ T5233] Bluetooth: hci3: command tx timeout [ 68.572264][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.582943][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.594641][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.605211][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.615126][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.625789][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.635767][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.646321][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.657823][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.686927][ T5316] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 68.755281][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.770363][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.798875][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.813431][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.823306][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.839521][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.851165][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.868683][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.886833][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.907982][ T5326] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 68.921430][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 68.948654][ T5237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.958378][ T5237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.967949][ T5237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.979125][ T5237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.273708][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.281593][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.329655][ T5330] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 69.361984][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.398192][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.495371][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'. [ 69.572699][ T5341] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 69.602244][ T5341] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 69.725638][ T5338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 69.738786][ T5338] nbd: device at index 64 is going down [ 69.761311][ T5338] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 69.777857][ T5338] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 69.954361][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 69.961811][ T5315] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 70.089025][ T5351] Zero length message leads to an empty skb [ 70.165819][ T5335] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 70.183053][ T5340] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 70.198930][ T5352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'. [ 70.269978][ T5356] netlink: 'syz.0.12': attribute type 4 has an invalid length. [ 70.291661][ T5356] netlink: 'syz.0.12': attribute type 4 has an invalid length. [ 70.418872][ T5363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'. [ 70.428939][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 70.435085][ T5234] Bluetooth: hci1: command tx timeout [ 70.441878][ T5351] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 70.583854][ T5234] Bluetooth: hci2: command tx timeout [ 70.585367][ T4622] Bluetooth: hci4: command tx timeout [ 70.589327][ T5233] Bluetooth: hci3: command tx timeout [ 70.656357][ T5370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13'. [ 70.806876][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 70.868823][ T5375] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.888629][ T5375] x_tables: unsorted underflow at hook 3 [ 70.947045][ T5377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 71.192892][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 71.387489][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.615297][ T5395] openvswitch: netlink: Tunnel attr 5 has unexpected len 1 expected 0 [ 71.645994][ T5380] syz.0.15 (5380) used greatest stack depth: 17936 bytes left [ 72.503998][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 72.504575][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 72.523106][ T5359] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 72.539469][ T5376] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 72.736641][ T5420] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 72.786432][ T5405] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 72.994072][ T5413] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 73.073178][ T5427] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 73.167631][ T5427] validate_nla: 8 callbacks suppressed [ 73.167652][ T5427] netlink: 'syz.2.30': attribute type 4 has an invalid length. [ 73.300713][ T5427] netlink: 'syz.2.30': attribute type 4 has an invalid length. [ 73.404950][ T5442] netlink: 'syz.3.32': attribute type 4 has an invalid length. [ 73.480747][ T5442] netlink: 'syz.3.32': attribute type 4 has an invalid length. [ 73.502253][ T5443] __nla_validate_parse: 7 callbacks suppressed [ 73.502273][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 73.751577][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 73.900248][ T5454] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 74.311523][ T5470] netlink: 'syz.1.43': attribute type 12 has an invalid length. [ 74.321219][ T5470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.43'. [ 74.532933][ T5466] delete_channel: no stack [ 74.610767][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 74.617811][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 74.643945][ T5433] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 74.655281][ T5481] FAULT_INJECTION: forcing a failure. [ 74.655281][ T5481] name failslab, interval 1, probability 0, space 0, times 1 [ 74.673642][ T5481] CPU: 1 UID: 0 PID: 5481 Comm: syz.0.47 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 74.683867][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.693967][ T5481] Call Trace: [ 74.697290][ T5481] [ 74.700300][ T5481] dump_stack_lvl+0x241/0x360 [ 74.705053][ T5481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.710314][ T5481] ? __pfx__printk+0x10/0x10 [ 74.714958][ T5481] ? __kmalloc_node_noprof+0xb7/0x440 [ 74.720381][ T5481] ? __pfx___might_resched+0x10/0x10 [ 74.725725][ T5481] should_fail_ex+0x3b0/0x4e0 [ 74.730461][ T5481] should_failslab+0xac/0x100 [ 74.735191][ T5481] __kmalloc_node_noprof+0xdf/0x440 [ 74.740432][ T5481] ? alloc_slab_obj_exts+0x3a/0xa0 [ 74.745595][ T5481] alloc_slab_obj_exts+0x3a/0xa0 [ 74.750666][ T5481] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 74.756609][ T5481] ? kasan_unpoison+0x46/0x70 [ 74.761317][ T5481] __kmalloc_node_noprof+0x2a5/0x440 [ 74.766620][ T5481] ? __kvmalloc_node_noprof+0x72/0x190 [ 74.772104][ T5481] __kvmalloc_node_noprof+0x72/0x190 [ 74.777411][ T5481] alloc_netdev_mqs+0x8ac/0x1000 [ 74.782393][ T5481] rtnl_create_link+0x2f9/0xc20 [ 74.787270][ T5481] rtnl_newlink+0x1423/0x20a0 [ 74.791968][ T5481] ? rtnl_newlink+0xab1/0x20a0 [ 74.796763][ T5481] ? __pfx_rtnl_newlink+0x10/0x10 [ 74.801832][ T5481] ? __pfx___mutex_trylock_common+0x10/0x10 [ 74.807748][ T5481] ? rcu_is_watching+0x15/0xb0 [ 74.812531][ T5481] ? trace_contention_end+0x3c/0x120 [ 74.817835][ T5481] ? __mutex_lock+0x2ef/0xd70 [ 74.822537][ T5481] ? __pfx_lock_release+0x10/0x10 [ 74.827594][ T5481] ? __pfx_rtnl_newlink+0x10/0x10 [ 74.832636][ T5481] rtnetlink_rcv_msg+0x73f/0xcf0 [ 74.837687][ T5481] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 74.842822][ T5481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.848394][ T5481] ? ref_tracker_free+0x643/0x7e0 [ 74.853455][ T5481] netlink_rcv_skb+0x1e3/0x430 [ 74.858260][ T5481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.863737][ T5481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.869058][ T5481] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.874281][ T5481] netlink_unicast+0x7f6/0x990 [ 74.879086][ T5481] ? __pfx_netlink_unicast+0x10/0x10 [ 74.884387][ T5481] ? __virt_addr_valid+0x183/0x530 [ 74.889511][ T5481] ? __check_object_size+0x48e/0x900 [ 74.894816][ T5481] netlink_sendmsg+0x8e4/0xcb0 [ 74.899612][ T5481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.904940][ T5481] ? aa_sock_msg_perm+0x91/0x160 [ 74.910325][ T5481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.915738][ T5481] __sock_sendmsg+0x221/0x270 [ 74.920442][ T5481] ____sys_sendmsg+0x52a/0x7e0 [ 74.925228][ T5481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.930571][ T5481] __sys_sendmsg+0x292/0x380 [ 74.935183][ T5481] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.940320][ T5481] ? __pfx_vfs_write+0x10/0x10 [ 74.945124][ T5481] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.951473][ T5481] ? do_syscall_64+0x100/0x230 [ 74.956252][ T5481] ? do_syscall_64+0xb6/0x230 [ 74.960941][ T5481] do_syscall_64+0xf3/0x230 [ 74.965456][ T5481] ? clear_bhb_loop+0x35/0x90 [ 74.970143][ T5481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.976056][ T5481] RIP: 0033:0x7f69ca57dff9 [ 74.980490][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.000129][ T5481] RSP: 002b:00007f69cb3b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.008564][ T5481] RAX: ffffffffffffffda RBX: 00007f69ca735f80 RCX: 00007f69ca57dff9 [ 75.016554][ T5481] RDX: 0000000000040004 RSI: 0000000020000000 RDI: 0000000000000003 [ 75.024544][ T5481] RBP: 00007f69cb3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 75.032679][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.040792][ T5481] R13: 0000000000000000 R14: 00007f69ca735f80 R15: 00007ffc070ca238 [ 75.048791][ T5481] [ 75.390538][ T5500] netlink: 'syz.1.52': attribute type 3 has an invalid length. [ 75.435460][ T5500] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.52'. [ 75.729061][ T5515] FAULT_INJECTION: forcing a failure. [ 75.729061][ T5515] name failslab, interval 1, probability 0, space 0, times 0 [ 75.773773][ T5515] CPU: 1 UID: 0 PID: 5515 Comm: syz.1.56 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 75.784028][ T5515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.794141][ T5515] Call Trace: [ 75.797455][ T5515] [ 75.800415][ T5515] dump_stack_lvl+0x241/0x360 [ 75.805154][ T5515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.810405][ T5515] ? __pfx__printk+0x10/0x10 [ 75.815052][ T5515] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 75.815676][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 75.821052][ T5515] ? __pfx___might_resched+0x10/0x10 [ 75.821094][ T5515] should_fail_ex+0x3b0/0x4e0 [ 75.839999][ T5515] should_failslab+0xac/0x100 [ 75.844724][ T5515] ? __alloc_skb+0x1c3/0x440 [ 75.849344][ T5515] kmem_cache_alloc_node_noprof+0x71/0x320 [ 75.855184][ T5515] __alloc_skb+0x1c3/0x440 [ 75.859617][ T5515] ? mark_lock+0x9a/0x360 [ 75.863955][ T5515] ? ima_match_policy+0x115/0x22f0 [ 75.869084][ T5515] ? __pfx___alloc_skb+0x10/0x10 [ 75.874129][ T5515] ? __lock_acquire+0x1384/0x2050 [ 75.879181][ T5515] alloc_skb_with_frags+0xc3/0x820 [ 75.884322][ T5515] sock_alloc_send_pskb+0x91a/0xa60 [ 75.889566][ T5515] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 75.895315][ T5515] ? __pfx_validate_chain+0x10/0x10 [ 75.900525][ T5515] ? __pfx_up_write+0x10/0x10 [ 75.905212][ T5515] ? ima_get_action+0x75/0xb0 [ 75.909903][ T5515] ? dev_get_by_index+0x23/0x2d0 [ 75.914858][ T5515] packet_sendmsg+0x3f33/0x6860 [ 75.919776][ T5515] ? __pfx___might_resched+0x10/0x10 [ 75.925094][ T5515] ? aa_sk_perm+0x96d/0xab0 [ 75.929650][ T5515] ? __pfx_packet_sendmsg+0x10/0x10 [ 75.934871][ T5515] ? aa_sock_msg_perm+0x91/0x160 [ 75.939835][ T5515] ? __pfx_packet_sendmsg+0x10/0x10 [ 75.945052][ T5515] __sock_sendmsg+0x221/0x270 [ 75.949750][ T5515] ____sys_sendmsg+0x52a/0x7e0 [ 75.954570][ T5515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.959873][ T5515] __sys_sendmmsg+0x3ab/0x730 [ 75.964596][ T5515] ? __pfx___sys_sendmmsg+0x10/0x10 [ 75.969815][ T5515] ? __pfx_lock_release+0x10/0x10 [ 75.974859][ T5515] ? kstrtouint_from_user+0x128/0x190 [ 75.980280][ T5515] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 75.986195][ T5515] ? ksys_write+0x229/0x2b0 [ 75.990724][ T5515] ? __pfx_lock_release+0x10/0x10 [ 75.995780][ T5515] ? vfs_write+0x7bf/0xc90 [ 76.000222][ T5515] ? kmem_cache_free+0x1a2/0x420 [ 76.005179][ T5515] ? __mutex_unlock_slowpath+0x21d/0x750 [ 76.010834][ T5515] ? __fget_files+0x3f3/0x470 [ 76.015535][ T5515] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.021560][ T5515] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.027966][ T5515] ? do_syscall_64+0x100/0x230 [ 76.032762][ T5515] __x64_sys_sendmmsg+0xa0/0xb0 [ 76.037638][ T5515] do_syscall_64+0xf3/0x230 [ 76.042156][ T5515] ? clear_bhb_loop+0x35/0x90 [ 76.046855][ T5515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.052773][ T5515] RIP: 0033:0x7fba5db7dff9 [ 76.057204][ T5515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.076832][ T5515] RSP: 002b:00007fba5e933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.085267][ T5515] RAX: ffffffffffffffda RBX: 00007fba5dd35f80 RCX: 00007fba5db7dff9 [ 76.093269][ T5515] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000013 [ 76.101251][ T5515] RBP: 00007fba5e933090 R08: 0000000000000000 R09: 0000000000000000 [ 76.109239][ T5515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.117216][ T5515] R13: 0000000000000000 R14: 00007fba5dd35f80 R15: 00007ffcce15faf8 [ 76.125209][ T5515] [ 76.154097][ T5520] netlink: 104 bytes leftover after parsing attributes in process `syz.0.58'. [ 76.670154][ T5244] Bluetooth: hci0: command 0x0419 tx timeout [ 78.763429][ T5244] Bluetooth: hci0: command 0x0419 tx timeout [ 79.887451][ T5554] netlink: 'syz.4.68': attribute type 13 has an invalid length. [ 80.008195][ T5553] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 80.049295][ T5559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'. [ 80.553735][ T5561] vlan2: entered promiscuous mode [ 80.582620][ T5561] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 80.606900][ T5553] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 80.618487][ T5559] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 80.839438][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 80.846100][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 81.033742][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 81.042641][ T5592] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 81.054215][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 81.082041][ T5595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 81.179033][ T5594] netlink: 'syz.3.82': attribute type 4 has an invalid length. [ 81.190074][ T5592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 81.201422][ T5592] nbd: device at index 64 is going down [ 81.238340][ T5603] netlink: 'syz.2.79': attribute type 4 has an invalid length. [ 81.329058][ T5592] netlink: 'syz.3.82': attribute type 4 has an invalid length. [ 81.346823][ T5595] netlink: 'syz.2.79': attribute type 4 has an invalid length. [ 81.585708][ T5613] FAULT_INJECTION: forcing a failure. [ 81.585708][ T5613] name failslab, interval 1, probability 0, space 0, times 0 [ 81.599197][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz.4.90 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 81.609477][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.619658][ T5613] Call Trace: [ 81.622945][ T5613] [ 81.625987][ T5613] dump_stack_lvl+0x241/0x360 [ 81.630692][ T5613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.635910][ T5613] ? __pfx__printk+0x10/0x10 [ 81.640518][ T5613] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 81.645996][ T5613] ? __pfx___might_resched+0x10/0x10 [ 81.651387][ T5613] should_fail_ex+0x3b0/0x4e0 [ 81.656101][ T5613] should_failslab+0xac/0x100 [ 81.660821][ T5613] ? garp_init_applicant+0x184/0x450 [ 81.666134][ T5613] __kmalloc_cache_noprof+0x6c/0x2c0 [ 81.671448][ T5613] garp_init_applicant+0x184/0x450 [ 81.676581][ T5613] ? vlan_gvrp_init_applicant+0xd/0x20 [ 81.682055][ T5613] register_vlan_dev+0x1eb/0x810 [ 81.687019][ T5613] vlan_newlink+0x476/0x5c0 [ 81.691558][ T5613] ? __pfx_vlan_newlink+0x10/0x10 [ 81.696597][ T5613] rtnl_newlink+0x1591/0x20a0 [ 81.701336][ T5613] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.706372][ T5613] ? do_raw_spin_unlock+0x13c/0x8b0 [ 81.711590][ T5613] ? __mutex_lock+0x9ab/0xd70 [ 81.716280][ T5613] ? __mutex_lock+0x52a/0xd70 [ 81.720976][ T5613] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.726009][ T5613] rtnetlink_rcv_msg+0x73f/0xcf0 [ 81.731043][ T5613] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 81.736189][ T5613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.741668][ T5613] ? ref_tracker_free+0x643/0x7e0 [ 81.746714][ T5613] netlink_rcv_skb+0x1e3/0x430 [ 81.751512][ T5613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.756991][ T5613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.762320][ T5613] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.767541][ T5613] netlink_unicast+0x7f6/0x990 [ 81.772336][ T5613] ? __pfx_netlink_unicast+0x10/0x10 [ 81.777633][ T5613] ? __virt_addr_valid+0x183/0x530 [ 81.782845][ T5613] ? __check_object_size+0x48e/0x900 [ 81.788168][ T5613] netlink_sendmsg+0x8e4/0xcb0 [ 81.792961][ T5613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.798440][ T5613] ? aa_sock_msg_perm+0x91/0x160 [ 81.803401][ T5613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.808716][ T5613] __sock_sendmsg+0x221/0x270 [ 81.813408][ T5613] ____sys_sendmsg+0x52a/0x7e0 [ 81.818209][ T5613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.823520][ T5613] __sys_sendmsg+0x292/0x380 [ 81.828126][ T5613] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.833259][ T5613] ? __pfx_vfs_write+0x10/0x10 [ 81.838062][ T5613] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.844405][ T5613] ? do_syscall_64+0x100/0x230 [ 81.849180][ T5613] ? do_syscall_64+0xb6/0x230 [ 81.853865][ T5613] do_syscall_64+0xf3/0x230 [ 81.858379][ T5613] ? clear_bhb_loop+0x35/0x90 [ 81.863065][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.868973][ T5613] RIP: 0033:0x7fa951f7dff9 [ 81.873398][ T5613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.893019][ T5613] RSP: 002b:00007fa952dca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.901887][ T5613] RAX: ffffffffffffffda RBX: 00007fa952135f80 RCX: 00007fa951f7dff9 [ 81.909869][ T5613] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 81.918283][ T5613] RBP: 00007fa952dca090 R08: 0000000000000000 R09: 0000000000000000 [ 81.926260][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.934412][ T5613] R13: 0000000000000000 R14: 00007fa952135f80 R15: 00007ffe4a05c608 [ 81.942407][ T5613] [ 81.964894][ T937] cfg80211: failed to load regulatory.db [ 81.978483][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 82.098408][ T5587] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 82.140777][ T5632] netlink: 56 bytes leftover after parsing attributes in process `syz.4.93'. [ 82.546122][ T5653] netlink: 'syz.4.100': attribute type 1 has an invalid length. [ 82.563756][ T5649] netlink: 644 bytes leftover after parsing attributes in process `syz.3.97'. [ 82.617106][ T5653] openvswitch: netlink: Actions may not be safe on all matching packets [ 82.665925][ T5655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 82.697884][ T5660] netlink: 'syz.0.101': attribute type 2 has an invalid length. [ 82.708790][ T5660] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 82.917593][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 82.923992][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 84.999385][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 87.103474][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 89.633583][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 92.373395][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 94.443399][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 96.543472][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 97.018640][ T5660] netlink: 'syz.0.101': attribute type 2 has an invalid length. [ 97.034261][ T5660] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 98.631161][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 100.679533][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 102.793408][ T5233] Bluetooth: hci0: command 0x0419 tx timeout [ 103.283631][ T5659] warning: `syz.2.102' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.234351][ T4622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.309329][ T4622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.317721][ T4622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.331230][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.336311][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.339470][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.354549][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.395594][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.405216][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 104.432000][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.445324][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.453265][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 104.460934][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 104.468412][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.478101][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 104.557337][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 104.566234][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 104.574543][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 104.582670][ T5233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 104.592285][ T5233] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 104.640916][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 104.656090][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 104.665394][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 104.672790][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 104.806624][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.815919][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.825542][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.846394][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.860755][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.871387][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.979734][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.090478][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.170469][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.236279][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.417085][ T5681] chnl_net:caif_netlink_parms(): no params data found [ 105.612841][ T5678] chnl_net:caif_netlink_parms(): no params data found [ 105.647832][ T12] bridge_slave_1: left allmulticast mode [ 105.653945][ T12] bridge_slave_1: left promiscuous mode [ 105.660509][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.673788][ T12] bridge_slave_0: left allmulticast mode [ 105.679522][ T12] bridge_slave_0: left promiscuous mode [ 105.685544][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.102236][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.119224][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.130417][ T12] bond0 (unregistering): Released all slaves [ 106.140913][ T5677] chnl_net:caif_netlink_parms(): no params data found [ 106.164526][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.171665][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.179455][ T5681] bridge_slave_0: entered allmulticast mode [ 106.202341][ T5681] bridge_slave_0: entered promiscuous mode [ 106.223044][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.231011][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.238789][ T5681] bridge_slave_1: entered allmulticast mode [ 106.247003][ T5681] bridge_slave_1: entered promiscuous mode [ 106.388684][ T5681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.406085][ T5686] chnl_net:caif_netlink_parms(): no params data found [ 106.419639][ T5684] chnl_net:caif_netlink_parms(): no params data found [ 106.458912][ T5681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.565849][ T5681] team0: Port device team_slave_0 added [ 106.629491][ T12] hsr_slave_0: left promiscuous mode [ 106.635795][ T12] hsr_slave_1: left promiscuous mode [ 106.642138][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.651604][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.660646][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.668915][ T5233] Bluetooth: hci5: command tx timeout [ 106.675427][ T5233] Bluetooth: hci6: command tx timeout [ 106.680213][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.702851][ T12] veth1_macvtap: left promiscuous mode [ 106.708923][ T12] veth0_macvtap: left promiscuous mode [ 106.716706][ T12] veth1_vlan: left promiscuous mode [ 106.722202][ T12] veth0_vlan: left promiscuous mode [ 106.743700][ T5233] Bluetooth: hci7: command tx timeout [ 106.743776][ T4622] Bluetooth: hci8: command tx timeout [ 106.905964][ T4622] Bluetooth: hci0: command tx timeout [ 107.209299][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.249729][ T12] team0 (unregistering): Port device team_slave_0 removed [ 107.657282][ T5681] team0: Port device team_slave_1 added [ 107.842971][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.853141][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.864346][ T5678] bridge_slave_0: entered allmulticast mode [ 107.871490][ T5678] bridge_slave_0: entered promiscuous mode [ 107.965048][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.972214][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.998318][ T5677] bridge_slave_0: entered allmulticast mode [ 108.014090][ T5677] bridge_slave_0: entered promiscuous mode [ 108.034749][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.041911][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.061347][ T5677] bridge_slave_1: entered allmulticast mode [ 108.082447][ T5677] bridge_slave_1: entered promiscuous mode [ 108.089862][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.097546][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.136635][ T5681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.148816][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.156259][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.164175][ T5678] bridge_slave_1: entered allmulticast mode [ 108.170957][ T5678] bridge_slave_1: entered promiscuous mode [ 108.179436][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.187346][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.195752][ T5686] bridge_slave_0: entered allmulticast mode [ 108.208775][ T5686] bridge_slave_0: entered promiscuous mode [ 108.218087][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.225466][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.232797][ T5686] bridge_slave_1: entered allmulticast mode [ 108.240363][ T5686] bridge_slave_1: entered promiscuous mode [ 108.293026][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.301219][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.327297][ T5681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.424095][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.458738][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.471419][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.481956][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.489674][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.497418][ T5684] bridge_slave_0: entered allmulticast mode [ 108.505932][ T5684] bridge_slave_0: entered promiscuous mode [ 108.515735][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.555376][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.595254][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.602373][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.611921][ T5684] bridge_slave_1: entered allmulticast mode [ 108.621165][ T5684] bridge_slave_1: entered promiscuous mode [ 108.654780][ T5677] team0: Port device team_slave_0 added [ 108.672552][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.704899][ T5686] team0: Port device team_slave_0 added [ 108.744236][ T4622] Bluetooth: hci6: command tx timeout [ 108.745209][ T5233] Bluetooth: hci5: command tx timeout [ 108.755564][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.784351][ T5677] team0: Port device team_slave_1 added [ 108.796414][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.822264][ T5681] hsr_slave_0: entered promiscuous mode [ 108.824522][ T5233] Bluetooth: hci8: command tx timeout [ 108.828895][ T4622] Bluetooth: hci7: command tx timeout [ 108.840747][ T5681] hsr_slave_1: entered promiscuous mode [ 108.893921][ T5686] team0: Port device team_slave_1 added [ 108.983637][ T4622] Bluetooth: hci0: command tx timeout [ 108.987233][ T5678] team0: Port device team_slave_0 added [ 109.141438][ T5678] team0: Port device team_slave_1 added [ 109.181018][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.193292][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.226539][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.239535][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.253497][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.279680][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.307911][ T5684] team0: Port device team_slave_0 added [ 109.334899][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.341923][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.368563][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.395648][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.402660][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.429762][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.442021][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.449805][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.476257][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.510946][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.529796][ T5684] team0: Port device team_slave_1 added [ 109.551452][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.558860][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.587112][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.619052][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.713289][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.721014][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.747676][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.797321][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.819649][ T5686] hsr_slave_0: entered promiscuous mode [ 109.826347][ T5686] hsr_slave_1: entered promiscuous mode [ 109.832534][ T5686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.844206][ T5686] Cannot create hsr debugfs directory [ 109.860125][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.871648][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.898204][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.950122][ T5678] hsr_slave_0: entered promiscuous mode [ 109.958714][ T5678] hsr_slave_1: entered promiscuous mode [ 109.974317][ T5678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.981941][ T5678] Cannot create hsr debugfs directory [ 110.012619][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.052356][ T5677] hsr_slave_0: entered promiscuous mode [ 110.071172][ T5677] hsr_slave_1: entered promiscuous mode [ 110.081229][ T5677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.099539][ T5677] Cannot create hsr debugfs directory [ 110.198014][ T5681] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.387737][ T5681] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.500956][ T5684] hsr_slave_0: entered promiscuous mode [ 110.508503][ T5684] hsr_slave_1: entered promiscuous mode [ 110.515454][ T5684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.523044][ T5684] Cannot create hsr debugfs directory [ 110.546232][ T5681] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.615334][ T5681] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.800602][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.824110][ T4622] Bluetooth: hci5: command tx timeout [ 110.833647][ T4622] Bluetooth: hci6: command tx timeout [ 110.867418][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.903625][ T4622] Bluetooth: hci8: command tx timeout [ 110.903708][ T5233] Bluetooth: hci7: command tx timeout [ 110.976960][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.063652][ T5233] Bluetooth: hci0: command tx timeout [ 111.074319][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.090173][ T5681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.128260][ T5681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.141396][ T5681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.169517][ T5681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.290570][ T12] bridge_slave_1: left allmulticast mode [ 111.300400][ T12] bridge_slave_1: left promiscuous mode [ 111.309188][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.322513][ T12] bridge_slave_0: left allmulticast mode [ 111.328800][ T12] bridge_slave_0: left promiscuous mode [ 111.335195][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.346480][ T12] bridge_slave_1: left allmulticast mode [ 111.352163][ T12] bridge_slave_1: left promiscuous mode [ 111.359159][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.369575][ T12] bridge_slave_0: left allmulticast mode [ 111.376849][ T12] bridge_slave_0: left promiscuous mode [ 111.382602][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.404470][ T12] bridge_slave_1: left allmulticast mode [ 111.410173][ T12] bridge_slave_1: left promiscuous mode [ 111.416201][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.425685][ T12] bridge_slave_0: left allmulticast mode [ 111.431374][ T12] bridge_slave_0: left promiscuous mode [ 111.437646][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.226618][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.238550][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.252720][ T12] bond0 (unregistering): Released all slaves [ 112.354523][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.371474][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.383083][ T12] bond0 (unregistering): Released all slaves [ 112.490677][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.509495][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.523818][ T12] bond0 (unregistering): Released all slaves [ 112.744321][ T5681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.765627][ T5681] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.835744][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.842880][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.867319][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.874522][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.906102][ T5233] Bluetooth: hci6: command tx timeout [ 112.906113][ T4622] Bluetooth: hci5: command tx timeout [ 112.920882][ T12] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 112.983666][ T5233] Bluetooth: hci8: command tx timeout [ 112.984114][ T4622] Bluetooth: hci7: command tx timeout [ 113.082656][ T5678] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.105175][ T5678] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.143813][ T4622] Bluetooth: hci0: command tx timeout [ 113.159663][ T5678] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.175542][ T5678] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.921364][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.930008][ T5677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.950619][ T5677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.971368][ T5677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.031520][ T5677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.069663][ T12] hsr_slave_0: left promiscuous mode [ 114.077742][ T12] hsr_slave_1: left promiscuous mode [ 114.084490][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.091930][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.101176][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.109442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.125322][ T12] hsr_slave_0: left promiscuous mode [ 114.131771][ T12] hsr_slave_1: left promiscuous mode [ 114.138941][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.146701][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.155222][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.162676][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.175259][ T12] hsr_slave_0: left promiscuous mode [ 114.181162][ T12] hsr_slave_1: left promiscuous mode [ 114.188001][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.198218][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.207230][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.214952][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.257147][ T12] veth1_macvtap: left promiscuous mode [ 114.262692][ T12] veth0_macvtap: left promiscuous mode [ 114.270470][ T12] veth1_vlan: left promiscuous mode [ 114.275865][ T12] veth0_vlan: left promiscuous mode [ 114.283772][ T12] veth1_macvtap: left promiscuous mode [ 114.289357][ T12] veth0_macvtap: left promiscuous mode [ 114.295386][ T12] veth1_vlan: left promiscuous mode [ 114.300701][ T12] veth0_vlan: left promiscuous mode [ 114.308380][ T12] veth1_macvtap: left promiscuous mode [ 114.314389][ T12] veth0_macvtap: left promiscuous mode [ 114.320037][ T12] veth1_vlan: left promiscuous mode [ 114.325815][ T12] veth0_vlan: left promiscuous mode [ 114.969067][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.007050][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.722971][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.763124][ T12] team0 (unregistering): Port device team_slave_0 removed [ 116.482859][ T12] team0 (unregistering): Port device team_slave_1 removed [ 116.525887][ T12] team0 (unregistering): Port device team_slave_0 removed [ 116.950476][ T5681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.971814][ T5678] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.030097][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.037358][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.048513][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.055703][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.258657][ T5681] veth0_vlan: entered promiscuous mode [ 117.376823][ T5681] veth1_vlan: entered promiscuous mode [ 117.489781][ T5686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.555950][ T5684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.583785][ T5686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.601770][ T5686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.645724][ T5681] veth0_macvtap: entered promiscuous mode [ 117.677072][ T5684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.692005][ T5686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.708107][ T5681] veth1_macvtap: entered promiscuous mode [ 117.722029][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.775237][ T5684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.805408][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.851917][ T5684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.878923][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.912213][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.928966][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.942198][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.965996][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.973110][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.005485][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.017123][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.030997][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.067533][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.074744][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.137050][ T5681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.156561][ T5681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.170044][ T5681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.182429][ T5681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.307098][ T5678] veth0_vlan: entered promiscuous mode [ 118.329341][ T5677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.351536][ T5677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.404102][ T5678] veth1_vlan: entered promiscuous mode [ 118.609652][ T5678] veth0_macvtap: entered promiscuous mode [ 118.636352][ T5678] veth1_macvtap: entered promiscuous mode [ 118.649601][ T5684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.710343][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.723196][ T5684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.752757][ T1297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.774450][ T1297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.789876][ T5684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.842420][ T5684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.862470][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.891849][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.907553][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.919452][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.933175][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.944767][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.958822][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.989141][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.002908][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.010102][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.025572][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.055124][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.062247][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.077769][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.097458][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.111148][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.122704][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.140444][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.209973][ T5678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.236300][ T5678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.273548][ T5678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.282334][ T5678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.594679][ T5677] veth0_vlan: entered promiscuous mode [ 119.640353][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.720165][ T5677] veth1_vlan: entered promiscuous mode [ 119.764719][ T5684] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.778868][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.797758][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.803905][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.804928][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.991577][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.998984][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.008982][ T5677] veth0_macvtap: entered promiscuous mode [ 120.036835][ T5677] veth1_macvtap: entered promiscuous mode [ 120.052101][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.115250][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.123138][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.194611][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.217655][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.227892][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.245519][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.260363][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.311296][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.324993][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.353872][ T5857] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.112'. [ 120.355241][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.385745][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.401158][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.403196][ T5857] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 120.423545][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.450094][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.479989][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.535634][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.627633][ T5677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.657427][ T5677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.683430][ T5677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.704354][ T5677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.764179][ T5867] syz.3.113 uses obsolete (PF_INET,SOCK_PACKET) [ 120.922084][ T5686] veth0_vlan: entered promiscuous mode [ 120.989313][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.004153][ T5686] veth1_vlan: entered promiscuous mode [ 121.017010][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.105797][ T5686] veth0_macvtap: entered promiscuous mode [ 121.131946][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.135666][ T5686] veth1_macvtap: entered promiscuous mode [ 121.155553][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.178218][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 121.253213][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.279876][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.291131][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.302099][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.315797][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.326880][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.337742][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.348563][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.368362][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.395792][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.487426][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.512725][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.530945][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.542131][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.568082][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.582803][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.600736][ T5686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.611370][ T5686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.640587][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.753772][ T5686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.769773][ T5896] Bluetooth: MGMT ver 1.23 [ 121.793583][ T5893] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 121.799813][ T5686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.814751][ T5893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.103'. [ 121.845946][ T5686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.892359][ T5686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.962215][ T5893] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 122.019119][ T5896] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 122.204082][ T5684] veth0_vlan: entered promiscuous mode [ 122.270767][ T5684] veth1_vlan: entered promiscuous mode [ 122.550302][ T5684] veth0_macvtap: entered promiscuous mode [ 122.586870][ T1297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.606351][ T1297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.656859][ T5684] veth1_macvtap: entered promiscuous mode [ 122.715283][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.741825][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.882106][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.898492][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.920441][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.933483][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.968617][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.993875][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.003961][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.021598][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.032207][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.052396][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.084979][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.139488][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.170774][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.186608][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.198770][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.216067][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.237335][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.252900][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.271481][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.272302][ T5927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 123.281861][ T5684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.312447][ T5684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.324927][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.346883][ T5932] vlan2: entered promiscuous mode [ 123.356560][ T5932] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 123.409808][ T5932] mac80211_hwsim hwsim19 wlan0: left promiscuous mode [ 123.462179][ T5929] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 123.554723][ T5936] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 123.609533][ T5684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.633763][ T5684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.648704][ T5684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.662216][ T5684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.699844][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.4.121'. [ 123.709432][ T5233] Bluetooth: hci0: command 0x0c20 tx timeout [ 123.717574][ T4622] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 123.964395][ T5925] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 124.239866][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 124.249032][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 124.277752][ T5950] dummy0: entered promiscuous mode [ 124.283685][ T5950] dummy0: entered allmulticast mode [ 124.362932][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.380854][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.380957][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.125'. [ 124.390052][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.434757][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.572040][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 124.771482][ T5963] netlink: 'syz.4.126': attribute type 3 has an invalid length. [ 124.803724][ T5963] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.126'. [ 124.993265][ T5976] FAULT_INJECTION: forcing a failure. [ 124.993265][ T5976] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.037165][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.1.104 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 125.047503][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.057609][ T5976] Call Trace: [ 125.060930][ T5976] [ 125.063901][ T5976] dump_stack_lvl+0x241/0x360 [ 125.068650][ T5976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.073917][ T5976] ? __pfx__printk+0x10/0x10 [ 125.078569][ T5976] ? __pfx_lock_release+0x10/0x10 [ 125.083659][ T5976] should_fail_ex+0x3b0/0x4e0 [ 125.088406][ T5976] _copy_from_user+0x2f/0xe0 [ 125.093061][ T5976] copy_msghdr_from_user+0xae/0x680 [ 125.098327][ T5976] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 125.104211][ T5976] __sys_sendmsg+0x22d/0x380 [ 125.108857][ T5976] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.114065][ T5976] ? __pfx_vfs_write+0x10/0x10 [ 125.118926][ T5976] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.125324][ T5976] ? do_syscall_64+0x100/0x230 [ 125.130145][ T5976] ? do_syscall_64+0xb6/0x230 [ 125.134882][ T5976] do_syscall_64+0xf3/0x230 [ 125.139445][ T5976] ? clear_bhb_loop+0x35/0x90 [ 125.144185][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.150143][ T5976] RIP: 0033:0x7fbe2d37dff9 [ 125.154618][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.174285][ T5976] RSP: 002b:00007fbe2e0f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.182771][ T5976] RAX: ffffffffffffffda RBX: 00007fbe2d535f80 RCX: 00007fbe2d37dff9 [ 125.190800][ T5976] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 125.198826][ T5976] RBP: 00007fbe2e0f4090 R08: 0000000000000000 R09: 0000000000000000 [ 125.206850][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.214877][ T5976] R13: 0000000000000000 R14: 00007fbe2d535f80 R15: 00007ffc0ecc8888 [ 125.223016][ T5976] [ 125.272518][ T5978] dvmrp8: entered allmulticast mode [ 125.329026][ T5978] dvmrp8: left allmulticast mode [ 125.450707][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 125.756879][ T5990] nbd: device at index 3 is going down [ 125.807149][ T4622] Bluetooth: hci0: command 0x0c20 tx timeout [ 125.821323][ T5987] netlink: 'syz.2.131': attribute type 3 has an invalid length. [ 125.875905][ T5987] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.131'. [ 125.904165][ T5992] ip6gretap0: entered promiscuous mode [ 125.905120][ T5993] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 125.941994][ T5992] bridge0: entered promiscuous mode [ 125.992942][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'. [ 126.329774][ T6008] FAULT_INJECTION: forcing a failure. [ 126.329774][ T6008] name failslab, interval 1, probability 0, space 0, times 0 [ 126.339125][ T6005] netlink: 'syz.4.138': attribute type 3 has an invalid length. [ 126.355830][ T6009] netlink: 'syz.2.139': attribute type 13 has an invalid length. [ 126.363793][ T6005] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.138'. [ 126.373475][ T6008] CPU: 1 UID: 0 PID: 6008 Comm: syz.1.140 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 126.383781][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.393890][ T6008] Call Trace: [ 126.397203][ T6008] [ 126.400182][ T6008] dump_stack_lvl+0x241/0x360 [ 126.405161][ T6008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.410432][ T6008] ? __pfx__printk+0x10/0x10 [ 126.415100][ T6008] ? ref_tracker_alloc+0x332/0x490 [ 126.420289][ T6008] should_fail_ex+0x3b0/0x4e0 [ 126.425033][ T6008] ? skb_clone+0x20c/0x390 [ 126.429506][ T6008] should_failslab+0xac/0x100 [ 126.434260][ T6008] ? skb_clone+0x20c/0x390 [ 126.438735][ T6008] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 126.444170][ T6008] skb_clone+0x20c/0x390 [ 126.448489][ T6008] __netlink_deliver_tap+0x3cc/0x7c0 [ 126.453858][ T6008] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.459101][ T6008] netlink_deliver_tap+0x19d/0x1b0 [ 126.464468][ T6008] netlink_unicast+0x7c4/0x990 [ 126.469295][ T6008] ? __pfx_netlink_unicast+0x10/0x10 [ 126.474622][ T6008] ? __virt_addr_valid+0x183/0x530 [ 126.479760][ T6008] ? __check_object_size+0x48e/0x900 [ 126.485160][ T6008] netlink_sendmsg+0x8e4/0xcb0 [ 126.489968][ T6008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.495291][ T6008] ? aa_sock_msg_perm+0x91/0x160 [ 126.500253][ T6008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.505568][ T6008] __sock_sendmsg+0x221/0x270 [ 126.510278][ T6008] ____sys_sendmsg+0x52a/0x7e0 [ 126.515073][ T6008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.520394][ T6008] __sys_sendmsg+0x292/0x380 [ 126.525005][ T6008] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.530150][ T6008] ? __pfx_vfs_write+0x10/0x10 [ 126.534965][ T6008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.541325][ T6008] ? do_syscall_64+0x100/0x230 [ 126.546112][ T6008] ? do_syscall_64+0xb6/0x230 [ 126.550816][ T6008] do_syscall_64+0xf3/0x230 [ 126.555346][ T6008] ? clear_bhb_loop+0x35/0x90 [ 126.560217][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.566140][ T6008] RIP: 0033:0x7fbe2d37dff9 [ 126.570569][ T6008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.590222][ T6008] RSP: 002b:00007fbe2e0f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.598669][ T6008] RAX: ffffffffffffffda RBX: 00007fbe2d535f80 RCX: 00007fbe2d37dff9 [ 126.606658][ T6008] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000004 [ 126.614672][ T6008] RBP: 00007fbe2e0f4090 R08: 0000000000000000 R09: 0000000000000000 [ 126.622657][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.630643][ T6008] R13: 0000000000000000 R14: 00007fbe2d535f80 R15: 00007ffc0ecc8888 [ 126.638652][ T6008] [ 127.456715][ T6041] vlan2: entered promiscuous mode [ 127.461834][ T6041] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 127.527192][ T6041] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 127.684001][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'. [ 127.758208][ T6054] BUG: Bad page state in process syz.1.154 pfn:2dc58 [ 127.765408][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201d4 pfn:0x2dc58 [ 127.774638][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.781825][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 127.790521][ T6054] raw: 00000000000201d4 0000000000000001 00000000ffffffff 0000000000000000 [ 127.799199][ T6054] page dumped because: page_pool leak [ 127.804678][ T6054] page_owner tracks the page as allocated [ 127.810684][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725698806, free_ts 127701719097 [ 127.827712][ T6054] post_alloc_hook+0x1f3/0x230 [ 127.832551][ T6054] get_page_from_freelist+0x3045/0x3190 [ 127.838193][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 127.843480][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 127.848991][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 127.854998][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 127.860270][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 127.863602][ T4622] Bluetooth: hci0: command 0x0c20 tx timeout [ 127.865717][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 127.877260][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 127.882260][ T6054] __sys_bpf+0x48d/0x810 [ 127.886605][ T6054] __x64_sys_bpf+0x7c/0x90 [ 127.891078][ T6054] do_syscall_64+0xf3/0x230 [ 127.895673][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.901630][ T6054] page last free pid 25 tgid 25 stack trace: [ 127.907702][ T6054] free_unref_page+0xcfb/0xf20 [ 127.912531][ T6054] __folio_put+0x2c7/0x440 [ 127.917050][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 127.922918][ T6054] xdp_umem_release+0xda/0x220 [ 127.927790][ T6054] xp_release_deferred+0xfc/0x180 [ 127.932886][ T6054] process_scheduled_works+0xa63/0x1850 [ 127.938539][ T6054] worker_thread+0x870/0xd30 [ 127.943188][ T6054] kthread+0x2f0/0x390 [ 127.947365][ T6054] ret_from_fork+0x4b/0x80 [ 127.951839][ T6054] ret_from_fork_asm+0x1a/0x30 [ 127.956690][ T6054] Modules linked in: [ 127.960638][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Not tainted 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 127.970965][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.981042][ T6054] Call Trace: [ 127.984354][ T6054] [ 127.987321][ T6054] dump_stack_lvl+0x241/0x360 [ 127.992052][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.997331][ T6054] ? __pfx_print_modules+0x10/0x10 [ 128.002522][ T6054] ? __lock_acquire+0x1384/0x2050 [ 128.007624][ T6054] bad_page+0x166/0x1b0 [ 128.011850][ T6054] free_unref_page+0xed0/0xf20 [ 128.016671][ T6054] skb_release_data+0x6dc/0x8a0 [ 128.021562][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 128.026650][ T6054] ? packet_rcv+0x159/0x14b0 [ 128.031285][ T6054] packet_rcv+0x16f/0x14b0 [ 128.035736][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 128.040610][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 128.046621][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 128.053251][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.059804][ T6054] ? read_tsc+0x9/0x20 [ 128.063908][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 128.069159][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 128.075695][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 128.081875][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 128.088230][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.095025][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 128.100338][ T6054] ? __phys_addr+0xba/0x170 [ 128.104867][ T6054] ? build_skb_around+0x111/0x260 [ 128.109924][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 128.115844][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 128.121265][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 128.126755][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 128.132958][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 128.138803][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.144640][ T6054] ? synchronize_rcu+0x11b/0x360 [ 128.149595][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 128.154912][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 128.161363][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.167477][ T6054] ? _copy_from_user+0xa6/0xe0 [ 128.172384][ T6054] ? bpf_test_init+0x15a/0x180 [ 128.177171][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 128.182666][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 128.188072][ T6054] ? __pfx_lock_release+0x10/0x10 [ 128.193154][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.199013][ T6054] ? __fget_files+0x29/0x470 [ 128.203647][ T6054] ? fput+0x1a8/0x230 [ 128.207655][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.213496][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 128.218468][ T6054] __sys_bpf+0x48d/0x810 [ 128.222747][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 128.227533][ T6054] ? __sys_bind+0x108/0x2d0 [ 128.232072][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.238081][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.244439][ T6054] ? do_syscall_64+0x100/0x230 [ 128.249230][ T6054] __x64_sys_bpf+0x7c/0x90 [ 128.253681][ T6054] do_syscall_64+0xf3/0x230 [ 128.258217][ T6054] ? clear_bhb_loop+0x35/0x90 [ 128.263066][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.269448][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 128.273899][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.293542][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.301999][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 128.310128][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.318133][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 128.326213][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.334204][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 128.342219][ T6054] [ 128.345331][ T6054] Disabling lock debugging due to kernel taint [ 128.351546][ T6054] BUG: Bad page state in process syz.1.154 pfn:302a6 [ 128.358391][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201d5 pfn:0x302a6 [ 128.367581][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.374800][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 128.383633][ T6054] raw: 00000000000201d5 0000000000000001 00000000ffffffff 0000000000000000 [ 128.392288][ T6054] page dumped because: page_pool leak [ 128.397747][ T6054] page_owner tracks the page as allocated [ 128.403576][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725686471, free_ts 127701735388 [ 128.420685][ T6054] post_alloc_hook+0x1f3/0x230 [ 128.425539][ T6054] get_page_from_freelist+0x3045/0x3190 [ 128.431131][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 128.436419][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 128.441923][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 128.447882][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 128.453105][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 128.458616][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 128.464043][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 128.469025][ T6054] __sys_bpf+0x48d/0x810 [ 128.473342][ T6054] __x64_sys_bpf+0x7c/0x90 [ 128.477788][ T6054] do_syscall_64+0xf3/0x230 [ 128.482302][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.488249][ T6054] page last free pid 25 tgid 25 stack trace: [ 128.494275][ T6054] free_unref_page+0xcfb/0xf20 [ 128.499086][ T6054] __folio_put+0x2c7/0x440 [ 128.503556][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 128.509417][ T6054] xdp_umem_release+0xda/0x220 [ 128.514301][ T6054] xp_release_deferred+0xfc/0x180 [ 128.519392][ T6054] process_scheduled_works+0xa63/0x1850 [ 128.525114][ T6054] worker_thread+0x870/0xd30 [ 128.529850][ T6054] kthread+0x2f0/0x390 [ 128.533994][ T6054] ret_from_fork+0x4b/0x80 [ 128.538470][ T6054] ret_from_fork_asm+0x1a/0x30 [ 128.543330][ T6054] Modules linked in: [ 128.547272][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 128.559030][ T6054] Tainted: [B]=BAD_PAGE [ 128.563372][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.573440][ T6054] Call Trace: [ 128.576728][ T6054] [ 128.579666][ T6054] dump_stack_lvl+0x241/0x360 [ 128.584406][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.589646][ T6054] ? __pfx_print_modules+0x10/0x10 [ 128.594804][ T6054] bad_page+0x166/0x1b0 [ 128.598995][ T6054] free_unref_page+0xed0/0xf20 [ 128.603793][ T6054] skb_release_data+0x6dc/0x8a0 [ 128.608664][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 128.613698][ T6054] ? packet_rcv+0x159/0x14b0 [ 128.618305][ T6054] packet_rcv+0x16f/0x14b0 [ 128.622736][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 128.627603][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 128.633689][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 128.640290][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.646808][ T6054] ? read_tsc+0x9/0x20 [ 128.650891][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 128.656132][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 128.662477][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 128.668649][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 128.675026][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.681723][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 128.686941][ T6054] ? __phys_addr+0xba/0x170 [ 128.691466][ T6054] ? build_skb_around+0x111/0x260 [ 128.696511][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 128.702427][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 128.707733][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 128.713213][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 128.719129][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 128.724707][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.730536][ T6054] ? synchronize_rcu+0x11b/0x360 [ 128.735488][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 128.740795][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 128.747058][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.752990][ T6054] ? _copy_from_user+0xa6/0xe0 [ 128.757778][ T6054] ? bpf_test_init+0x15a/0x180 [ 128.762562][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 128.768230][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 128.773628][ T6054] ? __pfx_lock_release+0x10/0x10 [ 128.778677][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.784503][ T6054] ? __fget_files+0x29/0x470 [ 128.789113][ T6054] ? fput+0x1a8/0x230 [ 128.793188][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.799046][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 128.804191][ T6054] __sys_bpf+0x48d/0x810 [ 128.808453][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 128.813230][ T6054] ? __sys_bind+0x108/0x2d0 [ 128.817796][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.823972][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.830320][ T6054] ? do_syscall_64+0x100/0x230 [ 128.835100][ T6054] __x64_sys_bpf+0x7c/0x90 [ 128.839535][ T6054] do_syscall_64+0xf3/0x230 [ 128.844052][ T6054] ? clear_bhb_loop+0x35/0x90 [ 128.848751][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.854750][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 128.859191][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.878809][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.887246][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 128.895236][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 128.903216][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 128.911201][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.919180][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 128.927174][ T6054] [ 128.930287][ T6054] BUG: Bad page state in process syz.1.154 pfn:308ab [ 128.937117][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201d6 pfn:0x308ab [ 128.946327][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 128.953515][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 128.962171][ T6054] raw: 00000000000201d6 0000000000000001 00000000ffffffff 0000000000000000 [ 128.970801][ T6054] page dumped because: page_pool leak [ 128.976203][ T6054] page_owner tracks the page as allocated [ 128.981939][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725674108, free_ts 127701751430 [ 128.998940][ T6054] post_alloc_hook+0x1f3/0x230 [ 129.003767][ T6054] get_page_from_freelist+0x3045/0x3190 [ 129.009360][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 129.014598][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 129.020099][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 129.026042][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 129.031259][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 129.036675][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 129.042067][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 129.047063][ T6054] __sys_bpf+0x48d/0x810 [ 129.051337][ T6054] __x64_sys_bpf+0x7c/0x90 [ 129.055810][ T6054] do_syscall_64+0xf3/0x230 [ 129.060412][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.066375][ T6054] page last free pid 25 tgid 25 stack trace: [ 129.072393][ T6054] free_unref_page+0xcfb/0xf20 [ 129.077229][ T6054] __folio_put+0x2c7/0x440 [ 129.081692][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 129.087559][ T6054] xdp_umem_release+0xda/0x220 [ 129.092377][ T6054] xp_release_deferred+0xfc/0x180 [ 129.097478][ T6054] process_scheduled_works+0xa63/0x1850 [ 129.103164][ T6054] worker_thread+0x870/0xd30 [ 129.107825][ T6054] kthread+0x2f0/0x390 [ 129.111907][ T6054] ret_from_fork+0x4b/0x80 [ 129.116363][ T6054] ret_from_fork_asm+0x1a/0x30 [ 129.121154][ T6054] Modules linked in: [ 129.125112][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 129.136874][ T6054] Tainted: [B]=BAD_PAGE [ 129.141045][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.151196][ T6054] Call Trace: [ 129.154492][ T6054] [ 129.157441][ T6054] dump_stack_lvl+0x241/0x360 [ 129.162147][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.167379][ T6054] ? __pfx_print_modules+0x10/0x10 [ 129.172544][ T6054] bad_page+0x166/0x1b0 [ 129.176744][ T6054] free_unref_page+0xed0/0xf20 [ 129.181533][ T6054] skb_release_data+0x6dc/0x8a0 [ 129.186415][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 129.191474][ T6054] ? packet_rcv+0x159/0x14b0 [ 129.196107][ T6054] packet_rcv+0x16f/0x14b0 [ 129.200590][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 129.205483][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 129.211498][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 129.218658][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.225204][ T6054] ? read_tsc+0x9/0x20 [ 129.229364][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 129.234731][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 129.241090][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 129.247275][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 129.253631][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.260323][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 129.265563][ T6054] ? __phys_addr+0xba/0x170 [ 129.270099][ T6054] ? build_skb_around+0x111/0x260 [ 129.275193][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 129.281125][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 129.286499][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 129.291997][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 129.297935][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 129.303521][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.309363][ T6054] ? synchronize_rcu+0x11b/0x360 [ 129.314321][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 129.319639][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 129.325904][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.331922][ T6054] ? _copy_from_user+0xa6/0xe0 [ 129.336712][ T6054] ? bpf_test_init+0x15a/0x180 [ 129.341496][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 129.347101][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 129.352535][ T6054] ? __pfx_lock_release+0x10/0x10 [ 129.357610][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.363472][ T6054] ? __fget_files+0x29/0x470 [ 129.368099][ T6054] ? fput+0x1a8/0x230 [ 129.372130][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.378145][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 129.383164][ T6054] __sys_bpf+0x48d/0x810 [ 129.387469][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 129.392269][ T6054] ? __sys_bind+0x108/0x2d0 [ 129.396811][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.402821][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.409201][ T6054] ? do_syscall_64+0x100/0x230 [ 129.414049][ T6054] __x64_sys_bpf+0x7c/0x90 [ 129.418557][ T6054] do_syscall_64+0xf3/0x230 [ 129.423123][ T6054] ? clear_bhb_loop+0x35/0x90 [ 129.427900][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.433833][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 129.438270][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.457897][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.466335][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 129.474416][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 129.482404][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 129.490389][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.498375][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 129.506406][ T6054] [ 129.509515][ T6054] BUG: Bad page state in process syz.1.154 pfn:3196d [ 129.516349][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201d7 pfn:0x3196d [ 129.525534][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 129.532687][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 129.541340][ T6054] raw: 00000000000201d7 0000000000000001 00000000ffffffff 0000000000000000 [ 129.549990][ T6054] page dumped because: page_pool leak [ 129.555424][ T6054] page_owner tracks the page as allocated [ 129.561278][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725661972, free_ts 127701767417 [ 129.578359][ T6054] post_alloc_hook+0x1f3/0x230 [ 129.583190][ T6054] get_page_from_freelist+0x3045/0x3190 [ 129.588786][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 129.594046][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 129.599567][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 129.605533][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 129.610754][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 129.616206][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 129.621631][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 129.626643][ T6054] __sys_bpf+0x48d/0x810 [ 129.631041][ T6054] __x64_sys_bpf+0x7c/0x90 [ 129.635515][ T6054] do_syscall_64+0xf3/0x230 [ 129.640120][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.646069][ T6054] page last free pid 25 tgid 25 stack trace: [ 129.652106][ T6054] free_unref_page+0xcfb/0xf20 [ 129.656920][ T6054] __folio_put+0x2c7/0x440 [ 129.661391][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 129.667273][ T6054] xdp_umem_release+0xda/0x220 [ 129.672088][ T6054] xp_release_deferred+0xfc/0x180 [ 129.677165][ T6054] process_scheduled_works+0xa63/0x1850 [ 129.682754][ T6054] worker_thread+0x870/0xd30 [ 129.687403][ T6054] kthread+0x2f0/0x390 [ 129.691534][ T6054] ret_from_fork+0x4b/0x80 [ 129.695998][ T6054] ret_from_fork_asm+0x1a/0x30 [ 129.700789][ T6054] Modules linked in: [ 129.704747][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 129.716501][ T6054] Tainted: [B]=BAD_PAGE [ 129.720668][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.730847][ T6054] Call Trace: [ 129.734137][ T6054] [ 129.737107][ T6054] dump_stack_lvl+0x241/0x360 [ 129.741814][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.747127][ T6054] ? __pfx_print_modules+0x10/0x10 [ 129.752267][ T6054] bad_page+0x166/0x1b0 [ 129.756439][ T6054] free_unref_page+0xed0/0xf20 [ 129.761232][ T6054] skb_release_data+0x6dc/0x8a0 [ 129.766117][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 129.771155][ T6054] ? packet_rcv+0x159/0x14b0 [ 129.775797][ T6054] packet_rcv+0x16f/0x14b0 [ 129.780276][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 129.785149][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 129.791151][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 129.797781][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 129.804310][ T6054] ? read_tsc+0x9/0x20 [ 129.808399][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 129.813629][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 129.820003][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 129.826186][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 129.832539][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 129.839239][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 129.844453][ T6054] ? __phys_addr+0xba/0x170 [ 129.848999][ T6054] ? build_skb_around+0x111/0x260 [ 129.854057][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 129.859994][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 129.865340][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 129.870838][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 129.876757][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 129.882334][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.888166][ T6054] ? synchronize_rcu+0x11b/0x360 [ 129.893129][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 129.898445][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 129.904751][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.910765][ T6054] ? _copy_from_user+0xa6/0xe0 [ 129.915562][ T6054] ? bpf_test_init+0x15a/0x180 [ 129.920351][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 129.925852][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 129.931276][ T6054] ? __pfx_lock_release+0x10/0x10 [ 129.936345][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.942185][ T6054] ? __fget_files+0x29/0x470 [ 129.946804][ T6054] ? fput+0x1a8/0x230 [ 129.950804][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.956667][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 129.961637][ T6054] __sys_bpf+0x48d/0x810 [ 129.965898][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 129.970675][ T6054] ? __sys_bind+0x108/0x2d0 [ 129.975210][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.981227][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.987619][ T6054] ? do_syscall_64+0x100/0x230 [ 129.992417][ T6054] __x64_sys_bpf+0x7c/0x90 [ 129.996858][ T6054] do_syscall_64+0xf3/0x230 [ 130.001405][ T6054] ? clear_bhb_loop+0x35/0x90 [ 130.006127][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.012190][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 130.016639][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.036312][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.044772][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 130.052803][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.060800][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 130.068803][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.076799][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 130.084801][ T6054] [ 130.087912][ T6054] BUG: Bad page state in process syz.1.154 pfn:7726a [ 130.094752][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201d8 pfn:0x7726a [ 130.103930][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.111098][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 130.119745][ T6054] raw: 00000000000201d8 0000000000000001 00000000ffffffff 0000000000000000 [ 130.128368][ T6054] page dumped because: page_pool leak [ 130.133860][ T6054] page_owner tracks the page as allocated [ 130.139700][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725649690, free_ts 127701783292 [ 130.157125][ T6054] post_alloc_hook+0x1f3/0x230 [ 130.161944][ T6054] get_page_from_freelist+0x3045/0x3190 [ 130.167537][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 130.172755][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 130.178383][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 130.184350][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 130.189591][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 130.195014][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 130.200446][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 130.205459][ T6054] __sys_bpf+0x48d/0x810 [ 130.209743][ T6054] __x64_sys_bpf+0x7c/0x90 [ 130.214232][ T6054] do_syscall_64+0xf3/0x230 [ 130.218814][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.224789][ T6054] page last free pid 25 tgid 25 stack trace: [ 130.230798][ T6054] free_unref_page+0xcfb/0xf20 [ 130.235651][ T6054] __folio_put+0x2c7/0x440 [ 130.240095][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 130.245999][ T6054] xdp_umem_release+0xda/0x220 [ 130.250921][ T6054] xp_release_deferred+0xfc/0x180 [ 130.256000][ T6054] process_scheduled_works+0xa63/0x1850 [ 130.261573][ T6054] worker_thread+0x870/0xd30 [ 130.266239][ T6054] kthread+0x2f0/0x390 [ 130.270345][ T6054] ret_from_fork+0x4b/0x80 [ 130.274812][ T6054] ret_from_fork_asm+0x1a/0x30 [ 130.279626][ T6054] Modules linked in: [ 130.283578][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 130.295408][ T6054] Tainted: [B]=BAD_PAGE [ 130.299673][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.309763][ T6054] Call Trace: [ 130.313080][ T6054] [ 130.316027][ T6054] dump_stack_lvl+0x241/0x360 [ 130.320754][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.325987][ T6054] ? __pfx_print_modules+0x10/0x10 [ 130.331161][ T6054] bad_page+0x166/0x1b0 [ 130.335354][ T6054] free_unref_page+0xed0/0xf20 [ 130.340154][ T6054] skb_release_data+0x6dc/0x8a0 [ 130.345030][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 130.350071][ T6054] ? packet_rcv+0x159/0x14b0 [ 130.354682][ T6054] packet_rcv+0x16f/0x14b0 [ 130.359147][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 130.364055][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 130.370090][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 130.376708][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.383242][ T6054] ? read_tsc+0x9/0x20 [ 130.387337][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 130.392555][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 130.398902][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 130.405078][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 130.411523][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.418224][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 130.423458][ T6054] ? __phys_addr+0xba/0x170 [ 130.428035][ T6054] ? build_skb_around+0x111/0x260 [ 130.433118][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 130.439067][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 130.444387][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 130.449870][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 130.455784][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 130.461378][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 130.467234][ T6054] ? synchronize_rcu+0x11b/0x360 [ 130.472212][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 130.477627][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 130.483898][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 130.489818][ T6054] ? _copy_from_user+0xa6/0xe0 [ 130.494602][ T6054] ? bpf_test_init+0x15a/0x180 [ 130.499392][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 130.504893][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 130.510306][ T6054] ? __pfx_lock_release+0x10/0x10 [ 130.515376][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.521209][ T6054] ? __fget_files+0x29/0x470 [ 130.525830][ T6054] ? fput+0x1a8/0x230 [ 130.529835][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 130.535664][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 130.540630][ T6054] __sys_bpf+0x48d/0x810 [ 130.544894][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 130.549683][ T6054] ? __sys_bind+0x108/0x2d0 [ 130.554214][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 130.560236][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.566593][ T6054] ? do_syscall_64+0x100/0x230 [ 130.571464][ T6054] __x64_sys_bpf+0x7c/0x90 [ 130.575901][ T6054] do_syscall_64+0xf3/0x230 [ 130.580418][ T6054] ? clear_bhb_loop+0x35/0x90 [ 130.585114][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.591033][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 130.595464][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.615344][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.623784][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 130.631771][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 130.639952][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 130.647940][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.656101][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 130.664194][ T6054] [ 130.667393][ T6054] BUG: Bad page state in process syz.1.154 pfn:7e1e7 [ 130.674241][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201d9 pfn:0x7e1e7 [ 130.683514][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 130.690717][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 130.699388][ T6054] raw: 00000000000201d9 0000000000000001 00000000ffffffff 0000000000000000 [ 130.708120][ T6054] page dumped because: page_pool leak [ 130.713555][ T6054] page_owner tracks the page as allocated [ 130.719488][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725637055, free_ts 127701799164 [ 130.736567][ T6054] post_alloc_hook+0x1f3/0x230 [ 130.741383][ T6054] get_page_from_freelist+0x3045/0x3190 [ 130.746973][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 130.752222][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 130.757820][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 130.763774][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 130.769119][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 130.774567][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 130.779964][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 130.784971][ T6054] __sys_bpf+0x48d/0x810 [ 130.789276][ T6054] __x64_sys_bpf+0x7c/0x90 [ 130.793783][ T6054] do_syscall_64+0xf3/0x230 [ 130.798335][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.804300][ T6054] page last free pid 25 tgid 25 stack trace: [ 130.810335][ T6054] free_unref_page+0xcfb/0xf20 [ 130.815183][ T6054] __folio_put+0x2c7/0x440 [ 130.819678][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 130.825564][ T6054] xdp_umem_release+0xda/0x220 [ 130.830391][ T6054] xp_release_deferred+0xfc/0x180 [ 130.835493][ T6054] process_scheduled_works+0xa63/0x1850 [ 130.841083][ T6054] worker_thread+0x870/0xd30 [ 130.845721][ T6054] kthread+0x2f0/0x390 [ 130.849804][ T6054] ret_from_fork+0x4b/0x80 [ 130.854263][ T6054] ret_from_fork_asm+0x1a/0x30 [ 130.859049][ T6054] Modules linked in: [ 130.862956][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 130.874685][ T6054] Tainted: [B]=BAD_PAGE [ 130.878857][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.889001][ T6054] Call Trace: [ 130.892299][ T6054] [ 130.895244][ T6054] dump_stack_lvl+0x241/0x360 [ 130.899965][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.905204][ T6054] ? __pfx_print_modules+0x10/0x10 [ 130.910384][ T6054] bad_page+0x166/0x1b0 [ 130.914668][ T6054] free_unref_page+0xed0/0xf20 [ 130.919507][ T6054] skb_release_data+0x6dc/0x8a0 [ 130.924409][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 130.929472][ T6054] ? packet_rcv+0x159/0x14b0 [ 130.934103][ T6054] packet_rcv+0x16f/0x14b0 [ 130.938563][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 130.943447][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 130.949481][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 130.956104][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 130.962631][ T6054] ? read_tsc+0x9/0x20 [ 130.966720][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 130.971938][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 130.978370][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 130.984544][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 130.990892][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 130.997592][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 131.002841][ T6054] ? __phys_addr+0xba/0x170 [ 131.007358][ T6054] ? build_skb_around+0x111/0x260 [ 131.012410][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 131.018322][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 131.023715][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 131.029226][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 131.035158][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 131.040742][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.046582][ T6054] ? synchronize_rcu+0x11b/0x360 [ 131.051552][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 131.056862][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 131.063170][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.069115][ T6054] ? _copy_from_user+0xa6/0xe0 [ 131.073916][ T6054] ? bpf_test_init+0x15a/0x180 [ 131.078702][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 131.084189][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 131.089699][ T6054] ? __pfx_lock_release+0x10/0x10 [ 131.094754][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.100700][ T6054] ? __fget_files+0x29/0x470 [ 131.105312][ T6054] ? fput+0x1a8/0x230 [ 131.109310][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.115147][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 131.120113][ T6054] __sys_bpf+0x48d/0x810 [ 131.124414][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 131.129189][ T6054] ? __sys_bind+0x108/0x2d0 [ 131.133718][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 131.139726][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.146079][ T6054] ? do_syscall_64+0x100/0x230 [ 131.150861][ T6054] __x64_sys_bpf+0x7c/0x90 [ 131.155308][ T6054] do_syscall_64+0xf3/0x230 [ 131.159828][ T6054] ? clear_bhb_loop+0x35/0x90 [ 131.164548][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.170486][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 131.174926][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.194546][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.203000][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 131.210995][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.218982][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 131.226981][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.234979][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 131.242986][ T6054] [ 131.246121][ T6054] BUG: Bad page state in process syz.1.154 pfn:3213c [ 131.252926][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201da pfn:0x3213c [ 131.262192][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.269375][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 131.278035][ T6054] raw: 00000000000201da 0000000000000001 00000000ffffffff 0000000000000000 [ 131.286671][ T6054] page dumped because: page_pool leak [ 131.292046][ T6054] page_owner tracks the page as allocated [ 131.297791][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725624723, free_ts 127701815119 [ 131.314760][ T6054] post_alloc_hook+0x1f3/0x230 [ 131.319562][ T6054] get_page_from_freelist+0x3045/0x3190 [ 131.325199][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 131.330415][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 131.335941][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 131.341858][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 131.347108][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 131.352502][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 131.357926][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 131.362892][ T6054] __sys_bpf+0x48d/0x810 [ 131.367182][ T6054] __x64_sys_bpf+0x7c/0x90 [ 131.371748][ T6054] do_syscall_64+0xf3/0x230 [ 131.376324][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.382238][ T6054] page last free pid 25 tgid 25 stack trace: [ 131.388269][ T6054] free_unref_page+0xcfb/0xf20 [ 131.393083][ T6054] __folio_put+0x2c7/0x440 [ 131.397562][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 131.403428][ T6054] xdp_umem_release+0xda/0x220 [ 131.408231][ T6054] xp_release_deferred+0xfc/0x180 [ 131.413339][ T6054] process_scheduled_works+0xa63/0x1850 [ 131.418927][ T6054] worker_thread+0x870/0xd30 [ 131.423573][ T6054] kthread+0x2f0/0x390 [ 131.427665][ T6054] ret_from_fork+0x4b/0x80 [ 131.432095][ T6054] ret_from_fork_asm+0x1a/0x30 [ 131.436895][ T6054] Modules linked in: [ 131.440807][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 131.452552][ T6054] Tainted: [B]=BAD_PAGE [ 131.456715][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.466869][ T6054] Call Trace: [ 131.470179][ T6054] [ 131.473126][ T6054] dump_stack_lvl+0x241/0x360 [ 131.477839][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.483060][ T6054] ? __pfx_print_modules+0x10/0x10 [ 131.488195][ T6054] bad_page+0x166/0x1b0 [ 131.492363][ T6054] free_unref_page+0xed0/0xf20 [ 131.497154][ T6054] skb_release_data+0x6dc/0x8a0 [ 131.502024][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 131.507058][ T6054] ? packet_rcv+0x159/0x14b0 [ 131.511662][ T6054] packet_rcv+0x16f/0x14b0 [ 131.516097][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 131.520962][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 131.526963][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 131.533567][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 131.540083][ T6054] ? read_tsc+0x9/0x20 [ 131.544175][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 131.549409][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 131.555765][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 131.562036][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 131.568386][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 131.575083][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 131.580298][ T6054] ? __phys_addr+0xba/0x170 [ 131.584816][ T6054] ? build_skb_around+0x111/0x260 [ 131.589866][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 131.595786][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 131.601089][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 131.606570][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 131.612483][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 131.618053][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 131.623879][ T6054] ? synchronize_rcu+0x11b/0x360 [ 131.628837][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 131.634144][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 131.640409][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 131.646340][ T6054] ? _copy_from_user+0xa6/0xe0 [ 131.651126][ T6054] ? bpf_test_init+0x15a/0x180 [ 131.655923][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 131.661438][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 131.666878][ T6054] ? __pfx_lock_release+0x10/0x10 [ 131.671936][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.677765][ T6054] ? __fget_files+0x29/0x470 [ 131.682376][ T6054] ? fput+0x1a8/0x230 [ 131.686376][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.692205][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 131.697167][ T6054] __sys_bpf+0x48d/0x810 [ 131.701427][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 131.706202][ T6054] ? __sys_bind+0x108/0x2d0 [ 131.710733][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 131.716734][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.723085][ T6054] ? do_syscall_64+0x100/0x230 [ 131.727957][ T6054] __x64_sys_bpf+0x7c/0x90 [ 131.732391][ T6054] do_syscall_64+0xf3/0x230 [ 131.737107][ T6054] ? clear_bhb_loop+0x35/0x90 [ 131.742015][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.748050][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 131.752487][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.772124][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.780595][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 131.788622][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 131.796611][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 131.804592][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.812572][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 131.820591][ T6054] [ 131.823685][ T6054] BUG: Bad page state in process syz.1.154 pfn:7f956 [ 131.830478][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201db pfn:0x7f956 [ 131.839663][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.846844][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 131.855506][ T6054] raw: 00000000000201db 0000000000000001 00000000ffffffff 0000000000000000 [ 131.864157][ T6054] page dumped because: page_pool leak [ 131.869649][ T6054] page_owner tracks the page as allocated [ 131.875422][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725611748, free_ts 127701830993 [ 131.892399][ T6054] post_alloc_hook+0x1f3/0x230 [ 131.897214][ T6054] get_page_from_freelist+0x3045/0x3190 [ 131.902773][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 131.908017][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 131.913507][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 131.919425][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 131.924684][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 131.930101][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 131.935523][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 131.940477][ T6054] __sys_bpf+0x48d/0x810 [ 131.944777][ T6054] __x64_sys_bpf+0x7c/0x90 [ 131.949249][ T6054] do_syscall_64+0xf3/0x230 [ 131.953786][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.959707][ T6054] page last free pid 25 tgid 25 stack trace: [ 131.965747][ T6054] free_unref_page+0xcfb/0xf20 [ 131.970566][ T6054] __folio_put+0x2c7/0x440 [ 131.975040][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 131.980867][ T6054] xdp_umem_release+0xda/0x220 [ 131.985678][ T6054] xp_release_deferred+0xfc/0x180 [ 131.990721][ T6054] process_scheduled_works+0xa63/0x1850 [ 131.996327][ T6054] worker_thread+0x870/0xd30 [ 132.000966][ T6054] kthread+0x2f0/0x390 [ 132.005107][ T6054] ret_from_fork+0x4b/0x80 [ 132.009579][ T6054] ret_from_fork_asm+0x1a/0x30 [ 132.014429][ T6054] Modules linked in: [ 132.018366][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 132.030117][ T6054] Tainted: [B]=BAD_PAGE [ 132.034301][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.044398][ T6054] Call Trace: [ 132.047713][ T6054] [ 132.050676][ T6054] dump_stack_lvl+0x241/0x360 [ 132.055395][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.060650][ T6054] ? __pfx_print_modules+0x10/0x10 [ 132.065785][ T6054] bad_page+0x166/0x1b0 [ 132.069954][ T6054] free_unref_page+0xed0/0xf20 [ 132.074738][ T6054] skb_release_data+0x6dc/0x8a0 [ 132.079600][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 132.084646][ T6054] ? packet_rcv+0x159/0x14b0 [ 132.089267][ T6054] packet_rcv+0x16f/0x14b0 [ 132.093702][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 132.098565][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 132.104584][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 132.111197][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.117806][ T6054] ? read_tsc+0x9/0x20 [ 132.121895][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 132.127157][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 132.133503][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 132.139673][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 132.146021][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.152743][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 132.157957][ T6054] ? __phys_addr+0xba/0x170 [ 132.162480][ T6054] ? build_skb_around+0x111/0x260 [ 132.167535][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 132.173564][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 132.179148][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 132.184656][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 132.190586][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 132.196168][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.202024][ T6054] ? synchronize_rcu+0x11b/0x360 [ 132.207003][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 132.212407][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 132.218707][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.224634][ T6054] ? _copy_from_user+0xa6/0xe0 [ 132.229446][ T6054] ? bpf_test_init+0x15a/0x180 [ 132.234403][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 132.239884][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 132.245283][ T6054] ? __pfx_lock_release+0x10/0x10 [ 132.250339][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.256165][ T6054] ? __fget_files+0x29/0x470 [ 132.260775][ T6054] ? fput+0x1a8/0x230 [ 132.264808][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.270659][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 132.275652][ T6054] __sys_bpf+0x48d/0x810 [ 132.280186][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 132.284994][ T6054] ? __sys_bind+0x108/0x2d0 [ 132.289555][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 132.295569][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.301919][ T6054] ? do_syscall_64+0x100/0x230 [ 132.306696][ T6054] __x64_sys_bpf+0x7c/0x90 [ 132.311129][ T6054] do_syscall_64+0xf3/0x230 [ 132.315644][ T6054] ? clear_bhb_loop+0x35/0x90 [ 132.320335][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.326248][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 132.330762][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.350566][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.359014][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 132.367003][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.374992][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 132.382975][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.390978][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 132.398979][ T6054] [ 132.402079][ T6054] BUG: Bad page state in process syz.1.154 pfn:28fc2 [ 132.408935][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201dc pfn:0x28fc2 [ 132.418111][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 132.425384][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 132.434464][ T6054] raw: 00000000000201dc 0000000000000001 00000000ffffffff 0000000000000000 [ 132.443095][ T6054] page dumped because: page_pool leak [ 132.448495][ T6054] page_owner tracks the page as allocated [ 132.454244][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725599551, free_ts 127701847038 [ 132.471212][ T6054] post_alloc_hook+0x1f3/0x230 [ 132.476026][ T6054] get_page_from_freelist+0x3045/0x3190 [ 132.481613][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 132.486886][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 132.492387][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 132.498338][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 132.503608][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 132.509057][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 132.514521][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 132.519500][ T6054] __sys_bpf+0x48d/0x810 [ 132.523802][ T6054] __x64_sys_bpf+0x7c/0x90 [ 132.528275][ T6054] do_syscall_64+0xf3/0x230 [ 132.532797][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.538769][ T6054] page last free pid 25 tgid 25 stack trace: [ 132.544795][ T6054] free_unref_page+0xcfb/0xf20 [ 132.549605][ T6054] __folio_put+0x2c7/0x440 [ 132.554074][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 132.559913][ T6054] xdp_umem_release+0xda/0x220 [ 132.564727][ T6054] xp_release_deferred+0xfc/0x180 [ 132.569786][ T6054] process_scheduled_works+0xa63/0x1850 [ 132.575410][ T6054] worker_thread+0x870/0xd30 [ 132.580043][ T6054] kthread+0x2f0/0x390 [ 132.584177][ T6054] ret_from_fork+0x4b/0x80 [ 132.588628][ T6054] ret_from_fork_asm+0x1a/0x30 [ 132.593466][ T6054] Modules linked in: [ 132.597388][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 132.609130][ T6054] Tainted: [B]=BAD_PAGE [ 132.613284][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.623373][ T6054] Call Trace: [ 132.626672][ T6054] [ 132.629608][ T6054] dump_stack_lvl+0x241/0x360 [ 132.634310][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.639533][ T6054] ? __pfx_print_modules+0x10/0x10 [ 132.644682][ T6054] bad_page+0x166/0x1b0 [ 132.648887][ T6054] free_unref_page+0xed0/0xf20 [ 132.653702][ T6054] skb_release_data+0x6dc/0x8a0 [ 132.658624][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 132.663673][ T6054] ? packet_rcv+0x159/0x14b0 [ 132.668298][ T6054] packet_rcv+0x16f/0x14b0 [ 132.672739][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 132.677637][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 132.683650][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 132.690274][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 132.696800][ T6054] ? read_tsc+0x9/0x20 [ 132.700892][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 132.706116][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 132.712485][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 132.718660][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 132.725006][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 132.731695][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 132.736933][ T6054] ? __phys_addr+0xba/0x170 [ 132.741479][ T6054] ? build_skb_around+0x111/0x260 [ 132.746530][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 132.752450][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 132.757752][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 132.763254][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 132.769208][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 132.774790][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 132.780624][ T6054] ? synchronize_rcu+0x11b/0x360 [ 132.785591][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 132.790914][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 132.797446][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 132.803369][ T6054] ? _copy_from_user+0xa6/0xe0 [ 132.808154][ T6054] ? bpf_test_init+0x15a/0x180 [ 132.812938][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 132.818442][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 132.823941][ T6054] ? __pfx_lock_release+0x10/0x10 [ 132.829016][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.834863][ T6054] ? __fget_files+0x29/0x470 [ 132.839476][ T6054] ? fput+0x1a8/0x230 [ 132.843473][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.849303][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 132.854273][ T6054] __sys_bpf+0x48d/0x810 [ 132.858543][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 132.863326][ T6054] ? __sys_bind+0x108/0x2d0 [ 132.867862][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 132.873869][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.880252][ T6054] ? do_syscall_64+0x100/0x230 [ 132.885042][ T6054] __x64_sys_bpf+0x7c/0x90 [ 132.889486][ T6054] do_syscall_64+0xf3/0x230 [ 132.894009][ T6054] ? clear_bhb_loop+0x35/0x90 [ 132.898751][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.904683][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 132.909117][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.928911][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.937346][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 132.945329][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 132.953317][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 132.961397][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.969392][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 132.977384][ T6054] [ 132.980476][ T6054] BUG: Bad page state in process syz.1.154 pfn:3196a [ 132.987340][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201dd pfn:0x3196a [ 132.992856][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.996491][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.009973][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 133.018616][ T6054] raw: 00000000000201dd 0000000000000001 00000000ffffffff 0000000000000000 [ 133.027254][ T6054] page dumped because: page_pool leak [ 133.032649][ T6054] page_owner tracks the page as allocated [ 133.038406][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725586397, free_ts 127701862903 [ 133.055390][ T6054] post_alloc_hook+0x1f3/0x230 [ 133.060274][ T6054] get_page_from_freelist+0x3045/0x3190 [ 133.065887][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 133.071133][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 133.076632][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 133.082550][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 133.087803][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 133.093228][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 133.098655][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 133.103654][ T6054] __sys_bpf+0x48d/0x810 [ 133.107935][ T6054] __x64_sys_bpf+0x7c/0x90 [ 133.112375][ T6054] do_syscall_64+0xf3/0x230 [ 133.116920][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.122865][ T6054] page last free pid 25 tgid 25 stack trace: [ 133.128896][ T6054] free_unref_page+0xcfb/0xf20 [ 133.133729][ T6054] __folio_put+0x2c7/0x440 [ 133.138189][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 133.144063][ T6054] xdp_umem_release+0xda/0x220 [ 133.148893][ T6054] xp_release_deferred+0xfc/0x180 [ 133.153992][ T6054] process_scheduled_works+0xa63/0x1850 [ 133.159581][ T6054] worker_thread+0x870/0xd30 [ 133.164226][ T6054] kthread+0x2f0/0x390 [ 133.168329][ T6054] ret_from_fork+0x4b/0x80 [ 133.172796][ T6054] ret_from_fork_asm+0x1a/0x30 [ 133.177622][ T6054] Modules linked in: [ 133.181528][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 133.193284][ T6054] Tainted: [B]=BAD_PAGE [ 133.197454][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.207526][ T6054] Call Trace: [ 133.210818][ T6054] [ 133.213775][ T6054] dump_stack_lvl+0x241/0x360 [ 133.218486][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.223717][ T6054] ? __pfx_print_modules+0x10/0x10 [ 133.228857][ T6054] bad_page+0x166/0x1b0 [ 133.233032][ T6054] free_unref_page+0xed0/0xf20 [ 133.237826][ T6054] skb_release_data+0x6dc/0x8a0 [ 133.242700][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 133.247795][ T6054] ? packet_rcv+0x159/0x14b0 [ 133.252495][ T6054] packet_rcv+0x16f/0x14b0 [ 133.256957][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 133.261832][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 133.267847][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 133.274461][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.281077][ T6054] ? read_tsc+0x9/0x20 [ 133.285171][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 133.290402][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 133.296759][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 133.302977][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 133.309334][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.316120][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 133.321420][ T6054] ? __phys_addr+0xba/0x170 [ 133.325939][ T6054] ? build_skb_around+0x111/0x260 [ 133.330988][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 133.336910][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 133.342210][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 133.347690][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 133.353600][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 133.359165][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.364990][ T6054] ? synchronize_rcu+0x11b/0x360 [ 133.370038][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 133.375379][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 133.381683][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.387629][ T6054] ? _copy_from_user+0xa6/0xe0 [ 133.392451][ T6054] ? bpf_test_init+0x15a/0x180 [ 133.397263][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 133.402778][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 133.408279][ T6054] ? __pfx_lock_release+0x10/0x10 [ 133.413542][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.419471][ T6054] ? __fget_files+0x29/0x470 [ 133.424079][ T6054] ? fput+0x1a8/0x230 [ 133.428073][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.434090][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 133.439051][ T6054] __sys_bpf+0x48d/0x810 [ 133.443399][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 133.448181][ T6054] ? __sys_bind+0x108/0x2d0 [ 133.452796][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.458984][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.465481][ T6054] ? do_syscall_64+0x100/0x230 [ 133.470275][ T6054] __x64_sys_bpf+0x7c/0x90 [ 133.474711][ T6054] do_syscall_64+0xf3/0x230 [ 133.479237][ T6054] ? clear_bhb_loop+0x35/0x90 [ 133.483937][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.489850][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 133.494289][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.514008][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.522525][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 133.530506][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 133.538686][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 133.546666][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.554647][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 133.562728][ T6054] [ 133.565835][ T6054] BUG: Bad page state in process syz.1.154 pfn:2c465 [ 133.572722][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201de pfn:0x2c465 [ 133.581896][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.589049][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 133.597845][ T6054] raw: 00000000000201de 0000000000000001 00000000ffffffff 0000000000000000 [ 133.606454][ T6054] page dumped because: page_pool leak [ 133.611932][ T6054] page_owner tracks the page as allocated [ 133.617768][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725573559, free_ts 127701879053 [ 133.635007][ T6054] post_alloc_hook+0x1f3/0x230 [ 133.639795][ T6054] get_page_from_freelist+0x3045/0x3190 [ 133.645386][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 133.650613][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 133.656132][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 133.662052][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 133.667308][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 133.672711][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 133.678186][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 133.683174][ T6054] __sys_bpf+0x48d/0x810 [ 133.687492][ T6054] __x64_sys_bpf+0x7c/0x90 [ 133.691944][ T6054] do_syscall_64+0xf3/0x230 [ 133.696534][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.702449][ T6054] page last free pid 25 tgid 25 stack trace: [ 133.708477][ T6054] free_unref_page+0xcfb/0xf20 [ 133.713268][ T6054] __folio_put+0x2c7/0x440 [ 133.717765][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 133.723656][ T6054] xdp_umem_release+0xda/0x220 [ 133.728456][ T6054] xp_release_deferred+0xfc/0x180 [ 133.733547][ T6054] process_scheduled_works+0xa63/0x1850 [ 133.739111][ T6054] worker_thread+0x870/0xd30 [ 133.743756][ T6054] kthread+0x2f0/0x390 [ 133.747855][ T6054] ret_from_fork+0x4b/0x80 [ 133.752283][ T6054] ret_from_fork_asm+0x1a/0x30 [ 133.757112][ T6054] Modules linked in: [ 133.761017][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 133.772769][ T6054] Tainted: [B]=BAD_PAGE [ 133.776948][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.787014][ T6054] Call Trace: [ 133.790302][ T6054] [ 133.793239][ T6054] dump_stack_lvl+0x241/0x360 [ 133.797953][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.803183][ T6054] ? __pfx_print_modules+0x10/0x10 [ 133.808320][ T6054] bad_page+0x166/0x1b0 [ 133.812496][ T6054] free_unref_page+0xed0/0xf20 [ 133.817282][ T6054] skb_release_data+0x6dc/0x8a0 [ 133.822149][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 133.827272][ T6054] ? packet_rcv+0x159/0x14b0 [ 133.831876][ T6054] packet_rcv+0x16f/0x14b0 [ 133.836312][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 133.841176][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 133.847177][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 133.853786][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 133.860304][ T6054] ? read_tsc+0x9/0x20 [ 133.864390][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 133.869609][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 133.875954][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 133.882130][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 133.888564][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 133.895258][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 133.900473][ T6054] ? __phys_addr+0xba/0x170 [ 133.904998][ T6054] ? build_skb_around+0x111/0x260 [ 133.910053][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 133.916438][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 133.921743][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 133.927251][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 133.933184][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 133.938767][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.944595][ T6054] ? synchronize_rcu+0x11b/0x360 [ 133.949544][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 133.954851][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 133.961153][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.967157][ T6054] ? _copy_from_user+0xa6/0xe0 [ 133.971970][ T6054] ? bpf_test_init+0x15a/0x180 [ 133.976748][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 133.982224][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 133.987636][ T6054] ? __pfx_lock_release+0x10/0x10 [ 133.992721][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 133.998545][ T6054] ? __fget_files+0x29/0x470 [ 134.003155][ T6054] ? fput+0x1a8/0x230 [ 134.007176][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.013029][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 134.017996][ T6054] __sys_bpf+0x48d/0x810 [ 134.022253][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 134.027029][ T6054] ? __sys_bind+0x108/0x2d0 [ 134.031562][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.037572][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.043927][ T6054] ? do_syscall_64+0x100/0x230 [ 134.048703][ T6054] __x64_sys_bpf+0x7c/0x90 [ 134.053132][ T6054] do_syscall_64+0xf3/0x230 [ 134.057647][ T6054] ? clear_bhb_loop+0x35/0x90 [ 134.062347][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.068261][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 134.072692][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.092318][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.100756][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 134.108760][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.116754][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 134.124743][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.132754][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 134.140750][ T6054] [ 134.143842][ T6054] BUG: Bad page state in process syz.1.154 pfn:7ca94 [ 134.150631][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201df pfn:0x7ca94 [ 134.159855][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.167037][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 134.175772][ T6054] raw: 00000000000201df 0000000000000001 00000000ffffffff 0000000000000000 [ 134.184454][ T6054] page dumped because: page_pool leak [ 134.189885][ T6054] page_owner tracks the page as allocated [ 134.195642][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725561070, free_ts 127701895096 [ 134.212715][ T6054] post_alloc_hook+0x1f3/0x230 [ 134.217531][ T6054] get_page_from_freelist+0x3045/0x3190 [ 134.223122][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 134.228389][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 134.234009][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 134.239938][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 134.245182][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 134.250601][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 134.256119][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 134.261069][ T6054] __sys_bpf+0x48d/0x810 [ 134.265343][ T6054] __x64_sys_bpf+0x7c/0x90 [ 134.269768][ T6054] do_syscall_64+0xf3/0x230 [ 134.274295][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.280205][ T6054] page last free pid 25 tgid 25 stack trace: [ 134.286233][ T6054] free_unref_page+0xcfb/0xf20 [ 134.291045][ T6054] __folio_put+0x2c7/0x440 [ 134.295513][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 134.301358][ T6054] xdp_umem_release+0xda/0x220 [ 134.306180][ T6054] xp_release_deferred+0xfc/0x180 [ 134.311247][ T6054] process_scheduled_works+0xa63/0x1850 [ 134.316868][ T6054] worker_thread+0x870/0xd30 [ 134.321526][ T6054] kthread+0x2f0/0x390 [ 134.325631][ T6054] ret_from_fork+0x4b/0x80 [ 134.330066][ T6054] ret_from_fork_asm+0x1a/0x30 [ 134.334960][ T6054] Modules linked in: [ 134.338880][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 134.350625][ T6054] Tainted: [B]=BAD_PAGE [ 134.354791][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.364868][ T6054] Call Trace: [ 134.368184][ T6054] [ 134.371137][ T6054] dump_stack_lvl+0x241/0x360 [ 134.375847][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.381160][ T6054] ? __pfx_print_modules+0x10/0x10 [ 134.386306][ T6054] bad_page+0x166/0x1b0 [ 134.390504][ T6054] free_unref_page+0xed0/0xf20 [ 134.395295][ T6054] skb_release_data+0x6dc/0x8a0 [ 134.400171][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 134.405211][ T6054] ? packet_rcv+0x159/0x14b0 [ 134.409825][ T6054] packet_rcv+0x16f/0x14b0 [ 134.414269][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 134.419165][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 134.425174][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 134.431819][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 134.438346][ T6054] ? read_tsc+0x9/0x20 [ 134.442435][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 134.447663][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 134.454011][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 134.460188][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 134.466554][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 134.473261][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 134.478575][ T6054] ? __phys_addr+0xba/0x170 [ 134.483092][ T6054] ? build_skb_around+0x111/0x260 [ 134.488140][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 134.494079][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 134.499391][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 134.504878][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 134.510789][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 134.516362][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 134.522190][ T6054] ? synchronize_rcu+0x11b/0x360 [ 134.527143][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 134.532491][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 134.538760][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 134.544683][ T6054] ? _copy_from_user+0xa6/0xe0 [ 134.549496][ T6054] ? bpf_test_init+0x15a/0x180 [ 134.554299][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 134.559794][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 134.565200][ T6054] ? __pfx_lock_release+0x10/0x10 [ 134.570249][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.576075][ T6054] ? __fget_files+0x29/0x470 [ 134.580681][ T6054] ? fput+0x1a8/0x230 [ 134.584678][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.590509][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 134.595466][ T6054] __sys_bpf+0x48d/0x810 [ 134.599725][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 134.604501][ T6054] ? __sys_bind+0x108/0x2d0 [ 134.609058][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.615062][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.621422][ T6054] ? do_syscall_64+0x100/0x230 [ 134.626206][ T6054] __x64_sys_bpf+0x7c/0x90 [ 134.630645][ T6054] do_syscall_64+0xf3/0x230 [ 134.635162][ T6054] ? clear_bhb_loop+0x35/0x90 [ 134.639877][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.645796][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 134.650222][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.669842][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.678273][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 134.686259][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.694242][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 134.702230][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.710211][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 134.718204][ T6054] [ 134.721309][ T6054] BUG: Bad page state in process syz.1.154 pfn:269d1 [ 134.728145][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201e0 pfn:0x269d1 [ 134.737321][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 134.744504][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 134.753132][ T6054] raw: 00000000000201e0 0000000000000001 00000000ffffffff 0000000000000000 [ 134.761761][ T6054] page dumped because: page_pool leak [ 134.767155][ T6054] page_owner tracks the page as allocated [ 134.772874][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725547867, free_ts 127701910810 [ 134.789845][ T6054] post_alloc_hook+0x1f3/0x230 [ 134.794657][ T6054] get_page_from_freelist+0x3045/0x3190 [ 134.800217][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 134.805447][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 134.810915][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 134.816844][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 134.822072][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 134.827510][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 134.832901][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 134.837885][ T6054] __sys_bpf+0x48d/0x810 [ 134.842145][ T6054] __x64_sys_bpf+0x7c/0x90 [ 134.846641][ T6054] do_syscall_64+0xf3/0x230 [ 134.851153][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.857113][ T6054] page last free pid 25 tgid 25 stack trace: [ 134.863113][ T6054] free_unref_page+0xcfb/0xf20 [ 134.867931][ T6054] __folio_put+0x2c7/0x440 [ 134.872398][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 134.878277][ T6054] xdp_umem_release+0xda/0x220 [ 134.883076][ T6054] xp_release_deferred+0xfc/0x180 [ 134.888142][ T6054] process_scheduled_works+0xa63/0x1850 [ 134.893756][ T6054] worker_thread+0x870/0xd30 [ 134.898385][ T6054] kthread+0x2f0/0x390 [ 134.902475][ T6054] ret_from_fork+0x4b/0x80 [ 134.906957][ T6054] ret_from_fork_asm+0x1a/0x30 [ 134.911744][ T6054] Modules linked in: [ 134.915674][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 134.927411][ T6054] Tainted: [B]=BAD_PAGE [ 134.931570][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.941639][ T6054] Call Trace: [ 134.944927][ T6054] [ 134.947864][ T6054] dump_stack_lvl+0x241/0x360 [ 134.952618][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.957840][ T6054] ? __pfx_print_modules+0x10/0x10 [ 134.962977][ T6054] bad_page+0x166/0x1b0 [ 134.967152][ T6054] free_unref_page+0xed0/0xf20 [ 134.971943][ T6054] skb_release_data+0x6dc/0x8a0 [ 134.976813][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 134.981849][ T6054] ? packet_rcv+0x159/0x14b0 [ 134.986458][ T6054] packet_rcv+0x16f/0x14b0 [ 134.990894][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 134.995760][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 135.001763][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 135.008365][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 135.014884][ T6054] ? read_tsc+0x9/0x20 [ 135.018972][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 135.024188][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 135.030539][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 135.036720][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 135.043067][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 135.049759][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 135.054972][ T6054] ? __phys_addr+0xba/0x170 [ 135.059514][ T6054] ? build_skb_around+0x111/0x260 [ 135.064568][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 135.070514][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 135.075817][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 135.081295][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 135.087210][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 135.092782][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.098611][ T6054] ? synchronize_rcu+0x11b/0x360 [ 135.103563][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 135.108875][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 135.115137][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.121060][ T6054] ? _copy_from_user+0xa6/0xe0 [ 135.125846][ T6054] ? bpf_test_init+0x15a/0x180 [ 135.130644][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 135.136132][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 135.141547][ T6054] ? __pfx_lock_release+0x10/0x10 [ 135.146602][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.152472][ T6054] ? __fget_files+0x29/0x470 [ 135.157082][ T6054] ? fput+0x1a8/0x230 [ 135.161081][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.166912][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 135.171866][ T6054] __sys_bpf+0x48d/0x810 [ 135.176123][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 135.180898][ T6054] ? __sys_bind+0x108/0x2d0 [ 135.185861][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.191862][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.198207][ T6054] ? do_syscall_64+0x100/0x230 [ 135.202985][ T6054] __x64_sys_bpf+0x7c/0x90 [ 135.207415][ T6054] do_syscall_64+0xf3/0x230 [ 135.211927][ T6054] ? clear_bhb_loop+0x35/0x90 [ 135.216620][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.222543][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 135.226977][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.246615][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.255057][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 135.263041][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 135.271023][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 135.279010][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.286992][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 135.295059][ T6054] [ 135.298199][ T6054] BUG: Bad page state in process syz.1.154 pfn:1d687 [ 135.305050][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201e1 pfn:0x1d687 [ 135.314242][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 135.321404][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 135.330071][ T6054] raw: 00000000000201e1 0000000000000001 00000000ffffffff 0000000000000000 [ 135.338689][ T6054] page dumped because: page_pool leak [ 135.344107][ T6054] page_owner tracks the page as allocated [ 135.349840][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725534788, free_ts 127701926704 [ 135.366824][ T6054] post_alloc_hook+0x1f3/0x230 [ 135.371625][ T6054] get_page_from_freelist+0x3045/0x3190 [ 135.377327][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 135.382562][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 135.388092][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 135.394086][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 135.399329][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 135.404750][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 135.410169][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 135.415169][ T6054] __sys_bpf+0x48d/0x810 [ 135.419454][ T6054] __x64_sys_bpf+0x7c/0x90 [ 135.423944][ T6054] do_syscall_64+0xf3/0x230 [ 135.428496][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.434478][ T6054] page last free pid 25 tgid 25 stack trace: [ 135.440506][ T6054] free_unref_page+0xcfb/0xf20 [ 135.445369][ T6054] __folio_put+0x2c7/0x440 [ 135.449845][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 135.455716][ T6054] xdp_umem_release+0xda/0x220 [ 135.460500][ T6054] xp_release_deferred+0xfc/0x180 [ 135.465610][ T6054] process_scheduled_works+0xa63/0x1850 [ 135.471263][ T6054] worker_thread+0x870/0xd30 [ 135.475905][ T6054] kthread+0x2f0/0x390 [ 135.479985][ T6054] ret_from_fork+0x4b/0x80 [ 135.484617][ T6054] ret_from_fork_asm+0x1a/0x30 [ 135.489410][ T6054] Modules linked in: [ 135.493394][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 135.505155][ T6054] Tainted: [B]=BAD_PAGE [ 135.509334][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.519399][ T6054] Call Trace: [ 135.522697][ T6054] [ 135.525640][ T6054] dump_stack_lvl+0x241/0x360 [ 135.530347][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.535592][ T6054] ? __pfx_print_modules+0x10/0x10 [ 135.540761][ T6054] bad_page+0x166/0x1b0 [ 135.544945][ T6054] free_unref_page+0xed0/0xf20 [ 135.549741][ T6054] skb_release_data+0x6dc/0x8a0 [ 135.554635][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 135.559771][ T6054] ? packet_rcv+0x159/0x14b0 [ 135.564390][ T6054] packet_rcv+0x16f/0x14b0 [ 135.568830][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 135.573694][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 135.579697][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 135.586303][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 135.592853][ T6054] ? read_tsc+0x9/0x20 [ 135.596946][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 135.602169][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 135.608547][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 135.614740][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 135.621107][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 135.627816][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 135.633034][ T6054] ? __phys_addr+0xba/0x170 [ 135.637582][ T6054] ? build_skb_around+0x111/0x260 [ 135.642639][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 135.648567][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 135.653876][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 135.659383][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 135.665295][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 135.670870][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.676716][ T6054] ? synchronize_rcu+0x11b/0x360 [ 135.681755][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 135.687065][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 135.693339][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.699464][ T6054] ? _copy_from_user+0xa6/0xe0 [ 135.704255][ T6054] ? bpf_test_init+0x15a/0x180 [ 135.709045][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 135.714578][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 135.720005][ T6054] ? __pfx_lock_release+0x10/0x10 [ 135.725062][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.730899][ T6054] ? __fget_files+0x29/0x470 [ 135.735544][ T6054] ? fput+0x1a8/0x230 [ 135.739548][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.745388][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 135.750348][ T6054] __sys_bpf+0x48d/0x810 [ 135.754624][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 135.759399][ T6054] ? __sys_bind+0x108/0x2d0 [ 135.763926][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.769927][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.776280][ T6054] ? do_syscall_64+0x100/0x230 [ 135.781056][ T6054] __x64_sys_bpf+0x7c/0x90 [ 135.785491][ T6054] do_syscall_64+0xf3/0x230 [ 135.790008][ T6054] ? clear_bhb_loop+0x35/0x90 [ 135.794727][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.800647][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 135.805076][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.824697][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.833127][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 135.841111][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 135.849094][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 135.857087][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.865071][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 135.873066][ T6054] [ 135.876168][ T6054] BUG: Bad page state in process syz.1.154 pfn:24524 [ 135.883055][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201e2 pfn:0x24524 [ 135.892227][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 135.899410][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 135.908062][ T6054] raw: 00000000000201e2 0000000000000001 00000000ffffffff 0000000000000000 [ 135.916720][ T6054] page dumped because: page_pool leak [ 135.922098][ T6054] page_owner tracks the page as allocated [ 135.927843][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725521972, free_ts 127701942894 [ 135.944824][ T6054] post_alloc_hook+0x1f3/0x230 [ 135.949627][ T6054] get_page_from_freelist+0x3045/0x3190 [ 135.955348][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 135.960633][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 135.966148][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 135.972061][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 135.977311][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 135.982704][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 135.988135][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 135.993091][ T6054] __sys_bpf+0x48d/0x810 [ 135.997396][ T6054] __x64_sys_bpf+0x7c/0x90 [ 136.001835][ T6054] do_syscall_64+0xf3/0x230 [ 136.006397][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.012358][ T6054] page last free pid 25 tgid 25 stack trace: [ 136.018434][ T6054] free_unref_page+0xcfb/0xf20 [ 136.023250][ T6054] __folio_put+0x2c7/0x440 [ 136.027856][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 136.033794][ T6054] xdp_umem_release+0xda/0x220 [ 136.038623][ T6054] xp_release_deferred+0xfc/0x180 [ 136.043736][ T6054] process_scheduled_works+0xa63/0x1850 [ 136.049312][ T6054] worker_thread+0x870/0xd30 [ 136.053989][ T6054] kthread+0x2f0/0x390 [ 136.058099][ T6054] ret_from_fork+0x4b/0x80 [ 136.062542][ T6054] ret_from_fork_asm+0x1a/0x30 [ 136.067420][ T6054] Modules linked in: [ 136.071338][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 136.083105][ T6054] Tainted: [B]=BAD_PAGE [ 136.087267][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.097517][ T6054] Call Trace: [ 136.100817][ T6054] [ 136.103772][ T6054] dump_stack_lvl+0x241/0x360 [ 136.108477][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.113723][ T6054] ? __pfx_print_modules+0x10/0x10 [ 136.118899][ T6054] bad_page+0x166/0x1b0 [ 136.123104][ T6054] free_unref_page+0xed0/0xf20 [ 136.127894][ T6054] skb_release_data+0x6dc/0x8a0 [ 136.132768][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 136.137808][ T6054] ? packet_rcv+0x159/0x14b0 [ 136.142433][ T6054] packet_rcv+0x16f/0x14b0 [ 136.146965][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 136.151839][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 136.157854][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 136.164481][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 136.171008][ T6054] ? read_tsc+0x9/0x20 [ 136.175192][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 136.180441][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 136.186786][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 136.193056][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 136.199476][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 136.206206][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 136.211465][ T6054] ? __phys_addr+0xba/0x170 [ 136.216002][ T6054] ? build_skb_around+0x111/0x260 [ 136.221056][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 136.227062][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 136.232372][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 136.238207][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 136.244155][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 136.249728][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.255646][ T6054] ? synchronize_rcu+0x11b/0x360 [ 136.260612][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 136.265935][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 136.272203][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.278126][ T6054] ? _copy_from_user+0xa6/0xe0 [ 136.282911][ T6054] ? bpf_test_init+0x15a/0x180 [ 136.287692][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 136.293461][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 136.298888][ T6054] ? __pfx_lock_release+0x10/0x10 [ 136.304110][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.309941][ T6054] ? __fget_files+0x29/0x470 [ 136.314554][ T6054] ? fput+0x1a8/0x230 [ 136.318621][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.324456][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 136.329421][ T6054] __sys_bpf+0x48d/0x810 [ 136.333681][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 136.338459][ T6054] ? __sys_bind+0x108/0x2d0 [ 136.342994][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.348998][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.355437][ T6054] ? do_syscall_64+0x100/0x230 [ 136.360220][ T6054] __x64_sys_bpf+0x7c/0x90 [ 136.364658][ T6054] do_syscall_64+0xf3/0x230 [ 136.369175][ T6054] ? clear_bhb_loop+0x35/0x90 [ 136.373862][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.379774][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 136.384216][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.403853][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.412309][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 136.420291][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 136.428275][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 136.436281][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.444261][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 136.452252][ T6054] [ 136.455347][ T6054] BUG: Bad page state in process syz.1.154 pfn:65639 [ 136.462156][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201e3 pfn:0x65639 [ 136.471366][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.478560][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 136.487204][ T6054] raw: 00000000000201e3 0000000000000001 00000000ffffffff 0000000000000000 [ 136.495831][ T6054] page dumped because: page_pool leak [ 136.501203][ T6054] page_owner tracks the page as allocated [ 136.506945][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725509267, free_ts 127701959086 [ 136.523940][ T6054] post_alloc_hook+0x1f3/0x230 [ 136.528736][ T6054] get_page_from_freelist+0x3045/0x3190 [ 136.534331][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 136.539556][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 136.545064][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 136.550976][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 136.556220][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 136.561711][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 136.567161][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 136.572114][ T6054] __sys_bpf+0x48d/0x810 [ 136.576393][ T6054] __x64_sys_bpf+0x7c/0x90 [ 136.580818][ T6054] do_syscall_64+0xf3/0x230 [ 136.585350][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.591260][ T6054] page last free pid 25 tgid 25 stack trace: [ 136.597322][ T6054] free_unref_page+0xcfb/0xf20 [ 136.602134][ T6054] __folio_put+0x2c7/0x440 [ 136.606589][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 136.612410][ T6054] xdp_umem_release+0xda/0x220 [ 136.617220][ T6054] xp_release_deferred+0xfc/0x180 [ 136.622289][ T6054] process_scheduled_works+0xa63/0x1850 [ 136.627893][ T6054] worker_thread+0x870/0xd30 [ 136.632499][ T6054] kthread+0x2f0/0x390 [ 136.636593][ T6054] ret_from_fork+0x4b/0x80 [ 136.641025][ T6054] ret_from_fork_asm+0x1a/0x30 [ 136.645826][ T6054] Modules linked in: [ 136.649732][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 136.661461][ T6054] Tainted: [B]=BAD_PAGE [ 136.665630][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.675731][ T6054] Call Trace: [ 136.679024][ T6054] [ 136.681964][ T6054] dump_stack_lvl+0x241/0x360 [ 136.686696][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.692002][ T6054] ? __pfx_print_modules+0x10/0x10 [ 136.697136][ T6054] bad_page+0x166/0x1b0 [ 136.701306][ T6054] free_unref_page+0xed0/0xf20 [ 136.706095][ T6054] skb_release_data+0x6dc/0x8a0 [ 136.710971][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 136.716013][ T6054] ? packet_rcv+0x159/0x14b0 [ 136.720648][ T6054] packet_rcv+0x16f/0x14b0 [ 136.725085][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 136.729956][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 136.735959][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 136.742565][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 136.749084][ T6054] ? read_tsc+0x9/0x20 [ 136.753167][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 136.758430][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 136.764777][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 136.770951][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 136.777301][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 136.784024][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 136.789244][ T6054] ? __phys_addr+0xba/0x170 [ 136.793756][ T6054] ? build_skb_around+0x111/0x260 [ 136.798799][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 136.804715][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 136.810019][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 136.815501][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 136.821412][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 136.826987][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 136.832814][ T6054] ? synchronize_rcu+0x11b/0x360 [ 136.837766][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 136.843072][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 136.849336][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 136.855257][ T6054] ? _copy_from_user+0xa6/0xe0 [ 136.860036][ T6054] ? bpf_test_init+0x15a/0x180 [ 136.864816][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 136.870298][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 136.875695][ T6054] ? __pfx_lock_release+0x10/0x10 [ 136.880747][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.886574][ T6054] ? __fget_files+0x29/0x470 [ 136.891186][ T6054] ? fput+0x1a8/0x230 [ 136.895185][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 136.901010][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 136.905972][ T6054] __sys_bpf+0x48d/0x810 [ 136.910234][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 136.915010][ T6054] ? __sys_bind+0x108/0x2d0 [ 136.919539][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.925545][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.931907][ T6054] ? do_syscall_64+0x100/0x230 [ 136.936683][ T6054] __x64_sys_bpf+0x7c/0x90 [ 136.941114][ T6054] do_syscall_64+0xf3/0x230 [ 136.945628][ T6054] ? clear_bhb_loop+0x35/0x90 [ 136.950315][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.956225][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 136.960650][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.980274][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.988810][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 136.996808][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 137.004792][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 137.012772][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.020837][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 137.028828][ T6054] [ 137.031924][ T6054] BUG: Bad page state in process syz.1.154 pfn:26f04 [ 137.038773][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201e4 pfn:0x26f04 [ 137.047999][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.055185][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 137.063803][ T6054] raw: 00000000000201e4 0000000000000001 00000000ffffffff 0000000000000000 [ 137.072399][ T6054] page dumped because: page_pool leak [ 137.077804][ T6054] page_owner tracks the page as allocated [ 137.083546][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725496303, free_ts 127701975417 [ 137.100616][ T6054] post_alloc_hook+0x1f3/0x230 [ 137.105468][ T6054] get_page_from_freelist+0x3045/0x3190 [ 137.111030][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 137.116270][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 137.121757][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 137.127713][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 137.132965][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 137.138390][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 137.143813][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 137.148763][ T6054] __sys_bpf+0x48d/0x810 [ 137.153012][ T6054] __x64_sys_bpf+0x7c/0x90 [ 137.157479][ T6054] do_syscall_64+0xf3/0x230 [ 137.162023][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.167957][ T6054] page last free pid 25 tgid 25 stack trace: [ 137.173971][ T6054] free_unref_page+0xcfb/0xf20 [ 137.178792][ T6054] __folio_put+0x2c7/0x440 [ 137.183249][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 137.189124][ T6054] xdp_umem_release+0xda/0x220 [ 137.193943][ T6054] xp_release_deferred+0xfc/0x180 [ 137.199015][ T6054] process_scheduled_works+0xa63/0x1850 [ 137.204788][ T6054] worker_thread+0x870/0xd30 [ 137.209394][ T6054] kthread+0x2f0/0x390 [ 137.213513][ T6054] ret_from_fork+0x4b/0x80 [ 137.217974][ T6054] ret_from_fork_asm+0x1a/0x30 [ 137.222764][ T6054] Modules linked in: [ 137.226705][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.154 Tainted: G B 6.11.0-syzkaller-11504-g44badc908f2c #0 [ 137.238452][ T6054] Tainted: [B]=BAD_PAGE [ 137.242622][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.252692][ T6054] Call Trace: [ 137.255983][ T6054] [ 137.258917][ T6054] dump_stack_lvl+0x241/0x360 [ 137.263732][ T6054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.268951][ T6054] ? __pfx_print_modules+0x10/0x10 [ 137.274189][ T6054] bad_page+0x166/0x1b0 [ 137.278416][ T6054] free_unref_page+0xed0/0xf20 [ 137.283239][ T6054] skb_release_data+0x6dc/0x8a0 [ 137.288120][ T6054] sk_skb_reason_drop+0x1c9/0x380 [ 137.293186][ T6054] ? packet_rcv+0x159/0x14b0 [ 137.297807][ T6054] packet_rcv+0x16f/0x14b0 [ 137.302242][ T6054] ? __pfx_packet_rcv+0x10/0x10 [ 137.307125][ T6054] __netif_receive_skb_list_core+0x8b7/0x980 [ 137.313126][ T6054] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 137.319745][ T6054] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 137.326265][ T6054] ? read_tsc+0x9/0x20 [ 137.330349][ T6054] ? timekeeping_get_ns+0x2c0/0x420 [ 137.335568][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 137.341911][ T6054] netif_receive_skb_list_internal+0xa51/0xe30 [ 137.348103][ T6054] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 137.354464][ T6054] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 137.361162][ T6054] ? __pfx_eth_type_trans+0x10/0x10 [ 137.366402][ T6054] ? __phys_addr+0xba/0x170 [ 137.370939][ T6054] ? build_skb_around+0x111/0x260 [ 137.375991][ T6054] ? __xdp_build_skb_from_frame+0x338/0x650 [ 137.381906][ T6054] netif_receive_skb_list+0x55/0x4b0 [ 137.387214][ T6054] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 137.392700][ T6054] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 137.398616][ T6054] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 137.404183][ T6054] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 137.410033][ T6054] ? synchronize_rcu+0x11b/0x360 [ 137.415001][ T6054] ? __pfx_synchronize_rcu+0x10/0x10 [ 137.420328][ T6054] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 137.426615][ T6054] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 137.432553][ T6054] ? _copy_from_user+0xa6/0xe0 [ 137.437339][ T6054] ? bpf_test_init+0x15a/0x180 [ 137.442149][ T6054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 137.447645][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 137.453048][ T6054] ? __pfx_lock_release+0x10/0x10 [ 137.458120][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 137.463978][ T6054] ? __fget_files+0x29/0x470 [ 137.468607][ T6054] ? fput+0x1a8/0x230 [ 137.472633][ T6054] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 137.478467][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 137.483431][ T6054] __sys_bpf+0x48d/0x810 [ 137.487732][ T6054] ? __pfx___sys_bpf+0x10/0x10 [ 137.492511][ T6054] ? __sys_bind+0x108/0x2d0 [ 137.497040][ T6054] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.503042][ T6054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.509398][ T6054] ? do_syscall_64+0x100/0x230 [ 137.514176][ T6054] __x64_sys_bpf+0x7c/0x90 [ 137.518608][ T6054] do_syscall_64+0xf3/0x230 [ 137.523121][ T6054] ? clear_bhb_loop+0x35/0x90 [ 137.527839][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.533761][ T6054] RIP: 0033:0x7fbe2d37dff9 [ 137.538191][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.557810][ T6054] RSP: 002b:00007fbe2e0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.566246][ T6054] RAX: ffffffffffffffda RBX: 00007fbe2d536130 RCX: 00007fbe2d37dff9 [ 137.574230][ T6054] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 137.582303][ T6054] RBP: 00007fbe2d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 137.590287][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.598276][ T6054] R13: 0000000000000000 R14: 00007fbe2d536130 R15: 00007ffc0ecc8888 [ 137.606275][ T6054] [ 137.609376][ T6054] BUG: Bad page state in process syz.1.154 pfn:25e62 [ 137.616222][ T6054] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201e5 pfn:0x25e62 [ 137.625416][ T6054] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.632584][ T6054] raw: 00fff00000000000 dead000000000040 ffff888077390000 0000000000000000 [ 137.641252][ T6054] raw: 00000000000201e5 0000000000000001 00000000ffffffff 0000000000000000 [ 137.649889][ T6054] page dumped because: page_pool leak [ 137.655330][ T6054] page_owner tracks the page as allocated [ 137.661074][ T6054] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 6054, tgid 6040 (syz.1.154), ts 127725475964, free_ts 127701993223 [ 137.678045][ T6054] post_alloc_hook+0x1f3/0x230 [ 137.682845][ T6054] get_page_from_freelist+0x3045/0x3190 [ 137.688461][ T6054] __alloc_pages_noprof+0x256/0x6c0 [ 137.693716][ T6054] alloc_pages_bulk_noprof+0x729/0xd40 [ 137.699185][ T6054] __page_pool_alloc_pages_slow+0x122/0x690 [ 137.705128][ T6054] page_pool_alloc_pages+0xd0/0x1c0 [ 137.710345][ T6054] bpf_test_run_xdp_live+0x950/0x2160 [ 137.715788][ T6054] bpf_prog_test_run_xdp+0x805/0x11e0 [ 137.721201][ T6054] bpf_prog_test_run+0x2e4/0x360 [ 137.726203][ T6054] __sys_bpf+0x48d/0x810 [ 137.730476][ T6054] __x64_sys_bpf+0x7c/0x90 [ 137.734925][ T6054] do_syscall_64+0xf3/0x230 [ 137.739436][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.745371][ T6054] page last free pid 25 tgid 25 stack trace: [ 137.751390][ T6054] free_unref_page+0xcfb/0xf20 [ 137.756216][ T6054] __folio_put+0x2c7/0x440 [ 137.760660][ T6054] unpin_user_pages_dirty_lock+0x30c/0x540 [ 137.766535][ T6054] xdp_umem_release+0xda/0x220 [ 137.771336][ T6054] xp_release_deferred+0xfc/0x180 [ 137.776412][ T6054] process_scheduled_works+0xa63/0x1850 [ 137.781977][ T6054] worker_thread+0x870/0xd30 [ 137.786634][ T6054] kthread+0x2f0/0x390 [ 137.790740][ T6054] ret_from_fork+0x4b/0x80 [ 137.795212][ T6054] ret_from_fork_asm+0x1a/0x30 [ 137.800041][ T6054] Modules linked in: