last executing test programs: 3.089772998s ago: executing program 3 (id=447): socket$nl_audit(0x10, 0x3, 0x9) socket$inet6(0xa, 0x80003, 0xff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000001060101000092e69de1b98f100d060051dd6f2e89f6edcd200e8ad40467250f5e16152aa3db3f137efaaebc63534a72e4bcdd5579d18c09f8aebee30a7979890e8c05d3a0c5860a0286a55a5d1bc3c0a4dbd00ac0c96631bc44ab4f38446e3e806dcefda6e600646a92eb990b447ee7d840cac87bff244e3c74181cd5de5de4f91d76e658b5743d455c5323deccf84fb3b6d54b8e2f8c470a2ed2001cc736df2f284216"], 0x14}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000180)=0x3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0xa0, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x2}, @TCA_CAKE_INGRESS={0x8}]}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x73}}, {0x4}}]}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0xa0}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r8}, 0xc) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, 0x0, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000c0100000000003d00000078fdecbf091921ff20010000000000000000000000000002ff0200000000000000000000000000014e224e200471907804796e37044c905fcba3ec3799456d9beffc39de73ff63e14343e8f46a74ae1b1121a0f9ccb15b3c85d7bbbebc83bc2b5c43"], 0x4f) 2.542874205s ago: executing program 2 (id=453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f0000005cc0)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000300)="1f", 0x1}], 0x1}}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x0, @loopback}}, 0x0, 0xa000}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000130000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000080), &(0x7f0000001840)=@udp6=r5}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="300000001100080025bd7000000000000800c300", @ANYRES32=0x0, @ANYBLOB="9feacf8f8c33f1f94ec23bfc36b97289c3fc716922542c000200"], 0x30}], 0x1, 0x0, 0x0, 0x2004408c}, 0x40) r6 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x20, 0x10, 0xba8, 0x6, {{0x17, 0x4, 0x2, 0x3b, 0x5c, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x11, 0x1, [{0x5, 0xb, "f861ecff13ed613356"}]}, @noop, @noop, @ssrr={0x89, 0x27, 0x96, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, @local, @rand_addr=0x64010102, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0xf6, 0x0, 0x2, [0x4051, 0x79]}, @end]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r7}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xcbc0}, {}, 0xfffffffd, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x32}, 0xa, @in=@empty, 0x3506, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) 2.505490971s ago: executing program 3 (id=454): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff0100000003"]}, 0xa9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r3) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) socket$inet(0xa, 0x801, 0x84) (async) r7 = socket$inet(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r9, 0x100) (async) listen(r9, 0x100) listen(r7, 0x8) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0x1) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004be8fd0d8c560a844760c0ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x46}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r11) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r4, 0x401, 0x70bd28, 0x0, {0x2}}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r4, 0x401, 0x70bd28, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 2.281190069s ago: executing program 3 (id=457): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6f50493c4d32239900000000000000a381b8878582da6ca1e1f8878d273c00000000000c001880080002400000fa0e0d0002801400018008000100ac1405aa08fc0a00ac141400"], 0x38}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1, 0x9, 0x7, 0x5, 0x4, 0x4, 0x5}, 0x9c) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r0, @ANYBLOB="01"], 0x24}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x600}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fefd, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}}, 0x80) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) 1.85480312s ago: executing program 1 (id=461): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="6f4720baeb5434a1c17a4b697e4611c434c1947fafd44daee2d61fadd23c3505eee0cc5b6c76cf081390ae92516d567c4b49af0f4b3df75ae92efbfb0fbe60ac8c4e546500f4f8f3885d5622072fb9e9b948a5edc65602c644bee9ad04b655279f383ce068ad0c202a57f9a8804b73d1241fb306b2acd9d5e26a71b19a0b9859ff0f0d7cdbd80fdfacdf9f1d02a37ae44bb6ddd978d4a0e6d61b68f629915748d6d3d184ca2b4164192c60a3a383821d0e85f04d09b712814d4b0664799b7ae6657b7452214608d01d31bd7d9e03107c638353d89515692c24b11490b9e75cfcb489e80b9334f4660204b2a17409993ddc4b0d004709cd46cb2488cf3cecd965e978182dd42cfbbfa4ebda17cce9cfc970959fd29e1a802809aa4a65c8f1c6dd14fca85d83fc995f097a62c6f04fb0d1f0dec0faa41fe09b1eae67606123d908dd74c62e66ee2635ec9da7bc74103debf3e31f0794ca5fc2268bcb8a03aeb3bf860d164e0a6cba7c8dc469147cc7e1bb94731ec450525cf19275d4af40b115f2420ff7ab4eeb41c5ddc19aae1b2e535b796c0e7aa6e71b4e13c8023806a08638d13a8595e310321860c8d7670cf167c67b3b5217a66329505cdcdc3afb3233dbaec65ff45b0bfc3cfbd309a7ffd26507a8ffe782f3b84ad9dfc2b4f44d6716e8ad892ffc3acf6e7e09018041a27fcad1ee957d6fddccc3d41f9b04127dee7c471acf9fdc32f204afffc52b22b73844154285ce5ec58ec57b40ccf7b70215a4a27f9de2c2719dcb5897bc302ebb027c019e40aa6fc85d5b670aef709e40cbe597139537c10d2483b67c02ca781c5ce6c014b13c8dee248e8b75831cbee8f29cad33139e0b5bc86c203c71f54ad11573e8801b8cc623571b9c53ac723b51b2cdd09b60cf8a3a205a70814107251d962d603bf21f42e946462bf3d8bca96d7bdbdfa9ced20f6e9edba4ac6aea0a68c08a3f8076274bece6d676d64975dc1e611806feb81cbac4b38453a756845c866f0458fb61cd12a135e1dfa76d85a3b2972b6517b57bc35a0398f7b87ee0b697c84c629e8a62a7d1dab6459a71f7aad2fac7a1a4c019479b1f31dc017f3fa896000b8bcc0b1ca993447351fa0529a5be311faa90b6d8f0a5ce5fe2adfd4995ba13920826d27677d8dac9ef0aac4cea1517ff318a864b3ea3bcc45d6cbd91e4a8da09c2e320957fcada6a4e", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f00000027c0)="550c6d32758c9c16ffa4f109b112c633892f8bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87a3ec1f2c062344c32d723e509729b7d74109fc61f9db8b0cba55c7d4924c795715c66ce41fc8cad02e9542c6d8cbad891fa12ba8837e5c65977e46c4dbec1bd1bbe39159d298ab00", 0x49}, {&(0x7f0000001580)="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", 0x930}], 0x8}, 0x0) 1.582662147s ago: executing program 1 (id=462): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a40)={r2, 0x31, 0x0, [0xad6, 0x100, 0x1, 0x31, 0x44359c18], [0x1f, 0xae9, 0x400, 0x6f7, 0x100, 0x8, 0x3f, 0x8000000000000001, 0x100000000, 0xffffffffffffff7f, 0xff, 0x3, 0x200, 0x9c, 0x2, 0x2, 0x4000000, 0x8, 0x100, 0x3ff, 0x179a, 0x7fffffffffffffff, 0x78f, 0x6, 0x4, 0xfffffffffffffeff, 0x4, 0x9, 0x6, 0x9, 0x2, 0x0, 0x800, 0x8000, 0x3, 0x9, 0xb2, 0x8, 0x400, 0x80000001, 0xfffffffffffffffd, 0x9, 0x80000001, 0x10001, 0x0, 0x1, 0x9, 0x5, 0x7, 0x7f, 0xfe, 0x1b0, 0x1ff, 0x88a, 0xcf, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x401, 0x0, 0x5, 0x9f4, 0x4, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x500, 0x6, 0x1000, 0x9, 0x2, 0x4, 0x0, 0xa5, 0x20, 0x6, 0x1000, 0x60, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x1f, 0x5, 0xa1, 0x400, 0x1, 0x4, 0xfffffffffffffffd, 0x800, 0x81, 0x3, 0x2, 0x3, 0x3fad, 0x8000000000000001, 0x1, 0x4, 0x2, 0x5c, 0x62fe9d90, 0x150, 0x81, 0x8000000000000001, 0xb172, 0x4, 0x1, 0xe8, 0x8, 0x2, 0xa2, 0x8, 0x1]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000d00)={r2, 0x9, 0x1, [0x6, 0x6, 0xf, 0xffffffff, 0x100], [0x5, 0x800, 0x1, 0x0, 0xfffffffffffffff8, 0x7, 0x5, 0x1, 0x200, 0x7fffffffffffffff, 0x2, 0x5e7e, 0x7fffffffffffffff, 0x5473, 0x1, 0x100000001, 0x8001, 0xe3e, 0x7d285613, 0x400, 0x2, 0xfff, 0xcb, 0x8800000000000000, 0x1, 0x8000000000000000, 0x9, 0x2, 0x1, 0x3, 0x2, 0x640b, 0x8, 0x200, 0x100000000, 0x3, 0x5, 0x4, 0x8002, 0x7, 0x11e12e5b, 0xffffffffffffff01, 0x5, 0x300000000, 0xc, 0x31, 0x180000000, 0xffffffff, 0x2, 0xffffffff, 0x8, 0x35ab, 0xff, 0x9, 0x7, 0x4, 0x24, 0x1, 0x8, 0x2, 0x5, 0x1ff, 0x4, 0x2, 0x4, 0x1, 0x8, 0x7fffffffffffffff, 0x1, 0xc8a, 0x9, 0x10001, 0x8, 0x8, 0x10, 0xebbb, 0x6, 0xa, 0x2a1, 0xfffffffffffffffa, 0x7, 0xa, 0x7fff, 0x7fffffffffffffff, 0x63, 0x2, 0x2, 0x2, 0x5, 0x0, 0x10001, 0x10, 0x7, 0xd, 0x40, 0x4, 0xc, 0x8000, 0x1, 0x7, 0x800, 0x0, 0x1, 0xff, 0x9, 0x3, 0x9, 0x0, 0x2, 0xff, 0x4cd, 0x368, 0xfffffffffffffffb, 0x4, 0x0, 0x9, 0x62, 0x4, 0xffffffffffffffff, 0x10040000000, 0x9]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(r1, 0x0, 0x34, 0x0, &(0x7f00000001c0)) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r4, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="3db5", 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="5e0700000000000005020003c91000000000000000000000ffff640101020720000048b5d6110003060609000700000000000000f30b00000000000097000000f4ff0000"], 0x40) 1.537615482s ago: executing program 4 (id=463): syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40000000}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) close(r2) 1.438058165s ago: executing program 2 (id=464): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', 0x0}) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.284523089s ago: executing program 3 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000080000001800018014"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.178092811s ago: executing program 3 (id=466): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20ca0000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x28, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004095}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="8400f32ebbede5d2f3749de0", @ANYRES16=r1, @ANYBLOB="000328bd7000fcdbdf251800000008000300", @ANYRES32=r2, @ANYBLOB="0c00060000000000000000000c00060003000000000000000c00060003000000030000000c000600020000000000000008000300", @ANYRES32=r2, @ANYBLOB="300030800500020000000000240003002cfd97bd060200f2ffee132954ca1bfd35a0a1646f0ca76f0000000000000001"], 0x84}, 0x1, 0x0, 0x0, 0x2004c080}, 0x24004003) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x40030000000000, 0x0, 0x80001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r9, &(0x7f0000000200), 0x20000000}, 0x20) sendmsg$inet(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x46) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) 1.137500351s ago: executing program 0 (id=467): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="d7", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x15, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000ff000000180d0000d064358e00c188379058feb08c4e5bff7346ab55aacd8786393012be3f0641cf01c5a93d762023b5ade7d8b1b1de72a00f5858edf150660abb3e767e507e993bc12302afea4cee76495a1568a366c412f9b7d5fcc4d24de14e4d74b2a521a9b92361a0922a9e72460e287b71ec7f16", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000069080001ffffffff1800000002000000000000003de00000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x87, 0x54, &(0x7f0000000500)=""/84, 0x100, 0x43, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0xd, 0x3, 0x62bc}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000001c00)=[{0x2, 0x5, 0x9, 0x7}, {0x0, 0x4, 0x3, 0x4}, {0x5, 0x5, 0x10, 0x6}, {0x1, 0x2, 0x7, 0xb}, {0x3, 0x5, 0x3, 0x2}], 0x10, 0x8, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockname(r6, 0x0, &(0x7f0000000300)) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r9, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r5, 0x7}, 0x8) r10 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90524fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.091096562s ago: executing program 4 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d03000000000000000300000000000000000000010500000020000000000000000000000300000000020000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x94, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6, {0xf3, 0x8, 0x3ff, 0x3}}, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) 816.984703ms ago: executing program 2 (id=469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1607}}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 813.451235ms ago: executing program 1 (id=470): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00", 0x4c}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a602000000080002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200ac1414010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800400010000000000240001"], 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x3) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000104000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010062726964676500004c00028005002900010000000500190007000000050019000000000008001c000000700005002500010000000500170001000000050007000f000000050016000100000005002400"], 0x7c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) 783.223978ms ago: executing program 4 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r1, 0x1, 0xe0ff, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) 763.003033ms ago: executing program 0 (id=472): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f00000027c0)="550c6d32758c9c16ffa4f109b112c633892f8bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87a3ec1f2c062344c32d723e509729b7d74109fc61f9db8b0cba55c7d4924c795715c66ce41fc8cad02e9542c6d8cbad891fa12ba8837e5c65977e46c4dbec1bd1bbe39159d298ab00", 0x49}, {&(0x7f0000001580)="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", 0x930}], 0x8}, 0x0) 633.335977ms ago: executing program 3 (id=473): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000021cddf2354000000040000000300000000000001000000060f000000000000080300000005000000010000060400000005000000030000000d0000000000000b0000000004000000010000050400000003000000030000000500000000610000"], &(0x7f0000000200)=""/170, 0x70, 0xaa, 0x0, 0x5, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000001280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb09dc190, '\x00', r3, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r4, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$pptp(r2, &(0x7f0000000400)={0x18, 0x2, {0x2, @local}}, 0x1e) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000047c0)=r6, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x84, r7, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8041}, 0x40800) write(r2, &(0x7f00000000c0)="240000005a001f021007f4f9002304000a04f51108000500020100020800038005000000", 0x24) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000440)='veth0_to_hsr\x00', 0x10) setsockopt$sock_int(r12, 0x1, 0x5, &(0x7f00000000c0)=0x7, 0x4) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffe], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7fffffffffffffff}]}}]}, 0x9c}}, 0x0) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r14, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r14, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f00000000c0)={0x6, 0xf7, 0x3, 0x4fb, 0x9, 0xffffad5f, 0x5, 0x5}, 0x20) 631.334138ms ago: executing program 0 (id=474): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 614.493213ms ago: executing program 2 (id=475): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000a40)={r3, 0x31, 0x0, [0xad6, 0x100, 0x1, 0x31, 0x44359c18], [0x1f, 0xae9, 0x400, 0x6f7, 0x100, 0x8, 0x3f, 0x8000000000000001, 0x100000000, 0xffffffffffffff7f, 0xff, 0x3, 0x200, 0x9c, 0x2, 0x2, 0x4000000, 0x8, 0x100, 0x3ff, 0x179a, 0x7fffffffffffffff, 0x78f, 0x6, 0x4, 0xfffffffffffffeff, 0x4, 0x9, 0x6, 0x9, 0x2, 0x0, 0x800, 0x8000, 0x3, 0x9, 0xb2, 0x8, 0x400, 0x80000001, 0xfffffffffffffffd, 0x9, 0x80000001, 0x10001, 0x0, 0x1, 0x9, 0x5, 0x7, 0x7f, 0xfe, 0x1b0, 0x1ff, 0x88a, 0xcf, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x401, 0x0, 0x5, 0x9f4, 0x4, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x500, 0x6, 0x1000, 0x9, 0x2, 0x4, 0x0, 0xa5, 0x20, 0x6, 0x1000, 0x60, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x1f, 0x5, 0xa1, 0x400, 0x1, 0x4, 0xfffffffffffffffd, 0x800, 0x81, 0x3, 0x2, 0x3, 0x3fad, 0x8000000000000001, 0x1, 0x4, 0x2, 0x5c, 0x62fe9d90, 0x150, 0x81, 0x8000000000000001, 0xb172, 0x4, 0x1, 0xe8, 0x8, 0x2, 0xa2, 0x8, 0x1]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000d00)={r3, 0x9, 0x1, [0x6, 0x6, 0xf, 0xffffffff, 0x100], [0x5, 0x800, 0x1, 0x0, 0xfffffffffffffff8, 0x7, 0x5, 0x1, 0x200, 0x7fffffffffffffff, 0x2, 0x5e7e, 0x7fffffffffffffff, 0x5473, 0x1, 0x100000001, 0x8001, 0xe3e, 0x7d285613, 0x400, 0x2, 0xfff, 0xcb, 0x8800000000000000, 0x1, 0x8000000000000000, 0x9, 0x2, 0x1, 0x3, 0x2, 0x640b, 0x8, 0x200, 0x100000000, 0x3, 0x5, 0x4, 0x8002, 0x7, 0x11e12e5b, 0xffffffffffffff01, 0x5, 0x300000000, 0xc, 0x31, 0x180000000, 0xffffffff, 0x2, 0xffffffff, 0x8, 0x35ab, 0xff, 0x9, 0x7, 0x4, 0x24, 0x1, 0x8, 0x2, 0x5, 0x1ff, 0x4, 0x2, 0x4, 0x1, 0x8, 0x7fffffffffffffff, 0x1, 0xc8a, 0x9, 0x10001, 0x8, 0x8, 0x10, 0xebbb, 0x6, 0xa, 0x2a1, 0xfffffffffffffffa, 0x7, 0xa, 0x7fff, 0x7fffffffffffffff, 0x63, 0x2, 0x2, 0x2, 0x5, 0x0, 0x10001, 0x10, 0x7, 0xd, 0x40, 0x4, 0xc, 0x8000, 0x1, 0x7, 0x800, 0x0, 0x1, 0xff, 0x9, 0x3, 0x9, 0x0, 0x2, 0xff, 0x4cd, 0x368, 0xfffffffffffffffb, 0x4, 0x0, 0x9, 0x62, 0x4, 0xffffffffffffffff, 0x10040000000, 0x9]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(r1, 0x0, 0x34, 0x0, &(0x7f00000001c0)) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) sendto$inet6(r5, 0x0, 0x0, 0x4c004, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="3db5", 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="5e0700000000000005020003c91000000000000000000000ffff640101020720000048b5d6110003060609000700000000000000f30b00000000000097000000f4ff0000"], 0x40) 561.417241ms ago: executing program 4 (id=476): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01000000000000000000080000001800018014"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 506.7789ms ago: executing program 1 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x40}}, 0x0) 452.263759ms ago: executing program 0 (id=478): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x2c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x25}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x600}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 410.396038ms ago: executing program 4 (id=479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x22, &(0x7f0000000180)={@link_local, @remote, @void, {@arp={0x806, @generic={0x100, 0x9300, 0x6, 0x0, 0x4, @multicast, "", @local}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) 375.934539ms ago: executing program 1 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80000) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r5, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r7, 0x208}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d418000000000000002900000002000000", 0xfe60) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="380000000000000100000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b0000abf6bcd60000b835b3482d7121c3a6548b6e000300000000000000a0b0ca36bc9468a9e7e7348057d59549c2a8f45753af2f62557ed76fa302f10544271f7a9d389d4c00a0175ba535dce9da2e7c8a35b5019d55d0db926fb5ea06c735fec3bb894ba2f5d0ce054c3df34cd7941ac308e41f6cb3664e0cf031d11e81a814d9dc5d7a421731d6eb85dda291f017b7d91a5ea81eb8f9a70b526e022ff8c688d18b0772b3d10930215a145f4943fee85fa7577cd64f220dc719016da29bfd89a9ce", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="03000000020000000400"/28], 0x48) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r8, 0x1, 0x6, @multicast}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff, 0x0, 0x0, 0x0, 0x40000000}, [@alu={0x7, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000001e3f9076b40762e500180000001800000003000000100000000000000200000000040000000000ff"], &(0x7f00000022c0)=""/4096, 0x33, 0x1000, 0x1, 0x2, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000b10000000000002ba406001000000085100000fdffffff1811000014eb0081b57187526dfba837b9f95268481c6ec6621517ca17fd0d6c0fd6ad0985d2b8401a9d6f5474941d025d55b96fbea68f4dcab51877bb540d0e56d6544d252ba863a29d50a7592ae9ec4311577b1518828f81236c544117610b57106201000000f69af44405ba38b4198ff0468a501565b6487edb18163355d92402e6ba41480db527e9e0", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180000000080000000000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, @fallback=0x33, r9, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x10, 0x800, 0xf}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r0], 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f881e010680f855"], 0x184}}, 0x0) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r12, 0x112, 0xd, 0x0, 0x0) (async) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r13, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15e, 0x15e, 0xb, [@datasec={0x1, 0xc, 0x0, 0xf, 0x2, [{0x1, 0x9, 0x6}, {0x3, 0x5015, 0x4}, {0x4, 0x1, 0xfffffffa}, {0x4, 0x7}, {0x1, 0x1, 0x5}, {0x1, 0x3, 0x2}, {0x5, 0x8, 0x120000}, {0x1, 0x1, 0x20bea128}, {0x5, 0x9, 0x4}, {0x2, 0x9, 0x4}, {0x4, 0x4, 0x6}, {0x1, 0x6, 0xffffffff}], "da2e"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xf18}}, @struct={0x0, 0x3, 0x0, 0x4, 0x1, 0x6, [{0xd, 0x0, 0x8}, {0x2, 0x5}, {0x8, 0x2, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x9}, {0xd, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0xc, 0x5}, {0x0, 0x1}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xb, 0x5}]}, @func={0xd, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x872207c2e4f9fd6a, 0x30, 0x61, 0x61, 0x2e, 0x5f, 0x61, 0x5f, 0x5f]}}, &(0x7f0000000340)=""/155, 0x183, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x28) 311.395087ms ago: executing program 0 (id=481): socket(0x10, 0x80002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x2, 0x3a) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x339, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0, 0xf}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x4004) 277.673119ms ago: executing program 2 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) 182.203132ms ago: executing program 1 (id=483): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000e500d00000005efb5ca1ca26e438ce84b10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff0200000800278e9bdd"], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000007b00000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa35a1000000000000050006"], 0xa0}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 181.191015ms ago: executing program 4 (id=484): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000e500d00000005efb5ca1ca26e438ce84b10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff0200000800278e9bdd"], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000007b00000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa35a1000000000000050006"], 0xa0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 32.974645ms ago: executing program 2 (id=485): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 0s ago: executing program 0 (id=486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x70}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 0000200002c0 RDI: 0000000000000003 [ 67.551490][ T5481] RBP: 00007fb7680b3090 R08: 0000000000000000 R09: 0000000000000000 [ 67.559451][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.567413][ T5481] R13: 0000000000000000 R14: 00007fb767535f80 R15: 00007fffae6d0b78 [ 67.575397][ T5481] [ 67.874819][ T5502] netlink: 'syz.0.66': attribute type 2 has an invalid length. [ 67.918317][ T5502] netlink: 244 bytes leftover after parsing attributes in process `syz.0.66'. [ 68.018586][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.226612][ T5529] Bluetooth: MGMT ver 1.23 [ 68.236793][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 68.522359][ T5542] syz_tun: entered promiscuous mode [ 68.527854][ T5543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'. [ 68.564593][ T5544] syz_tun (unregistering): left promiscuous mode [ 68.600207][ T5546] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.622400][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 68.647653][ T5550] netlink: 244 bytes leftover after parsing attributes in process `syz.4.82'. [ 68.662782][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 68.996667][ T5565] ɶƣ0GC¦: entered promiscuous mode [ 69.061544][ T5565] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 69.218191][ T5576] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.236366][ T5576] unknown channel width for channel at 909000KHz? [ 69.916239][ T5614] netlink: 'syz.1.103': attribute type 9 has an invalid length. [ 69.957435][ T5614] netlink: 197496 bytes leftover after parsing attributes in process `syz.1.103'. [ 70.090237][ T5618] netlink: 'syz.1.103': attribute type 9 has an invalid length. [ 70.103203][ T5618] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.103'. [ 70.247822][ T5632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 70.969687][ T5665] FAULT_INJECTION: forcing a failure. [ 70.969687][ T5665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.001426][ T5665] CPU: 1 UID: 0 PID: 5665 Comm: syz.2.122 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 71.011706][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.021754][ T5665] Call Trace: [ 71.025024][ T5665] [ 71.027944][ T5665] dump_stack_lvl+0x241/0x360 [ 71.032636][ T5665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.037859][ T5665] ? __pfx__printk+0x10/0x10 [ 71.042485][ T5665] ? __pfx_lock_release+0x10/0x10 [ 71.047543][ T5665] should_fail_ex+0x3b0/0x4e0 [ 71.052235][ T5665] _copy_from_iter+0x1ed/0x1d60 [ 71.057077][ T5665] ? __virt_addr_valid+0x183/0x530 [ 71.062189][ T5665] ? __pfx_lock_release+0x10/0x10 [ 71.067221][ T5665] ? __alloc_skb+0x28f/0x440 [ 71.071801][ T5665] ? __pfx__copy_from_iter+0x10/0x10 [ 71.077076][ T5665] ? __virt_addr_valid+0x183/0x530 [ 71.082184][ T5665] ? __virt_addr_valid+0x183/0x530 [ 71.087297][ T5665] ? __virt_addr_valid+0x45f/0x530 [ 71.092412][ T5665] ? __check_object_size+0x48e/0x900 [ 71.097719][ T5665] netlink_sendmsg+0x73d/0xcb0 [ 71.102502][ T5665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.107792][ T5665] ? aa_sock_msg_perm+0x91/0x160 [ 71.112722][ T5665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.117997][ T5665] __sock_sendmsg+0x221/0x270 [ 71.122666][ T5665] ____sys_sendmsg+0x52a/0x7e0 [ 71.127435][ T5665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.132724][ T5665] __sys_sendmsg+0x292/0x380 [ 71.137311][ T5665] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.142434][ T5665] ? __pfx_vfs_write+0x10/0x10 [ 71.147247][ T5665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.153589][ T5665] ? do_syscall_64+0x100/0x230 [ 71.158363][ T5665] ? do_syscall_64+0xb6/0x230 [ 71.163070][ T5665] do_syscall_64+0xf3/0x230 [ 71.167586][ T5665] ? clear_bhb_loop+0x35/0x90 [ 71.172255][ T5665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.178142][ T5665] RIP: 0033:0x7f299ad7dff9 [ 71.182545][ T5665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.202185][ T5665] RSP: 002b:00007f299bae9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.210596][ T5665] RAX: ffffffffffffffda RBX: 00007f299af35f80 RCX: 00007f299ad7dff9 [ 71.218557][ T5665] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 71.227042][ T5665] RBP: 00007f299bae9090 R08: 0000000000000000 R09: 0000000000000000 [ 71.235000][ T5665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.242972][ T5665] R13: 0000000000000000 R14: 00007f299af35f80 R15: 00007ffd09c5ef28 [ 71.250976][ T5665] [ 71.551386][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.558407][ T5653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.564953][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.872722][ T5682] FAULT_INJECTION: forcing a failure. [ 71.872722][ T5682] name failslab, interval 1, probability 0, space 0, times 0 [ 71.911517][ T5682] CPU: 0 UID: 0 PID: 5682 Comm: syz.1.130 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 71.921816][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.931899][ T5682] Call Trace: [ 71.935198][ T5682] [ 71.938151][ T5682] dump_stack_lvl+0x241/0x360 [ 71.942865][ T5682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.948091][ T5682] ? __pfx__printk+0x10/0x10 [ 71.952712][ T5682] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 71.958207][ T5682] ? __pfx___might_resched+0x10/0x10 [ 71.963524][ T5682] should_fail_ex+0x3b0/0x4e0 [ 71.968232][ T5682] should_failslab+0xac/0x100 [ 71.972939][ T5682] ? device_add+0xc1/0xbf0 [ 71.977382][ T5682] __kmalloc_cache_noprof+0x6c/0x2c0 [ 71.982699][ T5682] device_add+0xc1/0xbf0 [ 71.986971][ T5682] ? device_initialize+0x266/0x460 [ 71.992104][ T5682] netdev_register_kobject+0x17e/0x310 [ 71.997589][ T5682] register_netdevice+0x12c5/0x1b00 [ 72.002830][ T5682] ? __pfx_register_netdevice+0x10/0x10 [ 72.008397][ T5682] ? dev_addr_mod+0xbd/0x330 [ 72.008443][ T5687] netlink: 'syz.0.132': attribute type 2 has an invalid length. [ 72.012996][ T5682] ? __asan_memset+0x23/0x50 [ 72.013035][ T5682] macvlan_common_newlink+0x1189/0x1930 [ 72.013060][ T5682] ? read_word_at_a_time+0xe/0x20 [ 72.013083][ T5682] ? sized_strscpy+0x8d/0x220 [ 72.013115][ T5682] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 72.046455][ T5682] ? rtnl_create_link+0x91c/0xc20 [ 72.051494][ T5682] ? __pfx_macvlan_newlink+0x10/0x10 [ 72.056789][ T5682] rtnl_newlink+0x1591/0x20a0 [ 72.061520][ T5682] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.066559][ T5682] ? do_raw_spin_unlock+0x13c/0x8b0 [ 72.071755][ T5682] ? __mutex_lock+0x9ab/0xd70 [ 72.076455][ T5682] ? __mutex_lock+0x52a/0xd70 [ 72.081133][ T5682] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.086168][ T5682] rtnetlink_rcv_msg+0x73f/0xcf0 [ 72.091232][ T5682] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 72.096374][ T5682] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.101837][ T5682] ? ref_tracker_free+0x643/0x7e0 [ 72.106880][ T5682] netlink_rcv_skb+0x1e3/0x430 [ 72.111646][ T5682] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.117118][ T5682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 72.122443][ T5682] ? netlink_deliver_tap+0x2e/0x1b0 [ 72.127675][ T5682] netlink_unicast+0x7f6/0x990 [ 72.132472][ T5682] ? __pfx_netlink_unicast+0x10/0x10 [ 72.137771][ T5682] ? __virt_addr_valid+0x183/0x530 [ 72.142891][ T5682] ? __check_object_size+0x48e/0x900 [ 72.148193][ T5682] netlink_sendmsg+0x8e4/0xcb0 [ 72.152998][ T5682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.158293][ T5682] ? aa_sock_msg_perm+0x91/0x160 [ 72.163248][ T5682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.168560][ T5682] __sock_sendmsg+0x221/0x270 [ 72.173240][ T5682] ____sys_sendmsg+0x52a/0x7e0 [ 72.178002][ T5682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.183313][ T5682] __sys_sendmsg+0x292/0x380 [ 72.187919][ T5682] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.193030][ T5682] ? __pfx_vfs_write+0x10/0x10 [ 72.197803][ T5682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.204137][ T5682] ? do_syscall_64+0x100/0x230 [ 72.208893][ T5682] ? do_syscall_64+0xb6/0x230 [ 72.213573][ T5682] do_syscall_64+0xf3/0x230 [ 72.218089][ T5682] ? clear_bhb_loop+0x35/0x90 [ 72.223132][ T5682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.229066][ T5682] RIP: 0033:0x7fca8917dff9 [ 72.233484][ T5682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.253099][ T5682] RSP: 002b:00007fca8a052038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.261525][ T5682] RAX: ffffffffffffffda RBX: 00007fca89335f80 RCX: 00007fca8917dff9 [ 72.269506][ T5682] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 72.277499][ T5682] RBP: 00007fca8a052090 R08: 0000000000000000 R09: 0000000000000000 [ 72.285492][ T5682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.293470][ T5682] R13: 0000000000000000 R14: 00007fca89335f80 R15: 00007ffeb2a09028 [ 72.301452][ T5682] [ 72.831087][ T5229] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.868656][ T5716] FAULT_INJECTION: forcing a failure. [ 72.868656][ T5716] name failslab, interval 1, probability 0, space 0, times 0 [ 72.884824][ T5716] CPU: 0 UID: 0 PID: 5716 Comm: syz.4.145 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 72.895084][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.905161][ T5716] Call Trace: [ 72.908467][ T5716] [ 72.911409][ T5716] dump_stack_lvl+0x241/0x360 [ 72.916115][ T5716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.921317][ T5716] ? __pfx__printk+0x10/0x10 [ 72.925914][ T5716] ? ref_tracker_alloc+0x332/0x490 [ 72.931026][ T5716] should_fail_ex+0x3b0/0x4e0 [ 72.935704][ T5716] ? skb_clone+0x20c/0x390 [ 72.940113][ T5716] should_failslab+0xac/0x100 [ 72.944788][ T5716] ? skb_clone+0x20c/0x390 [ 72.949195][ T5716] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 72.954567][ T5716] skb_clone+0x20c/0x390 [ 72.958809][ T5716] __netlink_deliver_tap+0x3cc/0x7c0 [ 72.964101][ T5716] ? netlink_deliver_tap+0x2e/0x1b0 [ 72.969294][ T5716] netlink_deliver_tap+0x19d/0x1b0 [ 72.974405][ T5716] netlink_sendskb+0x68/0x140 [ 72.979080][ T5716] netlink_unicast+0x39d/0x990 [ 72.983848][ T5716] ? __pfx_netlink_unicast+0x10/0x10 [ 72.989136][ T5716] ctrl_getfamily+0x57a/0x6b0 [ 72.993812][ T5716] ? __pfx_ctrl_getfamily+0x10/0x10 [ 72.999003][ T5716] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 73.005330][ T5716] genl_rcv_msg+0xb14/0xec0 [ 73.009829][ T5716] ? mark_lock+0x9a/0x360 [ 73.014163][ T5716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.019218][ T5716] ? __pfx_lock_acquire+0x10/0x10 [ 73.024242][ T5716] ? __pfx_ctrl_getfamily+0x10/0x10 [ 73.029436][ T5716] ? __pfx___might_resched+0x10/0x10 [ 73.034731][ T5716] netlink_rcv_skb+0x1e3/0x430 [ 73.039497][ T5716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 73.044518][ T5716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 73.049810][ T5716] ? __netlink_deliver_tap+0x77e/0x7c0 [ 73.055281][ T5716] genl_rcv+0x28/0x40 [ 73.059257][ T5716] netlink_unicast+0x7f6/0x990 [ 73.064025][ T5716] ? __pfx_netlink_unicast+0x10/0x10 [ 73.069307][ T5716] ? __virt_addr_valid+0x183/0x530 [ 73.074415][ T5716] ? __check_object_size+0x48e/0x900 [ 73.079705][ T5716] netlink_sendmsg+0x8e4/0xcb0 [ 73.084477][ T5716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.089764][ T5716] ? aa_sock_msg_perm+0x91/0x160 [ 73.094700][ T5716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.099982][ T5716] __sock_sendmsg+0x221/0x270 [ 73.104660][ T5716] __sys_sendto+0x39b/0x4f0 [ 73.109171][ T5716] ? __pfx___sys_sendto+0x10/0x10 [ 73.114219][ T5716] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.120202][ T5716] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.126528][ T5716] ? exc_page_fault+0x590/0x8c0 [ 73.131380][ T5716] __x64_sys_sendto+0xde/0x100 [ 73.136147][ T5716] do_syscall_64+0xf3/0x230 [ 73.140645][ T5716] ? clear_bhb_loop+0x35/0x90 [ 73.145320][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.151211][ T5716] RIP: 0033:0x7fab93d7fe8c [ 73.155624][ T5716] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 73.175242][ T5716] RSP: 002b:00007fab94aabec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 73.183664][ T5716] RAX: ffffffffffffffda RBX: 00007fab94aabfc0 RCX: 00007fab93d7fe8c [ 73.191638][ T5716] RDX: 0000000000000024 RSI: 00007fab94aac010 RDI: 0000000000000005 [ 73.199612][ T5716] RBP: 0000000000000000 R08: 00007fab94aabf14 R09: 000000000000000c [ 73.207583][ T5716] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 73.215557][ T5716] R13: 00007fab94aabf68 R14: 00007fab94aac010 R15: 0000000000000000 [ 73.223546][ T5716] [ 73.467020][ T5733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.149'. [ 73.525007][ T5738] netlink: 'syz.4.148': attribute type 3 has an invalid length. [ 73.657420][ T5743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 73.721967][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 73.764716][ T5743] warning: `syz.1.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.803277][ T5743] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 73.817891][ T5741] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.152'. [ 73.828302][ T5743] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 73.828598][ T5741] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 73.848975][ T5741] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 73.963314][ T5751] ɶƣ0GC¦: entered promiscuous mode [ 73.969295][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 74.169593][ T5754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.177151][ T5754] IPv6: NLM_F_CREATE should be set when creating new route [ 75.134022][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.153'. [ 76.689383][ T937] cfg80211: failed to load regulatory.db [ 90.703964][ T5754] netlink: 3168 bytes leftover after parsing attributes in process `syz.1.153'. [ 136.942810][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.949179][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 183.112251][ T5768] Bluetooth: hci4: command 0x0405 tx timeout [ 183.118342][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 183.124554][ T5768] Bluetooth: hci3: command 0x0406 tx timeout [ 183.130621][ T5768] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.136722][ T5768] Bluetooth: hci1: command 0x0406 tx timeout [ 195.282726][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.289181][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.621450][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.637554][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.646510][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.654676][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.663372][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.671407][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.679109][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.743620][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.751965][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.760280][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.768216][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.798425][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.867836][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.876765][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.885112][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.947957][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.990630][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.001099][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.020365][ T4621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.020502][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.029628][ T4621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.050710][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.052405][ T4621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.076552][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.078318][ T4621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.084809][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.093506][ T4621] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.100418][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.114053][ T4621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.119592][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.282420][ T4002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.431075][ T4002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.524307][ T4002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.630778][ T4002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.674405][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 209.780931][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 209.928061][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 209.947117][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.954372][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.961526][ T5775] bridge_slave_0: entered allmulticast mode [ 209.968511][ T5775] bridge_slave_0: entered promiscuous mode [ 209.976670][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.984584][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.991753][ T5775] bridge_slave_1: entered allmulticast mode [ 209.998468][ T5775] bridge_slave_1: entered promiscuous mode [ 210.019576][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 210.137170][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.149834][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 210.190801][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.229767][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.237811][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.245121][ T5780] bridge_slave_0: entered allmulticast mode [ 210.252117][ T5780] bridge_slave_0: entered promiscuous mode [ 210.339988][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.347473][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.355241][ T5780] bridge_slave_1: entered allmulticast mode [ 210.361749][ T5780] bridge_slave_1: entered promiscuous mode [ 210.379538][ T4002] bridge_slave_1: left allmulticast mode [ 210.385487][ T4002] bridge_slave_1: left promiscuous mode [ 210.391410][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.403080][ T4002] bridge_slave_0: left allmulticast mode [ 210.408739][ T4002] bridge_slave_0: left promiscuous mode [ 210.414510][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.729552][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.743046][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.754719][ T4002] bond0 (unregistering): Released all slaves [ 210.770702][ T5775] team0: Port device team_slave_0 added [ 210.809344][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.816547][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.830261][ T5778] bridge_slave_0: entered allmulticast mode [ 210.838484][ T5778] bridge_slave_0: entered promiscuous mode [ 210.867303][ T5775] team0: Port device team_slave_1 added [ 210.903679][ T4002] ɶƣ0GC¦: left promiscuous mode [ 210.912529][ T5233] Bluetooth: hci6: command tx timeout [ 210.923350][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.930501][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.938049][ T5778] bridge_slave_1: entered allmulticast mode [ 210.946013][ T5778] bridge_slave_1: entered promiscuous mode [ 210.967257][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.982430][ T5233] Bluetooth: hci5: command tx timeout [ 210.999828][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.007519][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.016167][ T5782] bridge_slave_0: entered allmulticast mode [ 211.023458][ T5782] bridge_slave_0: entered promiscuous mode [ 211.039702][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.047390][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.074441][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.125410][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.142911][ T5233] Bluetooth: hci0: command tx timeout [ 211.143899][ T4621] Bluetooth: hci1: command tx timeout [ 211.166052][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.173456][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.180716][ T5782] bridge_slave_1: entered allmulticast mode [ 211.188638][ T5782] bridge_slave_1: entered promiscuous mode [ 211.200152][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.211574][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.237674][ T4621] Bluetooth: hci7: command tx timeout [ 211.247445][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.262473][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.269649][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.277042][ T5774] bridge_slave_0: entered allmulticast mode [ 211.284203][ T5774] bridge_slave_0: entered promiscuous mode [ 211.296764][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.308691][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.389280][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.403031][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.410703][ T5774] bridge_slave_1: entered allmulticast mode [ 211.417810][ T5774] bridge_slave_1: entered promiscuous mode [ 211.433181][ T5780] team0: Port device team_slave_0 added [ 211.441393][ T5780] team0: Port device team_slave_1 added [ 211.452910][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.533761][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.556700][ T5775] hsr_slave_0: entered promiscuous mode [ 211.563729][ T5775] hsr_slave_1: entered promiscuous mode [ 211.569805][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.577483][ T5775] Cannot create hsr debugfs directory [ 211.586722][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.608624][ T5778] team0: Port device team_slave_0 added [ 211.616568][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.625323][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.651635][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.667790][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.675139][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.701280][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.738587][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.753104][ T4002] hsr_slave_0: left promiscuous mode [ 211.759759][ T4002] hsr_slave_1: left promiscuous mode [ 211.766399][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.774502][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.783580][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.791004][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.810235][ T4002] veth1_macvtap: left promiscuous mode [ 211.816491][ T4002] veth0_macvtap: left promiscuous mode [ 211.822049][ T4002] veth1_vlan: left promiscuous mode [ 211.828500][ T4002] veth0_vlan: left promiscuous mode [ 212.191946][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 212.231219][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 212.567848][ T5778] team0: Port device team_slave_1 added [ 212.618225][ T5782] team0: Port device team_slave_0 added [ 212.650058][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.662662][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.705149][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.728676][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.741772][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.780708][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.847864][ T5780] hsr_slave_0: entered promiscuous mode [ 212.885119][ T5780] hsr_slave_1: entered promiscuous mode [ 212.901666][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.910835][ T5780] Cannot create hsr debugfs directory [ 212.927726][ T5782] team0: Port device team_slave_1 added [ 212.984268][ T4621] Bluetooth: hci6: command tx timeout [ 213.013841][ T5774] team0: Port device team_slave_0 added [ 213.027203][ T5774] team0: Port device team_slave_1 added [ 213.062388][ T4621] Bluetooth: hci5: command tx timeout [ 213.109429][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.116570][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.143274][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.155804][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.162908][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.189362][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.221396][ T5778] hsr_slave_0: entered promiscuous mode [ 213.227563][ T4621] Bluetooth: hci1: command tx timeout [ 213.232942][ T4621] Bluetooth: hci0: command tx timeout [ 213.242654][ T5778] hsr_slave_1: entered promiscuous mode [ 213.249783][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.257683][ T5778] Cannot create hsr debugfs directory [ 213.302365][ T4621] Bluetooth: hci7: command tx timeout [ 213.319651][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.327048][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.355757][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.376861][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.384217][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.411984][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.489574][ T5782] hsr_slave_0: entered promiscuous mode [ 213.495934][ T5782] hsr_slave_1: entered promiscuous mode [ 213.503577][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.511156][ T5782] Cannot create hsr debugfs directory [ 213.593715][ T5775] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.724716][ T5775] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.788775][ T5774] hsr_slave_0: entered promiscuous mode [ 213.800112][ T5774] hsr_slave_1: entered promiscuous mode [ 213.808133][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.826161][ T5774] Cannot create hsr debugfs directory [ 213.890907][ T5775] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.992965][ T5775] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.102354][ T2971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.190730][ T2971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.314019][ T2971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.407233][ T2971] bond0: (slave netdevsim0): Releasing backup interface [ 214.429023][ T2971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.504547][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.533558][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.558471][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.639250][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.758134][ T2971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.888245][ T2971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.985963][ T2971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.060466][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.062482][ T4621] Bluetooth: hci6: command tx timeout [ 215.114161][ T2971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.142410][ T4621] Bluetooth: hci5: command tx timeout [ 215.152441][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.174766][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.181911][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.201520][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.208724][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.302757][ T4621] Bluetooth: hci0: command tx timeout [ 215.304115][ T5233] Bluetooth: hci1: command tx timeout [ 215.383479][ T5233] Bluetooth: hci7: command tx timeout [ 215.417901][ T2971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.525250][ T2971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.594463][ T2971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.645834][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.714900][ T2971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.756796][ T5775] veth0_vlan: entered promiscuous mode [ 215.792931][ T5775] veth1_vlan: entered promiscuous mode [ 215.830587][ T5775] veth0_macvtap: entered promiscuous mode [ 215.866739][ T5775] veth1_macvtap: entered promiscuous mode [ 215.929472][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.944321][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.955220][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.969042][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.979030][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.989610][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.999773][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.012283][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.049720][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.070605][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.092260][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.112309][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.131773][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.152418][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.171760][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.181975][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.192625][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.203782][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.211917][ T2971] bridge_slave_1: left allmulticast mode [ 216.217986][ T2971] bridge_slave_1: left promiscuous mode [ 216.225104][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.233811][ T2971] bridge_slave_0: left allmulticast mode [ 216.239477][ T2971] bridge_slave_0: left promiscuous mode [ 216.248989][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.260410][ T2971] bridge_slave_1: left allmulticast mode [ 216.267716][ T2971] bridge_slave_1: left promiscuous mode [ 216.275675][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.286303][ T2971] bridge_slave_0: left allmulticast mode [ 216.291964][ T2971] bridge_slave_0: left promiscuous mode [ 216.298618][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.308435][ T2971] bridge_slave_1: left allmulticast mode [ 216.314406][ T2971] bridge_slave_1: left promiscuous mode [ 216.320089][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.329323][ T2971] bridge_slave_0: left allmulticast mode [ 216.335445][ T2971] bridge_slave_0: left promiscuous mode [ 216.341080][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.353953][ T2971] bridge_slave_1: left allmulticast mode [ 216.359626][ T2971] bridge_slave_1: left promiscuous mode [ 216.366325][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.376371][ T2971] bridge_slave_0: left allmulticast mode [ 216.382030][ T2971] bridge_slave_0: left promiscuous mode [ 216.388117][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.142263][ T5233] Bluetooth: hci6: command tx timeout [ 217.222286][ T5233] Bluetooth: hci5: command tx timeout [ 217.383543][ T5233] Bluetooth: hci0: command tx timeout [ 217.386019][ T4621] Bluetooth: hci1: command tx timeout [ 217.444608][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.455533][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.469882][ T2971] bond0 (unregistering): Released all slaves [ 217.475990][ T4621] Bluetooth: hci7: command tx timeout [ 217.556314][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.566949][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.581060][ T2971] bond0 (unregistering): Released all slaves [ 217.669019][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.679564][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.691342][ T2971] bond0 (unregistering): Released all slaves [ 217.778428][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.789139][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.801361][ T2971] bond0 (unregistering): Released all slaves [ 217.831075][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.841259][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.850092][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.858951][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.950750][ T2971] ÊüðÿG: left promiscuous mode [ 218.014511][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.027358][ T2971] ɶƣ0GC¦: left promiscuous mode [ 218.048447][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.078325][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.090345][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.110936][ T2971] ɶƣ0GC¦: left promiscuous mode [ 218.145523][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.169191][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.317363][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.350267][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.418932][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.588513][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.619978][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.959993][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.967254][ T5909] Illegal XDP return value 2935193044 on prog (id 68) dev N/A, expect packet loss! [ 219.060318][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 219.109450][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.116646][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.149926][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.157112][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.360968][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.699327][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.827569][ T5782] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.849772][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.865171][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.885139][ T5782] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.906986][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.974893][ T2971] hsr_slave_0: left promiscuous mode [ 219.980894][ T2971] hsr_slave_1: left promiscuous mode [ 220.000009][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.013592][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.033109][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.040542][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.086728][ T2971] hsr_slave_0: left promiscuous mode [ 220.104251][ T2971] hsr_slave_1: left promiscuous mode [ 220.118007][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.132067][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.143384][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.150824][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.170892][ T2971] hsr_slave_0: left promiscuous mode [ 220.177753][ T2971] hsr_slave_1: left promiscuous mode [ 220.189512][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.197118][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.208444][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.216902][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.236496][ T2971] hsr_slave_0: left promiscuous mode [ 220.244961][ T2971] hsr_slave_1: left promiscuous mode [ 220.251101][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.260552][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.269442][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.278160][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.369695][ T2971] veth1_macvtap: left promiscuous mode [ 220.385632][ T2971] veth0_macvtap: left promiscuous mode [ 220.391434][ T2971] veth1_vlan: left promiscuous mode [ 220.402324][ T2971] veth0_vlan: left promiscuous mode [ 220.418580][ T2971] veth1_macvtap: left promiscuous mode [ 220.428135][ T2971] veth0_macvtap: left promiscuous mode [ 220.440029][ T2971] veth1_vlan: left promiscuous mode [ 220.445592][ T2971] veth0_vlan: left promiscuous mode [ 220.463836][ T2971] veth1_macvtap: left promiscuous mode [ 220.469390][ T2971] veth0_macvtap: left promiscuous mode [ 220.482385][ T2971] veth1_vlan: left promiscuous mode [ 220.487726][ T2971] veth0_vlan: left promiscuous mode [ 220.503893][ T2971] veth1_macvtap: left promiscuous mode [ 220.516148][ T2971] veth0_macvtap: left promiscuous mode [ 220.527330][ T2971] veth1_vlan: left promiscuous mode [ 220.537737][ T2971] veth0_vlan: left promiscuous mode [ 221.739448][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 221.771806][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 222.331766][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 222.366672][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 222.935672][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 222.969169][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 223.570483][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 223.604140][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 223.910220][ T5782] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.928276][ T5782] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.976597][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.991695][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.016009][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.040109][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.093830][ T6006] ɶƣ0GC¦: entered promiscuous mode [ 224.109656][ T6006] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 224.126411][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.287923][ T6008] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 224.383472][ T5778] veth0_vlan: entered promiscuous mode [ 224.453900][ T5778] veth1_vlan: entered promiscuous mode [ 224.495211][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.584926][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.596644][ T5778] veth0_macvtap: entered promiscuous mode [ 224.621593][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.653825][ T5778] veth1_macvtap: entered promiscuous mode [ 224.693206][ T4002] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.700340][ T4002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.711833][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.719001][ T4002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.756141][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.798608][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.830330][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.841187][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.853022][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.867405][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.944015][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.962270][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.980326][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.991501][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.000450][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.009516][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.018869][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.035882][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.043041][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.091961][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.104642][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.111769][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.188439][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.195623][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.245954][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.253121][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.389631][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.415147][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.500638][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.542816][ T4002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.564886][ T4002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.724612][ T5780] veth0_vlan: entered promiscuous mode [ 225.766600][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.794459][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.807729][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.989464][ T5780] veth1_vlan: entered promiscuous mode [ 226.039109][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 226.243540][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.259516][ T5780] veth0_macvtap: entered promiscuous mode [ 226.270852][ T5780] veth1_macvtap: entered promiscuous mode [ 226.368846][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.400046][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.411169][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.421792][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.434341][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.480172][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.503707][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.536009][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.562297][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.583829][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.650949][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.666567][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.679811][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.688726][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.705136][ T5782] veth0_vlan: entered promiscuous mode [ 226.715845][ T6041] netlink: 44 bytes leftover after parsing attributes in process `syz.3.173'. [ 226.774454][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 226.799484][ T5774] veth0_vlan: entered promiscuous mode [ 226.841305][ T5782] veth1_vlan: entered promiscuous mode [ 226.932073][ T5774] veth1_vlan: entered promiscuous mode [ 227.036075][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.053998][ T5774] veth0_macvtap: entered promiscuous mode [ 227.066049][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.089844][ T5782] veth0_macvtap: entered promiscuous mode [ 227.098721][ T6053] netlink: 'syz.2.175': attribute type 3 has an invalid length. [ 227.108111][ T6053] netlink: 111688 bytes leftover after parsing attributes in process `syz.2.175'. [ 227.115312][ T5782] veth1_macvtap: entered promiscuous mode [ 227.141023][ T5774] veth1_macvtap: entered promiscuous mode [ 227.219460][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.224392][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.241793][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.242561][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 227.262970][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.270946][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.280139][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.301693][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.340510][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.352115][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.362018][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.378286][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.400203][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.412008][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.421914][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.433288][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.443439][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.453989][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.467390][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.489044][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.499893][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.511779][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.525559][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.536540][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.547864][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.561140][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.588559][ T5782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.606071][ T5782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.620638][ T5782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.633385][ T5782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.676932][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.692811][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.722919][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.746452][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.756809][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.767819][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.786758][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.802480][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.814522][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.886444][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.912846][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.950474][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.960402][ T6079] FAULT_INJECTION: forcing a failure. [ 227.960402][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 227.965064][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.984418][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.1.182 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 227.994704][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.004798][ T6079] Call Trace: [ 228.008096][ T6079] [ 228.011025][ T6079] dump_stack_lvl+0x241/0x360 [ 228.015721][ T6079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.020950][ T6079] ? __pfx__printk+0x10/0x10 [ 228.025584][ T6079] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 228.031569][ T6079] ? __pfx___might_resched+0x10/0x10 [ 228.036854][ T6079] should_fail_ex+0x3b0/0x4e0 [ 228.041541][ T6079] should_failslab+0xac/0x100 [ 228.046236][ T6079] ? __alloc_skb+0x1c3/0x440 [ 228.050852][ T6079] kmem_cache_alloc_node_noprof+0x71/0x320 [ 228.056675][ T6079] __alloc_skb+0x1c3/0x440 [ 228.061092][ T6079] ? __pfx___alloc_skb+0x10/0x10 [ 228.066053][ T6079] ? netlink_autobind+0xd6/0x2f0 [ 228.070992][ T6079] ? netlink_autobind+0x2b0/0x2f0 [ 228.076051][ T6079] netlink_sendmsg+0x638/0xcb0 [ 228.080818][ T6079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.086103][ T6079] ? aa_sock_msg_perm+0x91/0x160 [ 228.091036][ T6079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.096332][ T6079] __sock_sendmsg+0x221/0x270 [ 228.101029][ T6079] ____sys_sendmsg+0x52a/0x7e0 [ 228.105888][ T6079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.111227][ T6079] __sys_sendmmsg+0x3ab/0x730 [ 228.115906][ T6079] ? __pfx___sys_sendmmsg+0x10/0x10 [ 228.121120][ T6079] ? __pfx_lock_release+0x10/0x10 [ 228.126167][ T6079] ? kstrtouint_from_user+0x128/0x190 [ 228.131551][ T6079] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 228.137441][ T6079] ? ksys_write+0x229/0x2b0 [ 228.141951][ T6079] ? __pfx_lock_release+0x10/0x10 [ 228.147008][ T6079] ? vfs_write+0x7bf/0xc90 [ 228.151441][ T6079] ? kmem_cache_free+0x1a2/0x420 [ 228.156375][ T6079] ? __mutex_unlock_slowpath+0x21d/0x750 [ 228.162002][ T6079] ? __fget_files+0x3f3/0x470 [ 228.166680][ T6079] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 228.172655][ T6079] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.178974][ T6079] ? do_syscall_64+0x100/0x230 [ 228.183740][ T6079] __x64_sys_sendmmsg+0xa0/0xb0 [ 228.188583][ T6079] do_syscall_64+0xf3/0x230 [ 228.193089][ T6079] ? clear_bhb_loop+0x35/0x90 [ 228.197792][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.203718][ T6079] RIP: 0033:0x7f147877dff9 [ 228.208161][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.227765][ T6079] RSP: 002b:00007f14794ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 228.236185][ T6079] RAX: ffffffffffffffda RBX: 00007f1478936058 RCX: 00007f147877dff9 [ 228.244177][ T6079] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 228.252174][ T6079] RBP: 00007f14794ef090 R08: 0000000000000000 R09: 0000000000000000 [ 228.260142][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.268113][ T6079] R13: 0000000000000000 R14: 00007f1478936058 R15: 00007ffd7eb04218 [ 228.276083][ T6079] [ 228.318821][ T6068] veth0_vlan: left promiscuous mode [ 228.340278][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.182'. [ 228.416944][ T6065] delete_channel: no stack [ 228.497294][ T6085] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 228.562751][ T6085] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 228.584763][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.598724][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.733904][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.743574][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.751417][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.792416][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.923284][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.946749][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.965627][ T6097] FAULT_INJECTION: forcing a failure. [ 228.965627][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 229.014901][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.1.190 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 229.025189][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.035252][ T6097] Call Trace: [ 229.038551][ T6097] [ 229.041500][ T6097] dump_stack_lvl+0x241/0x360 [ 229.046209][ T6097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.051439][ T6097] ? __pfx__printk+0x10/0x10 [ 229.056060][ T6097] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 229.062598][ T6097] ? __pfx___might_resched+0x10/0x10 [ 229.067922][ T6097] should_fail_ex+0x3b0/0x4e0 [ 229.072626][ T6097] should_failslab+0xac/0x100 [ 229.077327][ T6097] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 229.083678][ T6097] ? __request_module+0x2d5/0x650 [ 229.088729][ T6097] ? __request_module+0x2b9/0x650 [ 229.093858][ T6097] kstrdup+0x3a/0x80 [ 229.097743][ T6097] __request_module+0x2d5/0x650 [ 229.102583][ T6097] ? __pfx_aa_get_newest_label+0x10/0x10 [ 229.108200][ T6097] ? capable+0x79/0xe0 [ 229.112260][ T6097] ? __pfx___request_module+0x10/0x10 [ 229.117619][ T6097] ? apparmor_capable+0x13b/0x1b0 [ 229.122648][ T6097] ? dev_load+0x21/0x1f0 [ 229.126901][ T6097] dev_ioctl+0x5fc/0x1340 [ 229.131223][ T6097] sock_do_ioctl+0x240/0x460 [ 229.135812][ T6097] ? __pfx_sock_do_ioctl+0x10/0x10 [ 229.140966][ T6097] sock_ioctl+0x626/0x8e0 [ 229.145327][ T6097] ? __pfx_sock_ioctl+0x10/0x10 [ 229.150166][ T6097] ? __fget_files+0x29/0x470 [ 229.154743][ T6097] ? __fget_files+0x3f3/0x470 [ 229.159423][ T6097] ? __pfx_sock_ioctl+0x10/0x10 [ 229.164274][ T6097] __se_sys_ioctl+0xf9/0x170 [ 229.168865][ T6097] do_syscall_64+0xf3/0x230 [ 229.173367][ T6097] ? clear_bhb_loop+0x35/0x90 [ 229.178053][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.183942][ T6097] RIP: 0033:0x7f147877dff9 [ 229.188348][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.207969][ T6097] RSP: 002b:00007f1479510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.216397][ T6097] RAX: ffffffffffffffda RBX: 00007f1478935f80 RCX: 00007f147877dff9 [ 229.224375][ T6097] RDX: 0000000020000180 RSI: 0000000000008923 RDI: 0000000000000003 [ 229.232364][ T6097] RBP: 00007f1479510090 R08: 0000000000000000 R09: 0000000000000000 [ 229.240342][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.248324][ T6097] R13: 0000000000000000 R14: 00007f1478935f80 R15: 00007ffd7eb04218 [ 229.256305][ T6097] [ 229.293984][ T6104] netlink: 48 bytes leftover after parsing attributes in process `syz.3.192'. [ 229.335145][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 229.380820][ T6105] bridge_slave_1: left allmulticast mode [ 229.394413][ T6105] bridge_slave_1: left promiscuous mode [ 229.400306][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.438531][ T6105] bridge_slave_0: left allmulticast mode [ 229.448468][ T6105] bridge_slave_0: left promiscuous mode [ 229.463395][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.493025][ T6117] netlink: 'syz.1.194': attribute type 3 has an invalid length. [ 229.529888][ T6117] netlink: 111688 bytes leftover after parsing attributes in process `syz.1.194'. [ 229.557823][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 229.911930][ T6138] netlink: 'syz.1.202': attribute type 21 has an invalid length. [ 229.936455][ T6138] netlink: 'syz.1.202': attribute type 6 has an invalid length. [ 231.246427][ T6212] __nla_validate_parse: 3 callbacks suppressed [ 231.246445][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 231.350424][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'. [ 231.366686][ T6212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.408707][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 231.448973][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 231.472327][ T6221] bridge_slave_1: left allmulticast mode [ 231.490633][ T6221] bridge_slave_1: left promiscuous mode [ 231.502462][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.513061][ T6221] bridge_slave_0: left allmulticast mode [ 231.523759][ T6221] bridge_slave_0: left promiscuous mode [ 231.529511][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.627958][ T6235] Bluetooth: MGMT ver 1.23 [ 231.747367][ T6242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 231.776216][ T6242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.236'. [ 231.867196][ T6247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.874525][ T6247] IPv6: NLM_F_CREATE should be set when creating new route [ 231.939637][ T6246] syzkaller0: entered promiscuous mode [ 231.946110][ T6246] syzkaller0: entered allmulticast mode [ 231.953247][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.240'. [ 231.965897][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.240'. [ 233.659270][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'. [ 233.677789][ T6282] net veth1_virt_wifi ÿÿÿ: renamed from virt_wifi0 [ 233.731212][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 234.629363][ T6329] FAULT_INJECTION: forcing a failure. [ 234.629363][ T6329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.652240][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.1.267 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 234.662548][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.672629][ T6329] Call Trace: [ 234.675930][ T6329] [ 234.678881][ T6329] dump_stack_lvl+0x241/0x360 [ 234.683596][ T6329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.688826][ T6329] ? __pfx__printk+0x10/0x10 [ 234.693464][ T6329] ? __pfx_lock_release+0x10/0x10 [ 234.698531][ T6329] should_fail_ex+0x3b0/0x4e0 [ 234.703240][ T6329] _copy_from_user+0x2f/0xe0 [ 234.707859][ T6329] copy_msghdr_from_user+0xae/0x680 [ 234.713094][ T6329] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 234.718946][ T6329] __sys_sendmsg+0x22d/0x380 [ 234.723573][ T6329] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.728715][ T6329] ? __pfx_vfs_write+0x10/0x10 [ 234.733535][ T6329] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.739892][ T6329] ? do_syscall_64+0x100/0x230 [ 234.744680][ T6329] ? do_syscall_64+0xb6/0x230 [ 234.749385][ T6329] do_syscall_64+0xf3/0x230 [ 234.753910][ T6329] ? clear_bhb_loop+0x35/0x90 [ 234.758610][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.764536][ T6329] RIP: 0033:0x7f147877dff9 [ 234.768971][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.788602][ T6329] RSP: 002b:00007f14794ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.797050][ T6329] RAX: ffffffffffffffda RBX: 00007f1478936058 RCX: 00007f147877dff9 [ 234.805051][ T6329] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000005 [ 234.813052][ T6329] RBP: 00007f14794ef090 R08: 0000000000000000 R09: 0000000000000000 [ 234.821045][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.829036][ T6329] R13: 0000000000000000 R14: 00007f1478936058 R15: 00007ffd7eb04218 [ 234.837044][ T6329] [ 234.935109][ T6337] bridge_slave_1: left allmulticast mode [ 234.960170][ T6337] bridge_slave_1: left promiscuous mode [ 234.964779][ T6340] FAULT_INJECTION: forcing a failure. [ 234.964779][ T6340] name failslab, interval 1, probability 0, space 0, times 0 [ 234.977679][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.978993][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.3.270 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 234.995603][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.005681][ T6340] Call Trace: [ 235.008981][ T6340] [ 235.011935][ T6340] dump_stack_lvl+0x241/0x360 [ 235.016641][ T6340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.021841][ T6340] ? __pfx__printk+0x10/0x10 [ 235.026431][ T6340] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 235.031883][ T6340] ? __pfx___might_resched+0x10/0x10 [ 235.037179][ T6340] should_fail_ex+0x3b0/0x4e0 [ 235.041874][ T6340] should_failslab+0xac/0x100 [ 235.046560][ T6340] ? call_usermodehelper_setup+0x8e/0x270 [ 235.052304][ T6340] __kmalloc_cache_noprof+0x6c/0x2c0 [ 235.057615][ T6340] call_usermodehelper_setup+0x8e/0x270 [ 235.063163][ T6340] ? __pfx_free_modprobe_argv+0x10/0x10 [ 235.068720][ T6340] __request_module+0x3cd/0x650 [ 235.073598][ T6340] ? __pfx_aa_get_newest_label+0x10/0x10 [ 235.079250][ T6340] ? capable+0x79/0xe0 [ 235.083339][ T6340] ? __pfx___request_module+0x10/0x10 [ 235.088739][ T6340] ? apparmor_capable+0x13b/0x1b0 [ 235.093794][ T6340] ? dev_load+0x21/0x1f0 [ 235.098056][ T6340] dev_ioctl+0x5fc/0x1340 [ 235.102406][ T6340] sock_do_ioctl+0x240/0x460 [ 235.107028][ T6340] ? __pfx_sock_do_ioctl+0x10/0x10 [ 235.112178][ T6340] sock_ioctl+0x626/0x8e0 [ 235.116533][ T6340] ? __pfx_sock_ioctl+0x10/0x10 [ 235.121400][ T6340] ? __fget_files+0x29/0x470 [ 235.126011][ T6340] ? __fget_files+0x3f3/0x470 [ 235.130711][ T6340] ? __pfx_sock_ioctl+0x10/0x10 [ 235.135583][ T6340] __se_sys_ioctl+0xf9/0x170 [ 235.140197][ T6340] do_syscall_64+0xf3/0x230 [ 235.144716][ T6340] ? clear_bhb_loop+0x35/0x90 [ 235.149407][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.155319][ T6340] RIP: 0033:0x7f72f2d7dff9 [ 235.159745][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.179366][ T6340] RSP: 002b:00007f72f3b6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.187807][ T6340] RAX: ffffffffffffffda RBX: 00007f72f2f35f80 RCX: 00007f72f2d7dff9 [ 235.195802][ T6340] RDX: 0000000020000180 RSI: 0000000000008923 RDI: 0000000000000003 [ 235.203796][ T6340] RBP: 00007f72f3b6b090 R08: 0000000000000000 R09: 0000000000000000 [ 235.211789][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.219777][ T6340] R13: 0000000000000000 R14: 00007f72f2f35f80 R15: 00007ffce37cd998 [ 235.227779][ T6340] [ 235.247334][ T6337] bridge_slave_0: left allmulticast mode [ 235.259663][ T6337] bridge_slave_0: left promiscuous mode [ 235.265944][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.653495][ T6371] netlink: 'syz.0.280': attribute type 9 has an invalid length. [ 235.738355][ T6365] netlink: 'syz.4.278': attribute type 10 has an invalid length. [ 235.754142][ T6377] netlink: 'syz.0.280': attribute type 9 has an invalid length. [ 235.770262][ T6376] xt_CT: No such helper "netbios-ns" [ 235.807660][ T6365] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.989868][ T6392] unsupported nla_type 40 [ 236.168184][ T6400] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 236.304024][ T6406] xt_addrtype: ipv6 does not support BROADCAST matching [ 236.323023][ T6409] FAULT_INJECTION: forcing a failure. [ 236.323023][ T6409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.363973][ T6413] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 236.371954][ T6413] __nla_validate_parse: 11 callbacks suppressed [ 236.371970][ T6413] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.295'. [ 236.372395][ T6409] CPU: 1 UID: 0 PID: 6409 Comm: syz.1.294 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 236.397657][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.407737][ T6409] Call Trace: [ 236.411044][ T6409] [ 236.413996][ T6409] dump_stack_lvl+0x241/0x360 [ 236.418711][ T6409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.423944][ T6409] ? __pfx__printk+0x10/0x10 [ 236.428560][ T6409] ? __pfx_lock_release+0x10/0x10 [ 236.433618][ T6409] should_fail_ex+0x3b0/0x4e0 [ 236.438326][ T6409] _copy_from_user+0x2f/0xe0 [ 236.442947][ T6409] copy_msghdr_from_user+0xae/0x680 [ 236.448175][ T6409] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 236.454019][ T6409] __sys_sendmsg+0x22d/0x380 [ 236.458632][ T6409] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.463774][ T6409] ? __pfx_vfs_write+0x10/0x10 [ 236.468581][ T6409] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.474935][ T6409] ? do_syscall_64+0x100/0x230 [ 236.479720][ T6409] ? do_syscall_64+0xb6/0x230 [ 236.484419][ T6409] do_syscall_64+0xf3/0x230 [ 236.488943][ T6409] ? clear_bhb_loop+0x35/0x90 [ 236.493643][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.499563][ T6409] RIP: 0033:0x7f147877dff9 [ 236.503998][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.523624][ T6409] RSP: 002b:00007f1479510038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.532063][ T6409] RAX: ffffffffffffffda RBX: 00007f1478935f80 RCX: 00007f147877dff9 [ 236.540052][ T6409] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 236.548079][ T6409] RBP: 00007f1479510090 R08: 0000000000000000 R09: 0000000000000000 [ 236.556077][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.564065][ T6409] R13: 0000000000000000 R14: 00007f1478935f80 R15: 00007ffd7eb04218 [ 236.572069][ T6409] [ 236.665787][ T6421] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.299'. [ 236.696188][ T6421] openvswitch: netlink: Tunnel attr 5 has unexpected len 1 expected 0 [ 236.863718][ T6431] FAULT_INJECTION: forcing a failure. [ 236.863718][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 236.882314][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: syz.1.302 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 236.892613][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.902695][ T6431] Call Trace: [ 236.905993][ T6431] [ 236.908927][ T6431] dump_stack_lvl+0x241/0x360 [ 236.913617][ T6431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.918820][ T6431] ? __pfx__printk+0x10/0x10 [ 236.923412][ T6431] ? ref_tracker_alloc+0x332/0x490 [ 236.928527][ T6431] should_fail_ex+0x3b0/0x4e0 [ 236.933208][ T6431] ? skb_clone+0x20c/0x390 [ 236.937616][ T6431] should_failslab+0xac/0x100 [ 236.942296][ T6431] ? skb_clone+0x20c/0x390 [ 236.946720][ T6431] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 236.952096][ T6431] skb_clone+0x20c/0x390 [ 236.956342][ T6431] __netlink_deliver_tap+0x3cc/0x7c0 [ 236.961634][ T6431] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.966828][ T6431] netlink_deliver_tap+0x19d/0x1b0 [ 236.971936][ T6431] netlink_unicast+0x7c4/0x990 [ 236.976702][ T6431] ? __pfx_netlink_unicast+0x10/0x10 [ 236.981981][ T6431] ? __virt_addr_valid+0x183/0x530 [ 236.987087][ T6431] ? __check_object_size+0x48e/0x900 [ 236.992371][ T6431] netlink_sendmsg+0x8e4/0xcb0 [ 236.997142][ T6431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.002426][ T6431] ? aa_sock_msg_perm+0x91/0x160 [ 237.007359][ T6431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.012642][ T6431] __sock_sendmsg+0x221/0x270 [ 237.017320][ T6431] ____sys_sendmsg+0x52a/0x7e0 [ 237.022082][ T6431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.027374][ T6431] __sys_sendmsg+0x292/0x380 [ 237.031960][ T6431] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.037070][ T6431] ? __pfx_vfs_write+0x10/0x10 [ 237.041850][ T6431] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.048179][ T6431] ? do_syscall_64+0x100/0x230 [ 237.052943][ T6431] ? do_syscall_64+0xb6/0x230 [ 237.057615][ T6431] do_syscall_64+0xf3/0x230 [ 237.062112][ T6431] ? clear_bhb_loop+0x35/0x90 [ 237.066787][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.072679][ T6431] RIP: 0033:0x7f147877dff9 [ 237.077085][ T6431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.096682][ T6431] RSP: 002b:00007f1479510038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.105093][ T6431] RAX: ffffffffffffffda RBX: 00007f1478935f80 RCX: 00007f147877dff9 [ 237.113057][ T6431] RDX: 0000000010004044 RSI: 00000000200000c0 RDI: 0000000000000006 [ 237.121019][ T6431] RBP: 00007f1479510090 R08: 0000000000000000 R09: 0000000000000000 [ 237.129001][ T6431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.136984][ T6431] R13: 0000000000000000 R14: 00007f1478935f80 R15: 00007ffd7eb04218 [ 237.144973][ T6431] [ 237.200012][ T6435] xt_hashlimit: max too large, truncated to 1048576 [ 237.465551][ T6448] FAULT_INJECTION: forcing a failure. [ 237.465551][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.478945][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.4.311 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 237.489211][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 237.499280][ T6448] Call Trace: [ 237.502562][ T6448] [ 237.505487][ T6448] dump_stack_lvl+0x241/0x360 [ 237.510175][ T6448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.515378][ T6448] ? __pfx__printk+0x10/0x10 [ 237.519974][ T6448] ? snprintf+0xda/0x120 [ 237.524216][ T6448] should_fail_ex+0x3b0/0x4e0 [ 237.528894][ T6448] _copy_to_user+0x2f/0xb0 [ 237.533308][ T6448] simple_read_from_buffer+0xca/0x150 [ 237.538680][ T6448] proc_fail_nth_read+0x1e9/0x250 [ 237.543706][ T6448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.549253][ T6448] ? rw_verify_area+0x55e/0x6f0 [ 237.554104][ T6448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.559647][ T6448] vfs_read+0x201/0xbc0 [ 237.563802][ T6448] ? __pfx_lock_release+0x10/0x10 [ 237.568833][ T6448] ? __pfx_vfs_read+0x10/0x10 [ 237.573515][ T6448] ? __fget_files+0x3f3/0x470 [ 237.578214][ T6448] ? fdget_pos+0x24e/0x320 [ 237.582629][ T6448] ksys_read+0x183/0x2b0 [ 237.586871][ T6448] ? __pfx_ksys_read+0x10/0x10 [ 237.591658][ T6448] ? do_syscall_64+0x100/0x230 [ 237.596446][ T6448] ? do_syscall_64+0xb6/0x230 [ 237.601117][ T6448] do_syscall_64+0xf3/0x230 [ 237.605614][ T6448] ? clear_bhb_loop+0x35/0x90 [ 237.610286][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.616265][ T6448] RIP: 0033:0x7ff16d37ca3c [ 237.620677][ T6448] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 237.640276][ T6448] RSP: 002b:00007ff16e188030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.648687][ T6448] RAX: ffffffffffffffda RBX: 00007ff16d535f80 RCX: 00007ff16d37ca3c [ 237.656655][ T6448] RDX: 000000000000000f RSI: 00007ff16e1880a0 RDI: 0000000000000006 [ 237.664620][ T6448] RBP: 00007ff16e188090 R08: 0000000000000000 R09: 0000000000000000 [ 237.672592][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.680556][ T6448] R13: 0000000000000000 R14: 00007ff16d535f80 R15: 00007fffd4002f78 [ 237.688541][ T6448] [ 237.806131][ T6458] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.312'. [ 237.989353][ T6467] netlink: 80 bytes leftover after parsing attributes in process `syz.1.315'. [ 238.030091][ T6474] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 238.209301][ T6482] syzkaller0: entered allmulticast mode [ 238.407148][ T6493] ɶƣ0GC¦: entered promiscuous mode [ 238.427620][ T6493] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 238.541017][ T6502] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 238.578285][ T6502] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 238.608837][ T6504] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 238.669913][ T6504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.727406][ T6512] hsr_slave_0: left promiscuous mode [ 238.761147][ T6512] hsr_slave_1: left promiscuous mode [ 238.856835][ T6519] cannot load conntrack support for proto=3 [ 239.186789][ T6534] ɶƣ0GC¦: entered promiscuous mode [ 239.213141][ T6534] netlink: 'syz.4.338': attribute type 1 has an invalid length. [ 239.605839][ T6556] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.912851][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.919229][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.647553][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.657539][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.664787][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.679317][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.680775][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.698623][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.708129][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 261.717545][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.737270][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.746571][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.763539][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.788005][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.793642][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.795764][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.811180][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.819442][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 261.834602][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.847311][ T6584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.854498][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.891634][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.901474][ T5768] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 261.903147][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.916523][ T5768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.916718][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 261.931567][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.942334][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.950355][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.976712][ T5768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.984594][ T5768] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 261.996522][ T6587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.312062][ T4002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.429767][ T4002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.505626][ T4002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.580957][ T4002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.790661][ T6581] chnl_net:caif_netlink_parms(): no params data found [ 262.886311][ T6576] chnl_net:caif_netlink_parms(): no params data found [ 262.997332][ T6577] chnl_net:caif_netlink_parms(): no params data found [ 263.230902][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.241832][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.253130][ T4002] bond0 (unregistering): Released all slaves [ 263.294570][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.301704][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.309443][ T6581] bridge_slave_0: entered allmulticast mode [ 263.318609][ T6581] bridge_slave_0: entered promiscuous mode [ 263.330457][ T6585] chnl_net:caif_netlink_parms(): no params data found [ 263.362727][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.370267][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.378002][ T6581] bridge_slave_1: entered allmulticast mode [ 263.385259][ T6581] bridge_slave_1: entered promiscuous mode [ 263.562914][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.575436][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.687136][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 263.747055][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.763098][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.770354][ T6576] bridge_slave_0: entered allmulticast mode [ 263.797668][ T6576] bridge_slave_0: entered promiscuous mode [ 263.805941][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.813695][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.820915][ T6576] bridge_slave_1: entered allmulticast mode [ 263.828397][ T6576] bridge_slave_1: entered promiscuous mode [ 263.882093][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.892090][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.902385][ T6585] bridge_slave_0: entered allmulticast mode [ 263.909691][ T6585] bridge_slave_0: entered promiscuous mode [ 263.928831][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.936313][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.943577][ T55] Bluetooth: hci4: command tx timeout [ 263.950632][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.958112][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.976957][ T4002] veth1_macvtap: left promiscuous mode [ 263.983280][ T4002] veth0_macvtap: left promiscuous mode [ 263.988887][ T4002] veth1_vlan: left promiscuous mode [ 263.994266][ T4002] veth0_vlan: left promiscuous mode [ 264.022577][ T55] Bluetooth: hci5: command tx timeout [ 264.022608][ T6584] Bluetooth: hci2: command tx timeout [ 264.022999][ T6584] Bluetooth: hci3: command tx timeout [ 264.103916][ T6584] Bluetooth: hci1: command tx timeout [ 264.369041][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 264.408710][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 264.745310][ T6581] team0: Port device team_slave_0 added [ 264.765129][ T6576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.790781][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.801824][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.819150][ T6585] bridge_slave_1: entered allmulticast mode [ 264.827066][ T6585] bridge_slave_1: entered promiscuous mode [ 264.854736][ T6581] team0: Port device team_slave_1 added [ 264.864112][ T6576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.928401][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.936758][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.945865][ T6577] bridge_slave_0: entered allmulticast mode [ 264.956003][ T6577] bridge_slave_0: entered promiscuous mode [ 264.964337][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.971439][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.979062][ T6577] bridge_slave_1: entered allmulticast mode [ 264.986591][ T6577] bridge_slave_1: entered promiscuous mode [ 265.030150][ T6585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.085961][ T6576] team0: Port device team_slave_0 added [ 265.101122][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.109321][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.117104][ T6579] bridge_slave_0: entered allmulticast mode [ 265.124349][ T6579] bridge_slave_0: entered promiscuous mode [ 265.133747][ T6585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.152736][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.166517][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.177680][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.185170][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.213157][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.225576][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.232959][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.259081][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.271403][ T6576] team0: Port device team_slave_1 added [ 265.310318][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.318434][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.329594][ T6579] bridge_slave_1: entered allmulticast mode [ 265.336673][ T6579] bridge_slave_1: entered promiscuous mode [ 265.361983][ T6585] team0: Port device team_slave_0 added [ 265.387241][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.394794][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.421405][ T6576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.434491][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.441574][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.468031][ T6576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.497438][ T6585] team0: Port device team_slave_1 added [ 265.507233][ T6577] team0: Port device team_slave_0 added [ 265.515451][ T6577] team0: Port device team_slave_1 added [ 265.539480][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.559298][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.612054][ T6581] hsr_slave_0: entered promiscuous mode [ 265.619006][ T6581] hsr_slave_1: entered promiscuous mode [ 265.653875][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.660850][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.687334][ T6585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.699344][ T6585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.707824][ T6585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.734433][ T6585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.746591][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.753693][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.780226][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.815276][ T6576] hsr_slave_0: entered promiscuous mode [ 265.821502][ T6576] hsr_slave_1: entered promiscuous mode [ 265.829002][ T6576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.841196][ T6576] Cannot create hsr debugfs directory [ 265.870534][ T6579] team0: Port device team_slave_0 added [ 265.880123][ T6579] team0: Port device team_slave_1 added [ 265.897096][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.913541][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.951925][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.022755][ T6584] Bluetooth: hci4: command tx timeout [ 266.103073][ T6584] Bluetooth: hci3: command tx timeout [ 266.103092][ T5768] Bluetooth: hci5: command tx timeout [ 266.108486][ T6584] Bluetooth: hci2: command tx timeout [ 266.186689][ T6584] Bluetooth: hci1: command tx timeout [ 266.194330][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.201302][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.239688][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.257718][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.279293][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.305806][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.338235][ T6585] hsr_slave_0: entered promiscuous mode [ 266.346260][ T6585] hsr_slave_1: entered promiscuous mode [ 266.352307][ T6585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.359882][ T6585] Cannot create hsr debugfs directory [ 266.460999][ T6577] hsr_slave_0: entered promiscuous mode [ 266.470655][ T6577] hsr_slave_1: entered promiscuous mode [ 266.479115][ T6577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.490183][ T6577] Cannot create hsr debugfs directory [ 266.531160][ T4002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.555354][ T6579] hsr_slave_0: entered promiscuous mode [ 266.565997][ T6579] hsr_slave_1: entered promiscuous mode [ 266.571931][ T6579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.579977][ T6579] Cannot create hsr debugfs directory [ 266.635442][ T4002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.764644][ T4002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.825041][ T6576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.914774][ T4002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.956498][ T6576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.040547][ T6576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.189656][ T6576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.373130][ T4002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.464894][ T4002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.564879][ T4002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.589857][ T6576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.623927][ T6576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.669066][ T4002] bond0: (slave netdevsim0): Releasing backup interface [ 267.687169][ T4002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.708539][ T6576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.719902][ T6576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.933596][ T4002] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.006931][ T6576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.067401][ T4002] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.102605][ T6584] Bluetooth: hci4: command tx timeout [ 268.138606][ T6576] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.183133][ T6584] Bluetooth: hci2: command tx timeout [ 268.183862][ T55] Bluetooth: hci5: command tx timeout [ 268.188565][ T6584] Bluetooth: hci3: command tx timeout [ 268.211080][ T4002] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.247495][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.254662][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.262487][ T6584] Bluetooth: hci1: command tx timeout [ 268.299003][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.306201][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.315820][ T6581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.337853][ T6581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.356289][ T6581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.395378][ T4002] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.419368][ T6581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.643945][ T4002] bridge_slave_1: left allmulticast mode [ 268.650085][ T4002] bridge_slave_1: left promiscuous mode [ 268.655988][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.670295][ T4002] bridge_slave_0: left allmulticast mode [ 268.676513][ T4002] bridge_slave_0: left promiscuous mode [ 268.683447][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.695675][ T4002] bridge_slave_1: left allmulticast mode [ 268.701341][ T4002] bridge_slave_1: left promiscuous mode [ 268.707513][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.716621][ T4002] bridge_slave_0: left allmulticast mode [ 268.726493][ T4002] bridge_slave_0: left promiscuous mode [ 268.732686][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.950428][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.961241][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.978980][ T4002] bond0 (unregistering): Released all slaves [ 270.068924][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.081061][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.094223][ T4002] bond0 (unregistering): Released all slaves [ 270.185149][ T6584] Bluetooth: hci4: command tx timeout [ 270.201994][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.217936][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.229597][ T4002] bond0 (unregistering): Released all slaves [ 270.267069][ T6584] Bluetooth: hci3: command tx timeout [ 270.267085][ T5768] Bluetooth: hci5: command tx timeout [ 270.267118][ T5768] Bluetooth: hci2: command tx timeout [ 270.340970][ T4002] bond1 (unregistering): Released all slaves [ 270.352489][ T5768] Bluetooth: hci1: command tx timeout [ 270.436688][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.447864][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.458438][ T4002] bond0 (unregistering): Released all slaves [ 270.623918][ T4002] ɶƣ0GC¦: left promiscuous mode [ 270.723273][ T4002] ɶƣ0GC¦: left promiscuous mode [ 270.777855][ T6576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.798357][ T4002] ɶƣ0GC¦: left promiscuous mode [ 270.851558][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.061654][ T6576] veth0_vlan: entered promiscuous mode [ 271.113770][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.122893][ T6579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.137922][ T6579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.202005][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.209153][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.227219][ T6576] veth1_vlan: entered promiscuous mode [ 271.234824][ T6579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.300755][ T6579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.317065][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.324236][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.548841][ T6576] veth0_macvtap: entered promiscuous mode [ 271.607623][ T6576] veth1_macvtap: entered promiscuous mode [ 271.910645][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.924689][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.937486][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.948076][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.959121][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.969988][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.980914][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.992836][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.003457][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.014927][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.038547][ T6577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.119835][ T6577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.171380][ T6577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.224411][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.235612][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.247623][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.258451][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.268882][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.280306][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.290408][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.301111][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.318516][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.328099][ T6577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.371036][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.429949][ T6576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.440185][ T6576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.450046][ T6576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.459275][ T6576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.477687][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.484820][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.570495][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.577668][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.610288][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.629607][ T4002] hsr_slave_0: left promiscuous mode [ 272.638842][ T4002] hsr_slave_1: left promiscuous mode [ 272.647412][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.655293][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.664844][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.672601][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.684147][ T4002] hsr_slave_0: left promiscuous mode [ 272.690001][ T4002] hsr_slave_1: left promiscuous mode [ 272.696356][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.704526][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.714000][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.721455][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.750680][ T4002] hsr_slave_0: left promiscuous mode [ 272.763044][ T4002] hsr_slave_1: left promiscuous mode [ 272.778238][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.789440][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.804057][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.811488][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.832994][ T4002] hsr_slave_0: left promiscuous mode [ 272.838806][ T4002] hsr_slave_1: left promiscuous mode [ 272.846846][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.854444][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.862081][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.870538][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.916007][ T4002] veth1_macvtap: left promiscuous mode [ 272.921515][ T4002] veth0_macvtap: left promiscuous mode [ 272.927174][ T4002] veth1_vlan: left promiscuous mode [ 272.933346][ T4002] veth0_vlan: left promiscuous mode [ 272.939407][ T4002] veth1_macvtap: left promiscuous mode [ 272.945009][ T4002] veth0_macvtap: left promiscuous mode [ 272.950538][ T4002] veth1_vlan: left promiscuous mode [ 272.955885][ T4002] veth0_vlan: left promiscuous mode [ 272.962995][ T4002] veth1_macvtap: left promiscuous mode [ 272.968522][ T4002] veth0_macvtap: left promiscuous mode [ 272.974256][ T4002] veth1_vlan: left promiscuous mode [ 272.980865][ T4002] veth1_macvtap: left promiscuous mode [ 272.987044][ T4002] veth0_macvtap: left promiscuous mode [ 272.992780][ T4002] veth1_vlan: left promiscuous mode [ 272.998072][ T4002] veth0_vlan: left promiscuous mode [ 273.587311][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 273.625501][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 274.190343][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 274.225962][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 274.805971][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 274.849189][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 275.438226][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 275.471154][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 276.006825][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.009876][ T6581] veth0_vlan: entered promiscuous mode [ 276.025436][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.061362][ T6581] veth1_vlan: entered promiscuous mode [ 276.094576][ T6585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 276.117202][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.133771][ T6585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 276.156709][ T6585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 276.180016][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.184494][ T6585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 276.200559][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.231260][ T6581] veth0_macvtap: entered promiscuous mode [ 276.271557][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.312491][ T6581] veth1_macvtap: entered promiscuous mode [ 276.373497][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.380580][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.397740][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.404900][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.535266][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.568094][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.600281][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.653368][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.708648][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.741557][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.764172][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.812024][ T6577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.889994][ T6585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.918838][ T6581] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.930027][ T6581] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.947335][ T6581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.958775][ T6581] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.104942][ T6585] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.146208][ T6579] veth0_vlan: entered promiscuous mode [ 277.147706][ T6777] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 277.160762][ T6579] veth1_vlan: entered promiscuous mode [ 277.192856][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.199971][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.210673][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.217816][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.304232][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.362008][ T6577] veth0_vlan: entered promiscuous mode [ 277.433162][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.448737][ T6579] veth0_macvtap: entered promiscuous mode [ 277.469484][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.534997][ T6577] veth1_vlan: entered promiscuous mode [ 277.557756][ T6579] veth1_macvtap: entered promiscuous mode [ 277.634490][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.646338][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.673322][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.681117][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.698191][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.713937][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.745574][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.786670][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.818463][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.844528][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.862093][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.884545][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.971039][ T6577] veth0_macvtap: entered promiscuous mode [ 278.016107][ T6579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.042780][ T6579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.070106][ T6579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.079728][ T6579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.129066][ T6577] veth1_macvtap: entered promiscuous mode [ 278.295976][ T6585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.348184][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.374332][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.387815][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.400582][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.414046][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.429347][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.440926][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.455796][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.466431][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.476885][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.487531][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.497729][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.509016][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.520504][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.547087][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 278.569009][ T6821] ip6_vti0: entered promiscuous mode [ 278.582410][ T6821] ip6_vti0: entered allmulticast mode [ 278.615390][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 278.665022][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.687515][ T6577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.700673][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.709310][ T6577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.719521][ T6577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.728979][ T6577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.884667][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.896151][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.964951][ T6585] veth0_vlan: entered promiscuous mode [ 278.981504][ T6833] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 279.101191][ T6585] veth1_vlan: entered promiscuous mode [ 279.124837][ T6845] ɶƣ0GC¦: entered promiscuous mode [ 279.151094][ T6845] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 279.250964][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.257068][ T6585] veth0_macvtap: entered promiscuous mode [ 279.292955][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.365481][ T6585] veth1_macvtap: entered promiscuous mode [ 279.447448][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.465868][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.487529][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.507915][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.532442][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.558557][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.584884][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.603871][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.624241][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.651982][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.685365][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.700125][ T6861] sctp: [Deprecated]: syz.2.368 (pid 6861) Use of int in max_burst socket option. [ 279.700125][ T6861] Use struct sctp_assoc_value instead [ 279.738443][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.758226][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.772416][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.802400][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.820105][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.852412][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.873641][ T6585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.901606][ T6585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.923009][ T6585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.936229][ T6857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.367'. [ 279.981743][ T6585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.001454][ T6585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.010890][ T6585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.031948][ T6585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.288110][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 280.412465][ T6693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.440133][ T6693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.531130][ T4002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.563460][ T4002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.638177][ T6891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'. [ 281.384153][ T6928] netlink: 'syz.3.378': attribute type 24 has an invalid length. [ 281.528563][ T6934] netlink: 68 bytes leftover after parsing attributes in process `syz.4.379'. [ 282.097576][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'. [ 282.128666][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 282.151810][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 282.212037][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 282.306031][ T6955] vlan2: entered allmulticast mode [ 282.914939][ T6992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.957745][ T8] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 282.975934][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 283.004033][ T6992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.018393][ T6693] wlan1: authenticated [ 283.072481][ T12] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 283.189838][ T6992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.214133][ T4002] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 283.261200][ T4002] wlan1: associated [ 283.568701][ T7036] ax25_connect(): syz.0.411 uses autobind, please contact jreuter@yaina.de [ 283.779123][ T7040] syzkaller0: entered promiscuous mode [ 283.830061][ T7040] syzkaller0: entered allmulticast mode [ 285.789664][ T7054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.835216][ T7087] __nla_validate_parse: 8 callbacks suppressed [ 285.835234][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 286.024809][ T7115] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.424'. [ 286.047779][ T7114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.052492][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 286.230371][ T7115] netlink: 156 bytes leftover after parsing attributes in process `syz.2.424'. [ 286.361384][ T7134] nlmon0: entered promiscuous mode [ 286.401166][ T7134] vlan2: entered promiscuous mode [ 286.430004][ T7134] nlmon0: left promiscuous mode [ 286.551060][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 286.971778][ T7170] FAULT_INJECTION: forcing a failure. [ 286.971778][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.015796][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.3.439 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 287.026085][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.036138][ T7170] Call Trace: [ 287.039408][ T7170] [ 287.042333][ T7170] dump_stack_lvl+0x241/0x360 [ 287.047015][ T7170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.052211][ T7170] ? __pfx__printk+0x10/0x10 [ 287.056801][ T7170] ? snprintf+0xda/0x120 [ 287.061039][ T7170] should_fail_ex+0x3b0/0x4e0 [ 287.065724][ T7170] _copy_to_user+0x2f/0xb0 [ 287.070138][ T7170] simple_read_from_buffer+0xca/0x150 [ 287.075511][ T7170] proc_fail_nth_read+0x1e9/0x250 [ 287.080540][ T7170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.086086][ T7170] ? rw_verify_area+0x55e/0x6f0 [ 287.090931][ T7170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.096476][ T7170] vfs_read+0x201/0xbc0 [ 287.100625][ T7170] ? __pfx_lock_release+0x10/0x10 [ 287.105674][ T7170] ? __pfx_vfs_read+0x10/0x10 [ 287.110390][ T7170] ? __fget_files+0x3f3/0x470 [ 287.115094][ T7170] ? fdget_pos+0x24e/0x320 [ 287.119542][ T7170] ksys_read+0x183/0x2b0 [ 287.123798][ T7170] ? __pfx_ksys_read+0x10/0x10 [ 287.128573][ T7170] ? do_syscall_64+0x100/0x230 [ 287.133337][ T7170] ? do_syscall_64+0xb6/0x230 [ 287.138015][ T7170] do_syscall_64+0xf3/0x230 [ 287.142518][ T7170] ? clear_bhb_loop+0x35/0x90 [ 287.147193][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.153085][ T7170] RIP: 0033:0x7f18ca97ca3c [ 287.157518][ T7170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 287.177135][ T7170] RSP: 002b:00007f18cb78b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.185551][ T7170] RAX: ffffffffffffffda RBX: 00007f18cab35f80 RCX: 00007f18ca97ca3c [ 287.193519][ T7170] RDX: 000000000000000f RSI: 00007f18cb78b0a0 RDI: 0000000000000004 [ 287.201482][ T7170] RBP: 00007f18cb78b090 R08: 0000000000000000 R09: 0000000000000000 [ 287.209447][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.217410][ T7170] R13: 0000000000000000 R14: 00007f18cab35f80 R15: 00007fff6afb2158 [ 287.225392][ T7170] [ 287.601501][ T7194] netlink: 'syz.4.445': attribute type 3 has an invalid length. [ 287.653134][ T7194] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.445'. [ 287.894154][ T7210] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65 [ 287.988989][ T7208] netlink: 'syz.4.449': attribute type 12 has an invalid length. [ 288.090035][ T7218] netlink: 'syz.0.451': attribute type 3 has an invalid length. [ 288.111510][ T7218] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.451'. [ 288.399153][ T7228] ɶƣ0GC¦: entered promiscuous mode [ 288.652927][ T7242] sctp: [Deprecated]: syz.4.459 (pid 7242) Use of int in max_burst socket option. [ 288.652927][ T7242] Use struct sctp_assoc_value instead [ 288.721144][ T7244] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.457'. [ 289.832790][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 289.876260][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 290.051484][ T7283] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 290.113815][ T7283] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 290.539978][ T7315] batadv0: entered promiscuous mode [ 290.561280][ T7315] macvtap1: entered promiscuous mode [ 290.575031][ T7315] macvtap1: entered allmulticast mode [ 290.580448][ T7315] batadv0: entered allmulticast mode [ 290.601966][ T7315] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 290.621944][ T7319] sctp: [Deprecated]: syz.1.483 (pid 7319) Use of int in max_burst socket option. [ 290.621944][ T7319] Use struct sctp_assoc_value instead [ 290.682616][ T7322] sctp: [Deprecated]: syz.4.484 (pid 7322) Use of int in max_burst socket option. [ 290.682616][ T7322] Use struct sctp_assoc_value instead [ 290.832841][ T7324] BUG: Bad page state in process syz.1.483 pfn:32adb [ 290.839670][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032adbe88 pfn:0x32adb [ 290.849886][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 290.857145][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 290.865881][ T7324] raw: ffff888032adbe88 0000000000000001 00000000ffffffff 0000000000000000 [ 290.874584][ T7324] page dumped because: page_pool leak [ 290.880011][ T7324] page_owner tracks the page as allocated [ 290.885866][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786606955, free_ts 284304193462 [ 290.902926][ T7324] post_alloc_hook+0x1f3/0x230 [ 290.907727][ T7324] get_page_from_freelist+0x3045/0x3190 [ 290.913417][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 290.918639][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 290.924239][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 290.930169][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 290.935507][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 290.940912][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 290.946444][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 290.951409][ T7324] __sys_bpf+0x48d/0x810 [ 290.955787][ T7324] __x64_sys_bpf+0x7c/0x90 [ 290.960224][ T7324] do_syscall_64+0xf3/0x230 [ 290.964869][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.970786][ T7324] page last free pid 7072 tgid 7072 stack trace: [ 290.977254][ T7324] free_unref_folios+0xf12/0x18d0 [ 290.982420][ T7324] folios_put_refs+0x76c/0x860 [ 290.987210][ T7324] free_pages_and_swap_cache+0x2ea/0x690 [ 290.992991][ T7324] tlb_flush_mmu+0x3a3/0x680 [ 290.997597][ T7324] tlb_finish_mmu+0xd4/0x200 [ 291.002337][ T7324] exit_mmap+0x496/0xc40 [ 291.006601][ T7324] __mmput+0x115/0x390 [ 291.010693][ T7324] exit_mm+0x220/0x310 [ 291.014914][ T7324] do_exit+0x9b2/0x28e0 [ 291.019096][ T7324] do_group_exit+0x207/0x2c0 [ 291.023858][ T7324] __x64_sys_exit_group+0x3f/0x40 [ 291.028907][ T7324] x64_sys_call+0x2634/0x2640 [ 291.033766][ T7324] do_syscall_64+0xf3/0x230 [ 291.038279][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.044336][ T7324] Modules linked in: [ 291.048256][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Not tainted 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 291.058502][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.068561][ T7324] Call Trace: [ 291.071852][ T7324] [ 291.074806][ T7324] dump_stack_lvl+0x241/0x360 [ 291.079523][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.084752][ T7324] ? __pfx_print_modules+0x10/0x10 [ 291.089873][ T7324] ? pcpu_memcg_post_alloc_hook+0x12a/0x720 [ 291.095777][ T7324] bad_page+0x166/0x1b0 [ 291.099937][ T7324] free_unref_page+0xed0/0xf20 [ 291.104715][ T7324] skb_release_data+0x6dc/0x8a0 [ 291.109574][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 291.114600][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 291.120336][ T7324] ? mark_lock+0x9a/0x360 [ 291.124671][ T7324] ? __lock_acquire+0x1384/0x2050 [ 291.129705][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 291.135775][ T7324] ? mark_lock+0x9a/0x360 [ 291.140105][ T7324] ? __lock_acquire+0x1384/0x2050 [ 291.145149][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 291.151139][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 291.157743][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 291.164259][ T7324] ? read_tsc+0x9/0x20 [ 291.168339][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 291.173548][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 291.179883][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 291.186066][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 291.192406][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 291.199279][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 291.204551][ T7324] ? __phys_addr+0xba/0x170 [ 291.209058][ T7324] ? build_skb_around+0x111/0x260 [ 291.214087][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 291.219992][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 291.225303][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 291.230768][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 291.236687][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 291.242253][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 291.248067][ T7324] ? synchronize_rcu+0x11b/0x360 [ 291.253005][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 291.258311][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 291.264567][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 291.270491][ T7324] ? _copy_from_user+0xa6/0xe0 [ 291.275262][ T7324] ? bpf_test_init+0x15a/0x180 [ 291.280027][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 291.285495][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 291.290879][ T7324] ? __pfx_lock_release+0x10/0x10 [ 291.295917][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.301725][ T7324] ? __fget_files+0x29/0x470 [ 291.306322][ T7324] ? fput+0x1a8/0x230 [ 291.310305][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.316111][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 291.321056][ T7324] __sys_bpf+0x48d/0x810 [ 291.325305][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 291.330079][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.336069][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.342405][ T7324] ? do_syscall_64+0x100/0x230 [ 291.347174][ T7324] __x64_sys_bpf+0x7c/0x90 [ 291.351584][ T7324] do_syscall_64+0xf3/0x230 [ 291.356080][ T7324] ? clear_bhb_loop+0x35/0x90 [ 291.360754][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.366645][ T7324] RIP: 0033:0x7f140dd7dff9 [ 291.371055][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.390660][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.399071][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 291.407039][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 291.415004][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 291.422976][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.430944][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 291.438927][ T7324] [ 291.442241][ T7324] Disabling lock debugging due to kernel taint [ 291.448418][ T7324] BUG: Bad page state in process syz.1.483 pfn:622c5 [ 291.455329][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880622c58c0 pfn:0x622c5 [ 291.465549][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 291.472819][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 291.481414][ T7324] raw: ffff8880622c58c0 0000000000000001 00000000ffffffff 0000000000000000 [ 291.490155][ T7324] page dumped because: page_pool leak [ 291.495682][ T7324] page_owner tracks the page as allocated [ 291.501393][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786595679, free_ts 284304210382 [ 291.518478][ T7324] post_alloc_hook+0x1f3/0x230 [ 291.523413][ T7324] get_page_from_freelist+0x3045/0x3190 [ 291.528965][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 291.534323][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 291.539785][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 291.545834][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 291.551050][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 291.556590][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 291.561979][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 291.567105][ T7324] __sys_bpf+0x48d/0x810 [ 291.571362][ T7324] __x64_sys_bpf+0x7c/0x90 [ 291.575881][ T7324] do_syscall_64+0xf3/0x230 [ 291.580387][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.586346][ T7324] page last free pid 7072 tgid 7072 stack trace: [ 291.592713][ T7324] free_unref_folios+0xf12/0x18d0 [ 291.597758][ T7324] folios_put_refs+0x76c/0x860 [ 291.602591][ T7324] free_pages_and_swap_cache+0x2ea/0x690 [ 291.608246][ T7324] tlb_flush_mmu+0x3a3/0x680 [ 291.612907][ T7324] tlb_finish_mmu+0xd4/0x200 [ 291.617510][ T7324] exit_mmap+0x496/0xc40 [ 291.621812][ T7324] __mmput+0x115/0x390 [ 291.625947][ T7324] exit_mm+0x220/0x310 [ 291.630031][ T7324] do_exit+0x9b2/0x28e0 [ 291.634263][ T7324] do_group_exit+0x207/0x2c0 [ 291.638855][ T7324] __x64_sys_exit_group+0x3f/0x40 [ 291.643915][ T7324] x64_sys_call+0x2634/0x2640 [ 291.648623][ T7324] do_syscall_64+0xf3/0x230 [ 291.653187][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.659098][ T7324] Modules linked in: [ 291.663081][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 291.674816][ T7324] Tainted: [B]=BAD_PAGE [ 291.678960][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.689023][ T7324] Call Trace: [ 291.692293][ T7324] [ 291.695223][ T7324] dump_stack_lvl+0x241/0x360 [ 291.699897][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.705099][ T7324] ? __pfx_print_modules+0x10/0x10 [ 291.710234][ T7324] bad_page+0x166/0x1b0 [ 291.714402][ T7324] free_unref_page+0xed0/0xf20 [ 291.719173][ T7324] skb_release_data+0x6dc/0x8a0 [ 291.724034][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 291.729052][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 291.734784][ T7324] ? mark_lock+0x9a/0x360 [ 291.739112][ T7324] ? __lock_acquire+0x1384/0x2050 [ 291.744136][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 291.750194][ T7324] ? mark_lock+0x9a/0x360 [ 291.754523][ T7324] ? __lock_acquire+0x1384/0x2050 [ 291.759550][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 291.765524][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 291.772101][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 291.778596][ T7324] ? read_tsc+0x9/0x20 [ 291.782662][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 291.787865][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 291.794184][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 291.800334][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 291.806649][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 291.813312][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 291.818500][ T7324] ? __phys_addr+0xba/0x170 [ 291.822994][ T7324] ? build_skb_around+0x111/0x260 [ 291.828017][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 291.833902][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 291.839183][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 291.844639][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 291.850545][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 291.856108][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 291.861917][ T7324] ? synchronize_rcu+0x11b/0x360 [ 291.866854][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 291.872153][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 291.878404][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 291.884301][ T7324] ? _copy_from_user+0xa6/0xe0 [ 291.889061][ T7324] ? bpf_test_init+0x15a/0x180 [ 291.893821][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 291.899281][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 291.904652][ T7324] ? __pfx_lock_release+0x10/0x10 [ 291.909671][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.915471][ T7324] ? __fget_files+0x29/0x470 [ 291.920054][ T7324] ? fput+0x1a8/0x230 [ 291.924034][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.929835][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 291.934763][ T7324] __sys_bpf+0x48d/0x810 [ 291.939003][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 291.943763][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.949823][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.956141][ T7324] ? do_syscall_64+0x100/0x230 [ 291.960892][ T7324] __x64_sys_bpf+0x7c/0x90 [ 291.965300][ T7324] do_syscall_64+0xf3/0x230 [ 291.969792][ T7324] ? clear_bhb_loop+0x35/0x90 [ 291.974458][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.980343][ T7324] RIP: 0033:0x7f140dd7dff9 [ 291.984747][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.004341][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.012745][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 292.020702][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 292.028662][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 292.036622][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.044588][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 292.052564][ T7324] [ 292.055797][ T7324] BUG: Bad page state in process syz.1.483 pfn:7df68 [ 292.062627][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807df68a50 pfn:0x7df68 [ 292.072763][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 292.079894][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 292.088564][ T7324] raw: ffff88807df68a50 0000000000000001 00000000ffffffff 0000000000000000 [ 292.097268][ T7324] page dumped because: page_pool leak [ 292.102730][ T7324] page_owner tracks the page as allocated [ 292.108440][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786584168, free_ts 284304242513 [ 292.125441][ T7324] post_alloc_hook+0x1f3/0x230 [ 292.130224][ T7324] get_page_from_freelist+0x3045/0x3190 [ 292.135838][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 292.141042][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 292.146551][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 292.152548][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 292.157765][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 292.163228][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 292.168621][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 292.173660][ T7324] __sys_bpf+0x48d/0x810 [ 292.177918][ T7324] __x64_sys_bpf+0x7c/0x90 [ 292.182458][ T7324] do_syscall_64+0xf3/0x230 [ 292.186962][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.192952][ T7324] page last free pid 7072 tgid 7072 stack trace: [ 292.199280][ T7324] free_unref_folios+0xf12/0x18d0 [ 292.204408][ T7324] folios_put_refs+0x76c/0x860 [ 292.209184][ T7324] free_pages_and_swap_cache+0x5c8/0x690 [ 292.214928][ T7324] tlb_flush_mmu+0x3a3/0x680 [ 292.219529][ T7324] tlb_finish_mmu+0xd4/0x200 [ 292.224220][ T7324] exit_mmap+0x496/0xc40 [ 292.228576][ T7324] __mmput+0x115/0x390 [ 292.232714][ T7324] exit_mm+0x220/0x310 [ 292.236798][ T7324] do_exit+0x9b2/0x28e0 [ 292.240951][ T7324] do_group_exit+0x207/0x2c0 [ 292.245656][ T7324] __x64_sys_exit_group+0x3f/0x40 [ 292.250688][ T7324] x64_sys_call+0x2634/0x2640 [ 292.255480][ T7324] do_syscall_64+0xf3/0x230 [ 292.259987][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.265953][ T7324] Modules linked in: [ 292.269852][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 292.281551][ T7324] Tainted: [B]=BAD_PAGE [ 292.285686][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.295736][ T7324] Call Trace: [ 292.299013][ T7324] [ 292.301944][ T7324] dump_stack_lvl+0x241/0x360 [ 292.306632][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.311841][ T7324] ? __pfx_print_modules+0x10/0x10 [ 292.316970][ T7324] bad_page+0x166/0x1b0 [ 292.321140][ T7324] free_unref_page+0xed0/0xf20 [ 292.325917][ T7324] skb_release_data+0x6dc/0x8a0 [ 292.330760][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 292.335775][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 292.341495][ T7324] ? mark_lock+0x9a/0x360 [ 292.345823][ T7324] ? __lock_acquire+0x1384/0x2050 [ 292.350859][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 292.356935][ T7324] ? mark_lock+0x9a/0x360 [ 292.361270][ T7324] ? __lock_acquire+0x1384/0x2050 [ 292.366305][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 292.372290][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 292.378891][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 292.385397][ T7324] ? read_tsc+0x9/0x20 [ 292.389465][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 292.394659][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 292.400980][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 292.407128][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 292.413448][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 292.420235][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 292.425440][ T7324] ? __phys_addr+0xba/0x170 [ 292.429949][ T7324] ? build_skb_around+0x111/0x260 [ 292.434980][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 292.440871][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 292.446156][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 292.451627][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 292.457525][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 292.463071][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 292.468871][ T7324] ? synchronize_rcu+0x11b/0x360 [ 292.473799][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 292.479080][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 292.485317][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 292.491223][ T7324] ? _copy_from_user+0xa6/0xe0 [ 292.495989][ T7324] ? bpf_test_init+0x15a/0x180 [ 292.500753][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 292.506212][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 292.511587][ T7324] ? __pfx_lock_release+0x10/0x10 [ 292.516619][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 292.522428][ T7324] ? __fget_files+0x29/0x470 [ 292.527021][ T7324] ? fput+0x1a8/0x230 [ 292.530993][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 292.536811][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 292.541760][ T7324] __sys_bpf+0x48d/0x810 [ 292.546000][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 292.550759][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.556745][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.563079][ T7324] ? do_syscall_64+0x100/0x230 [ 292.567840][ T7324] __x64_sys_bpf+0x7c/0x90 [ 292.572250][ T7324] do_syscall_64+0xf3/0x230 [ 292.576747][ T7324] ? clear_bhb_loop+0x35/0x90 [ 292.581414][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.587304][ T7324] RIP: 0033:0x7f140dd7dff9 [ 292.591745][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.611350][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.619757][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 292.627722][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 292.635682][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 292.643653][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.651630][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 292.659696][ T7324] [ 292.662878][ T7324] BUG: Bad page state in process syz.1.483 pfn:3295c [ 292.669654][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803295cb40 pfn:0x3295c [ 292.679842][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 292.687085][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 292.695798][ T7324] raw: ffff88803295cb40 0000000000000001 00000000ffffffff 0000000000000000 [ 292.704500][ T7324] page dumped because: page_pool leak [ 292.709863][ T7324] page_owner tracks the page as allocated [ 292.715652][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786572845, free_ts 284304251187 [ 292.732637][ T7324] post_alloc_hook+0x1f3/0x230 [ 292.737394][ T7324] get_page_from_freelist+0x3045/0x3190 [ 292.743065][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 292.748267][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 292.753849][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 292.759765][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 292.765040][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 292.770410][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 292.775857][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 292.780785][ T7324] __sys_bpf+0x48d/0x810 [ 292.785151][ T7324] __x64_sys_bpf+0x7c/0x90 [ 292.789581][ T7324] do_syscall_64+0xf3/0x230 [ 292.794242][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.800154][ T7324] page last free pid 7072 tgid 7072 stack trace: [ 292.806559][ T7324] free_unref_folios+0xf12/0x18d0 [ 292.811669][ T7324] folios_put_refs+0x76c/0x860 [ 292.816578][ T7324] free_pages_and_swap_cache+0x5c8/0x690 [ 292.822363][ T7324] tlb_flush_mmu+0x3a3/0x680 [ 292.826966][ T7324] tlb_finish_mmu+0xd4/0x200 [ 292.831562][ T7324] exit_mmap+0x496/0xc40 [ 292.835977][ T7324] __mmput+0x115/0x390 [ 292.840071][ T7324] exit_mm+0x220/0x310 [ 292.844329][ T7324] do_exit+0x9b2/0x28e0 [ 292.848489][ T7324] do_group_exit+0x207/0x2c0 [ 292.853180][ T7324] __x64_sys_exit_group+0x3f/0x40 [ 292.858211][ T7324] x64_sys_call+0x2634/0x2640 [ 292.863068][ T7324] do_syscall_64+0xf3/0x230 [ 292.867676][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.873681][ T7324] Modules linked in: [ 292.877610][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 292.889310][ T7324] Tainted: [B]=BAD_PAGE [ 292.893442][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.903490][ T7324] Call Trace: [ 292.906777][ T7324] [ 292.909732][ T7324] dump_stack_lvl+0x241/0x360 [ 292.914404][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.919594][ T7324] ? __pfx_print_modules+0x10/0x10 [ 292.924697][ T7324] bad_page+0x166/0x1b0 [ 292.928842][ T7324] free_unref_page+0xed0/0xf20 [ 292.933596][ T7324] skb_release_data+0x6dc/0x8a0 [ 292.938436][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 292.943454][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 292.949175][ T7324] ? mark_lock+0x9a/0x360 [ 292.953500][ T7324] ? __lock_acquire+0x1384/0x2050 [ 292.958523][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 292.964591][ T7324] ? mark_lock+0x9a/0x360 [ 292.968917][ T7324] ? __lock_acquire+0x1384/0x2050 [ 292.973943][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 292.979923][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 292.986511][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 292.993013][ T7324] ? read_tsc+0x9/0x20 [ 292.997077][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 293.002271][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 293.008590][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 293.014738][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 293.021058][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 293.027725][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 293.032916][ T7324] ? __phys_addr+0xba/0x170 [ 293.037406][ T7324] ? build_skb_around+0x111/0x260 [ 293.042433][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 293.048332][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 293.053614][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 293.059067][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 293.064965][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 293.070509][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 293.076310][ T7324] ? synchronize_rcu+0x11b/0x360 [ 293.081240][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 293.086526][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 293.092764][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 293.098658][ T7324] ? _copy_from_user+0xa6/0xe0 [ 293.103417][ T7324] ? bpf_test_init+0x15a/0x180 [ 293.108173][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 293.113626][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 293.118994][ T7324] ? __pfx_lock_release+0x10/0x10 [ 293.124030][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 293.129846][ T7324] ? __fget_files+0x29/0x470 [ 293.134435][ T7324] ? fput+0x1a8/0x230 [ 293.138413][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 293.144221][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 293.149155][ T7324] __sys_bpf+0x48d/0x810 [ 293.153394][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 293.158173][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.164164][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.170497][ T7324] ? do_syscall_64+0x100/0x230 [ 293.175263][ T7324] __x64_sys_bpf+0x7c/0x90 [ 293.179675][ T7324] do_syscall_64+0xf3/0x230 [ 293.184173][ T7324] ? clear_bhb_loop+0x35/0x90 [ 293.188843][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.194740][ T7324] RIP: 0033:0x7f140dd7dff9 [ 293.199237][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.218838][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.227255][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 293.235216][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 293.243177][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 293.251142][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.259104][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 293.267075][ T7324] [ 293.270236][ T7324] BUG: Bad page state in process syz.1.483 pfn:2d9b8 [ 293.277063][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d9b8a00 pfn:0x2d9b8 [ 293.287193][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 293.294381][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 293.303041][ T7324] raw: ffff88802d9b8a00 0000000000000001 00000000ffffffff 0000000000000000 [ 293.311636][ T7324] page dumped because: page_pool leak [ 293.317146][ T7324] page_owner tracks the page as allocated [ 293.322920][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786561415, free_ts 284535402082 [ 293.339948][ T7324] post_alloc_hook+0x1f3/0x230 [ 293.344766][ T7324] get_page_from_freelist+0x3045/0x3190 [ 293.350311][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 293.355589][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 293.361052][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 293.366999][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 293.372265][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 293.377664][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 293.383138][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 293.388096][ T7324] __sys_bpf+0x48d/0x810 [ 293.392424][ T7324] __x64_sys_bpf+0x7c/0x90 [ 293.396866][ T7324] do_syscall_64+0xf3/0x230 [ 293.401397][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.407375][ T7324] page last free pid 7083 tgid 7083 stack trace: [ 293.413788][ T7324] free_unref_folios+0xf12/0x18d0 [ 293.418838][ T7324] folios_put_refs+0x76c/0x860 [ 293.423668][ T7324] free_pages_and_swap_cache+0x5c8/0x690 [ 293.429324][ T7324] tlb_flush_mmu+0x3a3/0x680 [ 293.434017][ T7324] tlb_finish_mmu+0xd4/0x200 [ 293.438626][ T7324] exit_mmap+0x496/0xc40 [ 293.442976][ T7324] __mmput+0x115/0x390 [ 293.447050][ T7324] exit_mm+0x220/0x310 [ 293.451111][ T7324] do_exit+0x9b2/0x28e0 [ 293.455338][ T7324] do_group_exit+0x207/0x2c0 [ 293.459934][ T7324] __x64_sys_exit_group+0x3f/0x40 [ 293.465015][ T7324] x64_sys_call+0x2634/0x2640 [ 293.469706][ T7324] do_syscall_64+0xf3/0x230 [ 293.474308][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.480222][ T7324] Modules linked in: [ 293.484185][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 293.495917][ T7324] Tainted: [B]=BAD_PAGE [ 293.500054][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.510098][ T7324] Call Trace: [ 293.513377][ T7324] [ 293.516311][ T7324] dump_stack_lvl+0x241/0x360 [ 293.520982][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.526176][ T7324] ? __pfx_print_modules+0x10/0x10 [ 293.531282][ T7324] bad_page+0x166/0x1b0 [ 293.535428][ T7324] free_unref_page+0xed0/0xf20 [ 293.540186][ T7324] skb_release_data+0x6dc/0x8a0 [ 293.545034][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 293.550054][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 293.555770][ T7324] ? mark_lock+0x9a/0x360 [ 293.560098][ T7324] ? __lock_acquire+0x1384/0x2050 [ 293.565125][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 293.571187][ T7324] ? mark_lock+0x9a/0x360 [ 293.575511][ T7324] ? __lock_acquire+0x1384/0x2050 [ 293.580543][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 293.586524][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 293.593108][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 293.599603][ T7324] ? read_tsc+0x9/0x20 [ 293.603667][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 293.608860][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 293.615189][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 293.621336][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 293.627662][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 293.634339][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 293.639533][ T7324] ? __phys_addr+0xba/0x170 [ 293.644026][ T7324] ? build_skb_around+0x111/0x260 [ 293.649046][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 293.654935][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 293.660216][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 293.665673][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 293.671561][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 293.677101][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 293.682911][ T7324] ? synchronize_rcu+0x11b/0x360 [ 293.687845][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 293.693133][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 293.699369][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 293.705267][ T7324] ? _copy_from_user+0xa6/0xe0 [ 293.710026][ T7324] ? bpf_test_init+0x15a/0x180 [ 293.714786][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 293.720241][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 293.725636][ T7324] ? __pfx_lock_release+0x10/0x10 [ 293.730660][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 293.736463][ T7324] ? __fget_files+0x29/0x470 [ 293.741048][ T7324] ? fput+0x1a8/0x230 [ 293.745024][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 293.750824][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 293.755759][ T7324] __sys_bpf+0x48d/0x810 [ 293.759993][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 293.764752][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.770725][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.777046][ T7324] ? do_syscall_64+0x100/0x230 [ 293.781805][ T7324] __x64_sys_bpf+0x7c/0x90 [ 293.786217][ T7324] do_syscall_64+0xf3/0x230 [ 293.790713][ T7324] ? clear_bhb_loop+0x35/0x90 [ 293.795381][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.801269][ T7324] RIP: 0033:0x7f140dd7dff9 [ 293.805675][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.825286][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.833694][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 293.841658][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 293.849618][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 293.857581][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.865545][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 293.873518][ T7324] [ 293.876686][ T7324] BUG: Bad page state in process syz.1.483 pfn:26c57 [ 293.883555][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026c57000 pfn:0x26c57 [ 293.893743][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 293.900885][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 293.909602][ T7324] raw: ffff888026c57000 0000000000000001 00000000ffffffff 0000000000000000 [ 293.918303][ T7324] page dumped because: page_pool leak [ 293.923795][ T7324] page_owner tracks the page as allocated [ 293.929517][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786550027, free_ts 284535411014 [ 293.946602][ T7324] post_alloc_hook+0x1f3/0x230 [ 293.951389][ T7324] get_page_from_freelist+0x3045/0x3190 [ 293.957074][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 293.962510][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 293.967988][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 293.974024][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 293.979245][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 293.984766][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 293.990169][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 293.995276][ T7324] __sys_bpf+0x48d/0x810 [ 293.999530][ T7324] __x64_sys_bpf+0x7c/0x90 [ 294.004088][ T7324] do_syscall_64+0xf3/0x230 [ 294.008596][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.014638][ T7324] page last free pid 7083 tgid 7083 stack trace: [ 294.020975][ T7324] free_unref_folios+0xf12/0x18d0 [ 294.026111][ T7324] folios_put_refs+0x76c/0x860 [ 294.030884][ T7324] free_pages_and_swap_cache+0x5c8/0x690 [ 294.036647][ T7324] tlb_flush_mmu+0x3a3/0x680 [ 294.041250][ T7324] tlb_finish_mmu+0xd4/0x200 [ 294.045990][ T7324] exit_mmap+0x496/0xc40 [ 294.050246][ T7324] __mmput+0x115/0x390 [ 294.054468][ T7324] exit_mm+0x220/0x310 [ 294.058547][ T7324] do_exit+0x9b2/0x28e0 [ 294.062870][ T7324] do_group_exit+0x207/0x2c0 [ 294.067473][ T7324] __x64_sys_exit_group+0x3f/0x40 [ 294.072660][ T7324] x64_sys_call+0x2634/0x2640 [ 294.077347][ T7324] do_syscall_64+0xf3/0x230 [ 294.081844][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.087916][ T7324] Modules linked in: [ 294.091819][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 294.103536][ T7324] Tainted: [B]=BAD_PAGE [ 294.107683][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.117724][ T7324] Call Trace: [ 294.121008][ T7324] [ 294.123934][ T7324] dump_stack_lvl+0x241/0x360 [ 294.128628][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.133827][ T7324] ? __pfx_print_modules+0x10/0x10 [ 294.138952][ T7324] bad_page+0x166/0x1b0 [ 294.143108][ T7324] free_unref_page+0xed0/0xf20 [ 294.147894][ T7324] skb_release_data+0x6dc/0x8a0 [ 294.152754][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 294.157811][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 294.163535][ T7324] ? mark_lock+0x9a/0x360 [ 294.167864][ T7324] ? __lock_acquire+0x1384/0x2050 [ 294.172896][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 294.178969][ T7324] ? mark_lock+0x9a/0x360 [ 294.183293][ T7324] ? __lock_acquire+0x1384/0x2050 [ 294.188323][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 294.194310][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 294.200900][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 294.207396][ T7324] ? read_tsc+0x9/0x20 [ 294.211459][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 294.216653][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 294.222979][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 294.229128][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 294.235447][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 294.242113][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 294.247308][ T7324] ? __phys_addr+0xba/0x170 [ 294.251800][ T7324] ? build_skb_around+0x111/0x260 [ 294.256819][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 294.262716][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 294.268015][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 294.273488][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 294.279395][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 294.284950][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 294.290765][ T7324] ? synchronize_rcu+0x11b/0x360 [ 294.295710][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 294.301005][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 294.307244][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 294.313142][ T7324] ? _copy_from_user+0xa6/0xe0 [ 294.317907][ T7324] ? bpf_test_init+0x15a/0x180 [ 294.322670][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 294.328129][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 294.333501][ T7324] ? __pfx_lock_release+0x10/0x10 [ 294.338523][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.344328][ T7324] ? __fget_files+0x29/0x470 [ 294.348913][ T7324] ? fput+0x1a8/0x230 [ 294.352891][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.358690][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 294.363624][ T7324] __sys_bpf+0x48d/0x810 [ 294.367860][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 294.372625][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 294.378608][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.384929][ T7324] ? do_syscall_64+0x100/0x230 [ 294.389683][ T7324] __x64_sys_bpf+0x7c/0x90 [ 294.394092][ T7324] do_syscall_64+0xf3/0x230 [ 294.398589][ T7324] ? clear_bhb_loop+0x35/0x90 [ 294.403261][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.409151][ T7324] RIP: 0033:0x7f140dd7dff9 [ 294.413561][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.433210][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.441618][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 294.449582][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 294.457543][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 294.465507][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.473467][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 294.481452][ T7324] [ 294.484691][ T7324] BUG: Bad page state in process syz.1.483 pfn:722c1 [ 294.491474][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880722c1e58 pfn:0x722c1 [ 294.501710][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 294.509011][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 294.517900][ T7324] raw: ffff8880722c1e58 0000000000000001 00000000ffffffff 0000000000000000 [ 294.526694][ T7324] page dumped because: page_pool leak [ 294.532074][ T7324] page_owner tracks the page as allocated [ 294.537962][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786538708, free_ts 284535419784 [ 294.555012][ T7324] post_alloc_hook+0x1f3/0x230 [ 294.559787][ T7324] get_page_from_freelist+0x3045/0x3190 [ 294.565491][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 294.570710][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 294.576235][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 294.582195][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 294.587402][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 294.592832][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 294.598236][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 294.603237][ T7324] __sys_bpf+0x48d/0x810 [ 294.607522][ T7324] __x64_sys_bpf+0x7c/0x90 [ 294.611929][ T7324] do_syscall_64+0xf3/0x230 [ 294.616506][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.622478][ T7324] page last free pid 7083 tgid 7083 stack trace: [ 294.628803][ T7324] free_unref_folios+0xf12/0x18d0 [ 294.633895][ T7324] folios_put_refs+0x76c/0x860 [ 294.638662][ T7324] free_pages_and_swap_cache+0x5c8/0x690 [ 294.644455][ T7324] tlb_flush_mmu+0x3a3/0x680 [ 294.649058][ T7324] tlb_finish_mmu+0xd4/0x200 [ 294.653718][ T7324] exit_mmap+0x496/0xc40 [ 294.657969][ T7324] __mmput+0x115/0x390 [ 294.662027][ T7324] exit_mm+0x220/0x310 [ 294.666139][ T7324] do_exit+0x9b2/0x28e0 [ 294.670301][ T7324] do_group_exit+0x207/0x2c0 [ 294.674932][ T7324] __x64_sys_exit_group+0x3f/0x40 [ 294.679970][ T7324] x64_sys_call+0x2634/0x2640 [ 294.684697][ T7324] do_syscall_64+0xf3/0x230 [ 294.689205][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.695156][ T7324] Modules linked in: [ 294.699056][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 294.710761][ T7324] Tainted: [B]=BAD_PAGE [ 294.714898][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.724944][ T7324] Call Trace: [ 294.728240][ T7324] [ 294.731180][ T7324] dump_stack_lvl+0x241/0x360 [ 294.735882][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.741077][ T7324] ? __pfx_print_modules+0x10/0x10 [ 294.746182][ T7324] bad_page+0x166/0x1b0 [ 294.750340][ T7324] free_unref_page+0xed0/0xf20 [ 294.755132][ T7324] skb_release_data+0x6dc/0x8a0 [ 294.759990][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 294.765011][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 294.770731][ T7324] ? mark_lock+0x9a/0x360 [ 294.775054][ T7324] ? __lock_acquire+0x1384/0x2050 [ 294.780078][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 294.786140][ T7324] ? mark_lock+0x9a/0x360 [ 294.790548][ T7324] ? __lock_acquire+0x1384/0x2050 [ 294.795572][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 294.801549][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 294.808137][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 294.814638][ T7324] ? read_tsc+0x9/0x20 [ 294.818703][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 294.823897][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 294.830217][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 294.836368][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 294.842689][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 294.849355][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 294.854543][ T7324] ? __phys_addr+0xba/0x170 [ 294.859071][ T7324] ? build_skb_around+0x111/0x260 [ 294.864095][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 294.869984][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 294.875262][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 294.880804][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 294.886691][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 294.892239][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 294.898045][ T7324] ? synchronize_rcu+0x11b/0x360 [ 294.902981][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 294.908282][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 294.914525][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 294.920420][ T7324] ? _copy_from_user+0xa6/0xe0 [ 294.925178][ T7324] ? bpf_test_init+0x15a/0x180 [ 294.929939][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 294.935390][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 294.940758][ T7324] ? __pfx_lock_release+0x10/0x10 [ 294.945785][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.951586][ T7324] ? __fget_files+0x29/0x470 [ 294.956171][ T7324] ? fput+0x1a8/0x230 [ 294.960143][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 294.965946][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 294.970875][ T7324] __sys_bpf+0x48d/0x810 [ 294.975111][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 294.979866][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 294.985841][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.992172][ T7324] ? do_syscall_64+0x100/0x230 [ 294.996942][ T7324] __x64_sys_bpf+0x7c/0x90 [ 295.001348][ T7324] do_syscall_64+0xf3/0x230 [ 295.005843][ T7324] ? clear_bhb_loop+0x35/0x90 [ 295.010510][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.016403][ T7324] RIP: 0033:0x7f140dd7dff9 [ 295.020812][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.040423][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.048944][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 295.056930][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 295.064899][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 295.072896][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.080869][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 295.088847][ T7324] [ 295.092032][ T7324] BUG: Bad page state in process syz.1.483 pfn:301d1 [ 295.098878][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880301d1dc0 pfn:0x301d1 [ 295.109068][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 295.116314][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 295.125005][ T7324] raw: ffff8880301d1dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 295.133693][ T7324] page dumped because: page_pool leak [ 295.139071][ T7324] page_owner tracks the page as allocated [ 295.144864][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786527490, free_ts 289845335093 [ 295.161892][ T7324] post_alloc_hook+0x1f3/0x230 [ 295.166818][ T7324] get_page_from_freelist+0x3045/0x3190 [ 295.172571][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 295.177812][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 295.183352][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 295.189270][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 295.194555][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 295.199943][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 295.205394][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 295.210355][ T7324] __sys_bpf+0x48d/0x810 [ 295.214749][ T7324] __x64_sys_bpf+0x7c/0x90 [ 295.219175][ T7324] do_syscall_64+0xf3/0x230 [ 295.223780][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.229689][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 295.236080][ T7324] free_unref_page+0xcfb/0xf20 [ 295.240860][ T7324] __folio_put+0x2c7/0x440 [ 295.245405][ T7324] page_pool_release+0x661/0x8b0 [ 295.250363][ T7324] page_pool_destroy+0x2e3/0x560 [ 295.255445][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 295.261012][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 295.266620][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 295.271578][ T7324] __sys_bpf+0x48d/0x810 [ 295.275907][ T7324] __x64_sys_bpf+0x7c/0x90 [ 295.280329][ T7324] do_syscall_64+0xf3/0x230 [ 295.284904][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.290812][ T7324] Modules linked in: [ 295.294787][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 295.306512][ T7324] Tainted: [B]=BAD_PAGE [ 295.310667][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.320742][ T7324] Call Trace: [ 295.324026][ T7324] [ 295.326949][ T7324] dump_stack_lvl+0x241/0x360 [ 295.331628][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.336828][ T7324] ? __pfx_print_modules+0x10/0x10 [ 295.341945][ T7324] bad_page+0x166/0x1b0 [ 295.346092][ T7324] free_unref_page+0xed0/0xf20 [ 295.350858][ T7324] skb_release_data+0x6dc/0x8a0 [ 295.355730][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 295.360755][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 295.366479][ T7324] ? mark_lock+0x9a/0x360 [ 295.370818][ T7324] ? __lock_acquire+0x1384/0x2050 [ 295.375846][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 295.381915][ T7324] ? mark_lock+0x9a/0x360 [ 295.386241][ T7324] ? __lock_acquire+0x1384/0x2050 [ 295.391266][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 295.397258][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 295.403855][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 295.410362][ T7324] ? read_tsc+0x9/0x20 [ 295.414434][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 295.419639][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 295.425972][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 295.432124][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 295.438453][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 295.445126][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 295.450319][ T7324] ? __phys_addr+0xba/0x170 [ 295.454812][ T7324] ? build_skb_around+0x111/0x260 [ 295.459832][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 295.465726][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 295.471011][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 295.476472][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 295.482368][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 295.487911][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 295.493715][ T7324] ? synchronize_rcu+0x11b/0x360 [ 295.498645][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 295.503925][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 295.510160][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 295.516060][ T7324] ? _copy_from_user+0xa6/0xe0 [ 295.520828][ T7324] ? bpf_test_init+0x15a/0x180 [ 295.525607][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 295.531068][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 295.536437][ T7324] ? __pfx_lock_release+0x10/0x10 [ 295.541458][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 295.547263][ T7324] ? __fget_files+0x29/0x470 [ 295.551847][ T7324] ? fput+0x1a8/0x230 [ 295.555825][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 295.561653][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 295.566608][ T7324] __sys_bpf+0x48d/0x810 [ 295.570856][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 295.575637][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.581624][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.587953][ T7324] ? do_syscall_64+0x100/0x230 [ 295.592715][ T7324] __x64_sys_bpf+0x7c/0x90 [ 295.597129][ T7324] do_syscall_64+0xf3/0x230 [ 295.601629][ T7324] ? clear_bhb_loop+0x35/0x90 [ 295.606304][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.612203][ T7324] RIP: 0033:0x7f140dd7dff9 [ 295.616617][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.636225][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.644639][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 295.652603][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 295.660570][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 295.668533][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.676495][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 295.684464][ T7324] [ 295.687672][ T7324] BUG: Bad page state in process syz.1.483 pfn:7a6a2 [ 295.694560][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a6a2c80 pfn:0x7a6a2 [ 295.704776][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 295.711904][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 295.720646][ T7324] raw: ffff88807a6a2c80 0000000000000001 00000000ffffffff 0000000000000000 [ 295.729371][ T7324] page dumped because: page_pool leak [ 295.734904][ T7324] page_owner tracks the page as allocated [ 295.740621][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786516351, free_ts 289845347402 [ 295.757722][ T7324] post_alloc_hook+0x1f3/0x230 [ 295.762653][ T7324] get_page_from_freelist+0x3045/0x3190 [ 295.768215][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 295.773509][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 295.778984][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 295.784984][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 295.790194][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 295.795657][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 295.801045][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 295.806071][ T7324] __sys_bpf+0x48d/0x810 [ 295.810329][ T7324] __x64_sys_bpf+0x7c/0x90 [ 295.814855][ T7324] do_syscall_64+0xf3/0x230 [ 295.819370][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.825362][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 295.831691][ T7324] free_unref_page+0xcfb/0xf20 [ 295.836562][ T7324] __folio_put+0x2c7/0x440 [ 295.841035][ T7324] page_pool_release+0x661/0x8b0 [ 295.846042][ T7324] page_pool_destroy+0x2e3/0x560 [ 295.850998][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 295.856517][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 295.861903][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 295.866901][ T7324] __sys_bpf+0x48d/0x810 [ 295.871150][ T7324] __x64_sys_bpf+0x7c/0x90 [ 295.875605][ T7324] do_syscall_64+0xf3/0x230 [ 295.880113][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.886048][ T7324] Modules linked in: [ 295.889948][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 295.901652][ T7324] Tainted: [B]=BAD_PAGE [ 295.905817][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.915862][ T7324] Call Trace: [ 295.919126][ T7324] [ 295.922042][ T7324] dump_stack_lvl+0x241/0x360 [ 295.926715][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.931916][ T7324] ? __pfx_print_modules+0x10/0x10 [ 295.937040][ T7324] bad_page+0x166/0x1b0 [ 295.941193][ T7324] free_unref_page+0xed0/0xf20 [ 295.945971][ T7324] skb_release_data+0x6dc/0x8a0 [ 295.950810][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 295.955824][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 295.961537][ T7324] ? mark_lock+0x9a/0x360 [ 295.965862][ T7324] ? __lock_acquire+0x1384/0x2050 [ 295.970890][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 295.976955][ T7324] ? mark_lock+0x9a/0x360 [ 295.981274][ T7324] ? __lock_acquire+0x1384/0x2050 [ 295.986300][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 295.992282][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 295.998865][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 296.005361][ T7324] ? read_tsc+0x9/0x20 [ 296.009425][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 296.014621][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 296.020945][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 296.027101][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 296.033433][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 296.040102][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 296.045385][ T7324] ? __phys_addr+0xba/0x170 [ 296.049879][ T7324] ? build_skb_around+0x111/0x260 [ 296.054992][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 296.060882][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 296.066163][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 296.071621][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 296.077514][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 296.083070][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 296.088868][ T7324] ? synchronize_rcu+0x11b/0x360 [ 296.093798][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 296.099087][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 296.105327][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 296.111224][ T7324] ? _copy_from_user+0xa6/0xe0 [ 296.115982][ T7324] ? bpf_test_init+0x15a/0x180 [ 296.120759][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 296.126228][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 296.131621][ T7324] ? __pfx_lock_release+0x10/0x10 [ 296.136663][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 296.142907][ T7324] ? __fget_files+0x29/0x470 [ 296.147494][ T7324] ? fput+0x1a8/0x230 [ 296.151473][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 296.157279][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 296.162220][ T7324] __sys_bpf+0x48d/0x810 [ 296.166475][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 296.171235][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.177214][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.183549][ T7324] ? do_syscall_64+0x100/0x230 [ 296.188349][ T7324] __x64_sys_bpf+0x7c/0x90 [ 296.192763][ T7324] do_syscall_64+0xf3/0x230 [ 296.197286][ T7324] ? clear_bhb_loop+0x35/0x90 [ 296.201967][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.207872][ T7324] RIP: 0033:0x7f140dd7dff9 [ 296.212296][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.231920][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.240336][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 296.248302][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 296.256266][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 296.264232][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.272200][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 296.280173][ T7324] [ 296.283323][ T7324] BUG: Bad page state in process syz.1.483 pfn:62cb9 [ 296.290094][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888062cb93c0 pfn:0x62cb9 [ 296.300324][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 296.307525][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 296.316182][ T7324] raw: ffff888062cb93c0 0000000000000001 00000000ffffffff 0000000000000000 [ 296.324859][ T7324] page dumped because: page_pool leak [ 296.330238][ T7324] page_owner tracks the page as allocated [ 296.336012][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786505158, free_ts 289845356369 [ 296.353001][ T7324] post_alloc_hook+0x1f3/0x230 [ 296.357765][ T7324] get_page_from_freelist+0x3045/0x3190 [ 296.363476][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 296.368678][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 296.374180][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 296.380083][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 296.385329][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 296.390725][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 296.396205][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 296.401174][ T7324] __sys_bpf+0x48d/0x810 [ 296.405464][ T7324] __x64_sys_bpf+0x7c/0x90 [ 296.409887][ T7324] do_syscall_64+0xf3/0x230 [ 296.414461][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.420397][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 296.426800][ T7324] free_unref_page+0xcfb/0xf20 [ 296.431580][ T7324] __folio_put+0x2c7/0x440 [ 296.436086][ T7324] page_pool_release+0x661/0x8b0 [ 296.441044][ T7324] page_pool_destroy+0x2e3/0x560 [ 296.446089][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 296.451572][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 296.457028][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 296.461994][ T7324] __sys_bpf+0x48d/0x810 [ 296.466292][ T7324] __x64_sys_bpf+0x7c/0x90 [ 296.470716][ T7324] do_syscall_64+0xf3/0x230 [ 296.475274][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.481184][ T7324] Modules linked in: [ 296.485137][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 296.496857][ T7324] Tainted: [B]=BAD_PAGE [ 296.500989][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.511031][ T7324] Call Trace: [ 296.514304][ T7324] [ 296.517221][ T7324] dump_stack_lvl+0x241/0x360 [ 296.521888][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.527077][ T7324] ? __pfx_print_modules+0x10/0x10 [ 296.532193][ T7324] bad_page+0x166/0x1b0 [ 296.536366][ T7324] free_unref_page+0xed0/0xf20 [ 296.541143][ T7324] skb_release_data+0x6dc/0x8a0 [ 296.545999][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 296.551028][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 296.556743][ T7324] ? mark_lock+0x9a/0x360 [ 296.561067][ T7324] ? __lock_acquire+0x1384/0x2050 [ 296.566093][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 296.572162][ T7324] ? mark_lock+0x9a/0x360 [ 296.576491][ T7324] ? __lock_acquire+0x1384/0x2050 [ 296.581522][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 296.587503][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 296.594096][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 296.600590][ T7324] ? read_tsc+0x9/0x20 [ 296.604651][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 296.609843][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 296.616164][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 296.622322][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 296.628650][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 296.635320][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 296.640511][ T7324] ? __phys_addr+0xba/0x170 [ 296.645014][ T7324] ? build_skb_around+0x111/0x260 [ 296.650084][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 296.655977][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 296.661255][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 296.666714][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 296.672612][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 296.678162][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 296.683963][ T7324] ? synchronize_rcu+0x11b/0x360 [ 296.688891][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 296.694174][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 296.700412][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 296.706306][ T7324] ? _copy_from_user+0xa6/0xe0 [ 296.711064][ T7324] ? bpf_test_init+0x15a/0x180 [ 296.715822][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 296.721274][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 296.726643][ T7324] ? __pfx_lock_release+0x10/0x10 [ 296.731664][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 296.737464][ T7324] ? __fget_files+0x29/0x470 [ 296.742066][ T7324] ? fput+0x1a8/0x230 [ 296.746041][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 296.751880][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 296.756815][ T7324] __sys_bpf+0x48d/0x810 [ 296.761051][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 296.765813][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.771789][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.778110][ T7324] ? do_syscall_64+0x100/0x230 [ 296.782867][ T7324] __x64_sys_bpf+0x7c/0x90 [ 296.787277][ T7324] do_syscall_64+0xf3/0x230 [ 296.791766][ T7324] ? clear_bhb_loop+0x35/0x90 [ 296.796433][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.802324][ T7324] RIP: 0033:0x7f140dd7dff9 [ 296.806735][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.826344][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.834770][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 296.842738][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 296.850701][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 296.858666][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.866632][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 296.874603][ T7324] [ 296.877772][ T7324] BUG: Bad page state in process syz.1.483 pfn:5a229 [ 296.884653][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a2298c0 pfn:0x5a229 [ 296.894838][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 296.901965][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 296.910682][ T7324] raw: ffff88805a2298c0 0000000000000001 00000000ffffffff 0000000000000000 [ 296.919389][ T7324] page dumped because: page_pool leak [ 296.924881][ T7324] page_owner tracks the page as allocated [ 296.930600][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786493603, free_ts 289845365404 [ 296.947609][ T7324] post_alloc_hook+0x1f3/0x230 [ 296.952526][ T7324] get_page_from_freelist+0x3045/0x3190 [ 296.958079][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 296.963411][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 296.968875][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 296.974846][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 296.980075][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 296.985540][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 296.990925][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 296.995940][ T7324] __sys_bpf+0x48d/0x810 [ 297.000192][ T7324] __x64_sys_bpf+0x7c/0x90 [ 297.004684][ T7324] do_syscall_64+0xf3/0x230 [ 297.009198][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.015180][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 297.021510][ T7324] free_unref_page+0xcfb/0xf20 [ 297.026407][ T7324] __folio_put+0x2c7/0x440 [ 297.030840][ T7324] page_pool_release+0x661/0x8b0 [ 297.035906][ T7324] page_pool_destroy+0x2e3/0x560 [ 297.040857][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 297.046537][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 297.051919][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 297.057007][ T7324] __sys_bpf+0x48d/0x810 [ 297.061260][ T7324] __x64_sys_bpf+0x7c/0x90 [ 297.065804][ T7324] do_syscall_64+0xf3/0x230 [ 297.070313][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.076354][ T7324] Modules linked in: [ 297.080264][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 297.092055][ T7324] Tainted: [B]=BAD_PAGE [ 297.096187][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.106229][ T7324] Call Trace: [ 297.109497][ T7324] [ 297.112421][ T7324] dump_stack_lvl+0x241/0x360 [ 297.117124][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.122336][ T7324] ? __pfx_print_modules+0x10/0x10 [ 297.127466][ T7324] bad_page+0x166/0x1b0 [ 297.131638][ T7324] free_unref_page+0xed0/0xf20 [ 297.136406][ T7324] skb_release_data+0x6dc/0x8a0 [ 297.141261][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 297.146271][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 297.151993][ T7324] ? mark_lock+0x9a/0x360 [ 297.156321][ T7324] ? __lock_acquire+0x1384/0x2050 [ 297.161355][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 297.167433][ T7324] ? mark_lock+0x9a/0x360 [ 297.171762][ T7324] ? __lock_acquire+0x1384/0x2050 [ 297.176795][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 297.182781][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 297.189366][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 297.195866][ T7324] ? read_tsc+0x9/0x20 [ 297.199935][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 297.205134][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 297.211455][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 297.217608][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 297.223932][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 297.230598][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 297.235787][ T7324] ? __phys_addr+0xba/0x170 [ 297.240278][ T7324] ? build_skb_around+0x111/0x260 [ 297.245300][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 297.251188][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 297.256470][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 297.261930][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 297.267826][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 297.273370][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 297.279172][ T7324] ? synchronize_rcu+0x11b/0x360 [ 297.284117][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 297.289411][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 297.295653][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 297.301551][ T7324] ? _copy_from_user+0xa6/0xe0 [ 297.306316][ T7324] ? bpf_test_init+0x15a/0x180 [ 297.311078][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 297.316539][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 297.321910][ T7324] ? __pfx_lock_release+0x10/0x10 [ 297.326936][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 297.332742][ T7324] ? __fget_files+0x29/0x470 [ 297.337328][ T7324] ? fput+0x1a8/0x230 [ 297.341304][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 297.347108][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 297.352039][ T7324] __sys_bpf+0x48d/0x810 [ 297.356274][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 297.361033][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.367015][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.373343][ T7324] ? do_syscall_64+0x100/0x230 [ 297.378099][ T7324] __x64_sys_bpf+0x7c/0x90 [ 297.382516][ T7324] do_syscall_64+0xf3/0x230 [ 297.387018][ T7324] ? clear_bhb_loop+0x35/0x90 [ 297.391685][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.397575][ T7324] RIP: 0033:0x7f140dd7dff9 [ 297.401982][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.421585][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.429995][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 297.437959][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 297.445921][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 297.453884][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.461845][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 297.469818][ T7324] [ 297.473044][ T7324] BUG: Bad page state in process syz.1.483 pfn:7e5a6 [ 297.479821][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e5a68c0 pfn:0x7e5a6 [ 297.490049][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 297.497329][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 297.505998][ T7324] raw: ffff88807e5a68c0 0000000000000001 00000000ffffffff 0000000000000000 [ 297.514651][ T7324] page dumped because: page_pool leak [ 297.520011][ T7324] page_owner tracks the page as allocated [ 297.525769][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786481868, free_ts 289845373660 [ 297.542740][ T7324] post_alloc_hook+0x1f3/0x230 [ 297.547528][ T7324] get_page_from_freelist+0x3045/0x3190 [ 297.553115][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 297.558316][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 297.563809][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 297.569722][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 297.574965][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 297.580329][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 297.585729][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 297.590663][ T7324] __sys_bpf+0x48d/0x810 [ 297.594929][ T7324] __x64_sys_bpf+0x7c/0x90 [ 297.599353][ T7324] do_syscall_64+0xf3/0x230 [ 297.603907][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.609814][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 297.616194][ T7324] free_unref_page+0xcfb/0xf20 [ 297.620979][ T7324] __folio_put+0x2c7/0x440 [ 297.625475][ T7324] page_pool_release+0x661/0x8b0 [ 297.630420][ T7324] page_pool_destroy+0x2e3/0x560 [ 297.635418][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 297.640890][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 297.646341][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 297.651290][ T7324] __sys_bpf+0x48d/0x810 [ 297.655577][ T7324] __x64_sys_bpf+0x7c/0x90 [ 297.659998][ T7324] do_syscall_64+0xf3/0x230 [ 297.664542][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.670447][ T7324] Modules linked in: [ 297.674432][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 297.686177][ T7324] Tainted: [B]=BAD_PAGE [ 297.690311][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.700352][ T7324] Call Trace: [ 297.703621][ T7324] [ 297.706546][ T7324] dump_stack_lvl+0x241/0x360 [ 297.711235][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.716426][ T7324] ? __pfx_print_modules+0x10/0x10 [ 297.721530][ T7324] bad_page+0x166/0x1b0 [ 297.725676][ T7324] free_unref_page+0xed0/0xf20 [ 297.730434][ T7324] skb_release_data+0x6dc/0x8a0 [ 297.735279][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 297.740299][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 297.746014][ T7324] ? mark_lock+0x9a/0x360 [ 297.750339][ T7324] ? __lock_acquire+0x1384/0x2050 [ 297.755363][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 297.761457][ T7324] ? mark_lock+0x9a/0x360 [ 297.765777][ T7324] ? __lock_acquire+0x1384/0x2050 [ 297.770801][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 297.776783][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 297.783368][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 297.789863][ T7324] ? read_tsc+0x9/0x20 [ 297.793923][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 297.799115][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 297.805459][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 297.811607][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 297.817925][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 297.824592][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 297.829779][ T7324] ? __phys_addr+0xba/0x170 [ 297.834269][ T7324] ? build_skb_around+0x111/0x260 [ 297.839294][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 297.845185][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 297.850460][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 297.855915][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 297.861801][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 297.867339][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 297.873136][ T7324] ? synchronize_rcu+0x11b/0x360 [ 297.878068][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 297.883355][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 297.889592][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 297.895485][ T7324] ? _copy_from_user+0xa6/0xe0 [ 297.900241][ T7324] ? bpf_test_init+0x15a/0x180 [ 297.904995][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 297.910444][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 297.915811][ T7324] ? __pfx_lock_release+0x10/0x10 [ 297.920833][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 297.926631][ T7324] ? __fget_files+0x29/0x470 [ 297.931210][ T7324] ? fput+0x1a8/0x230 [ 297.935184][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 297.940980][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 297.945910][ T7324] __sys_bpf+0x48d/0x810 [ 297.950143][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 297.954900][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.960871][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.967189][ T7324] ? do_syscall_64+0x100/0x230 [ 297.971940][ T7324] __x64_sys_bpf+0x7c/0x90 [ 297.976344][ T7324] do_syscall_64+0xf3/0x230 [ 297.980839][ T7324] ? clear_bhb_loop+0x35/0x90 [ 297.985509][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.991395][ T7324] RIP: 0033:0x7f140dd7dff9 [ 297.995802][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.015395][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.023801][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 298.031762][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 298.039721][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 298.047686][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.055659][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 298.063640][ T7324] [ 298.066806][ T7324] BUG: Bad page state in process syz.1.483 pfn:5b58f [ 298.073655][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805b58fc80 pfn:0x5b58f [ 298.083812][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 298.090937][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 298.099614][ T7324] raw: ffff88805b58fc80 0000000000000001 00000000ffffffff 0000000000000000 [ 298.108252][ T7324] page dumped because: page_pool leak [ 298.113669][ T7324] page_owner tracks the page as allocated [ 298.119372][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786470406, free_ts 289845384691 [ 298.136345][ T7324] post_alloc_hook+0x1f3/0x230 [ 298.141122][ T7324] get_page_from_freelist+0x3045/0x3190 [ 298.146775][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 298.151961][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 298.157462][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 298.163461][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 298.168667][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 298.174085][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 298.179446][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 298.184493][ T7324] __sys_bpf+0x48d/0x810 [ 298.188739][ T7324] __x64_sys_bpf+0x7c/0x90 [ 298.193201][ T7324] do_syscall_64+0xf3/0x230 [ 298.197685][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.203675][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 298.210001][ T7324] free_unref_page+0xcfb/0xf20 [ 298.214881][ T7324] __folio_put+0x2c7/0x440 [ 298.219306][ T7324] page_pool_release+0x661/0x8b0 [ 298.224311][ T7324] page_pool_destroy+0x2e3/0x560 [ 298.229265][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 298.234845][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 298.240225][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 298.245330][ T7324] __sys_bpf+0x48d/0x810 [ 298.249583][ T7324] __x64_sys_bpf+0x7c/0x90 [ 298.254067][ T7324] do_syscall_64+0xf3/0x230 [ 298.258581][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.264564][ T7324] Modules linked in: [ 298.268464][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 298.280167][ T7324] Tainted: [B]=BAD_PAGE [ 298.284303][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.294361][ T7324] Call Trace: [ 298.297640][ T7324] [ 298.300557][ T7324] dump_stack_lvl+0x241/0x360 [ 298.305248][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.310459][ T7324] ? __pfx_print_modules+0x10/0x10 [ 298.315574][ T7324] bad_page+0x166/0x1b0 [ 298.319743][ T7324] free_unref_page+0xed0/0xf20 [ 298.324499][ T7324] skb_release_data+0x6dc/0x8a0 [ 298.329339][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 298.334360][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 298.340096][ T7324] ? mark_lock+0x9a/0x360 [ 298.344431][ T7324] ? __lock_acquire+0x1384/0x2050 [ 298.349456][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 298.355522][ T7324] ? mark_lock+0x9a/0x360 [ 298.359847][ T7324] ? __lock_acquire+0x1384/0x2050 [ 298.364875][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 298.370855][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 298.377447][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 298.383951][ T7324] ? read_tsc+0x9/0x20 [ 298.388022][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 298.393230][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 298.399555][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 298.405707][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 298.412023][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 298.418689][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 298.423879][ T7324] ? __phys_addr+0xba/0x170 [ 298.428372][ T7324] ? build_skb_around+0x111/0x260 [ 298.433400][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 298.439286][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 298.444565][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 298.450021][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 298.455908][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 298.461447][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 298.467249][ T7324] ? synchronize_rcu+0x11b/0x360 [ 298.472182][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 298.477472][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 298.483709][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 298.489601][ T7324] ? _copy_from_user+0xa6/0xe0 [ 298.494360][ T7324] ? bpf_test_init+0x15a/0x180 [ 298.499122][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 298.504575][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 298.509947][ T7324] ? __pfx_lock_release+0x10/0x10 [ 298.514970][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 298.520769][ T7324] ? __fget_files+0x29/0x470 [ 298.525353][ T7324] ? fput+0x1a8/0x230 [ 298.529325][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 298.535131][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 298.540061][ T7324] __sys_bpf+0x48d/0x810 [ 298.544293][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 298.549049][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.555022][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.561363][ T7324] ? do_syscall_64+0x100/0x230 [ 298.566127][ T7324] __x64_sys_bpf+0x7c/0x90 [ 298.570537][ T7324] do_syscall_64+0xf3/0x230 [ 298.575033][ T7324] ? clear_bhb_loop+0x35/0x90 [ 298.579703][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.585595][ T7324] RIP: 0033:0x7f140dd7dff9 [ 298.590005][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.609612][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.618027][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 298.625990][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 298.633950][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 298.641909][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.649867][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 298.657839][ T7324] [ 298.661024][ T7324] BUG: Bad page state in process syz.1.483 pfn:60fb8 [ 298.667922][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060fb8000 pfn:0x60fb8 [ 298.678125][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 298.685378][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 298.694100][ T7324] raw: ffff888060fb8000 0000000000000001 00000000ffffffff 0000000000000000 [ 298.702815][ T7324] page dumped because: page_pool leak [ 298.708179][ T7324] page_owner tracks the page as allocated [ 298.713971][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786459072, free_ts 289845393116 [ 298.730963][ T7324] post_alloc_hook+0x1f3/0x230 [ 298.735796][ T7324] get_page_from_freelist+0x3045/0x3190 [ 298.741357][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 298.746628][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 298.752088][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 298.758067][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 298.763466][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 298.768863][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 298.774338][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 298.779262][ T7324] __sys_bpf+0x48d/0x810 [ 298.783651][ T7324] __x64_sys_bpf+0x7c/0x90 [ 298.788083][ T7324] do_syscall_64+0xf3/0x230 [ 298.792757][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.798673][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 298.805097][ T7324] free_unref_page+0xcfb/0xf20 [ 298.809871][ T7324] __folio_put+0x2c7/0x440 [ 298.814341][ T7324] page_pool_release+0x661/0x8b0 [ 298.819300][ T7324] page_pool_destroy+0x2e3/0x560 [ 298.824301][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 298.829768][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 298.835179][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 298.840123][ T7324] __sys_bpf+0x48d/0x810 [ 298.844420][ T7324] __x64_sys_bpf+0x7c/0x90 [ 298.848849][ T7324] do_syscall_64+0xf3/0x230 [ 298.853418][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.859323][ T7324] Modules linked in: [ 298.863281][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 298.875011][ T7324] Tainted: [B]=BAD_PAGE [ 298.879143][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.889203][ T7324] Call Trace: [ 298.892491][ T7324] [ 298.895432][ T7324] dump_stack_lvl+0x241/0x360 [ 298.900134][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.905351][ T7324] ? __pfx_print_modules+0x10/0x10 [ 298.910485][ T7324] bad_page+0x166/0x1b0 [ 298.914646][ T7324] free_unref_page+0xed0/0xf20 [ 298.919405][ T7324] skb_release_data+0x6dc/0x8a0 [ 298.924256][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 298.929285][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 298.934997][ T7324] ? mark_lock+0x9a/0x360 [ 298.939319][ T7324] ? __lock_acquire+0x1384/0x2050 [ 298.944345][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 298.950406][ T7324] ? mark_lock+0x9a/0x360 [ 298.954726][ T7324] ? __lock_acquire+0x1384/0x2050 [ 298.959750][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 298.965724][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 298.972312][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 298.978816][ T7324] ? read_tsc+0x9/0x20 [ 298.982882][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 298.988075][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 298.994393][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 299.000540][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 299.006864][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 299.013534][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 299.018720][ T7324] ? __phys_addr+0xba/0x170 [ 299.023210][ T7324] ? build_skb_around+0x111/0x260 [ 299.028227][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 299.034112][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 299.039387][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 299.044839][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 299.050725][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 299.056264][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 299.062062][ T7324] ? synchronize_rcu+0x11b/0x360 [ 299.066989][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 299.072278][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 299.078522][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 299.084419][ T7324] ? _copy_from_user+0xa6/0xe0 [ 299.089177][ T7324] ? bpf_test_init+0x15a/0x180 [ 299.093932][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 299.099384][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 299.104759][ T7324] ? __pfx_lock_release+0x10/0x10 [ 299.109795][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 299.115596][ T7324] ? __fget_files+0x29/0x470 [ 299.120184][ T7324] ? fput+0x1a8/0x230 [ 299.124160][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 299.129960][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 299.134889][ T7324] __sys_bpf+0x48d/0x810 [ 299.139120][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 299.143883][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.149858][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.156181][ T7324] ? do_syscall_64+0x100/0x230 [ 299.160935][ T7324] __x64_sys_bpf+0x7c/0x90 [ 299.165345][ T7324] do_syscall_64+0xf3/0x230 [ 299.169839][ T7324] ? clear_bhb_loop+0x35/0x90 [ 299.174505][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.180391][ T7324] RIP: 0033:0x7f140dd7dff9 [ 299.184796][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.204393][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.212804][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 299.220766][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 299.228723][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 299.236683][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.244641][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 299.252695][ T7324] [ 299.255831][ T7324] BUG: Bad page state in process syz.1.483 pfn:677bb [ 299.262663][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880677bb000 pfn:0x677bb [ 299.272808][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 299.279955][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 299.288618][ T7324] raw: ffff8880677bb000 0000000000000001 00000000ffffffff 0000000000000000 [ 299.297259][ T7324] page dumped because: page_pool leak [ 299.302690][ T7324] page_owner tracks the page as allocated [ 299.308395][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786447673, free_ts 289845401758 [ 299.325387][ T7324] post_alloc_hook+0x1f3/0x230 [ 299.330156][ T7324] get_page_from_freelist+0x3045/0x3190 [ 299.335750][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 299.340934][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 299.346421][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 299.352380][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 299.357591][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 299.363035][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 299.368428][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 299.373466][ T7324] __sys_bpf+0x48d/0x810 [ 299.377725][ T7324] __x64_sys_bpf+0x7c/0x90 [ 299.382228][ T7324] do_syscall_64+0xf3/0x230 [ 299.386739][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.392724][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 299.399053][ T7324] free_unref_page+0xcfb/0xf20 [ 299.403918][ T7324] __folio_put+0x2c7/0x440 [ 299.408346][ T7324] page_pool_release+0x661/0x8b0 [ 299.413393][ T7324] page_pool_destroy+0x2e3/0x560 [ 299.418339][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 299.423853][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 299.429234][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 299.434282][ T7324] __sys_bpf+0x48d/0x810 [ 299.438548][ T7324] __x64_sys_bpf+0x7c/0x90 [ 299.443055][ T7324] do_syscall_64+0xf3/0x230 [ 299.447561][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.453572][ T7324] Modules linked in: [ 299.457476][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 299.469191][ T7324] Tainted: [B]=BAD_PAGE [ 299.473346][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.483402][ T7324] Call Trace: [ 299.486674][ T7324] [ 299.489601][ T7324] dump_stack_lvl+0x241/0x360 [ 299.494304][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.499513][ T7324] ? __pfx_print_modules+0x10/0x10 [ 299.504613][ T7324] bad_page+0x166/0x1b0 [ 299.508775][ T7324] free_unref_page+0xed0/0xf20 [ 299.513546][ T7324] skb_release_data+0x6dc/0x8a0 [ 299.518496][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 299.523523][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 299.529242][ T7324] ? mark_lock+0x9a/0x360 [ 299.533567][ T7324] ? __lock_acquire+0x1384/0x2050 [ 299.538589][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 299.544651][ T7324] ? mark_lock+0x9a/0x360 [ 299.548971][ T7324] ? __lock_acquire+0x1384/0x2050 [ 299.553993][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 299.559967][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 299.566548][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 299.573040][ T7324] ? read_tsc+0x9/0x20 [ 299.577106][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 299.582311][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 299.588640][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 299.594787][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 299.601101][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 299.607766][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 299.612953][ T7324] ? __phys_addr+0xba/0x170 [ 299.617453][ T7324] ? build_skb_around+0x111/0x260 [ 299.622500][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 299.628395][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 299.633681][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 299.639131][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 299.645020][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 299.650557][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 299.656358][ T7324] ? synchronize_rcu+0x11b/0x360 [ 299.661285][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 299.666567][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 299.672802][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 299.678692][ T7324] ? _copy_from_user+0xa6/0xe0 [ 299.683445][ T7324] ? bpf_test_init+0x15a/0x180 [ 299.688205][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 299.693658][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 299.699025][ T7324] ? __pfx_lock_release+0x10/0x10 [ 299.704055][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 299.709858][ T7324] ? __fget_files+0x29/0x470 [ 299.714559][ T7324] ? fput+0x1a8/0x230 [ 299.718547][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 299.724360][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 299.729298][ T7324] __sys_bpf+0x48d/0x810 [ 299.733536][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 299.738300][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.744284][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.750611][ T7324] ? do_syscall_64+0x100/0x230 [ 299.755397][ T7324] __x64_sys_bpf+0x7c/0x90 [ 299.759807][ T7324] do_syscall_64+0xf3/0x230 [ 299.764304][ T7324] ? clear_bhb_loop+0x35/0x90 [ 299.768969][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.774856][ T7324] RIP: 0033:0x7f140dd7dff9 [ 299.779261][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.798861][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.807270][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 299.815235][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 299.823203][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 299.831165][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.839124][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 299.847094][ T7324] [ 299.850283][ T7324] BUG: Bad page state in process syz.1.483 pfn:291cb [ 299.857167][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880291cb6c8 pfn:0x291cb [ 299.867373][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 299.874613][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 299.883318][ T7324] raw: ffff8880291cb6c8 0000000000000001 00000000ffffffff 0000000000000000 [ 299.891904][ T7324] page dumped because: page_pool leak [ 299.897336][ T7324] page_owner tracks the page as allocated [ 299.903167][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786436345, free_ts 289845410346 [ 299.920285][ T7324] post_alloc_hook+0x1f3/0x230 [ 299.925336][ T7324] get_page_from_freelist+0x3045/0x3190 [ 299.930888][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 299.936140][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 299.941583][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 299.947538][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 299.952850][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 299.958240][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 299.963702][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 299.968628][ T7324] __sys_bpf+0x48d/0x810 [ 299.973014][ T7324] __x64_sys_bpf+0x7c/0x90 [ 299.977434][ T7324] do_syscall_64+0xf3/0x230 [ 299.981919][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.987893][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 299.994355][ T7324] free_unref_page+0xcfb/0xf20 [ 299.999127][ T7324] __folio_put+0x2c7/0x440 [ 300.003622][ T7324] page_pool_release+0x661/0x8b0 [ 300.008573][ T7324] page_pool_destroy+0x2e3/0x560 [ 300.013664][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 300.019130][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 300.024595][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 300.029546][ T7324] __sys_bpf+0x48d/0x810 [ 300.033937][ T7324] __x64_sys_bpf+0x7c/0x90 [ 300.038359][ T7324] do_syscall_64+0xf3/0x230 [ 300.043018][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.048923][ T7324] Modules linked in: [ 300.052981][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 300.064712][ T7324] Tainted: [B]=BAD_PAGE [ 300.068875][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.078916][ T7324] Call Trace: [ 300.082192][ T7324] [ 300.085120][ T7324] dump_stack_lvl+0x241/0x360 [ 300.089802][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.095018][ T7324] ? __pfx_print_modules+0x10/0x10 [ 300.100132][ T7324] bad_page+0x166/0x1b0 [ 300.104283][ T7324] free_unref_page+0xed0/0xf20 [ 300.109041][ T7324] skb_release_data+0x6dc/0x8a0 [ 300.113890][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 300.118924][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 300.124657][ T7324] ? mark_lock+0x9a/0x360 [ 300.128987][ T7324] ? __lock_acquire+0x1384/0x2050 [ 300.134030][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 300.140096][ T7324] ? mark_lock+0x9a/0x360 [ 300.144420][ T7324] ? __lock_acquire+0x1384/0x2050 [ 300.149453][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 300.155436][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 300.162021][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 300.168523][ T7324] ? read_tsc+0x9/0x20 [ 300.172592][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 300.177807][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 300.184144][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 300.190293][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 300.196614][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 300.203280][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 300.208467][ T7324] ? __phys_addr+0xba/0x170 [ 300.212957][ T7324] ? build_skb_around+0x111/0x260 [ 300.217974][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 300.223864][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 300.229142][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 300.234602][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 300.240491][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 300.246033][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 300.251830][ T7324] ? synchronize_rcu+0x11b/0x360 [ 300.256759][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 300.262042][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 300.268278][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 300.274174][ T7324] ? _copy_from_user+0xa6/0xe0 [ 300.278929][ T7324] ? bpf_test_init+0x15a/0x180 [ 300.283683][ T7324] ? xdp_convert_md_to_buff+0x5b/0x330 [ 300.289152][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 300.294536][ T7324] ? __pfx_lock_release+0x10/0x10 [ 300.299648][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 300.305460][ T7324] ? __fget_files+0x29/0x470 [ 300.310052][ T7324] ? fput+0x1a8/0x230 [ 300.314030][ T7324] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 300.319837][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 300.324771][ T7324] __sys_bpf+0x48d/0x810 [ 300.329020][ T7324] ? __pfx___sys_bpf+0x10/0x10 [ 300.333788][ T7324] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.339780][ T7324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.346106][ T7324] ? do_syscall_64+0x100/0x230 [ 300.350861][ T7324] __x64_sys_bpf+0x7c/0x90 [ 300.355268][ T7324] do_syscall_64+0xf3/0x230 [ 300.359760][ T7324] ? clear_bhb_loop+0x35/0x90 [ 300.364433][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.370423][ T7324] RIP: 0033:0x7f140dd7dff9 [ 300.374828][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.394435][ T7324] RSP: 002b:00007f140ec17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.402840][ T7324] RAX: ffffffffffffffda RBX: 00007f140df36058 RCX: 00007f140dd7dff9 [ 300.410798][ T7324] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 300.418758][ T7324] RBP: 00007f140ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 300.426723][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.434680][ T7324] R13: 0000000000000000 R14: 00007f140df36058 R15: 00007fff316dc248 [ 300.442659][ T7324] [ 300.445900][ T7324] BUG: Bad page state in process syz.1.483 pfn:30e16 [ 300.452827][ T7324] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030e16aa8 pfn:0x30e16 [ 300.463002][ T7324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 300.470129][ T7324] raw: 00fff00000000000 dead000000000040 ffff88807238c000 0000000000000000 [ 300.478759][ T7324] raw: ffff888030e16aa8 0000000000000001 00000000ffffffff 0000000000000000 [ 300.487366][ T7324] page dumped because: page_pool leak [ 300.492770][ T7324] page_owner tracks the page as allocated [ 300.498477][ T7324] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7324, tgid 7318 (syz.1.483), ts 290786425078, free_ts 289845531164 [ 300.515433][ T7324] post_alloc_hook+0x1f3/0x230 [ 300.520193][ T7324] get_page_from_freelist+0x3045/0x3190 [ 300.525760][ T7324] __alloc_pages_noprof+0x256/0x6c0 [ 300.530943][ T7324] alloc_pages_bulk_noprof+0x729/0xd40 [ 300.536464][ T7324] __page_pool_alloc_pages_slow+0x122/0x690 [ 300.542436][ T7324] page_pool_alloc_pages+0xd0/0x1c0 [ 300.547641][ T7324] bpf_test_run_xdp_live+0x950/0x2160 [ 300.553083][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 300.558466][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 300.563481][ T7324] __sys_bpf+0x48d/0x810 [ 300.567729][ T7324] __x64_sys_bpf+0x7c/0x90 [ 300.572212][ T7324] do_syscall_64+0xf3/0x230 [ 300.576714][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.582674][ T7324] page last free pid 7267 tgid 7266 stack trace: [ 300.589004][ T7324] free_unref_page+0xcfb/0xf20 [ 300.593867][ T7324] __folio_put+0x2c7/0x440 [ 300.598301][ T7324] page_pool_release+0x661/0x8b0 [ 300.603331][ T7324] page_pool_destroy+0x2e3/0x560 [ 300.608284][ T7324] bpf_test_run_xdp_live+0x1f09/0x2160 [ 300.613844][ T7324] bpf_prog_test_run_xdp+0x805/0x11e0 [ 300.619227][ T7324] bpf_prog_test_run+0x2e4/0x360 [ 300.624242][ T7324] __sys_bpf+0x48d/0x810 [ 300.628489][ T7324] __x64_sys_bpf+0x7c/0x90 [ 300.632998][ T7324] do_syscall_64+0xf3/0x230 [ 300.637520][ T7324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.643494][ T7324] Modules linked in: [ 300.647399][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.1.483 Tainted: G B 6.11.0-syzkaller-11517-g7c2f1c2690a5 #0 [ 300.659108][ T7324] Tainted: [B]=BAD_PAGE [ 300.663262][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.673324][ T7324] Call Trace: [ 300.676603][ T7324] [ 300.679519][ T7324] dump_stack_lvl+0x241/0x360 [ 300.684201][ T7324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.689414][ T7324] ? __pfx_print_modules+0x10/0x10 [ 300.694532][ T7324] bad_page+0x166/0x1b0 [ 300.698703][ T7324] free_unref_page+0xed0/0xf20 [ 300.703500][ T7324] skb_release_data+0x6dc/0x8a0 [ 300.708338][ T7324] sk_skb_reason_drop+0x1c9/0x380 [ 300.713356][ T7324] __netif_receive_skb_core+0x3edd/0x4570 [ 300.719103][ T7324] ? mark_lock+0x9a/0x360 [ 300.723440][ T7324] ? __lock_acquire+0x1384/0x2050 [ 300.728466][ T7324] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 300.734528][ T7324] ? mark_lock+0x9a/0x360 [ 300.738851][ T7324] ? __lock_acquire+0x1384/0x2050 [ 300.743884][ T7324] __netif_receive_skb_list_core+0x2b1/0x980 [ 300.749872][ T7324] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 300.756456][ T7324] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 300.762948][ T7324] ? read_tsc+0x9/0x20 [ 300.767008][ T7324] ? timekeeping_get_ns+0x2c0/0x420 [ 300.772203][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 300.778537][ T7324] netif_receive_skb_list_internal+0xa51/0xe30 [ 300.784682][ T7324] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 300.791000][ T7324] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 300.797666][ T7324] ? __pfx_eth_type_trans+0x10/0x10 [ 300.802857][ T7324] ? __phys_addr+0xba/0x170 [ 300.807346][ T7324] ? build_skb_around+0x111/0x260 [ 300.812381][ T7324] ? __xdp_build_skb_from_frame+0x338/0x650 [ 300.818320][ T7324] netif_receive_skb_list+0x55/0x4b0 [ 300.823599][ T7324] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 300.829054][ T7324] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 300.834951][ T7324] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 300.840497][ T7324] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 300.846310][ T7324] ? synchronize_rcu+0x11b/0x360 [ 300.851252][ T7324] ? __pfx_synchronize_rcu+0x10/0x10 [ 300.856545][ T7324] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 300.862787][ T7324] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 300.868702][ T7324] ? _copy_from_user+0xa6/0xe0 [ 300.873480][ T7324] ? bpf_test_init+0x15a/0x180