last executing test programs: 1m3.23367117s ago: executing program 2 (id=265): r0 = socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000740)=@bpq0, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 59.850864355s ago: executing program 4 (id=476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000500)="0000002000297a10cd43b7da874a30b062feab3d739da4561d297af691fce0a27722337fb6c073fb26b098662d3c57ff3c112f8a5be5adcf1c7e55452fe8fb8b8118a55a169a84d87592c962c0b5d8", 0x4f, 0x4000, 0x0, 0x0) recvfrom(r1, &(0x7f0000000140)=""/79, 0x4f, 0x102, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x0, 0x0) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 58.402006298s ago: executing program 4 (id=481): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x1854, 0x1) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, &(0x7f0000000340), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 49.531062862s ago: executing program 2 (id=265): r0 = socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000740)=@bpq0, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 48.487426539s ago: executing program 2 (id=265): r0 = socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000740)=@bpq0, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 47.760638731s ago: executing program 4 (id=481): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x1854, 0x1) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, &(0x7f0000000340), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 33.78422612s ago: executing program 2 (id=265): r0 = socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000740)=@bpq0, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 32.173449065s ago: executing program 4 (id=481): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x1854, 0x1) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, &(0x7f0000000340), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 16.770771187s ago: executing program 2 (id=265): r0 = socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000740)=@bpq0, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 16.741615906s ago: executing program 4 (id=481): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x1854, 0x1) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, &(0x7f0000000340), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 5.78598423s ago: executing program 3 (id=768): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 64) listen(r1, 0x0) (rerun: 64) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x28, 0x6, 0x0, @remote, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc3, 0x3}, @sack={0x5, 0xa, [0x6, 0x9]}]}}}}}}}}, 0x0) shutdown(r0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async, rerun: 32) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x20, 0x0, &(0x7f00000002c0)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) (async, rerun: 64) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000040), 0x8) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 4.783529116s ago: executing program 3 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0xc0, 0x686, 0xa, @empty, @private1, 0x700, 0x20, 0x200, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x3, 0x1, 0x44, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8, 0xe, 0xb}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x5, 0xdf, 0xff, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x700, 0x10, 0x4, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x8e, 0x5, 0x8, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x1, 0x8, 0x80000001}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000890}, 0x20004000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = socket(0x8, 0x3, 0x0) getpeername$unix(r8, &(0x7f0000000500)=@abs, &(0x7f0000000580)=0x6e) r9 = socket(0x1e, 0xa, 0x6) setsockopt(r9, 0x873, 0x6da2, &(0x7f00000005c0)="70dc265810b106c05f4c5bc3d690d0d9df167eecfcb0eb37b91fa51cad915a275d6a9d5d8e5866a9389fd5ecb24d3614fadde5c91fcf80e80e15693bc1c7d9", 0x3f) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x11c, r10, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008065) syz_extract_tcp_res$synack(&(0x7f0000000840), 0x1, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000980)=0x1a, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f00000009c0)={r12, 0x3, 0x9, 0x10001}) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000a00)={0x1, 0x3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000a40)='block_bio_remap\x00', 0xffffffffffffffff, 0x0, 0x62dc3a13}, 0x18) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000001100)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000001240)=0xe8) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0, 0x0}, &(0x7f00000012c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000001300)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001400)=0xe8) r18 = getgid() sendmsg$unix(r8, &(0x7f0000001480)={&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000b40)="2bc882babe3e2702efb12f9d54122a8e69be82a4c99e17360e130000ae8ed6affdf2041dd9867448663748f309f545c771de7b4c4f6e47d2acade0357a34f8bf0794558b2661def08ea11a83ee1cc417403b7e1eddda6ad6413704d0d609e10f15808c48c4b46ab9ddd5f4898f1775a27ec9126f37c7b46d83d87570cd3a5a417daab92c8f8a76ca4b6ce8ccee793aaa04ccfc73", 0x94}, {&(0x7f0000000c00)="ab28b4b367c4e61c65dcb615f956c46c2414cdd1a3f730eb853bb42d3a4b5f0247a5c76e9ce1c47e9561f018af21fd19374649ac2862f964d25145aecdcded37a8c364f92793fdec9edd6722c635901aae41eac3ad7f31e84f9ac1242f2c6567723854775fec9dfe877abb85d98d34fdf1a2d9efa1aee9e5c832510a6a1877dc625a85c5b80b5415c94180938ed2a1ac543c6ac2065a4f6738bfa3b41bd1d9b6a15ed5bbe5b293997ef2496713615c904a683a5ae3d3ba59240e871d1424b246029ed174dbf1564ef2", 0xc9}, {&(0x7f0000000d00)="15d3c5df81d46cac446155c1684c4c0c535cf4afaa78a38bd62431848415b2854dedf738d6125301c1c0402baeaf", 0x2e}, {&(0x7f0000000d40)="8568e2ced8c208da0e79f2be249da22f0e0558a6cac7a2005914c47c97757f11d05885237142993bd19a4222cec7c0807f7a4a54340c8a1e6b3f830b3a0e83d8fa6ce7e4d805c9195492d192d352279b8f2cafb97006366b36c92119a9a0d9ef6a388662deb91bf6809f66eb32d444c94ca22be02b9a45513bc79ddcf86d8f194c8c95b50d1cf966f4ebee078ee7f63850271cb156d1c0f5ef09af40c55e33c62859e064cbe19d5ebf02255593ad30", 0xaf}, {&(0x7f0000000e00)="59cedc89ad7b443af5a7c96889421997d1a5878e3c1080b44f84ec9042db534cb535b3cd6ec9ee1be5b8b0cdf7f7b4ebfbed94d46d5bd23804be5a516ae6dad03c16e1c09794cc6af9f56391ffd4bb34cae483f289", 0x55}, {&(0x7f0000000e80)="ff324205af0c1164587170f345f7f7d29132faa3bb7f0a78dc9addcf9778093a23dafc24bd44c53b1162f965cc2853463dc1ece136f84733e8cd2daa7d5759c68001b5f43b136270373351c0d1b8938f3dd55ed0c5e01859d8d86e236dfb52522ffecfbf9930b3d65d9a30af5c13266c24a29f600f90284ee9d1a899372715ba5dfecd101db01665c3dbfeb9455b6058bd3f4d3db5c42687cfe01550f953f2dca88da7e72468574307224f8e8e1c90a751bf16b8dd5ca6ba", 0xb8}, {&(0x7f0000000f40)="53e99a1843c170624f4117771789737e7730ebfa657c82d6f7fb5a532fae0fba788579", 0x23}, {&(0x7f0000000f80)="2638445bca996040375857dbc8aa3a70c4620f6d3cc090729aec9da64a2766e9eb3ecaa461314c7f331fddd55c364fdc0eba5f1ad3be5766f742e5cf374e45c5dc8528b88f45e9f9b1068a13f9cecaa3702708781a3875e58a06843cf059d7cb5374722e23ef800afa212e6b3d97847430259ba3c17b453f10f55a9bdf32854d61720100d3e671ffa29f1023c60f17cec7734fd06a8939facedcc9ea2dad698ef26a60e08e0b73a31edd32b8a36699c5970d50e9181dfe4a9be0c8d399ed31ea919174d845f1d6413fe64cbb2f1d14f5522d81d78ea1dda6e5db6a840fbbf69283945b81", 0xe4}], 0x8, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r17, r18}}}], 0x40, 0x1}, 0x40c0) 4.409996437s ago: executing program 3 (id=778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5ffff040800084000000001"], 0x98}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x1, 0x2}, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x800, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "97dded"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180), 0x0) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x1}, 0x10) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x7}}) unshare(0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) pipe(&(0x7f0000000000)) 4.192939789s ago: executing program 1 (id=780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000000000000014100000018001700000000000000006574683a7465616d30"], 0x34}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}}, 0x24040080) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}}, 0x0) 3.994090644s ago: executing program 1 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000004"], 0x68}}, 0x20000004) socket$inet6(0xa, 0x0, 0x1ff) 3.969228629s ago: executing program 1 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x66, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x5, 0x0, &(0x7f0000000000)="c33e71922c", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.898864895s ago: executing program 1 (id=783): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) socket$inet6(0xa, 0x2, 0x1) (async) socket$inet6(0xa, 0x2, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) preadv(r2, &(0x7f00000024c0)=[{&(0x7f0000001700)=""/188, 0xbc}], 0x1, 0x3, 0x0) (async) preadv(r2, &(0x7f00000024c0)=[{&(0x7f0000001700)=""/188, 0xbc}], 0x1, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c8ca4688a000000000000"], 0x28) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) (async) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "97dded"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180), 0x0) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x1}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team_slave_1\x00', 0x800}) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0xfff4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0xfff4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x40, 0x9, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x8}}) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 3.869663387s ago: executing program 2 (id=265): r0 = socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000740)=@bpq0, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 2.583084183s ago: executing program 1 (id=785): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8", 0x3, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0x805}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xf, 0x1, 0x805}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x4040000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x4040000) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e220800180076795fb2"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e220800180076795fb2"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a640000000e0a0b040000000000000000020000000900010073797a3000000000090002"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a640000000e0a0b040000000000000000020000000900010073797a3000000000090002"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getstats={0x1c, 0x5e, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x4}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x42081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xd, &(0x7f0000000400)=@framed={{0xce, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0xb3}, @map_fd={0x18, 0x9, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.58008722s ago: executing program 3 (id=786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0xa3}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/82, 0x52}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f00000002c0)=""/103, 0x67}], 0x3}, 0x40) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6, 0x983, 0x7f, {0x77359400}, {r5, r6/1000+10000}, {0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "cc72890d8d6c3a50"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r0, r2, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20) 2.579820308s ago: executing program 4 (id=481): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) socket$kcm(0x29, 0x7, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x1854, 0x1) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, &(0x7f0000000340), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 2.071772372s ago: executing program 3 (id=787): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x1007ff, 0x1a, 0xf, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x0) 1.181668722s ago: executing program 0 (id=793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402c82, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'sit0\x00', @local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f00000000c0)=""/131, &(0x7f0000000180)=0x83) (async) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f00000000c0)=""/131, &(0x7f0000000180)=0x83) sendmsg(r1, &(0x7f0000000800)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x4, {0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0xb1f}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="42af3444f2ca4c613440b37a1d5754e314cbc2148d520412c8736c5198a1cf9f7b295ef3018da803a4a61bb38f6aaea968b3ff8ec0453e60645b3aedfa0bce241e9732fc993e87c990fdfc7d66cac8f956bfd26ae11d0648001ddde754189e4a161a963a821a3ca617b2b75aca09b1739c69cc98a68a57bdd4c45539197d7bff6281332f32a9b20ee4e2362f9750708786995180beeeb7262687ab622fd8a3f92499aad089b05c96280f53d285c5311f50", 0xb1}], 0x1, &(0x7f0000000340)=[{0xd8, 0x10f, 0x0, "13e024c73e98c7c3fd5e3719f4d5660c4904e3a4c268692f7f2608284757648de320f67a87c9a2995101518e603c0748756fdda5e597ac770d86137f5bd39954018a3796d967854fe3f734de8829590651c46d4b67480364dee0775c38fd15465414b2d8aaca93ad4ffbf0af3381a7d95240af3508b33085896a72ff026b18bf67a9369acba0311c3de33c71d62d3f9420de288c8e03bb781739a4871a4e890acf099acddd894598ae86946bb9e089c2bbcb7f8c3ed694da965c6449d23e452d31"}, {0x50, 0x115, 0x7, "e95a24e705ca6209cd4b432e5281d6cf1f953484a406932994796616ab3b301487395b6c443d13fd4588f42751155db29bb1b3e6e18b9de0331c54952f7115"}, {0xf0, 0x11, 0x8, "f4441c86fe0cf0529e85b95ffefda0b20f3de5404dce6f30edef50d4b47c8939eb38d44dd2ef7b66099b814e8416492d55e340c111ba58a1e80c3f88994ddf4c19c44fb831736049bb37e3300061c02f860509b1b1855ac976f13f389fb1e0d00e0a70380fa6090647e69a1bb6c3f66ea03bf10d0345c81d7e9313b78a2a1f665b46513187d2b8f3429be52e46628d5dd180cd08d94b7a580137a5deede4d55de26bdc4aab77f900bd5182586237f4dd8040643ddd3a037ffd61a8f3d699db230c1ea2af47cd2c79d65530b629e9fa3bcae581b51b12d3cc9dfbfe"}, {0x108, 0x117, 0x7, "3b4df26f8e740b8e532d937f0b0f64f82d0f69f57bbd98542706acccc2dfeced45d98aacbca67c2cb062dc0a27eece94e2ef278236d629e78597f132ce2c9c6674551a931cc8f4ced815330974e930e3fbfece398f60b26ed48796b4e50491cb461644b7a6ce5269bd141de4e1874c16698c551e22442c34e3068297f03588d8baada120da7e2359952b6899b0a3c23a603469424f2f108b9368db064db2ff9317c424f118e81442c2c0f9cee0953429bbb1411d9ba237f2b3aef5a5d4e5ace851a8b355167dfaf29fbd802875182c459c262d82642bd499116cfc91b0c5eea74f3a06ea1521109c0d33a7c33d3adf93833f02"}, {0xb0, 0x84, 0x7fffffff, "efbf99ed1a2605ce57382a308545f331a388a707d2f95030d70de06c6a14e5a5c15c76e2a73aa8eec077a564093daa48bd2d2e34ae93c271df357dad1f397970a46402845b06daddbd11191057487967cc7bfb8e76ff610507cb1d9d2831c6ff8d9696b0821f70ec4f4f08a4ea491575a600b8b96db8d41d33139909610067865907bc2bdad8814229d49516c07d30835747eb9a9170af329f"}, {0x18, 0x10b, 0xa, "c39eb327d4"}, {0xb8, 0x10f, 0x336, "8161210edabd1d99c7a889046c7800cca298b3e335fbae859732421a1ea4944f1cabd270cb8a99ae27d24ea26e131d80e2978f800d3882bec933706db999fdcdac3abc748fed146ec1b24b77819d8c4430b322af47090d8d37e46a189b25c004f3b32c960d9b618f9fa89c8864595451b367cceb60acce51c3dfc4db7343502e7f889b9ab182acecf116eaa7058adf4aec5ad9714793a1ee948278309f80595478"}, {0x20, 0x118, 0x80000001, "ef59355f9da83795be2c"}], 0x4c0}, 0x44004) (async) sendmsg(r1, &(0x7f0000000800)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x4, {0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0xb1f}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="42af3444f2ca4c613440b37a1d5754e314cbc2148d520412c8736c5198a1cf9f7b295ef3018da803a4a61bb38f6aaea968b3ff8ec0453e60645b3aedfa0bce241e9732fc993e87c990fdfc7d66cac8f956bfd26ae11d0648001ddde754189e4a161a963a821a3ca617b2b75aca09b1739c69cc98a68a57bdd4c45539197d7bff6281332f32a9b20ee4e2362f9750708786995180beeeb7262687ab622fd8a3f92499aad089b05c96280f53d285c5311f50", 0xb1}], 0x1, &(0x7f0000000340)=[{0xd8, 0x10f, 0x0, "13e024c73e98c7c3fd5e3719f4d5660c4904e3a4c268692f7f2608284757648de320f67a87c9a2995101518e603c0748756fdda5e597ac770d86137f5bd39954018a3796d967854fe3f734de8829590651c46d4b67480364dee0775c38fd15465414b2d8aaca93ad4ffbf0af3381a7d95240af3508b33085896a72ff026b18bf67a9369acba0311c3de33c71d62d3f9420de288c8e03bb781739a4871a4e890acf099acddd894598ae86946bb9e089c2bbcb7f8c3ed694da965c6449d23e452d31"}, {0x50, 0x115, 0x7, "e95a24e705ca6209cd4b432e5281d6cf1f953484a406932994796616ab3b301487395b6c443d13fd4588f42751155db29bb1b3e6e18b9de0331c54952f7115"}, {0xf0, 0x11, 0x8, "f4441c86fe0cf0529e85b95ffefda0b20f3de5404dce6f30edef50d4b47c8939eb38d44dd2ef7b66099b814e8416492d55e340c111ba58a1e80c3f88994ddf4c19c44fb831736049bb37e3300061c02f860509b1b1855ac976f13f389fb1e0d00e0a70380fa6090647e69a1bb6c3f66ea03bf10d0345c81d7e9313b78a2a1f665b46513187d2b8f3429be52e46628d5dd180cd08d94b7a580137a5deede4d55de26bdc4aab77f900bd5182586237f4dd8040643ddd3a037ffd61a8f3d699db230c1ea2af47cd2c79d65530b629e9fa3bcae581b51b12d3cc9dfbfe"}, {0x108, 0x117, 0x7, "3b4df26f8e740b8e532d937f0b0f64f82d0f69f57bbd98542706acccc2dfeced45d98aacbca67c2cb062dc0a27eece94e2ef278236d629e78597f132ce2c9c6674551a931cc8f4ced815330974e930e3fbfece398f60b26ed48796b4e50491cb461644b7a6ce5269bd141de4e1874c16698c551e22442c34e3068297f03588d8baada120da7e2359952b6899b0a3c23a603469424f2f108b9368db064db2ff9317c424f118e81442c2c0f9cee0953429bbb1411d9ba237f2b3aef5a5d4e5ace851a8b355167dfaf29fbd802875182c459c262d82642bd499116cfc91b0c5eea74f3a06ea1521109c0d33a7c33d3adf93833f02"}, {0xb0, 0x84, 0x7fffffff, "efbf99ed1a2605ce57382a308545f331a388a707d2f95030d70de06c6a14e5a5c15c76e2a73aa8eec077a564093daa48bd2d2e34ae93c271df357dad1f397970a46402845b06daddbd11191057487967cc7bfb8e76ff610507cb1d9d2831c6ff8d9696b0821f70ec4f4f08a4ea491575a600b8b96db8d41d33139909610067865907bc2bdad8814229d49516c07d30835747eb9a9170af329f"}, {0x18, 0x10b, 0xa, "c39eb327d4"}, {0xb8, 0x10f, 0x336, "8161210edabd1d99c7a889046c7800cca298b3e335fbae859732421a1ea4944f1cabd270cb8a99ae27d24ea26e131d80e2978f800d3882bec933706db999fdcdac3abc748fed146ec1b24b77819d8c4430b322af47090d8d37e46a189b25c004f3b32c960d9b618f9fa89c8864595451b367cceb60acce51c3dfc4db7343502e7f889b9ab182acecf116eaa7058adf4aec5ad9714793a1ee948278309f80595478"}, {0x20, 0x118, 0x80000001, "ef59355f9da83795be2c"}], 0x4c0}, 0x44004) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000840)={'team0\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000840)={'team0\x00', 0x200}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000008c0)) bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r2}, 0x8) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r2}, 0x8) recvmsg$can_bcm(r4, &(0x7f0000000c40)={&(0x7f0000000940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000009c0)=""/216, 0xd8}, {&(0x7f0000000ac0)=""/208, 0xd0}], 0x2, &(0x7f0000000c00)}, 0x40000101) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000c80)={@initdev, @rand_addr, @initdev}, &(0x7f0000000cc0)=0xc) write$nbd(r4, &(0x7f0000000d00)={0x67446698, 0x0, 0x3, 0x1, 0x2, "6218551befb976888d1d6db2a3baf79370acbe83b48dd53bcfca0bc98429eac5d3c97d1172bcf8131acac6896560cb8cbc435eefbc8b7f7555ec4f1b7530df3ed062b0cdf03ade541c664bc58628abb16540925e5e0c08f54a2140646e1ae1fd3aa1c9b28edc561aa27fa7c7d42e783cbaba05121112f430eab539f8388414374b440fdda9c073606acc8a453c8dbf7ae1d11d115d54e612f23bd87d185f6c4929523f0951882c780861061f3e52c65b915255bfb8397fdac2899e28281db71ed77fa1f423cbc3b8ec5fb9fc10ff57d41bb5f6f856b38ea43d7b76aba855578c80eedb77"}, 0xf4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e00)={'gretap0\x00', r5, 0x80, 0x20, 0x1, 0x0, {{0x29, 0x4, 0x3, 0x1, 0xa4, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x7d, 0x1, 0x8, [{@multicast1, 0xee7}, {@multicast2, 0x4}, {@private=0xa010101, 0x10000}, {@broadcast, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@private=0xa010100, 0x7}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x18, 0xe2, 0x0, 0x2, [0x3, 0x80000000, 0xff, 0x8, 0xfffffffc]}, @timestamp_prespec={0x44, 0x2c, 0x90, 0x3, 0x0, [{@multicast2, 0x7}, {@multicast2, 0xfffffff7}, {@local}, {@loopback, 0x7}, {@local, 0x5}]}, @rr={0x7, 0xf, 0xf9, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e00)={'gretap0\x00', r5, 0x80, 0x20, 0x1, 0x0, {{0x29, 0x4, 0x3, 0x1, 0xa4, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x7d, 0x1, 0x8, [{@multicast1, 0xee7}, {@multicast2, 0x4}, {@private=0xa010101, 0x10000}, {@broadcast, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@private=0xa010100, 0x7}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x18, 0xe2, 0x0, 0x2, [0x3, 0x80000000, 0xff, 0x8, 0xfffffffc]}, @timestamp_prespec={0x44, 0x2c, 0x90, 0x3, 0x0, [{@multicast2, 0x7}, {@multicast2, 0xfffffff7}, {@local}, {@loopback, 0x7}, {@local, 0x5}]}, @rr={0x7, 0xf, 0xf9, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}) ioctl$FIONCLEX(r1, 0x5450) (async) ioctl$FIONCLEX(r1, 0x5450) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000f40)={0x5c, 0x3, '\x00', [@pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x0, [0x5]}}, @jumbo={0xc2, 0x4, 0x7}]}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd4, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9181c339856f8a78ffbea1e6557665ac"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5afa3d7e787ecb270ab4482263b05159"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6036911d5959b2377f9ed8716ffdf7be"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "858c726786baa170c21abe84b2163b13f7caa31747128a4d381137f22ce08532"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x7f1a47a52f88dd4d}, 0x20048800) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd4, r8, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9181c339856f8a78ffbea1e6557665ac"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5afa3d7e787ecb270ab4482263b05159"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6036911d5959b2377f9ed8716ffdf7be"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "858c726786baa170c21abe84b2163b13f7caa31747128a4d381137f22ce08532"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x7f1a47a52f88dd4d}, 0x20048800) close(r3) ioctl$int_in(r6, 0x5452, &(0x7f0000001180)=0x9) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000011c0), 0x4) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000001200)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x8000, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x8000, 0x0) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000001280)) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000012c0)=@gcm_128={{0x303}, "1752b42b63188d15", "5ac9c5cff4b6635c166109c968ce2597", "a8255509", "7ca327b06cc22ffa"}, 0x28) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x0, r4, 0x4, 0x9, 0xa, 0xb}) 630.529373ms ago: executing program 3 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}], 0x5, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1400}, {0xffffffffffffffff, 0x400}, {r1, 0x403b}, {r2, 0x1410}, {0xffffffffffffffff, 0x5350}, {r3}, {0xffffffffffffffff, 0x8400}], 0x8, &(0x7f0000000100)={r4, r5+10000000}, &(0x7f0000000140)={[0x604]}, 0x8) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1400000031001fffffff00000000000003"], 0x114}], 0x1}, 0x0) 625.879335ms ago: executing program 0 (id=795): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x7800, 0x700, 0x8, 0x4, {{0x2a, 0x4, 0x2, 0x2, 0xa8, 0x67, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0xb, [{@broadcast, 0x10000}, {@private=0xa010102, 0x81}, {@empty, 0xfffffffa}]}, @timestamp={0x44, 0x10, 0x2b, 0x0, 0x7, [0x81, 0x2f2, 0x6]}, @ra={0x94, 0x4}, @end, @generic={0x82, 0x5, "1b2598"}, @cipso={0x86, 0x4b, 0x3, [{0x1, 0x5, "cb3319"}, {0x1, 0x10, "d89ff09b1168033f81d9cf2bd61d"}, {0x5, 0x12, "00000000000080a9cb9ee9d284359749"}, {0x6, 0xd, "87e7311feb037681638d6e"}, {0x2, 0x11, "b5bce1d283741afb39a13447f01fa6"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x28, 0x0, 0xc, [0x20c, 0x3]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000850000850000000500000095000000000094df51ede367e7f48aab5dfc3641557fb318b95a9bf08e04e5edf55d83cdbece2e89c7a496c47f513348578583363e110aa0538a4f16d382b44dca86f2eab4fda06b8fe78b9d0e7cd9d34116ad8180b02336223410ac3064740e0378add5ecb20faa37df22e9da1d06ec10f19371be5c84a58e2e85a583a62dc14a49ea3d938c390e0b"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mlxsw_sp_acl_tcam_vregion_migrate\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 470.042199ms ago: executing program 0 (id=796): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0, 0x4d4}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x2, @in6=@private2}]}]}, 0x16c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f0000000000)=[{r1, 0xa466}, {r1, 0x2040}, {r1, 0x4000}], 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x54}}, 0x0) 402.512131ms ago: executing program 0 (id=797): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x69ce918e3f55a83f, 0x6, 0x0, 0xc}, 0xc) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@empty]}}}], 0x28}, 0x0) 227.058524ms ago: executing program 0 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000240)="2dbff9d0a66211c46839240a7b6626d50ba54c1260332dd79a7b60ec3ad97269379ac2471990a4fc4aa5e9c91a23b198de4b482fd695f85fdf2c23270a2fb84e3cf1969c5e0fee3c54c33383f0c246b5c83a63", 0x53}, {&(0x7f00000002c0)="5d49b089e6a46cbcb3da06b36aba65d65ad60aa79920202a", 0x18}], 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'nicvf0\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r6, @ANYBLOB="48007a8014000200ffc7349adb007e3d8ec8f8b289e5ee920c0003"], 0x64}}, 0x0) 169.7073ms ago: executing program 1 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0xe8, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x51fa3eec}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xb5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x369b}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x9, 0x5, 0x1, 0x0, 0x0, [{{r0}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x32f4}}) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f0000110000000000000000000000030005000000000002000000e0000001000000000000000008001200000002000000000000000000060000000000000000000000e4ffffff00000000000000000000000000000000ff010000000000000000000000000051700006000000000002000000f97f000001000000000000000001001800000000"], 0x88}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) r11 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000012c0)=0x0) r13 = getgid() sendmsg$unix(r5, &(0x7f0000001340)={&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000005c0)="439a50a129e1c5bd5bf768ac167cfa559930db79d42719f17db621dce6fc68d0f970a52cd22ad0a66125", 0x2a}, {&(0x7f00000007c0)="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", 0xfd}], 0x2, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x40, 0x8840}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x8, 0x6, 0x620, 0x0, 0x240, 0x338, 0xd0, 0xd0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x52b, 0x29}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x892}, 0x4000004) 0s ago: executing program 0 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000001400048010000180080001006c6f670004000280400007"], 0xa8}}, 0x8814) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) kernel console output (not intermixed with test programs): blocking state [ 134.851547][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.859303][ T6938] bridge_slave_0: entered allmulticast mode [ 134.866681][ T6938] bridge_slave_0: entered promiscuous mode [ 134.881014][ T6778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.897286][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.904375][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.914083][ T6936] bridge_slave_0: entered allmulticast mode [ 134.922596][ T6936] bridge_slave_0: entered promiscuous mode [ 134.935232][ T6160] hsr_slave_0: left promiscuous mode [ 134.941392][ T6160] hsr_slave_1: left promiscuous mode [ 134.947547][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.954992][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.964132][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.972094][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.993758][ T6160] veth1_macvtap: left promiscuous mode [ 134.999433][ T6160] veth0_macvtap: left promiscuous mode [ 135.004949][ T6160] veth1_vlan: left promiscuous mode [ 135.010410][ T6160] veth0_vlan: left promiscuous mode [ 135.487946][ T6160] team0 (unregistering): Port device team_slave_1 removed [ 135.541204][ T6160] team0 (unregistering): Port device team_slave_0 removed [ 135.961457][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.974092][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.981952][ T6938] bridge_slave_1: entered allmulticast mode [ 135.989357][ T6938] bridge_slave_1: entered promiscuous mode [ 136.021112][ T6778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.030558][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.038025][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.045334][ T6936] bridge_slave_1: entered allmulticast mode [ 136.052811][ T6936] bridge_slave_1: entered promiscuous mode [ 136.129025][ T6938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.138324][ T6778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.148526][ T6778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.168909][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.185535][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.193447][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.203737][ T6939] bridge_slave_0: entered allmulticast mode [ 136.211653][ T6939] bridge_slave_0: entered promiscuous mode [ 136.220133][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.227532][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.234827][ T6939] bridge_slave_1: entered allmulticast mode [ 136.242105][ T6939] bridge_slave_1: entered promiscuous mode [ 136.262518][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.270091][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.277979][ T6934] bridge_slave_0: entered allmulticast mode [ 136.284807][ T6934] bridge_slave_0: entered promiscuous mode [ 136.295597][ T6938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.305772][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.312876][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.323811][ T5241] Bluetooth: hci0: command tx timeout [ 136.324046][ T6934] bridge_slave_1: entered allmulticast mode [ 136.336883][ T6934] bridge_slave_1: entered promiscuous mode [ 136.359345][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.447711][ T6936] team0: Port device team_slave_0 added [ 136.475894][ T5241] Bluetooth: hci5: command tx timeout [ 136.481364][ T5241] Bluetooth: hci4: command tx timeout [ 136.481405][ T5248] Bluetooth: hci1: command tx timeout [ 136.499998][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.522789][ T6938] team0: Port device team_slave_0 added [ 136.551934][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.562946][ T6936] team0: Port device team_slave_1 added [ 136.576441][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.587624][ T6938] team0: Port device team_slave_1 added [ 136.619581][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.730862][ T6934] team0: Port device team_slave_0 added [ 136.757759][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.764769][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.791532][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.847898][ T6939] team0: Port device team_slave_0 added [ 136.848050][ T6160] IPVS: stop unused estimator thread 0... [ 136.861171][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.873228][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.907196][ T6938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.923075][ T6934] team0: Port device team_slave_1 added [ 136.931449][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.939229][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.975962][ T6936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.026089][ T6939] team0: Port device team_slave_1 added [ 137.041902][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.056213][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.084111][ T6938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.228387][ T6936] hsr_slave_0: entered promiscuous mode [ 137.246493][ T6936] hsr_slave_1: entered promiscuous mode [ 137.254414][ T6936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.274310][ T6936] Cannot create hsr debugfs directory [ 137.345027][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.352158][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.379515][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.472014][ T6160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.522647][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.539750][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.566203][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.587794][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.594793][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.622934][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.694442][ T6160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.722532][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.730885][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.759136][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.810431][ T6160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.898625][ T6938] hsr_slave_0: entered promiscuous mode [ 137.905380][ T6938] hsr_slave_1: entered promiscuous mode [ 137.912077][ T6938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.919954][ T6938] Cannot create hsr debugfs directory [ 137.938173][ T6160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.973362][ T6939] hsr_slave_0: entered promiscuous mode [ 137.980132][ T6939] hsr_slave_1: entered promiscuous mode [ 137.986761][ T6939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.994391][ T6939] Cannot create hsr debugfs directory [ 138.014164][ T6934] hsr_slave_0: entered promiscuous mode [ 138.026835][ T6934] hsr_slave_1: entered promiscuous mode [ 138.033846][ T6934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.042457][ T6934] Cannot create hsr debugfs directory [ 138.396176][ T5248] Bluetooth: hci0: command tx timeout [ 138.412023][ T6160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.556660][ T5248] Bluetooth: hci4: command tx timeout [ 138.561058][ T5241] Bluetooth: hci5: command tx timeout [ 138.566712][ T5248] Bluetooth: hci1: command tx timeout [ 138.594629][ T6160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.800559][ T6160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.844672][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.879940][ T6160] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.087404][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.139904][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.147152][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.244127][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.251363][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.333862][ T6160] bridge_slave_1: left allmulticast mode [ 139.340552][ T6160] bridge_slave_1: left promiscuous mode [ 139.346816][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.357546][ T6160] bridge_slave_0: left allmulticast mode [ 139.363248][ T6160] bridge_slave_0: left promiscuous mode [ 139.380309][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.847593][ T6160] team0: Port device gtp0 removed [ 140.170367][ T6160] bond0 (unregistering): Released all slaves [ 140.272348][ T6160] bond1 (unregistering): Released all slaves [ 140.383980][ T6160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.404680][ T6160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.425192][ T6160] bond0 (unregistering): (slave team0): Releasing backup interface [ 140.437284][ T6160] bond0 (unregistering): Released all slaves [ 140.449576][ T6160] bond1 (unregistering): Released all slaves [ 140.476137][ T5248] Bluetooth: hci0: command tx timeout [ 140.478821][ T6936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.500472][ T6936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.631834][ T6936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.640403][ T5248] Bluetooth: hci5: command tx timeout [ 140.640436][ T5235] Bluetooth: hci4: command tx timeout [ 140.651533][ T5241] Bluetooth: hci1: command tx timeout [ 140.661919][ T6936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.038752][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.095070][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.219737][ T6936] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.314162][ T6934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.385106][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.392277][ T6705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.462513][ T6934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.499724][ T6160] hsr_slave_0: left promiscuous mode [ 141.505691][ T6160] hsr_slave_1: left promiscuous mode [ 141.512512][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.524926][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.535139][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.543856][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.572631][ T6160] veth1_macvtap: left promiscuous mode [ 141.578289][ T6160] veth0_macvtap: left promiscuous mode [ 141.583887][ T6160] veth1_vlan: left promiscuous mode [ 141.590266][ T6160] veth0_vlan: left promiscuous mode [ 141.600991][ T6160] veth0_macvtap: left promiscuous mode [ 141.607592][ T6160] veth1_vlan: left promiscuous mode [ 141.612913][ T6160] veth0_vlan: left promiscuous mode [ 142.884655][ T6160] team0 (unregistering): Port device team_slave_1 removed [ 142.927866][ T6160] team0 (unregistering): Port device team_slave_0 removed [ 143.302098][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.309283][ T6705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.400309][ T6934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.446701][ T6778] veth0_vlan: entered promiscuous mode [ 143.547561][ T6934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.589828][ T6936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.601917][ T6936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.653112][ T6778] veth1_vlan: entered promiscuous mode [ 143.748771][ T6778] veth0_macvtap: entered promiscuous mode [ 143.778362][ T6778] veth1_macvtap: entered promiscuous mode [ 143.866871][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.887617][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.901242][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.969570][ T6778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.995006][ T6778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.011573][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.055484][ T6934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.154967][ T6778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.174970][ T6778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.189421][ T6778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.207980][ T6778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.234460][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.253805][ T6934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.269920][ T6934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.325038][ T6934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.732091][ T6936] veth0_vlan: entered promiscuous mode [ 144.741945][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.774525][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.778748][ T6936] veth1_vlan: entered promiscuous mode [ 144.940627][ T6702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.957487][ T6936] veth0_macvtap: entered promiscuous mode [ 144.967365][ T6702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.973505][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.008655][ T6936] veth1_macvtap: entered promiscuous mode [ 145.060255][ T6934] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.088693][ T6939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.128227][ T6939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.148623][ T6939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.169620][ T6939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.193574][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.204567][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.217356][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.228677][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.243562][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.296570][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.303720][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.328227][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.335352][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.350755][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.364147][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.374468][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.385055][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.396863][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.420203][ T6938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 145.430380][ T6938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.456723][ T6936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.465674][ T6936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.474750][ T6936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.486515][ T6936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.519173][ T6938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.540211][ T6938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.622286][ T6705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.704088][ T6934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.724975][ T6934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.789864][ T6705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.939642][ T6705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.980619][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.990389][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.999503][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.013936][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.034127][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.043549][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.118551][ T6705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.188375][ T6147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.214422][ T6147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.309601][ T6934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.365031][ T6938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.373532][ T6147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.386851][ T6147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.569820][ T6939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.641679][ T6938] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.684560][ T6705] bridge_slave_1: left allmulticast mode [ 146.691574][ T6705] bridge_slave_1: left promiscuous mode [ 146.718464][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.808204][ T6705] bridge_slave_0: left allmulticast mode [ 146.820782][ T6705] bridge_slave_0: left promiscuous mode [ 146.826664][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.192605][ T6705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.204973][ T6705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.218304][ T6705] bond0 (unregistering): Released all slaves [ 147.247081][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.254238][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.278333][ T6934] veth0_vlan: entered promiscuous mode [ 147.292930][ T6939] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.331507][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.338730][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.372820][ T6934] veth1_vlan: entered promiscuous mode [ 147.452931][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.460145][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.539778][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.546983][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.616174][ T6705] hsr_slave_0: left promiscuous mode [ 147.623372][ T6705] hsr_slave_1: left promiscuous mode [ 147.630887][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.638933][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.648546][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.656286][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.679858][ T6705] veth1_macvtap: left promiscuous mode [ 147.695890][ T6705] veth0_macvtap: left promiscuous mode [ 147.701631][ T6705] veth1_vlan: left promiscuous mode [ 147.708511][ T6705] veth0_vlan: left promiscuous mode [ 148.076168][ T5241] Bluetooth: hci2: command tx timeout [ 148.274895][ T6705] team0 (unregistering): Port device team_slave_1 removed [ 148.335166][ T6705] team0 (unregistering): Port device team_slave_0 removed [ 148.803223][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 148.895667][ T6934] veth0_macvtap: entered promiscuous mode [ 148.988328][ T6934] veth1_macvtap: entered promiscuous mode [ 149.165096][ T7146] dccp_invalid_packet: P.Data Offset(4) too small [ 149.219038][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.246112][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.253497][ T7099] bridge_slave_0: entered allmulticast mode [ 149.272630][ T7099] bridge_slave_0: entered promiscuous mode [ 149.309007][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.346321][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.356600][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.367295][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.384874][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.393911][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.403116][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.410710][ T7099] bridge_slave_1: entered allmulticast mode [ 149.418412][ T7099] bridge_slave_1: entered promiscuous mode [ 149.484816][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.496337][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.511996][ T6934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.522712][ T6934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.534147][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.549378][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.582571][ T6938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.593684][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.627018][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.635019][ T6934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.653353][ T6934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.663709][ T6934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.680885][ T6934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.782047][ T7099] team0: Port device team_slave_0 added [ 149.793620][ T7099] team0: Port device team_slave_1 added [ 149.914062][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.922541][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.952102][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.982080][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.000776][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.028001][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.047540][ T6938] veth0_vlan: entered promiscuous mode [ 150.152520][ T6938] veth1_vlan: entered promiscuous mode [ 150.167858][ T6702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.175945][ T5241] Bluetooth: hci2: command tx timeout [ 150.176114][ T6702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.213904][ T7099] hsr_slave_0: entered promiscuous mode [ 150.222120][ T7099] hsr_slave_1: entered promiscuous mode [ 150.228572][ T7099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.237795][ T7099] Cannot create hsr debugfs directory [ 150.317411][ T6160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.349939][ T6160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.376154][ T6938] veth0_macvtap: entered promiscuous mode [ 150.403268][ T7164] syzkaller0: refused to change device tx_queue_len [ 150.428441][ T6938] veth1_macvtap: entered promiscuous mode [ 150.460736][ T6939] veth0_vlan: entered promiscuous mode [ 150.518552][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.531726][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.541912][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.552776][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.564313][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.577985][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.589484][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.622746][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.636593][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.647973][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.660031][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.671479][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.682010][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.693494][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.710310][ T6938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.720482][ T6938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.731242][ T6938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.742623][ T6938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.769432][ T6939] veth1_vlan: entered promiscuous mode [ 150.914073][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.934502][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.975308][ T6939] veth0_macvtap: entered promiscuous mode [ 151.005204][ T6160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.023958][ T6160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.045299][ T6939] veth1_macvtap: entered promiscuous mode [ 151.113676][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.155817][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.166154][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.176761][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.187743][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.199232][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.232633][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.245126][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.257570][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.273896][ T7169] netlink: 'syz.3.398': attribute type 5 has an invalid length. [ 151.311805][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.346243][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.375977][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.391970][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.402949][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.415423][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.425600][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.436636][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.468129][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.493128][ T7175] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 151.513999][ T7175] bond0: (slave bond_slave_0): Releasing backup interface [ 151.574900][ T6939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.592495][ T6939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.603407][ T6939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.612422][ T6939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.633512][ T7099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.662958][ T7099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.683982][ T7099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.722332][ T7099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.922941][ T6702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.941357][ T6702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.036359][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.059834][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.104228][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.154005][ T7207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.416'. [ 152.178879][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.217333][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.224510][ T6702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.238824][ T5241] Bluetooth: hci2: command tx timeout [ 152.248518][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.255752][ T6702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.306364][ T7099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.317207][ T7099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.581111][ T7228] can: request_module (can-proto-3) failed. [ 152.643911][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.769139][ T7099] veth0_vlan: entered promiscuous mode [ 152.813705][ T7099] veth1_vlan: entered promiscuous mode [ 152.911482][ T7099] veth0_macvtap: entered promiscuous mode [ 152.945661][ T7099] veth1_macvtap: entered promiscuous mode [ 152.971906][ T7245] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 153.002991][ T7245] netlink: 'syz.3.424': attribute type 4 has an invalid length. [ 153.036027][ T7245] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.424'. [ 153.068090][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.078681][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.089276][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.100316][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.110188][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.121067][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.131128][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.141585][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.151471][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.162081][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.173452][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.183405][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.194740][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.206120][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.216929][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.227185][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.238010][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.248146][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.258957][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.269113][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.298889][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.300179][ T7263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.315451][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.346201][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 153.587907][ T7252] team0 (unregistering): Port device team_slave_0 removed [ 153.604356][ T7252] team0 (unregistering): Port device team_slave_1 removed [ 153.649170][ T7250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.426'. [ 153.668054][ T7255] netlink: 44 bytes leftover after parsing attributes in process `syz.4.426'. [ 153.690065][ T7259] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 59827 - 0 [ 153.715940][ T7259] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 59827 - 0 [ 153.724789][ T7259] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 59827 - 0 [ 153.745827][ T7259] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 59827 - 0 [ 153.768988][ T7259] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 44611 - 0 [ 153.781246][ T7259] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 44611 - 0 [ 153.798615][ T7259] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 44611 - 0 [ 153.809124][ T7259] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 44611 - 0 [ 153.819494][ T7259] geneve2: entered promiscuous mode [ 153.829266][ T7259] geneve2: entered allmulticast mode [ 153.891372][ T7099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.904019][ T7099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.934673][ T7099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.950262][ T7099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.059100][ T7276] bridge1: entered promiscuous mode [ 154.077184][ T7276] bridge1: entered allmulticast mode [ 154.086296][ T7276] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 154.165255][ T7276] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 154.213226][ T7280] bridge0: port 3(ip6gretap0) entered blocking state [ 154.228158][ T7280] bridge0: port 3(ip6gretap0) entered disabled state [ 154.247416][ T7280] ip6gretap0: entered allmulticast mode [ 154.280777][ T7280] ip6gretap0: entered promiscuous mode [ 154.295686][ T7289] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 154.296893][ T7280] bridge0: port 3(ip6gretap0) entered blocking state [ 154.312839][ T7280] bridge0: port 3(ip6gretap0) entered forwarding state [ 154.325909][ T5241] Bluetooth: hci2: command tx timeout [ 154.346324][ T7290] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 154.405019][ T6160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.426160][ T6160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.633822][ T6147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.653964][ T6147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.853613][ T7304] dvmrp8: entered allmulticast mode [ 154.877905][ T7303] dvmrp8: left allmulticast mode [ 155.434180][ T7332] netlink: 'syz.4.448': attribute type 3 has an invalid length. [ 155.629630][ T6177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.919346][ T6177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.232586][ T6177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.462395][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.475015][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.483809][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.497639][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.505660][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.515886][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.664821][ T6177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.909239][ T6177] bridge_slave_1: left allmulticast mode [ 156.919731][ T6177] bridge_slave_1: left promiscuous mode [ 156.925579][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.966215][ T6177] bridge_slave_0: left allmulticast mode [ 156.981092][ T6177] bridge_slave_0: left promiscuous mode [ 156.996531][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.786374][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.805025][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.825581][ T6177] bond0 (unregistering): Released all slaves [ 157.872907][ T7407] netlink: 'syz.0.462': attribute type 9 has an invalid length. [ 158.011605][ T7427] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 158.194097][ T7360] chnl_net:caif_netlink_parms(): no params data found [ 158.291670][ T7433] syzkaller1: entered promiscuous mode [ 158.301024][ T7433] syzkaller1: entered allmulticast mode [ 158.302114][ T7437] netlink: 'syz.3.472': attribute type 11 has an invalid length. [ 158.488240][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 158.566627][ T5241] Bluetooth: hci2: command tx timeout [ 158.700035][ T6177] hsr_slave_0: left promiscuous mode [ 158.765814][ T6177] hsr_slave_1: left promiscuous mode [ 158.796069][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.803571][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.832058][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.855872][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.893872][ T6177] veth1_macvtap: left promiscuous mode [ 158.903002][ T6177] veth0_macvtap: left promiscuous mode [ 158.909135][ T6177] veth1_vlan: left promiscuous mode [ 158.914523][ T6177] veth0_vlan: left promiscuous mode [ 158.955490][ T7451] raw_sendmsg: syz.0.477 forgot to set AF_INET. Fix it! [ 159.418544][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 159.471103][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 159.915183][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.922702][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.930575][ T7360] bridge_slave_0: entered allmulticast mode [ 159.937936][ T7360] bridge_slave_0: entered promiscuous mode [ 159.974951][ T7448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.477'. [ 159.987468][ T7446] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 160.010498][ T7446] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 160.020156][ T7446] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 160.041723][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.049620][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.057058][ T7360] bridge_slave_1: entered allmulticast mode [ 160.065417][ T7360] bridge_slave_1: entered promiscuous mode [ 160.108361][ T7360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.120564][ T7360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.241205][ T7360] team0: Port device team_slave_0 added [ 160.286450][ T7360] team0: Port device team_slave_1 added [ 160.337326][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.352748][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.386930][ T7360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.418632][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.426254][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.473163][ T7360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.581686][ T7360] hsr_slave_0: entered promiscuous mode [ 160.604423][ T7360] hsr_slave_1: entered promiscuous mode [ 160.631645][ T7360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.641613][ T5241] Bluetooth: hci2: command tx timeout [ 160.664609][ T7360] Cannot create hsr debugfs directory [ 160.880881][ T6177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.930974][ T7470] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.944960][ T7471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.487'. [ 160.971036][ T7471] netlink: 234 bytes leftover after parsing attributes in process `syz.3.487'. [ 160.981659][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.992040][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.000447][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.019182][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.030076][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.046202][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.160522][ T6177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.234405][ T7482] netlink: 88 bytes leftover after parsing attributes in process `syz.0.490'. [ 161.318214][ T7481] netlink: 'syz.3.489': attribute type 9 has an invalid length. [ 161.334680][ T7481] netlink: 'syz.3.489': attribute type 8 has an invalid length. [ 161.342965][ T7481] netlink: 104 bytes leftover after parsing attributes in process `syz.3.489'. [ 161.358500][ T7485] syz.0.491 uses old SIOCAX25GETINFO [ 161.373944][ T6177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.478237][ T6177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.756166][ T7490] vlan2: entered promiscuous mode [ 161.787130][ T7490] gretap0: entered promiscuous mode [ 161.992350][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 162.043312][ T7496] gtp0: entered promiscuous mode [ 162.130733][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 162.162909][ T7496] gtp0: entered allmulticast mode [ 162.485461][ T6177] bridge_slave_1: left allmulticast mode [ 162.508377][ T6177] bridge_slave_1: left promiscuous mode [ 162.514809][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.547555][ T6177] bridge_slave_0: left allmulticast mode [ 162.563510][ T6177] bridge_slave_0: left promiscuous mode [ 162.576160][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.724875][ T5235] Bluetooth: hci2: command tx timeout [ 163.123491][ T5235] Bluetooth: hci1: command tx timeout [ 163.297132][ T6177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.315309][ T6177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.340020][ T6177] bond0 (unregistering): Released all slaves [ 163.378602][ T7517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.499'. [ 163.422142][ T7517] netlink: 234 bytes leftover after parsing attributes in process `syz.3.499'. [ 163.510633][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 163.645013][ T7527] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.503'. [ 163.664827][ T7527] netlink: 'syz.1.503': attribute type 10 has an invalid length. [ 163.721337][ T7527] team0: Port device netdevsim0 added [ 163.910329][ T7360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.938590][ T7546] dccp_close: ABORT with 32 bytes unread [ 164.046713][ T7360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.056618][ T7360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.065655][ T7551] netlink: 'syz.3.508': attribute type 21 has an invalid length. [ 164.074763][ T7551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.508'. [ 164.125624][ T7360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.171341][ T6177] hsr_slave_0: left promiscuous mode [ 164.186830][ T6177] hsr_slave_1: left promiscuous mode [ 164.193167][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.200936][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.216314][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.226133][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.248329][ T6177] veth1_macvtap: left promiscuous mode [ 164.253936][ T6177] veth0_macvtap: left promiscuous mode [ 164.259851][ T6177] veth1_vlan: left promiscuous mode [ 164.265193][ T6177] veth0_vlan: left promiscuous mode [ 164.762019][ T6177] team0 (unregistering): Port device team_slave_1 removed [ 164.806122][ T5235] Bluetooth: hci2: command tx timeout [ 164.815895][ T6177] team0 (unregistering): Port device team_slave_0 removed [ 165.196240][ T5235] Bluetooth: hci1: command tx timeout [ 165.233158][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.240942][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.248641][ T7472] bridge_slave_0: entered allmulticast mode [ 165.256745][ T7472] bridge_slave_0: entered promiscuous mode [ 165.301515][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.309381][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.316824][ T7472] bridge_slave_1: entered allmulticast mode [ 165.324103][ T7472] bridge_slave_1: entered promiscuous mode [ 165.452581][ T7565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.512'. [ 165.476978][ T7565] netlink: 234 bytes leftover after parsing attributes in process `syz.1.512'. [ 165.535597][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.563792][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.611070][ T7360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.685432][ T7472] team0: Port device team_slave_0 added [ 165.724753][ T7569] netlink: 260 bytes leftover after parsing attributes in process `syz.0.513'. [ 165.728768][ T7472] team0: Port device team_slave_1 added [ 165.743043][ T7360] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.753319][ T7574] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 165.811687][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.818921][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.830060][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.837260][ T6160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.861325][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.870118][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.914321][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.948519][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.961427][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.989142][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.085241][ T7472] hsr_slave_0: entered promiscuous mode [ 166.114673][ T7472] hsr_slave_1: entered promiscuous mode [ 166.127414][ T7472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.140690][ T7472] Cannot create hsr debugfs directory [ 166.449915][ T7360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.721157][ T7360] veth0_vlan: entered promiscuous mode [ 166.739452][ T7592] netlink: 256 bytes leftover after parsing attributes in process `syz.0.518'. [ 166.770958][ T7360] veth1_vlan: entered promiscuous mode [ 166.793906][ T7360] veth0_macvtap: entered promiscuous mode [ 166.803934][ T7360] veth1_macvtap: entered promiscuous mode [ 166.820619][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.831253][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.841173][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.851794][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.861762][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.872352][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.882552][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.893673][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.905784][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.937271][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.954058][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.971460][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.982082][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.992026][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.002558][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.013172][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.024191][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.035600][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.047359][ T7360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.056192][ T7360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.064919][ T7360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.073985][ T7360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.214613][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.237911][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.276277][ T5235] Bluetooth: hci1: command tx timeout [ 167.322107][ T6147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.330127][ T6147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.356620][ T7472] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.389070][ T7472] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.402047][ T7613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.524'. [ 167.416451][ T7472] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.430879][ T7472] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.631450][ T7619] netlink: 'syz.0.528': attribute type 13 has an invalid length. [ 167.645073][ T7619] gretap0: refused to change device tx_queue_len [ 167.652703][ T7619] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 167.767402][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.817332][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.840640][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.847860][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.870020][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.877246][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.315445][ T7646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.537'. [ 168.369024][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.564633][ T7662] netlink: 'syz.1.540': attribute type 3 has an invalid length. [ 168.608084][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 168.617397][ T7662] netlink: 112 bytes leftover after parsing attributes in process `syz.1.540'. [ 168.870231][ T7472] veth0_vlan: entered promiscuous mode [ 168.901033][ T7472] veth1_vlan: entered promiscuous mode [ 169.018534][ T7472] veth0_macvtap: entered promiscuous mode [ 169.025243][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 169.073933][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.232730][ T7472] veth1_macvtap: entered promiscuous mode [ 169.271184][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.297713][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.308810][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.318904][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.330026][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.339990][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.350787][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.360789][ T5235] Bluetooth: hci1: command tx timeout [ 169.369240][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.379817][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.389930][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.400488][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.411971][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.430280][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.441823][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.454191][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.465399][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.476798][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.487685][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.497704][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.508637][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.519648][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.530535][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.542661][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.555162][ T7472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.565333][ T7472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.575430][ T7472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.584317][ T7472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.655980][ T6162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.663834][ T6162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.702165][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.710462][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.846864][ T7702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.548'. [ 169.966166][ T7705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.550'. [ 169.986266][ T7705] bridge_slave_1: left allmulticast mode [ 169.991981][ T7705] bridge_slave_1: left promiscuous mode [ 170.006171][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.063240][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.072516][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.082109][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.091345][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.100009][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.109161][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.118680][ T7708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.152624][ T7712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.551'. [ 170.286010][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.374007][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.462664][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.559778][ T35] bridge_slave_1: left allmulticast mode [ 170.565490][ T35] bridge_slave_1: left promiscuous mode [ 170.572336][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.581695][ T35] bridge_slave_0: left allmulticast mode [ 170.587970][ T35] bridge_slave_0: left promiscuous mode [ 170.593737][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.132198][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.141663][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.151231][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.158529][ T7725] trusted_key: syz.3.555 sent an empty control message without MSG_MORE. [ 171.174179][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.182637][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.193150][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.370071][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.388726][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.402477][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.410711][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.420167][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.429724][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.440275][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.450212][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.471958][ T35] bond0 (unregistering): Released all slaves [ 171.488218][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'. [ 171.838841][ T7746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.561'. [ 172.015252][ T7757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.564'. [ 172.027526][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'. [ 172.068066][ T7760] netlink: 'syz.1.564': attribute type 5 has an invalid length. [ 172.125532][ T7728] chnl_net:caif_netlink_parms(): no params data found [ 172.165517][ T35] hsr_slave_0: left promiscuous mode [ 172.172165][ T35] hsr_slave_1: left promiscuous mode [ 172.185523][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.204955][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.228414][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.241108][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.285322][ T35] veth1_macvtap: left promiscuous mode [ 172.299147][ T35] veth0_macvtap: left promiscuous mode [ 172.311611][ T35] veth1_vlan: left promiscuous mode [ 172.321668][ T35] veth0_vlan: left promiscuous mode [ 172.996454][ T35] team0 (unregistering): Port device team_slave_1 removed [ 173.047323][ T35] team0 (unregistering): Port device team_slave_0 removed [ 173.279166][ T5241] Bluetooth: hci1: command tx timeout [ 173.516225][ T5241] Bluetooth: hci2: command tx timeout [ 173.909523][ T7733] chnl_net:caif_netlink_parms(): no params data found [ 173.922952][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.936060][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.944759][ T7728] bridge_slave_0: entered allmulticast mode [ 173.954298][ T7728] bridge_slave_0: entered promiscuous mode [ 173.968839][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 173.979365][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.988829][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.996705][ T7728] bridge_slave_1: entered allmulticast mode [ 174.011146][ T7728] bridge_slave_1: entered promiscuous mode [ 174.087206][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.139629][ T7792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.571'. [ 174.170935][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.283731][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.291965][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.299391][ T7733] bridge_slave_0: entered allmulticast mode [ 174.306789][ T7733] bridge_slave_0: entered promiscuous mode [ 174.331559][ T7728] team0: Port device team_slave_0 added [ 174.365291][ T7803] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 174.376299][ T7803] netlink: 55 bytes leftover after parsing attributes in process `syz.0.573'. [ 174.402980][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 174.443670][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.461324][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.479875][ T7733] bridge_slave_1: entered allmulticast mode [ 174.498559][ T7733] bridge_slave_1: entered promiscuous mode [ 174.522714][ T7728] team0: Port device team_slave_1 added [ 174.615967][ T7816] netlink: 'syz.1.574': attribute type 5 has an invalid length. [ 174.690714][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.760671][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.803611][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.862282][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 174.892200][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.908960][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.940242][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.003466][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.081835][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.091612][ T7838] netlink: 72 bytes leftover after parsing attributes in process `syz.0.580'. [ 175.108632][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.136277][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.167980][ T7733] team0: Port device team_slave_0 added [ 175.231751][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.281055][ T7733] team0: Port device team_slave_1 added [ 175.305256][ T7845] team_slave_0: entered promiscuous mode [ 175.311440][ T7845] team_slave_1: entered promiscuous mode [ 175.318850][ T7845] macsec1: entered promiscuous mode [ 175.324097][ T7845] team0: entered promiscuous mode [ 175.330639][ T7845] macsec1: entered allmulticast mode [ 175.336173][ T7845] team0: entered allmulticast mode [ 175.341315][ T7845] team_slave_0: entered allmulticast mode [ 175.347206][ T7845] team_slave_1: entered allmulticast mode [ 175.354929][ T7845] team0: left allmulticast mode [ 175.361127][ T5241] Bluetooth: hci1: command tx timeout [ 175.366898][ T7845] team_slave_0: left allmulticast mode [ 175.373537][ T7845] team_slave_1: left allmulticast mode [ 175.379248][ T7845] team0: left promiscuous mode [ 175.384627][ T7845] team_slave_0: left promiscuous mode [ 175.390160][ T7845] team_slave_1: left promiscuous mode [ 175.438159][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.460975][ T7847] netlink: 'syz.0.583': attribute type 39 has an invalid length. [ 175.470839][ T7847] veth0_macvtap: left promiscuous mode [ 175.504055][ T7728] hsr_slave_0: entered promiscuous mode [ 175.511722][ T7728] hsr_slave_1: entered promiscuous mode [ 175.521390][ T7728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.529206][ T7728] Cannot create hsr debugfs directory [ 175.589278][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.597788][ T5241] Bluetooth: hci2: command tx timeout [ 175.603419][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.631492][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.706499][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.724432][ T7857] x_tables: duplicate entry at hook 1 [ 175.730849][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.759333][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.793824][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 175.803038][ T7859] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 175.820328][ T7856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.835473][ T7855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.947478][ T7733] hsr_slave_0: entered promiscuous mode [ 175.954179][ T7733] hsr_slave_1: entered promiscuous mode [ 175.960766][ T7733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.968738][ T7733] Cannot create hsr debugfs directory [ 176.111804][ T35] bridge_slave_1: left allmulticast mode [ 176.122533][ T35] bridge_slave_1: left promiscuous mode [ 176.130185][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.140419][ T35] bridge_slave_0: left allmulticast mode [ 176.146654][ T35] bridge_slave_0: left promiscuous mode [ 176.152588][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.739081][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.800456][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.829122][ T35] bond0 (unregistering): Released all slaves [ 177.445840][ T5241] Bluetooth: hci1: command tx timeout [ 177.678010][ T5241] Bluetooth: hci2: command tx timeout [ 178.066328][ T35] hsr_slave_0: left promiscuous mode [ 178.125903][ T35] hsr_slave_1: left promiscuous mode [ 178.147897][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.155375][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.226944][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.234416][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.313769][ T35] veth1_macvtap: left promiscuous mode [ 178.345971][ T35] veth0_macvtap: left promiscuous mode [ 178.351653][ T35] veth1_vlan: left promiscuous mode [ 178.379456][ T35] veth0_vlan: left promiscuous mode [ 179.535788][ T5241] Bluetooth: hci1: command tx timeout [ 179.756980][ T5241] Bluetooth: hci2: command tx timeout [ 180.222696][ T35] team0 (unregistering): Port device team_slave_1 removed [ 180.266886][ T35] team0 (unregistering): Port device team_slave_0 removed [ 180.902098][ T7728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.923667][ T7728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.969894][ T7728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.072468][ T7728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.298809][ T7728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.320856][ T7728] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.335065][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.342281][ T6162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.381166][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.388376][ T6162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.424533][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'. [ 181.684478][ T7920] macvlan3: entered allmulticast mode [ 181.692198][ T7920] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 181.700335][ T7920] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 181.719630][ T7920] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 181.763617][ T7921] bond0: entered promiscuous mode [ 181.769092][ T7921] bond_slave_0: entered promiscuous mode [ 181.775129][ T7921] bond_slave_1: entered promiscuous mode [ 181.818231][ T7921] macvlan3: entered promiscuous mode [ 181.854334][ T7922] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 181.878100][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 181.893148][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 181.975933][ T7728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.063456][ T7733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.126246][ T7733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.216649][ T7928] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 182.264780][ T7733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.458662][ T7733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.957792][ T7728] veth0_vlan: entered promiscuous mode [ 182.993820][ T7728] veth1_vlan: entered promiscuous mode [ 183.120668][ T7728] veth0_macvtap: entered promiscuous mode [ 183.144887][ T7728] veth1_macvtap: entered promiscuous mode [ 183.203955][ T7733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.211009][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 183.222325][ T7733] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.232705][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.250526][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.271520][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.294730][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.307761][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.318639][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.328814][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.339456][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.351233][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.365038][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.372249][ T6162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.408860][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.432237][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.445909][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.470574][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.485281][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.497444][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.519658][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.541783][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.556677][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.606235][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.613409][ T6180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.658634][ T7728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.686006][ T7728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.694778][ T7728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.716004][ T7728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.974828][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.985791][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.057902][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.070813][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.202186][ T7972] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 184.267791][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.568878][ T7987] netdevsim netdevsim1 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0 [ 184.578191][ T7987] netdevsim netdevsim1 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0 [ 184.587239][ T7987] netdevsim netdevsim1 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0 [ 184.613316][ T7987] netdevsim netdevsim1 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0 [ 184.635481][ T7987] xt_l2tp: v2 sid > 0xffff: 262144 [ 184.710126][ T7733] veth0_vlan: entered promiscuous mode [ 184.734557][ T7733] veth1_vlan: entered promiscuous mode [ 184.759531][ T7733] veth0_macvtap: entered promiscuous mode [ 184.776706][ T7733] veth1_macvtap: entered promiscuous mode [ 184.820073][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.863357][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.904756][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.922719][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.923335][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 184.942887][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.966657][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.985761][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.017070][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.037231][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.068024][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.090465][ T8002] netlink: 92 bytes leftover after parsing attributes in process `syz.0.621'. [ 185.114851][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.190567][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.216441][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.241589][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.252009][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.263061][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.272973][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.283780][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.293686][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.304676][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.314991][ T7733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.326173][ T7733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.338752][ T7733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.352781][ T7733] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.361763][ T7733] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.371474][ T7733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.380332][ T7733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.427729][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.510690][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.535540][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.543466][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.571015][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.580152][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.930678][ T8008] xt_hashlimit: size too large, truncated to 1048576 [ 185.945613][ T8009] netlink: 52 bytes leftover after parsing attributes in process `syz.3.625'. [ 185.966531][ T8008] xt_hashlimit: max too large, truncated to 1048576 [ 185.970018][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 186.181919][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.265164][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.281420][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.290942][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.306248][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.314500][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.322850][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.346077][ T35] bridge_slave_1: left allmulticast mode [ 186.351801][ T35] bridge_slave_1: left promiscuous mode [ 186.357733][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.377807][ T35] bridge_slave_0: left allmulticast mode [ 186.383568][ T35] bridge_slave_0: left promiscuous mode [ 186.389395][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.873222][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.885618][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.899686][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.908164][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.924639][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 186.936119][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.123021][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.153571][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.175589][ T35] bond0 (unregistering): Released all slaves [ 187.675290][ T8059] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 187.733891][ T35] hsr_slave_0: left promiscuous mode [ 187.764103][ T35] hsr_slave_1: left promiscuous mode [ 187.803358][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.812532][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.820840][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.828553][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.860394][ T35] veth1_macvtap: left promiscuous mode [ 187.866334][ T35] veth0_macvtap: left promiscuous mode [ 187.872019][ T35] veth1_vlan: left promiscuous mode [ 187.878203][ T35] veth0_vlan: left promiscuous mode [ 188.373663][ T35] team0 (unregistering): Port device team_slave_1 removed [ 188.397979][ T5235] Bluetooth: hci1: command tx timeout [ 188.434756][ T35] team0 (unregistering): Port device team_slave_0 removed [ 188.920467][ T8068] bridge2: entered allmulticast mode [ 188.928752][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 188.956440][ T5235] Bluetooth: hci2: command tx timeout [ 189.225071][ T8083] netlink: 92 bytes leftover after parsing attributes in process `syz.1.642'. [ 189.249262][ T8083] vlan2: entered allmulticast mode [ 189.521287][ T8017] chnl_net:caif_netlink_parms(): no params data found [ 189.550407][ T8100] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.601139][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 189.657179][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 190.302614][ T8124] netlink: 56 bytes leftover after parsing attributes in process `syz.3.650'. [ 190.407004][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.650'. [ 190.481012][ T5235] Bluetooth: hci1: command tx timeout [ 190.623285][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.630704][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.662181][ T8017] bridge_slave_0: entered allmulticast mode [ 190.687507][ T8017] bridge_slave_0: entered promiscuous mode [ 190.759174][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.771675][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.780950][ T8017] bridge_slave_1: entered allmulticast mode [ 190.788658][ T8017] bridge_slave_1: entered promiscuous mode [ 190.796389][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.803519][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.811420][ T8021] bridge_slave_0: entered allmulticast mode [ 190.818644][ T8021] bridge_slave_0: entered promiscuous mode [ 190.888270][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.912432][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.920500][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.928338][ T8021] bridge_slave_1: entered allmulticast mode [ 190.935230][ T8021] bridge_slave_1: entered promiscuous mode [ 190.999594][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.028239][ T8017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.046135][ T5235] Bluetooth: hci2: command tx timeout [ 191.060620][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.088075][ T8017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.113598][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.135189][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.280466][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.337545][ T8021] team0: Port device team_slave_0 added [ 191.389203][ T8017] team0: Port device team_slave_0 added [ 191.416381][ T8021] team0: Port device team_slave_1 added [ 191.423622][ T8017] team0: Port device team_slave_1 added [ 191.473468][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.487820][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.531751][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.620113][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.634669][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.701692][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.759152][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.769945][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.798754][ T8017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.818844][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.826037][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.872234][ T8017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.011617][ T35] bridge_slave_1: left allmulticast mode [ 192.018037][ T35] bridge_slave_1: left promiscuous mode [ 192.023801][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.043773][ T35] bridge_slave_0: left allmulticast mode [ 192.055209][ T35] bridge_slave_0: left promiscuous mode [ 192.063658][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.502867][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.515063][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.527201][ T35] bond0 (unregistering): Released all slaves [ 192.542931][ T8021] hsr_slave_0: entered promiscuous mode [ 192.558676][ T5235] Bluetooth: hci1: command tx timeout [ 192.565664][ T8021] hsr_slave_1: entered promiscuous mode [ 192.592842][ T8021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.601438][ T8021] Cannot create hsr debugfs directory [ 192.679919][ T8017] hsr_slave_0: entered promiscuous mode [ 192.694115][ T8017] hsr_slave_1: entered promiscuous mode [ 192.703594][ T8017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.711615][ T8017] Cannot create hsr debugfs directory [ 192.815362][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 192.865562][ T8169] netlink: 'syz.1.661': attribute type 5 has an invalid length. [ 192.952838][ T8180] netlink: 'syz.0.664': attribute type 3 has an invalid length. [ 193.116094][ T5235] Bluetooth: hci2: command tx timeout [ 193.121739][ T35] hsr_slave_0: left promiscuous mode [ 193.135062][ T35] hsr_slave_1: left promiscuous mode [ 193.151633][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.159623][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.171210][ T8186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.666'. [ 193.186702][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.194343][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.232422][ T35] veth1_macvtap: left promiscuous mode [ 193.239403][ T35] veth0_macvtap: left promiscuous mode [ 193.246272][ T35] veth1_vlan: left promiscuous mode [ 193.252898][ T35] veth0_vlan: left promiscuous mode [ 193.473705][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 193.978635][ T35] team0 (unregistering): Port device team_slave_1 removed [ 194.028931][ T35] team0 (unregistering): Port device team_slave_0 removed [ 194.099457][ T8214] x_tables: duplicate underflow at hook 2 [ 194.560751][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.647568][ T5235] Bluetooth: hci1: command tx timeout [ 194.773259][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 194.782568][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 194.906623][ T8230] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 195.025662][ T8234] syzkaller0: entered promiscuous mode [ 195.031414][ T8234] syzkaller0: entered allmulticast mode [ 195.154800][ T8234] xt_CT: No such helper "snmp" [ 195.196045][ T5235] Bluetooth: hci2: command tx timeout [ 197.885320][ T8243] netlink: 'syz.0.680': attribute type 2 has an invalid length. [ 198.047372][ T8253] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 198.256160][ T8021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.296928][ T8021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.325251][ T8021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.357724][ T8021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.431987][ T8017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.450501][ T8017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.470369][ T8017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.494899][ T8017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.584203][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.664109][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.718731][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.725949][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.745666][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.752885][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.798027][ T8017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.828866][ T8273] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 198.873162][ T8017] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.904737][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.911922][ T6180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.965437][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.972648][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.099145][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.692'. [ 199.102683][ T8017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.344424][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.420960][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.578621][ T8017] veth0_vlan: entered promiscuous mode [ 199.647620][ T8017] veth1_vlan: entered promiscuous mode [ 199.729909][ T8017] veth0_macvtap: entered promiscuous mode [ 199.771604][ T8017] veth1_macvtap: entered promiscuous mode [ 199.827920][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.875822][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.902862][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.929204][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.945978][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.959337][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.969460][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.980153][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.995087][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.043354][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.063874][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.091374][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.112211][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.125528][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.146691][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.172952][ T8017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.194650][ T8017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.216925][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.251859][ T8017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.261127][ T8017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.272251][ T8017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.301629][ T8017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.332756][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 200.422761][ T8021] veth0_vlan: entered promiscuous mode [ 200.498852][ T6162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.502743][ T8021] veth1_vlan: entered promiscuous mode [ 200.510496][ T6162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.575306][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.594486][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.630123][ T8021] veth0_macvtap: entered promiscuous mode [ 200.668802][ T8021] veth1_macvtap: entered promiscuous mode [ 200.837366][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.861588][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.877620][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.895862][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.915130][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.938027][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.959577][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.970473][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.982252][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.993014][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.015444][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.044067][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.061956][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.085133][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.104865][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.116594][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.145242][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.156192][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.169035][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.179898][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.190694][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.203766][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.230240][ T8021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.246334][ T8021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.265349][ T8021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.278473][ T8021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.434793][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.704'. [ 201.447308][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.462820][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.508835][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.526535][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.289275][ T6173] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.490846][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.501796][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.510247][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.526800][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.537326][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 202.553999][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.577099][ T6173] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.847436][ T6173] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.974097][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.984908][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.997683][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.010844][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.014002][ T6173] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.024144][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.037088][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.080371][ T8338] chnl_net:caif_netlink_parms(): no params data found [ 203.361566][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.380803][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.393518][ T8338] bridge_slave_0: entered allmulticast mode [ 203.416509][ T8338] bridge_slave_0: entered promiscuous mode [ 203.444769][ T6173] bridge_slave_1: left allmulticast mode [ 203.451137][ T6173] bridge_slave_1: left promiscuous mode [ 203.457401][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.468587][ T6173] bridge_slave_0: left allmulticast mode [ 203.474270][ T6173] bridge_slave_0: left promiscuous mode [ 203.480291][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.933114][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.944951][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.962337][ T6173] bond0 (unregistering): Released all slaves [ 203.974052][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.982535][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.990299][ T8338] bridge_slave_1: entered allmulticast mode [ 203.998319][ T8338] bridge_slave_1: entered promiscuous mode [ 204.112970][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.154526][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 204.165615][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 204.209535][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.234142][ T8352] chnl_net:caif_netlink_parms(): no params data found [ 204.264355][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 204.372494][ T8338] team0: Port device team_slave_0 added [ 204.393476][ T8381] netlink: 'syz.3.716': attribute type 33 has an invalid length. [ 204.419188][ T8338] team0: Port device team_slave_1 added [ 204.557848][ T6173] hsr_slave_0: left promiscuous mode [ 204.564050][ T6173] hsr_slave_1: left promiscuous mode [ 204.575967][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.598474][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.616807][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.636635][ T5235] Bluetooth: hci1: command tx timeout [ 204.646582][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.712236][ T6173] veth1_macvtap: left promiscuous mode [ 204.718596][ T6173] veth0_macvtap: left promiscuous mode [ 204.724260][ T6173] veth1_vlan: left promiscuous mode [ 204.729819][ T6173] veth0_vlan: left promiscuous mode [ 205.122895][ T5235] Bluetooth: hci2: command tx timeout [ 205.756760][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 205.799503][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 206.229659][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.238646][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.246183][ T8352] bridge_slave_0: entered allmulticast mode [ 206.252965][ T8352] bridge_slave_0: entered promiscuous mode [ 206.264429][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.282240][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.308568][ T8338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.325551][ T8391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.352509][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.720'. [ 206.363827][ T8394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.720'. [ 206.407105][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.426469][ T8400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.462147][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.469643][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.479426][ T8352] bridge_slave_1: entered allmulticast mode [ 206.487566][ T8352] bridge_slave_1: entered promiscuous mode [ 206.505128][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.520448][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.547392][ T8338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.625618][ T8352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.670955][ T8352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.726589][ T5235] Bluetooth: hci1: command tx timeout [ 206.737543][ T8338] hsr_slave_0: entered promiscuous mode [ 206.744891][ T8338] hsr_slave_1: entered promiscuous mode [ 206.751775][ T8338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.759457][ T8338] Cannot create hsr debugfs directory [ 206.840139][ T8352] team0: Port device team_slave_0 added [ 206.863651][ T8352] team0: Port device team_slave_1 added [ 206.994349][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.002157][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.030987][ T8352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.083150][ T8352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.103908][ T8352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.113407][ T8419] openvswitch: netlink: Message has 8 unknown bytes. [ 207.135740][ T8352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.196007][ T5235] Bluetooth: hci2: command tx timeout [ 207.288563][ T8352] hsr_slave_0: entered promiscuous mode [ 207.305982][ T8352] hsr_slave_1: entered promiscuous mode [ 207.313415][ T8352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.331020][ T8352] Cannot create hsr debugfs directory [ 207.517834][ T6173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.705126][ T6173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.824067][ T6173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.903330][ T6173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.076245][ T6173] bridge_slave_1: left allmulticast mode [ 208.088423][ T6173] bridge_slave_1: left promiscuous mode [ 208.099471][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.149075][ T6173] bridge_slave_0: left allmulticast mode [ 208.170331][ T6173] bridge_slave_0: left promiscuous mode [ 208.178765][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.796090][ T5235] Bluetooth: hci1: command tx timeout [ 209.005531][ T6173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.017796][ T6173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.030789][ T6173] bond0 (unregistering): Released all slaves [ 209.067855][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.739'. [ 209.276817][ T5235] Bluetooth: hci2: command tx timeout [ 209.529345][ T8476] netlink: 277 bytes leftover after parsing attributes in process `syz.1.743'. [ 209.545475][ T6173] hsr_slave_0: left promiscuous mode [ 209.561235][ T6173] hsr_slave_1: left promiscuous mode [ 209.574160][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.605952][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.627120][ T6173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.634658][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.663414][ T6173] veth1_macvtap: left promiscuous mode [ 209.669346][ T6173] veth0_macvtap: left promiscuous mode [ 209.675008][ T6173] veth1_vlan: left promiscuous mode [ 209.680767][ T6173] veth0_vlan: left promiscuous mode [ 210.202572][ T6173] team0 (unregistering): Port device team_slave_1 removed [ 210.248714][ T6173] team0 (unregistering): Port device team_slave_0 removed [ 210.736206][ T8485] netlink: 47 bytes leftover after parsing attributes in process `syz.1.744'. [ 210.852282][ T8338] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.901654][ T5235] Bluetooth: hci1: command tx timeout [ 210.911521][ T8338] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.012016][ T8493] sctp: [Deprecated]: syz.1.749 (pid 8493) Use of int in maxseg socket option. [ 211.012016][ T8493] Use struct sctp_assoc_value instead [ 211.044675][ T8491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.748'. [ 211.056591][ T8338] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.074190][ T8338] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.087848][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.101727][ T8493] batadv_slave_0: entered promiscuous mode [ 211.171059][ T8352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.218531][ T8352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.229183][ T8352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.277142][ T8352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.356184][ T5235] Bluetooth: hci2: command tx timeout [ 211.379622][ T8509] netlink: 'syz.1.754': attribute type 3 has an invalid length. [ 211.631000][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.660236][ T8352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.710949][ T8352] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.737245][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.780346][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.787572][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.814043][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.821316][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.851776][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.859008][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.873925][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.881173][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.015505][ T8527] bond0: entered promiscuous mode [ 212.022548][ T8527] bond_slave_1: entered promiscuous mode [ 212.399364][ T8352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.464118][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.583511][ T8338] veth0_vlan: entered promiscuous mode [ 212.630389][ T8338] veth1_vlan: entered promiscuous mode [ 212.749124][ T8338] veth0_macvtap: entered promiscuous mode [ 212.781051][ T8338] veth1_macvtap: entered promiscuous mode [ 212.828751][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.861454][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.874231][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.901102][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.922273][ T8568] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 212.933274][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.954394][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.974573][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.021381][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.052388][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.075897][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.110468][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.142666][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.163484][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.176085][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.196105][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.207520][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.228561][ T8338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.237669][ T8338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.248717][ T8338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.297521][ T8338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.371147][ T8577] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20003 [ 213.417981][ T8352] veth0_vlan: entered promiscuous mode [ 213.432504][ T8352] veth1_vlan: entered promiscuous mode [ 213.457404][ T8352] veth0_macvtap: entered promiscuous mode [ 213.503559][ T8352] veth1_macvtap: entered promiscuous mode [ 213.544343][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.556050][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.566052][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.587191][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.607457][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.626901][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.649197][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.669964][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.702121][ T8352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.739275][ T8585] nbd: device at index 1 is going down [ 213.851491][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.865771][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.875644][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.912310][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.936076][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.954560][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.967366][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.984929][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.998439][ T8352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.009404][ T8352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.022785][ T8352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.108147][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.125817][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.134916][ T8352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.156523][ T8352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.165315][ T8352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.191249][ T8352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.263126][ T8598] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 214.264017][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.297424][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.299760][ T8596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.448852][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.458278][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.514149][ T8604] tipc: Started in network mode [ 214.521252][ T8604] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 214.529787][ T8604] tipc: Enabled bearer , priority 0 [ 214.544782][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.555429][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.988812][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.135725][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.274309][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.373696][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.462113][ T11] bridge_slave_1: left allmulticast mode [ 215.469451][ T11] bridge_slave_1: left promiscuous mode [ 215.476775][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.485960][ T11] bridge_slave_0: left allmulticast mode [ 215.491646][ T11] bridge_slave_0: left promiscuous mode [ 215.497888][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.654230][ T51] tipc: Node number set to 11578026 [ 215.852294][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.865599][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.883394][ T11] bond0 (unregistering): Released all slaves [ 216.316141][ T5241] Bluetooth: hci0: command tx timeout [ 216.334069][ T11] hsr_slave_0: left promiscuous mode [ 216.342919][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.353166][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.366357][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.375621][ T11] hsr_slave_1: left promiscuous mode [ 216.381626][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.389767][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.398838][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.407938][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.416298][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.433293][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.442969][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.468053][ T11] veth1_macvtap: left promiscuous mode [ 216.474357][ T11] veth0_macvtap: left promiscuous mode [ 216.480366][ T11] veth1_vlan: left promiscuous mode [ 216.486007][ T11] veth0_vlan: left promiscuous mode [ 216.920000][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.936637][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.945409][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.968441][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.984693][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.993219][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.459346][ T11] team0 (unregistering): Port device team_slave_1 removed [ 217.505043][ T11] team0 (unregistering): Port device team_slave_0 removed [ 218.463417][ T8629] chnl_net:caif_netlink_parms(): no params data found [ 218.476166][ T5235] Bluetooth: hci1: command tx timeout [ 218.522234][ T8635] chnl_net:caif_netlink_parms(): no params data found [ 218.596218][ T8672] BUG: Bad page state in process syz.1.799 pfn:7d3d7 [ 218.603720][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d3d7 [ 218.612558][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 218.619763][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 218.628494][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 218.637169][ T8672] page dumped because: page_pool leak [ 218.642606][ T8672] page_owner tracks the page as allocated [ 218.648401][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574354352, free_ts 218374381330 [ 218.665484][ T8672] post_alloc_hook+0x1f3/0x230 [ 218.670371][ T8672] get_page_from_freelist+0x3045/0x3190 [ 218.676047][ T8672] __alloc_pages_noprof+0x292/0x710 [ 218.681292][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 218.686841][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 218.692793][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 218.698086][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 218.703503][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 218.708968][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 218.713961][ T8672] __sys_bpf+0x48d/0x810 [ 218.718297][ T8672] __x64_sys_bpf+0x7c/0x90 [ 218.722757][ T8672] do_syscall_64+0xf3/0x230 [ 218.727356][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.733330][ T8672] page last free pid 8629 tgid 8629 stack trace: [ 218.739745][ T8672] free_unref_page+0xcfb/0xf20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 218.744566][ T8672] __put_partials+0xeb/0x130 [ 218.749255][ T8672] put_cpu_partial+0x17c/0x250 [ 218.754062][ T8672] __slab_free+0x2ea/0x3d0 [ 218.758559][ T8672] qlist_free_all+0x9a/0x140 [ 218.763193][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 218.768748][ T8672] __kasan_slab_alloc+0x23/0x80 [ 218.773656][ T8672] __kmalloc_cache_noprof+0x132/0x2c0 [ 218.779125][ T8672] ref_tracker_alloc+0x14b/0x490 [ 218.784114][ T8672] netdev_queue_update_kobjects+0x181/0x550 [ 218.790114][ T8672] netdev_register_kobject+0x265/0x310 [ 218.795637][ T8672] register_netdevice+0x12c5/0x1b00 [ 218.800952][ T8672] team_newlink+0x10a/0x170 [ 218.805526][ T8672] rtnl_newlink+0x1591/0x20a0 [ 218.810306][ T8672] rtnetlink_rcv_msg+0x73f/0xcf0 [ 218.815296][ T8672] netlink_rcv_skb+0x1e3/0x430 [ 218.820140][ T8672] Modules linked in: [ 218.824098][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 218.834729][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.844832][ T8672] Call Trace: [ 218.848151][ T8672] [ 218.851114][ T8672] dump_stack_lvl+0x241/0x360 [ 218.855852][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.861114][ T8672] ? __pfx_print_modules+0x10/0x10 [ 218.866308][ T8672] ? pcpu_memcg_post_alloc_hook+0x12a/0x720 [ 218.872262][ T8672] bad_page+0x166/0x1b0 [ 218.876472][ T8672] free_unref_page+0xed0/0xf20 [ 218.881295][ T8672] skb_release_data+0x6dc/0x8a0 [ 218.886205][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 218.891265][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 218.897038][ T8672] ? __lock_acquire+0x1384/0x2050 [ 218.902119][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 218.908274][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 218.914323][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 218.920965][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 218.927528][ T8672] ? read_tsc+0x9/0x20 [ 218.931648][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 218.936906][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 218.943290][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 218.949506][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 218.955895][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 218.962603][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 218.967825][ T8672] ? __phys_addr+0xba/0x170 [ 218.972364][ T8672] ? build_skb_around+0x111/0x260 [ 218.977438][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 218.983375][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 218.988780][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 218.994294][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 219.000213][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 219.005782][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 219.011622][ T8672] ? synchronize_rcu+0x11b/0x360 [ 219.016605][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 219.021938][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 219.028230][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 219.034186][ T8672] ? _copy_from_user+0xa6/0xe0 [ 219.036467][ T5235] Bluetooth: hci2: command tx timeout [ 219.038978][ T8672] ? bpf_test_init+0x15a/0x180 [ 219.049324][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 219.054818][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 219.060219][ T8672] ? __pfx_lock_release+0x10/0x10 [ 219.065274][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 219.071101][ T8672] ? __fget_files+0x29/0x470 [ 219.075743][ T8672] ? fput+0x1a8/0x230 [ 219.079755][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 219.085587][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 219.090556][ T8672] __sys_bpf+0x48d/0x810 [ 219.094840][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 219.099642][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.105637][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.112005][ T8672] ? do_syscall_64+0x100/0x230 [ 219.116823][ T8672] __x64_sys_bpf+0x7c/0x90 [ 219.121267][ T8672] do_syscall_64+0xf3/0x230 [ 219.125787][ T8672] ? clear_bhb_loop+0x35/0x90 [ 219.130507][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.136440][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 219.140880][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.160594][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.169120][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 219.177127][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 219.185135][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 219.193139][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.201145][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 219.209162][ T8672] [ 219.212351][ T8672] Disabling lock debugging due to kernel taint [ 219.218563][ T8672] BUG: Bad page state in process syz.1.799 pfn:7d3d6 [ 219.225322][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d3d6 [ 219.234117][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 219.241267][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 219.249882][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 219.258480][ T8672] page dumped because: page_pool leak [ 219.263858][ T8672] page_owner tracks the page as allocated [ 219.269612][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574346362, free_ts 218374381330 [ 219.286601][ T8672] post_alloc_hook+0x1f3/0x230 [ 219.291414][ T8672] get_page_from_freelist+0x3045/0x3190 [ 219.297003][ T8672] __alloc_pages_noprof+0x292/0x710 [ 219.302222][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 219.307741][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 219.313697][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 219.318943][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 219.324318][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 219.329719][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 219.334663][ T8672] __sys_bpf+0x48d/0x810 [ 219.338958][ T8672] __x64_sys_bpf+0x7c/0x90 [ 219.343427][ T8672] do_syscall_64+0xf3/0x230 [ 219.347986][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.353905][ T8672] page last free pid 8629 tgid 8629 stack trace: [ 219.360301][ T8672] free_unref_page+0xcfb/0xf20 [ 219.365079][ T8672] __put_partials+0xeb/0x130 [ 219.369707][ T8672] put_cpu_partial+0x17c/0x250 [ 219.374468][ T8672] __slab_free+0x2ea/0x3d0 [ 219.378904][ T8672] qlist_free_all+0x9a/0x140 [ 219.383491][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 219.388980][ T8672] __kasan_slab_alloc+0x23/0x80 [ 219.393835][ T8672] __kmalloc_cache_noprof+0x132/0x2c0 [ 219.399238][ T8672] ref_tracker_alloc+0x14b/0x490 [ 219.404175][ T8672] netdev_queue_update_kobjects+0x181/0x550 [ 219.410102][ T8672] netdev_register_kobject+0x265/0x310 [ 219.415568][ T8672] register_netdevice+0x12c5/0x1b00 [ 219.420791][ T8672] team_newlink+0x10a/0x170 [ 219.425303][ T8672] rtnl_newlink+0x1591/0x20a0 [ 219.430010][ T8672] rtnetlink_rcv_msg+0x73f/0xcf0 [ 219.434972][ T8672] netlink_rcv_skb+0x1e3/0x430 [ 219.439771][ T8672] Modules linked in: [ 219.443679][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 219.455772][ T8672] Tainted: [B]=BAD_PAGE [ 219.459932][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 219.469987][ T8672] Call Trace: [ 219.473264][ T8672] [ 219.476201][ T8672] dump_stack_lvl+0x241/0x360 [ 219.480907][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.486117][ T8672] ? __pfx_print_modules+0x10/0x10 [ 219.491294][ T8672] bad_page+0x166/0x1b0 [ 219.495455][ T8672] free_unref_page+0xed0/0xf20 [ 219.500232][ T8672] skb_release_data+0x6dc/0x8a0 [ 219.505111][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 219.510173][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 219.515915][ T8672] ? __lock_acquire+0x1384/0x2050 [ 219.520981][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 219.527094][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 219.533141][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 219.539739][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 219.546267][ T8672] ? read_tsc+0x9/0x20 [ 219.550368][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 219.555576][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 219.561911][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 219.568089][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 219.574446][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 219.581158][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 219.586377][ T8672] ? __phys_addr+0xba/0x170 [ 219.590905][ T8672] ? build_skb_around+0x111/0x260 [ 219.595952][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 219.601890][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 219.607211][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 219.612788][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 219.618695][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 219.624263][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 219.630088][ T8672] ? synchronize_rcu+0x11b/0x360 [ 219.635055][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 219.640369][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 219.646652][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 219.652588][ T8672] ? _copy_from_user+0xa6/0xe0 [ 219.657365][ T8672] ? bpf_test_init+0x15a/0x180 [ 219.662130][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 219.667606][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 219.673005][ T8672] ? __pfx_lock_release+0x10/0x10 [ 219.678050][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 219.683863][ T8672] ? __fget_files+0x29/0x470 [ 219.688473][ T8672] ? fput+0x1a8/0x230 [ 219.692480][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 219.698340][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 219.703315][ T8672] __sys_bpf+0x48d/0x810 [ 219.707575][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 219.712370][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.718368][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.724703][ T8672] ? do_syscall_64+0x100/0x230 [ 219.729475][ T8672] __x64_sys_bpf+0x7c/0x90 [ 219.733911][ T8672] do_syscall_64+0xf3/0x230 [ 219.738445][ T8672] ? clear_bhb_loop+0x35/0x90 [ 219.743129][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.749041][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 219.753476][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.773177][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.781599][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 219.789577][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 219.797552][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 219.805521][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.813494][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 219.821489][ T8672] [ 219.824608][ T8672] BUG: Bad page state in process syz.1.799 pfn:7d3d5 [ 219.831399][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d3d5 [ 219.840217][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 219.847464][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 219.856127][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 219.864724][ T8672] page dumped because: page_pool leak [ 219.870123][ T8672] page_owner tracks the page as allocated [ 219.875882][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574338475, free_ts 218374381330 [ 219.892865][ T8672] post_alloc_hook+0x1f3/0x230 [ 219.897672][ T8672] get_page_from_freelist+0x3045/0x3190 [ 219.903220][ T8672] __alloc_pages_noprof+0x292/0x710 [ 219.908460][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 219.913937][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 219.919874][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 219.925113][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 219.930515][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 219.935928][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 219.940890][ T8672] __sys_bpf+0x48d/0x810 [ 219.945129][ T8672] __x64_sys_bpf+0x7c/0x90 [ 219.949567][ T8672] do_syscall_64+0xf3/0x230 [ 219.954081][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.960007][ T8672] page last free pid 8629 tgid 8629 stack trace: [ 219.966366][ T8672] free_unref_page+0xcfb/0xf20 [ 219.971167][ T8672] __put_partials+0xeb/0x130 [ 219.975799][ T8672] put_cpu_partial+0x17c/0x250 [ 219.980584][ T8672] __slab_free+0x2ea/0x3d0 [ 219.984998][ T8672] qlist_free_all+0x9a/0x140 [ 219.989645][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 219.995103][ T8672] __kasan_slab_alloc+0x23/0x80 [ 219.999975][ T8672] __kmalloc_cache_noprof+0x132/0x2c0 [ 220.005372][ T8672] ref_tracker_alloc+0x14b/0x490 [ 220.010387][ T8672] netdev_queue_update_kobjects+0x181/0x550 [ 220.016339][ T8672] netdev_register_kobject+0x265/0x310 [ 220.022097][ T8672] register_netdevice+0x12c5/0x1b00 [ 220.027340][ T8672] team_newlink+0x10a/0x170 [ 220.031872][ T8672] rtnl_newlink+0x1591/0x20a0 [ 220.036598][ T8672] rtnetlink_rcv_msg+0x73f/0xcf0 [ 220.041735][ T8672] netlink_rcv_skb+0x1e3/0x430 [ 220.046546][ T8672] Modules linked in: [ 220.050462][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 220.062535][ T8672] Tainted: [B]=BAD_PAGE [ 220.066694][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.076867][ T8672] Call Trace: [ 220.080187][ T8672] [ 220.083118][ T8672] dump_stack_lvl+0x241/0x360 [ 220.087829][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.093055][ T8672] ? __pfx_print_modules+0x10/0x10 [ 220.098179][ T8672] bad_page+0x166/0x1b0 [ 220.102340][ T8672] free_unref_page+0xed0/0xf20 [ 220.107130][ T8672] skb_release_data+0x6dc/0x8a0 [ 220.112010][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 220.117040][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 220.122771][ T8672] ? __lock_acquire+0x1384/0x2050 [ 220.127832][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 220.133943][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 220.139939][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 220.146548][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 220.153074][ T8672] ? read_tsc+0x9/0x20 [ 220.157164][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 220.162398][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 220.168746][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 220.174912][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 220.181248][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 220.187950][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 220.193178][ T8672] ? __phys_addr+0xba/0x170 [ 220.197686][ T8672] ? build_skb_around+0x111/0x260 [ 220.202715][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 220.208632][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 220.213930][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 220.219395][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 220.225301][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 220.230854][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 220.236682][ T8672] ? synchronize_rcu+0x11b/0x360 [ 220.241640][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 220.246954][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 220.253223][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 220.259132][ T8672] ? _copy_from_user+0xa6/0xe0 [ 220.263909][ T8672] ? bpf_test_init+0x15a/0x180 [ 220.268678][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 220.274170][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 220.279548][ T8672] ? __pfx_lock_release+0x10/0x10 [ 220.284584][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 220.290394][ T8672] ? __fget_files+0x29/0x470 [ 220.294992][ T8672] ? fput+0x1a8/0x230 [ 220.298981][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 220.304804][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 220.309755][ T8672] __sys_bpf+0x48d/0x810 [ 220.314024][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 220.318821][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 220.324841][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.331183][ T8672] ? do_syscall_64+0x100/0x230 [ 220.335980][ T8672] __x64_sys_bpf+0x7c/0x90 [ 220.340449][ T8672] do_syscall_64+0xf3/0x230 [ 220.344963][ T8672] ? clear_bhb_loop+0x35/0x90 [ 220.349657][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.355645][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 220.360070][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.379686][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.388118][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 220.396120][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 220.404112][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 220.412097][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.420159][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 220.428161][ T8672] [ 220.431280][ T8672] BUG: Bad page state in process syz.1.799 pfn:7d3d4 [ 220.438062][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d3d4 [ 220.446861][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 220.453993][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 220.462630][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 220.471244][ T8672] page dumped because: page_pool leak [ 220.476656][ T8672] page_owner tracks the page as allocated [ 220.482383][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574330439, free_ts 218374381330 [ 220.499352][ T8672] post_alloc_hook+0x1f3/0x230 [ 220.504133][ T8672] get_page_from_freelist+0x3045/0x3190 [ 220.509710][ T8672] __alloc_pages_noprof+0x292/0x710 [ 220.514910][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 220.520391][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 220.526344][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 220.531575][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 220.536970][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 220.542813][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 220.547803][ T8672] __sys_bpf+0x48d/0x810 [ 220.552066][ T8672] __x64_sys_bpf+0x7c/0x90 [ 220.555893][ T5235] Bluetooth: hci1: command tx timeout [ 220.556513][ T8672] do_syscall_64+0xf3/0x230 [ 220.566408][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.572330][ T8672] page last free pid 8629 tgid 8629 stack trace: [ 220.578672][ T8672] free_unref_page+0xcfb/0xf20 [ 220.583449][ T8672] __put_partials+0xeb/0x130 [ 220.588095][ T8672] put_cpu_partial+0x17c/0x250 [ 220.592876][ T8672] __slab_free+0x2ea/0x3d0 [ 220.597317][ T8672] qlist_free_all+0x9a/0x140 [ 220.601904][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 220.607399][ T8672] __kasan_slab_alloc+0x23/0x80 [ 220.612269][ T8672] __kmalloc_cache_noprof+0x132/0x2c0 [ 220.617668][ T8672] ref_tracker_alloc+0x14b/0x490 [ 220.622619][ T8672] netdev_queue_update_kobjects+0x181/0x550 [ 220.628542][ T8672] netdev_register_kobject+0x265/0x310 [ 220.634006][ T8672] register_netdevice+0x12c5/0x1b00 [ 220.639243][ T8672] team_newlink+0x10a/0x170 [ 220.643787][ T8672] rtnl_newlink+0x1591/0x20a0 [ 220.648524][ T8672] rtnetlink_rcv_msg+0x73f/0xcf0 [ 220.653497][ T8672] netlink_rcv_skb+0x1e3/0x430 [ 220.658308][ T8672] Modules linked in: [ 220.662217][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 220.674298][ T8672] Tainted: [B]=BAD_PAGE [ 220.678450][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.688519][ T8672] Call Trace: [ 220.691809][ T8672] [ 220.694740][ T8672] dump_stack_lvl+0x241/0x360 [ 220.699457][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.704660][ T8672] ? __pfx_print_modules+0x10/0x10 [ 220.709802][ T8672] bad_page+0x166/0x1b0 [ 220.713964][ T8672] free_unref_page+0xed0/0xf20 [ 220.718748][ T8672] skb_release_data+0x6dc/0x8a0 [ 220.723616][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 220.728672][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 220.734430][ T8672] ? __lock_acquire+0x1384/0x2050 [ 220.739473][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 220.745559][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 220.751575][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 220.758170][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 220.764678][ T8672] ? read_tsc+0x9/0x20 [ 220.768752][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 220.773969][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 220.780307][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 220.786488][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 220.792845][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 220.799532][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 220.804736][ T8672] ? __phys_addr+0xba/0x170 [ 220.809242][ T8672] ? build_skb_around+0x111/0x260 [ 220.814268][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 220.820174][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 220.825466][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 220.830928][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 220.836832][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 220.842383][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 220.848270][ T8672] ? synchronize_rcu+0x11b/0x360 [ 220.853228][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 220.858526][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 220.864774][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 220.870677][ T8672] ? _copy_from_user+0xa6/0xe0 [ 220.875475][ T8672] ? bpf_test_init+0x15a/0x180 [ 220.880241][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 220.885707][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 220.891102][ T8672] ? __pfx_lock_release+0x10/0x10 [ 220.896154][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 220.901979][ T8672] ? __fget_files+0x29/0x470 [ 220.906586][ T8672] ? fput+0x1a8/0x230 [ 220.910592][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 220.916410][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 220.921372][ T8672] __sys_bpf+0x48d/0x810 [ 220.925981][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 220.930773][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 220.936768][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.943101][ T8672] ? do_syscall_64+0x100/0x230 [ 220.947882][ T8672] __x64_sys_bpf+0x7c/0x90 [ 220.952328][ T8672] do_syscall_64+0xf3/0x230 [ 220.956994][ T8672] ? clear_bhb_loop+0x35/0x90 [ 220.961801][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.967736][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 220.972176][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.991796][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.000226][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 221.008211][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 221.016210][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 221.024199][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.032175][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 221.040163][ T8672] [ 221.043238][ T8672] BUG: Bad page state in process syz.1.799 pfn:7d3d3 [ 221.050041][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d3d3 [ 221.058828][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 221.065978][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 221.074574][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 221.083182][ T8672] page dumped because: page_pool leak [ 221.088586][ T8672] page_owner tracks the page as allocated [ 221.094305][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574322145, free_ts 218374381330 [ 221.111262][ T8672] post_alloc_hook+0x1f3/0x230 [ 221.115897][ T5235] Bluetooth: hci2: command tx timeout [ 221.116050][ T8672] get_page_from_freelist+0x3045/0x3190 [ 221.126993][ T8672] __alloc_pages_noprof+0x292/0x710 [ 221.132209][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 221.137702][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 221.143615][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 221.148844][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 221.154216][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 221.159603][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 221.164543][ T8672] __sys_bpf+0x48d/0x810 [ 221.168813][ T8672] __x64_sys_bpf+0x7c/0x90 [ 221.173226][ T8672] do_syscall_64+0xf3/0x230 [ 221.177748][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.183650][ T8672] page last free pid 8629 tgid 8629 stack trace: [ 221.189991][ T8672] free_unref_page+0xcfb/0xf20 [ 221.194761][ T8672] __put_partials+0xeb/0x130 [ 221.199381][ T8672] put_cpu_partial+0x17c/0x250 [ 221.204140][ T8672] __slab_free+0x2ea/0x3d0 [ 221.208586][ T8672] qlist_free_all+0x9a/0x140 [ 221.213195][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 221.218680][ T8672] __kasan_slab_alloc+0x23/0x80 [ 221.223527][ T8672] __kmalloc_cache_noprof+0x132/0x2c0 [ 221.228932][ T8672] ref_tracker_alloc+0x14b/0x490 [ 221.233871][ T8672] netdev_queue_update_kobjects+0x181/0x550 [ 221.239797][ T8672] netdev_register_kobject+0x265/0x310 [ 221.245262][ T8672] register_netdevice+0x12c5/0x1b00 [ 221.250479][ T8672] team_newlink+0x10a/0x170 [ 221.254985][ T8672] rtnl_newlink+0x1591/0x20a0 [ 221.259680][ T8672] rtnetlink_rcv_msg+0x73f/0xcf0 [ 221.264637][ T8672] netlink_rcv_skb+0x1e3/0x430 [ 221.269420][ T8672] Modules linked in: [ 221.273316][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 221.285382][ T8672] Tainted: [B]=BAD_PAGE [ 221.289531][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.299586][ T8672] Call Trace: [ 221.302877][ T8672] [ 221.305816][ T8672] dump_stack_lvl+0x241/0x360 [ 221.310518][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.315727][ T8672] ? __pfx_print_modules+0x10/0x10 [ 221.320893][ T8672] bad_page+0x166/0x1b0 [ 221.325054][ T8672] free_unref_page+0xed0/0xf20 [ 221.329833][ T8672] skb_release_data+0x6dc/0x8a0 [ 221.334692][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 221.339740][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 221.345473][ T8672] ? __lock_acquire+0x1384/0x2050 [ 221.350600][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 221.356709][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 221.362727][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 221.369329][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 221.375846][ T8672] ? read_tsc+0x9/0x20 [ 221.379940][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 221.385143][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 221.391480][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 221.397648][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 221.404000][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 221.410691][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 221.415908][ T8672] ? __phys_addr+0xba/0x170 [ 221.420429][ T8672] ? build_skb_around+0x111/0x260 [ 221.425450][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 221.431361][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 221.436675][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 221.442165][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 221.448096][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 221.453662][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 221.459467][ T8672] ? synchronize_rcu+0x11b/0x360 [ 221.464405][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 221.469703][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 221.475972][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 221.481912][ T8672] ? _copy_from_user+0xa6/0xe0 [ 221.486699][ T8672] ? bpf_test_init+0x15a/0x180 [ 221.491495][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 221.496959][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 221.502347][ T8672] ? __pfx_lock_release+0x10/0x10 [ 221.507397][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 221.513242][ T8672] ? __fget_files+0x29/0x470 [ 221.517871][ T8672] ? fput+0x1a8/0x230 [ 221.521874][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 221.527690][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 221.532659][ T8672] __sys_bpf+0x48d/0x810 [ 221.536908][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 221.541674][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 221.547673][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.554028][ T8672] ? do_syscall_64+0x100/0x230 [ 221.558810][ T8672] __x64_sys_bpf+0x7c/0x90 [ 221.563242][ T8672] do_syscall_64+0xf3/0x230 [ 221.567768][ T8672] ? clear_bhb_loop+0x35/0x90 [ 221.572467][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.578362][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 221.582775][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.602386][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.610809][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 221.618786][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 221.626799][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 221.634788][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.642767][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 221.650751][ T8672] [ 221.653834][ T8672] BUG: Bad page state in process syz.1.799 pfn:7d3d2 [ 221.660612][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d3d2 [ 221.669424][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 221.676580][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 221.685265][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 221.693884][ T8672] page dumped because: page_pool leak [ 221.699291][ T8672] page_owner tracks the page as allocated [ 221.704997][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574314216, free_ts 218374381330 [ 221.721957][ T8672] post_alloc_hook+0x1f3/0x230 [ 221.726788][ T8672] get_page_from_freelist+0x3045/0x3190 [ 221.732391][ T8672] __alloc_pages_noprof+0x292/0x710 [ 221.737616][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 221.743075][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 221.749002][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 221.754216][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 221.759695][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 221.765067][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 221.770058][ T8672] __sys_bpf+0x48d/0x810 [ 221.774312][ T8672] __x64_sys_bpf+0x7c/0x90 [ 221.778755][ T8672] do_syscall_64+0xf3/0x230 [ 221.783260][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.789175][ T8672] page last free pid 8629 tgid 8629 stack trace: [ 221.795521][ T8672] free_unref_page+0xcfb/0xf20 [ 221.800349][ T8672] __put_partials+0xeb/0x130 [ 221.804953][ T8672] put_cpu_partial+0x17c/0x250 [ 221.809737][ T8672] __slab_free+0x2ea/0x3d0 [ 221.814162][ T8672] qlist_free_all+0x9a/0x140 [ 221.818773][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 221.824231][ T8672] __kasan_slab_alloc+0x23/0x80 [ 221.829134][ T8672] __kmalloc_cache_noprof+0x132/0x2c0 [ 221.834512][ T8672] ref_tracker_alloc+0x14b/0x490 [ 221.839468][ T8672] netdev_queue_update_kobjects+0x181/0x550 [ 221.845370][ T8672] netdev_register_kobject+0x265/0x310 [ 221.850895][ T8672] register_netdevice+0x12c5/0x1b00 [ 221.856131][ T8672] team_newlink+0x10a/0x170 [ 221.860658][ T8672] rtnl_newlink+0x1591/0x20a0 [ 221.865348][ T8672] rtnetlink_rcv_msg+0x73f/0xcf0 [ 221.870317][ T8672] netlink_rcv_skb+0x1e3/0x430 [ 221.875081][ T8672] Modules linked in: [ 221.878997][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 221.891084][ T8672] Tainted: [B]=BAD_PAGE [ 221.895247][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.905307][ T8672] Call Trace: [ 221.908612][ T8672] [ 221.911557][ T8672] dump_stack_lvl+0x241/0x360 [ 221.916258][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.921495][ T8672] ? __pfx_print_modules+0x10/0x10 [ 221.926646][ T8672] bad_page+0x166/0x1b0 [ 221.930833][ T8672] free_unref_page+0xed0/0xf20 [ 221.935620][ T8672] skb_release_data+0x6dc/0x8a0 [ 221.940492][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 221.945526][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 221.951276][ T8672] ? __lock_acquire+0x1384/0x2050 [ 221.956335][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 221.962443][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 221.968450][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 221.975061][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 221.981570][ T8672] ? read_tsc+0x9/0x20 [ 221.985706][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 221.990958][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 221.997314][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 222.003492][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 222.009848][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 222.016577][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 222.021805][ T8672] ? __phys_addr+0xba/0x170 [ 222.026320][ T8672] ? build_skb_around+0x111/0x260 [ 222.031370][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 222.037278][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 222.042571][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 222.048047][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 222.053974][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 222.059551][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 222.065379][ T8672] ? synchronize_rcu+0x11b/0x360 [ 222.070325][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 222.075620][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 222.081881][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 222.087837][ T8672] ? _copy_from_user+0xa6/0xe0 [ 222.092630][ T8672] ? bpf_test_init+0x15a/0x180 [ 222.097396][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 222.102859][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 222.108254][ T8672] ? __pfx_lock_release+0x10/0x10 [ 222.113327][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 222.119151][ T8672] ? __fget_files+0x29/0x470 [ 222.123759][ T8672] ? fput+0x1a8/0x230 [ 222.127761][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 222.133592][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 222.138543][ T8672] __sys_bpf+0x48d/0x810 [ 222.142790][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 222.147575][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.153596][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.159936][ T8672] ? do_syscall_64+0x100/0x230 [ 222.164762][ T8672] __x64_sys_bpf+0x7c/0x90 [ 222.169219][ T8672] do_syscall_64+0xf3/0x230 [ 222.173750][ T8672] ? clear_bhb_loop+0x35/0x90 [ 222.178440][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.184340][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 222.188761][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.208387][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.216835][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 222.224811][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 222.232879][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 222.240876][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.248852][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 222.256864][ T8672] [ 222.259944][ T8672] BUG: Bad page state in process syz.1.799 pfn:7d3d1 [ 222.266739][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x7d3d1 [ 222.275520][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 222.282657][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 222.291291][ T8672] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 222.299889][ T8672] page dumped because: page_pool leak [ 222.305260][ T8672] page_owner tracks the page as allocated [ 222.311000][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574306442, free_ts 218374381330 [ 222.327983][ T8672] post_alloc_hook+0x1f3/0x230 [ 222.332907][ T8672] get_page_from_freelist+0x3045/0x3190 [ 222.338493][ T8672] __alloc_pages_noprof+0x292/0x710 [ 222.343702][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 222.349275][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 222.355268][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 222.360497][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 222.365907][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 222.371301][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 222.376280][ T8672] __sys_bpf+0x48d/0x810 [ 222.380543][ T8672] __x64_sys_bpf+0x7c/0x90 [ 222.384957][ T8672] do_syscall_64+0xf3/0x230 [ 222.389480][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.395375][ T8672] page last free pid 8629 tgid 8629 stack trace: [ 222.401718][ T8672] free_unref_page+0xcfb/0xf20 [ 222.406534][ T8672] __put_partials+0xeb/0x130 [ 222.411184][ T8672] put_cpu_partial+0x17c/0x250 [ 222.415990][ T8672] __slab_free+0x2ea/0x3d0 [ 222.420421][ T8672] qlist_free_all+0x9a/0x140 [ 222.425013][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 222.430493][ T8672] __kasan_slab_alloc+0x23/0x80 [ 222.435363][ T8672] __kmalloc_cache_noprof+0x132/0x2c0 [ 222.440778][ T8672] ref_tracker_alloc+0x14b/0x490 [ 222.445755][ T8672] netdev_queue_update_kobjects+0x181/0x550 [ 222.451683][ T8672] netdev_register_kobject+0x265/0x310 [ 222.457175][ T8672] register_netdevice+0x12c5/0x1b00 [ 222.462375][ T8672] team_newlink+0x10a/0x170 [ 222.466926][ T8672] rtnl_newlink+0x1591/0x20a0 [ 222.471627][ T8672] rtnetlink_rcv_msg+0x73f/0xcf0 [ 222.476751][ T8672] netlink_rcv_skb+0x1e3/0x430 [ 222.481559][ T8672] Modules linked in: [ 222.485471][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 222.497544][ T8672] Tainted: [B]=BAD_PAGE [ 222.501689][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.511761][ T8672] Call Trace: [ 222.515055][ T8672] [ 222.517990][ T8672] dump_stack_lvl+0x241/0x360 [ 222.522698][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.527911][ T8672] ? __pfx_print_modules+0x10/0x10 [ 222.533058][ T8672] bad_page+0x166/0x1b0 [ 222.537227][ T8672] free_unref_page+0xed0/0xf20 [ 222.542016][ T8672] skb_release_data+0x6dc/0x8a0 [ 222.546898][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 222.551969][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 222.557708][ T8672] ? __lock_acquire+0x1384/0x2050 [ 222.562745][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 222.568833][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 222.574823][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 222.581418][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 222.587940][ T8672] ? read_tsc+0x9/0x20 [ 222.592035][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 222.597256][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 222.603590][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 222.609753][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 222.616099][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 222.622801][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 222.628027][ T8672] ? __phys_addr+0xba/0x170 [ 222.632569][ T8672] ? build_skb_around+0x111/0x260 [ 222.635903][ T5235] Bluetooth: hci1: command tx timeout [ 222.637592][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 222.648877][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 222.654176][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 222.659649][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 222.665552][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 222.671104][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 222.676915][ T8672] ? synchronize_rcu+0x11b/0x360 [ 222.681869][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 222.687179][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 222.693463][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 222.699380][ T8672] ? _copy_from_user+0xa6/0xe0 [ 222.704195][ T8672] ? bpf_test_init+0x15a/0x180 [ 222.709003][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 222.714466][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 222.719863][ T8672] ? __pfx_lock_release+0x10/0x10 [ 222.724928][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 222.730740][ T8672] ? __fget_files+0x29/0x470 [ 222.735494][ T8672] ? fput+0x1a8/0x230 [ 222.739491][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 222.745306][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 222.750325][ T8672] __sys_bpf+0x48d/0x810 [ 222.754594][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 222.759380][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.765463][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.771831][ T8672] ? do_syscall_64+0x100/0x230 [ 222.776624][ T8672] __x64_sys_bpf+0x7c/0x90 [ 222.781053][ T8672] do_syscall_64+0xf3/0x230 [ 222.785559][ T8672] ? clear_bhb_loop+0x35/0x90 [ 222.790244][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.796156][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 222.800604][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.820721][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.829168][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 222.837144][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 222.845114][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 222.853104][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.861082][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 222.869087][ T8672] [ 222.872176][ T8672] BUG: Bad page state in process syz.1.799 pfn:7d3d0 [ 222.878957][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d3d6000 pfn:0x7d3d0 [ 222.889132][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 222.896286][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 222.904895][ T8672] raw: ffff88807d3d6000 0000000000000001 00000000ffffffff 0000000000000000 [ 222.913516][ T8672] page dumped because: page_pool leak [ 222.918912][ T8672] page_owner tracks the page as allocated [ 222.924639][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574298506, free_ts 218374381330 [ 222.941615][ T8672] post_alloc_hook+0x1f3/0x230 [ 222.946458][ T8672] get_page_from_freelist+0x3045/0x3190 [ 222.952040][ T8672] __alloc_pages_noprof+0x292/0x710 [ 222.957283][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 222.962760][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 222.968695][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 222.973924][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 222.979315][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 222.984703][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 222.989700][ T8672] __sys_bpf+0x48d/0x810 [ 222.993942][ T8672] __x64_sys_bpf+0x7c/0x90 [ 222.998379][ T8672] do_syscall_64+0xf3/0x230 [ 223.002885][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.008824][ T8672] page last free pid 8629 tgid 8629 stack trace: [ 223.015155][ T8672] free_unref_page+0xcfb/0xf20 [ 223.019947][ T8672] __put_partials+0xeb/0x130 [ 223.024551][ T8672] put_cpu_partial+0x17c/0x250 [ 223.029350][ T8672] __slab_free+0x2ea/0x3d0 [ 223.033767][ T8672] qlist_free_all+0x9a/0x140 [ 223.038373][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 223.044038][ T8672] __kasan_slab_alloc+0x23/0x80 [ 223.048911][ T8672] __kmalloc_cache_noprof+0x132/0x2c0 [ 223.054289][ T8672] ref_tracker_alloc+0x14b/0x490 [ 223.059244][ T8672] netdev_queue_update_kobjects+0x181/0x550 [ 223.065141][ T8672] netdev_register_kobject+0x265/0x310 [ 223.070625][ T8672] register_netdevice+0x12c5/0x1b00 [ 223.075866][ T8672] team_newlink+0x10a/0x170 [ 223.080395][ T8672] rtnl_newlink+0x1591/0x20a0 [ 223.085074][ T8672] rtnetlink_rcv_msg+0x73f/0xcf0 [ 223.090041][ T8672] netlink_rcv_skb+0x1e3/0x430 [ 223.094807][ T8672] Modules linked in: [ 223.098729][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 223.110793][ T8672] Tainted: [B]=BAD_PAGE [ 223.114955][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.125011][ T8672] Call Trace: [ 223.128310][ T8672] [ 223.131274][ T8672] dump_stack_lvl+0x241/0x360 [ 223.135972][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.141192][ T8672] ? __pfx_print_modules+0x10/0x10 [ 223.146327][ T8672] bad_page+0x166/0x1b0 [ 223.150506][ T8672] free_unref_page+0xed0/0xf20 [ 223.155281][ T8672] skb_release_data+0x6dc/0x8a0 [ 223.160153][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 223.165182][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 223.170914][ T8672] ? __lock_acquire+0x1384/0x2050 [ 223.175970][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 223.182078][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 223.188079][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 223.194690][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 223.195875][ T5235] Bluetooth: hci2: command tx timeout [ 223.201191][ T8672] ? read_tsc+0x9/0x20 [ 223.210707][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 223.215942][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 223.222286][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 223.228476][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 223.234845][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 223.241537][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 223.246758][ T8672] ? __phys_addr+0xba/0x170 [ 223.251303][ T8672] ? build_skb_around+0x111/0x260 [ 223.256344][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 223.262256][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 223.267564][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 223.273050][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 223.278956][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 223.284505][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 223.290312][ T8672] ? synchronize_rcu+0x11b/0x360 [ 223.295256][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 223.300557][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 223.306825][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 223.312746][ T8672] ? _copy_from_user+0xa6/0xe0 [ 223.317522][ T8672] ? bpf_test_init+0x15a/0x180 [ 223.322281][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 223.327751][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 223.333151][ T8672] ? __pfx_lock_release+0x10/0x10 [ 223.338204][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 223.344012][ T8672] ? __fget_files+0x29/0x470 [ 223.348623][ T8672] ? fput+0x1a8/0x230 [ 223.352637][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 223.358450][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 223.363393][ T8672] __sys_bpf+0x48d/0x810 [ 223.367851][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 223.372647][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 223.378671][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.385009][ T8672] ? do_syscall_64+0x100/0x230 [ 223.389779][ T8672] __x64_sys_bpf+0x7c/0x90 [ 223.394197][ T8672] do_syscall_64+0xf3/0x230 [ 223.398707][ T8672] ? clear_bhb_loop+0x35/0x90 [ 223.403388][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.409292][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 223.413750][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.433369][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.441800][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 223.449783][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 223.457758][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 223.465744][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.473759][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 223.481747][ T8672] [ 223.484841][ T8672] BUG: Bad page state in process syz.1.799 pfn:676e7 [ 223.491719][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x676e7 [ 223.500501][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 223.507661][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 223.516301][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 223.524894][ T8672] page dumped because: page_pool leak [ 223.530286][ T8672] page_owner tracks the page as allocated [ 223.536020][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574290532, free_ts 218272250899 [ 223.552989][ T8672] post_alloc_hook+0x1f3/0x230 [ 223.557785][ T8672] get_page_from_freelist+0x3045/0x3190 [ 223.563366][ T8672] __alloc_pages_noprof+0x292/0x710 [ 223.568618][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 223.574102][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 223.580024][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 223.585237][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 223.590647][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 223.596058][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 223.601023][ T8672] __sys_bpf+0x48d/0x810 [ 223.605275][ T8672] __x64_sys_bpf+0x7c/0x90 [ 223.609733][ T8672] do_syscall_64+0xf3/0x230 [ 223.614261][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.620176][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 223.626559][ T8672] free_unref_page+0xcfb/0xf20 [ 223.631357][ T8672] __put_partials+0xeb/0x130 [ 223.635993][ T8672] put_cpu_partial+0x17c/0x250 [ 223.640763][ T8672] __slab_free+0x2ea/0x3d0 [ 223.645179][ T8672] qlist_free_all+0x9a/0x140 [ 223.649795][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 223.655253][ T8672] __kasan_slab_alloc+0x23/0x80 [ 223.660120][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 223.666058][ T8672] __alloc_skb+0x1c3/0x440 [ 223.670583][ T8672] netlink_ack+0x13f/0xa30 [ 223.675033][ T8672] netlink_rcv_skb+0x262/0x430 [ 223.679818][ T8672] netlink_unicast+0x7f6/0x990 [ 223.684588][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 223.689382][ T8672] __sock_sendmsg+0x221/0x270 [ 223.694066][ T8672] __sys_sendto+0x39b/0x4f0 [ 223.698582][ T8672] __x64_sys_sendto+0xde/0x100 [ 223.703349][ T8672] Modules linked in: [ 223.707287][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 223.719369][ T8672] Tainted: [B]=BAD_PAGE [ 223.723514][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.733569][ T8672] Call Trace: [ 223.736851][ T8672] [ 223.739799][ T8672] dump_stack_lvl+0x241/0x360 [ 223.744494][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.749708][ T8672] ? __pfx_print_modules+0x10/0x10 [ 223.754833][ T8672] bad_page+0x166/0x1b0 [ 223.759002][ T8672] free_unref_page+0xed0/0xf20 [ 223.763780][ T8672] skb_release_data+0x6dc/0x8a0 [ 223.768657][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 223.773711][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 223.779455][ T8672] ? __lock_acquire+0x1384/0x2050 [ 223.784492][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 223.790582][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 223.796589][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 223.803182][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 223.809690][ T8672] ? read_tsc+0x9/0x20 [ 223.813760][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 223.818964][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 223.825382][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 223.831570][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 223.837913][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 223.844624][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 223.849939][ T8672] ? __phys_addr+0xba/0x170 [ 223.854453][ T8672] ? build_skb_around+0x111/0x260 [ 223.859477][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 223.865377][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 223.870683][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 223.876142][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 223.882054][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 223.887636][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 223.893473][ T8672] ? synchronize_rcu+0x11b/0x360 [ 223.898421][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 223.903810][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 223.910074][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 223.915981][ T8672] ? _copy_from_user+0xa6/0xe0 [ 223.920752][ T8672] ? bpf_test_init+0x15a/0x180 [ 223.925515][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 223.930996][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 223.936378][ T8672] ? __pfx_lock_release+0x10/0x10 [ 223.941415][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 223.947239][ T8672] ? __fget_files+0x29/0x470 [ 223.951883][ T8672] ? fput+0x1a8/0x230 [ 223.955886][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 223.961693][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 223.966645][ T8672] __sys_bpf+0x48d/0x810 [ 223.970956][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 223.975754][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 223.981771][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.988125][ T8672] ? do_syscall_64+0x100/0x230 [ 223.992915][ T8672] __x64_sys_bpf+0x7c/0x90 [ 223.997342][ T8672] do_syscall_64+0xf3/0x230 [ 224.001858][ T8672] ? clear_bhb_loop+0x35/0x90 [ 224.006556][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.012485][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 224.016903][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.036518][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.044937][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 224.052919][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 224.060915][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 224.068898][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.076892][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 224.084965][ T8672] [ 224.088074][ T8672] BUG: Bad page state in process syz.1.799 pfn:676e6 [ 224.094858][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x676e6 [ 224.103689][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 224.110837][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 224.119455][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 224.128072][ T8672] page dumped because: page_pool leak [ 224.133452][ T8672] page_owner tracks the page as allocated [ 224.139207][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574282679, free_ts 218272250899 [ 224.156167][ T8672] post_alloc_hook+0x1f3/0x230 [ 224.160945][ T8672] get_page_from_freelist+0x3045/0x3190 [ 224.166529][ T8672] __alloc_pages_noprof+0x292/0x710 [ 224.171745][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 224.177225][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 224.183133][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 224.188376][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 224.193771][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 224.199173][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 224.204116][ T8672] __sys_bpf+0x48d/0x810 [ 224.208398][ T8672] __x64_sys_bpf+0x7c/0x90 [ 224.212836][ T8672] do_syscall_64+0xf3/0x230 [ 224.217357][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.223266][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 224.229610][ T8672] free_unref_page+0xcfb/0xf20 [ 224.234392][ T8672] __put_partials+0xeb/0x130 [ 224.239009][ T8672] put_cpu_partial+0x17c/0x250 [ 224.243856][ T8672] __slab_free+0x2ea/0x3d0 [ 224.248316][ T8672] qlist_free_all+0x9a/0x140 [ 224.252925][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 224.258417][ T8672] __kasan_slab_alloc+0x23/0x80 [ 224.263272][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 224.269209][ T8672] __alloc_skb+0x1c3/0x440 [ 224.273647][ T8672] netlink_ack+0x13f/0xa30 [ 224.278083][ T8672] netlink_rcv_skb+0x262/0x430 [ 224.282844][ T8672] netlink_unicast+0x7f6/0x990 [ 224.287658][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 224.292458][ T8672] __sock_sendmsg+0x221/0x270 [ 224.297190][ T8672] __sys_sendto+0x39b/0x4f0 [ 224.301703][ T8672] __x64_sys_sendto+0xde/0x100 [ 224.306510][ T8672] Modules linked in: [ 224.310447][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 224.322514][ T8672] Tainted: [B]=BAD_PAGE [ 224.326693][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.336777][ T8672] Call Trace: [ 224.340066][ T8672] [ 224.342997][ T8672] dump_stack_lvl+0x241/0x360 [ 224.347701][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.352931][ T8672] ? __pfx_print_modules+0x10/0x10 [ 224.358059][ T8672] bad_page+0x166/0x1b0 [ 224.362249][ T8672] free_unref_page+0xed0/0xf20 [ 224.367036][ T8672] skb_release_data+0x6dc/0x8a0 [ 224.371919][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 224.376947][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 224.382676][ T8672] ? __lock_acquire+0x1384/0x2050 [ 224.387726][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 224.393833][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 224.399825][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 224.406430][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 224.412956][ T8672] ? read_tsc+0x9/0x20 [ 224.417033][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 224.422236][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 224.428581][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 224.434769][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 224.441129][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 224.447823][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 224.453045][ T8672] ? __phys_addr+0xba/0x170 [ 224.457550][ T8672] ? build_skb_around+0x111/0x260 [ 224.462590][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 224.468514][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 224.473831][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 224.479310][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 224.485210][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 224.490762][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 224.496658][ T8672] ? synchronize_rcu+0x11b/0x360 [ 224.501602][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 224.506916][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 224.513188][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 224.519109][ T8672] ? _copy_from_user+0xa6/0xe0 [ 224.523876][ T8672] ? bpf_test_init+0x15a/0x180 [ 224.528648][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 224.534128][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 224.539507][ T8672] ? __pfx_lock_release+0x10/0x10 [ 224.544571][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 224.550415][ T8672] ? __fget_files+0x29/0x470 [ 224.555019][ T8672] ? fput+0x1a8/0x230 [ 224.559013][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 224.564835][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 224.569790][ T8672] __sys_bpf+0x48d/0x810 [ 224.574037][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 224.578831][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.584820][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.591159][ T8672] ? do_syscall_64+0x100/0x230 [ 224.595948][ T8672] __x64_sys_bpf+0x7c/0x90 [ 224.600363][ T8672] do_syscall_64+0xf3/0x230 [ 224.604866][ T8672] ? clear_bhb_loop+0x35/0x90 [ 224.609573][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.615480][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 224.619894][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.639516][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.647993][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 224.655988][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 224.663973][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 224.671966][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.679940][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 224.687938][ T8672] [ 224.691029][ T8672] BUG: Bad page state in process syz.1.799 pfn:676e5 [ 224.697804][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x676e5 [ 224.706601][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 224.713734][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 224.715841][ T5235] Bluetooth: hci1: command tx timeout [ 224.722338][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 224.736308][ T8672] page dumped because: page_pool leak [ 224.741670][ T8672] page_owner tracks the page as allocated [ 224.747455][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574274786, free_ts 218272250899 [ 224.764472][ T8672] post_alloc_hook+0x1f3/0x230 [ 224.769309][ T8672] get_page_from_freelist+0x3045/0x3190 [ 224.774891][ T8672] __alloc_pages_noprof+0x292/0x710 [ 224.780124][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 224.785585][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 224.791528][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 224.796786][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 224.802184][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 224.807626][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 224.812600][ T8672] __sys_bpf+0x48d/0x810 [ 224.816879][ T8672] __x64_sys_bpf+0x7c/0x90 [ 224.821298][ T8672] do_syscall_64+0xf3/0x230 [ 224.825842][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.831759][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 224.838107][ T8672] free_unref_page+0xcfb/0xf20 [ 224.842880][ T8672] __put_partials+0xeb/0x130 [ 224.847522][ T8672] put_cpu_partial+0x17c/0x250 [ 224.852304][ T8672] __slab_free+0x2ea/0x3d0 [ 224.856741][ T8672] qlist_free_all+0x9a/0x140 [ 224.861325][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 224.866823][ T8672] __kasan_slab_alloc+0x23/0x80 [ 224.871699][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 224.877622][ T8672] __alloc_skb+0x1c3/0x440 [ 224.882059][ T8672] netlink_ack+0x13f/0xa30 [ 224.886539][ T8672] netlink_rcv_skb+0x262/0x430 [ 224.891345][ T8672] netlink_unicast+0x7f6/0x990 [ 224.896144][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 224.900907][ T8672] __sock_sendmsg+0x221/0x270 [ 224.905591][ T8672] __sys_sendto+0x39b/0x4f0 [ 224.910142][ T8672] __x64_sys_sendto+0xde/0x100 [ 224.914904][ T8672] Modules linked in: [ 224.918821][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 224.930887][ T8672] Tainted: [B]=BAD_PAGE [ 224.935028][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.945165][ T8672] Call Trace: [ 224.948451][ T8672] [ 224.951394][ T8672] dump_stack_lvl+0x241/0x360 [ 224.956079][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.961277][ T8672] ? __pfx_print_modules+0x10/0x10 [ 224.966409][ T8672] bad_page+0x166/0x1b0 [ 224.970604][ T8672] free_unref_page+0xed0/0xf20 [ 224.975403][ T8672] skb_release_data+0x6dc/0x8a0 [ 224.980265][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 224.985317][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 224.991047][ T8672] ? __lock_acquire+0x1384/0x2050 [ 224.996187][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 225.002399][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 225.008453][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 225.015077][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 225.021592][ T8672] ? read_tsc+0x9/0x20 [ 225.025673][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 225.030898][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 225.037244][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 225.043406][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 225.049791][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 225.056498][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 225.061702][ T8672] ? __phys_addr+0xba/0x170 [ 225.066213][ T8672] ? build_skb_around+0x111/0x260 [ 225.071256][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 225.077169][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 225.082477][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 225.087950][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 225.093887][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 225.099436][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 225.105246][ T8672] ? synchronize_rcu+0x11b/0x360 [ 225.110199][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 225.115497][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 225.121751][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 225.127672][ T8672] ? _copy_from_user+0xa6/0xe0 [ 225.132466][ T8672] ? bpf_test_init+0x15a/0x180 [ 225.137240][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 225.142698][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 225.148086][ T8672] ? __pfx_lock_release+0x10/0x10 [ 225.153142][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 225.158946][ T8672] ? __fget_files+0x29/0x470 [ 225.163537][ T8672] ? fput+0x1a8/0x230 [ 225.167534][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 225.173363][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 225.178313][ T8672] __sys_bpf+0x48d/0x810 [ 225.182561][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 225.187359][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 225.193379][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.199715][ T8672] ? do_syscall_64+0x100/0x230 [ 225.204484][ T8672] __x64_sys_bpf+0x7c/0x90 [ 225.208910][ T8672] do_syscall_64+0xf3/0x230 [ 225.213471][ T8672] ? clear_bhb_loop+0x35/0x90 [ 225.218161][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.224080][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 225.228510][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.248155][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.256595][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 225.264584][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 225.272577][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 225.276685][ T5235] Bluetooth: hci2: command tx timeout [ 225.280538][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.280557][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 225.280583][ T8672] [ 225.280656][ T8672] BUG: Bad page state in process syz.1.799 pfn:676e4 [ 225.280673][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x676e4 [ 225.280695][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 225.280723][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 225.280742][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 225.280755][ T8672] page dumped because: page_pool leak [ 225.280766][ T8672] page_owner tracks the page as allocated [ 225.280775][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574266784, free_ts 218272250899 [ 225.280809][ T8672] post_alloc_hook+0x1f3/0x230 [ 225.280844][ T8672] get_page_from_freelist+0x3045/0x3190 [ 225.280866][ T8672] __alloc_pages_noprof+0x292/0x710 [ 225.280887][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 225.280907][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 225.280941][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 225.280973][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 225.280997][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 225.281019][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 225.281046][ T8672] __sys_bpf+0x48d/0x810 [ 225.425270][ T8672] __x64_sys_bpf+0x7c/0x90 [ 225.429719][ T8672] do_syscall_64+0xf3/0x230 [ 225.434227][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.440141][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 225.446498][ T8672] free_unref_page+0xcfb/0xf20 [ 225.451307][ T8672] __put_partials+0xeb/0x130 [ 225.455933][ T8672] put_cpu_partial+0x17c/0x250 [ 225.460722][ T8672] __slab_free+0x2ea/0x3d0 [ 225.465136][ T8672] qlist_free_all+0x9a/0x140 [ 225.469761][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 225.475235][ T8672] __kasan_slab_alloc+0x23/0x80 [ 225.480138][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 225.486095][ T8672] __alloc_skb+0x1c3/0x440 [ 225.490538][ T8672] netlink_ack+0x13f/0xa30 [ 225.494956][ T8672] netlink_rcv_skb+0x262/0x430 [ 225.499751][ T8672] netlink_unicast+0x7f6/0x990 [ 225.504525][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 225.509344][ T8672] __sock_sendmsg+0x221/0x270 [ 225.514063][ T8672] __sys_sendto+0x39b/0x4f0 [ 225.518604][ T8672] __x64_sys_sendto+0xde/0x100 [ 225.523376][ T8672] Modules linked in: [ 225.527317][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 225.539834][ T8672] Tainted: [B]=BAD_PAGE [ 225.543978][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.554035][ T8672] Call Trace: [ 225.557309][ T8672] [ 225.560239][ T8672] dump_stack_lvl+0x241/0x360 [ 225.564922][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.570127][ T8672] ? __pfx_print_modules+0x10/0x10 [ 225.575269][ T8672] bad_page+0x166/0x1b0 [ 225.579432][ T8672] free_unref_page+0xed0/0xf20 [ 225.584206][ T8672] skb_release_data+0x6dc/0x8a0 [ 225.589082][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 225.594131][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 225.599878][ T8672] ? __lock_acquire+0x1384/0x2050 [ 225.604919][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 225.611007][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 225.616997][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 225.623587][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 225.630098][ T8672] ? read_tsc+0x9/0x20 [ 225.634186][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 225.639404][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 225.645752][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 225.651940][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 225.658305][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 225.664985][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 225.670197][ T8672] ? __phys_addr+0xba/0x170 [ 225.674722][ T8672] ? build_skb_around+0x111/0x260 [ 225.679753][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 225.685658][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 225.691058][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 225.696519][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 225.702419][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 225.707978][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 225.713802][ T8672] ? synchronize_rcu+0x11b/0x360 [ 225.718757][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 225.724050][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 225.730317][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 225.736329][ T8672] ? _copy_from_user+0xa6/0xe0 [ 225.741096][ T8672] ? bpf_test_init+0x15a/0x180 [ 225.745874][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 225.751348][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 225.756728][ T8672] ? __pfx_lock_release+0x10/0x10 [ 225.761763][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 225.767579][ T8672] ? __fget_files+0x29/0x470 [ 225.772193][ T8672] ? fput+0x1a8/0x230 [ 225.776176][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 225.782064][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 225.787018][ T8672] __sys_bpf+0x48d/0x810 [ 225.791286][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 225.796160][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 225.802167][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.808521][ T8672] ? do_syscall_64+0x100/0x230 [ 225.813316][ T8672] __x64_sys_bpf+0x7c/0x90 [ 225.817739][ T8672] do_syscall_64+0xf3/0x230 [ 225.822246][ T8672] ? clear_bhb_loop+0x35/0x90 [ 225.826941][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.832872][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 225.837292][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.856903][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.865404][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 225.873398][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 225.881369][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 225.889354][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.897357][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 225.905337][ T8672] [ 225.908455][ T8672] BUG: Bad page state in process syz.1.799 pfn:676e3 [ 225.915228][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x676e3 [ 225.924025][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 225.931167][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 225.939764][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 225.948376][ T8672] page dumped because: page_pool leak [ 225.953764][ T8672] page_owner tracks the page as allocated [ 225.959524][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574258729, free_ts 218272250899 [ 225.976498][ T8672] post_alloc_hook+0x1f3/0x230 [ 225.981276][ T8672] get_page_from_freelist+0x3045/0x3190 [ 225.986862][ T8672] __alloc_pages_noprof+0x292/0x710 [ 225.992080][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 225.997565][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 226.003473][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 226.008721][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 226.014115][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 226.019533][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 226.024475][ T8672] __sys_bpf+0x48d/0x810 [ 226.028761][ T8672] __x64_sys_bpf+0x7c/0x90 [ 226.033194][ T8672] do_syscall_64+0xf3/0x230 [ 226.037720][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.043614][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 226.049954][ T8672] free_unref_page+0xcfb/0xf20 [ 226.054728][ T8672] __put_partials+0xeb/0x130 [ 226.059353][ T8672] put_cpu_partial+0x17c/0x250 [ 226.064115][ T8672] __slab_free+0x2ea/0x3d0 [ 226.068568][ T8672] qlist_free_all+0x9a/0x140 [ 226.073175][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 226.078691][ T8672] __kasan_slab_alloc+0x23/0x80 [ 226.083561][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 226.089526][ T8672] __alloc_skb+0x1c3/0x440 [ 226.093959][ T8672] netlink_ack+0x13f/0xa30 [ 226.098399][ T8672] netlink_rcv_skb+0x262/0x430 [ 226.103160][ T8672] netlink_unicast+0x7f6/0x990 [ 226.107976][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 226.112762][ T8672] __sock_sendmsg+0x221/0x270 [ 226.117467][ T8672] __sys_sendto+0x39b/0x4f0 [ 226.121975][ T8672] __x64_sys_sendto+0xde/0x100 [ 226.126773][ T8672] Modules linked in: [ 226.130704][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 226.142786][ T8672] Tainted: [B]=BAD_PAGE [ 226.146937][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.157004][ T8672] Call Trace: [ 226.160299][ T8672] [ 226.163235][ T8672] dump_stack_lvl+0x241/0x360 [ 226.167941][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.173188][ T8672] ? __pfx_print_modules+0x10/0x10 [ 226.178311][ T8672] bad_page+0x166/0x1b0 [ 226.182480][ T8672] free_unref_page+0xed0/0xf20 [ 226.187269][ T8672] skb_release_data+0x6dc/0x8a0 [ 226.192141][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 226.197167][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 226.202900][ T8672] ? __lock_acquire+0x1384/0x2050 [ 226.207959][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 226.214068][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 226.220067][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 226.226669][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 226.233200][ T8672] ? read_tsc+0x9/0x20 [ 226.237297][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 226.242500][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 226.248842][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 226.255019][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 226.261355][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 226.268042][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 226.273259][ T8672] ? __phys_addr+0xba/0x170 [ 226.277761][ T8672] ? build_skb_around+0x111/0x260 [ 226.282781][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 226.288696][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 226.294006][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 226.299468][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 226.305376][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 226.310932][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 226.316743][ T8672] ? synchronize_rcu+0x11b/0x360 [ 226.321684][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 226.326993][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 226.333262][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 226.339165][ T8672] ? _copy_from_user+0xa6/0xe0 [ 226.343931][ T8672] ? bpf_test_init+0x15a/0x180 [ 226.348705][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 226.354184][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 226.359583][ T8672] ? __pfx_lock_release+0x10/0x10 [ 226.364617][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.370420][ T8672] ? __fget_files+0x29/0x470 [ 226.375016][ T8672] ? fput+0x1a8/0x230 [ 226.378997][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.384886][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 226.389864][ T8672] __sys_bpf+0x48d/0x810 [ 226.394107][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 226.398877][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.404871][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.411210][ T8672] ? do_syscall_64+0x100/0x230 [ 226.415982][ T8672] __x64_sys_bpf+0x7c/0x90 [ 226.420396][ T8672] do_syscall_64+0xf3/0x230 [ 226.424898][ T8672] ? clear_bhb_loop+0x35/0x90 [ 226.429580][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.435475][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 226.439886][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.459519][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.467949][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 226.475951][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 226.483941][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 226.491917][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.499919][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 226.507914][ T8672] [ 226.511003][ T8672] BUG: Bad page state in process syz.1.799 pfn:676e2 [ 226.517773][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x676e2 [ 226.526569][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 226.533694][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 226.542291][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 226.550887][ T8672] page dumped because: page_pool leak [ 226.556286][ T8672] page_owner tracks the page as allocated [ 226.562012][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574250925, free_ts 218272250899 [ 226.578986][ T8672] post_alloc_hook+0x1f3/0x230 [ 226.583778][ T8672] get_page_from_freelist+0x3045/0x3190 [ 226.589366][ T8672] __alloc_pages_noprof+0x292/0x710 [ 226.594594][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 226.600082][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 226.606018][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 226.611250][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 226.616674][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 226.622042][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 226.627016][ T8672] __sys_bpf+0x48d/0x810 [ 226.631333][ T8672] __x64_sys_bpf+0x7c/0x90 [ 226.635784][ T8672] do_syscall_64+0xf3/0x230 [ 226.640309][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.646244][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 226.652580][ T8672] free_unref_page+0xcfb/0xf20 [ 226.657372][ T8672] __put_partials+0xeb/0x130 [ 226.661971][ T8672] put_cpu_partial+0x17c/0x250 [ 226.666766][ T8672] __slab_free+0x2ea/0x3d0 [ 226.671217][ T8672] qlist_free_all+0x9a/0x140 [ 226.675835][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 226.681299][ T8672] __kasan_slab_alloc+0x23/0x80 [ 226.686200][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 226.692114][ T8672] __alloc_skb+0x1c3/0x440 [ 226.696561][ T8672] netlink_ack+0x13f/0xa30 [ 226.700988][ T8672] netlink_rcv_skb+0x262/0x430 [ 226.705773][ T8672] netlink_unicast+0x7f6/0x990 [ 226.710588][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 226.715354][ T8672] __sock_sendmsg+0x221/0x270 [ 226.720063][ T8672] __sys_sendto+0x39b/0x4f0 [ 226.724565][ T8672] __x64_sys_sendto+0xde/0x100 [ 226.729368][ T8672] Modules linked in: [ 226.733282][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 226.745349][ T8672] Tainted: [B]=BAD_PAGE [ 226.749494][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.759561][ T8672] Call Trace: [ 226.762851][ T8672] [ 226.765788][ T8672] dump_stack_lvl+0x241/0x360 [ 226.770491][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.775698][ T8672] ? __pfx_print_modules+0x10/0x10 [ 226.780834][ T8672] bad_page+0x166/0x1b0 [ 226.784990][ T8672] free_unref_page+0xed0/0xf20 [ 226.789790][ T8672] skb_release_data+0x6dc/0x8a0 [ 226.794647][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 226.799673][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 226.805400][ T8672] ? __lock_acquire+0x1384/0x2050 [ 226.810447][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 226.816535][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 226.822526][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 226.829128][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 226.835657][ T8672] ? read_tsc+0x9/0x20 [ 226.839743][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 226.844945][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 226.851281][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 226.857449][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 226.863779][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 226.870467][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 226.875686][ T8672] ? __phys_addr+0xba/0x170 [ 226.880202][ T8672] ? build_skb_around+0x111/0x260 [ 226.885231][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 226.891155][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 226.896452][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 226.901907][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 226.907819][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 226.913515][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 226.919347][ T8672] ? synchronize_rcu+0x11b/0x360 [ 226.924296][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 226.929608][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 226.935864][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 226.941763][ T8672] ? _copy_from_user+0xa6/0xe0 [ 226.946546][ T8672] ? bpf_test_init+0x15a/0x180 [ 226.951334][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 226.956808][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 226.962209][ T8672] ? __pfx_lock_release+0x10/0x10 [ 226.967257][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.973076][ T8672] ? __fget_files+0x29/0x470 [ 226.977696][ T8672] ? fput+0x1a8/0x230 [ 226.981700][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.987528][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 226.992490][ T8672] __sys_bpf+0x48d/0x810 [ 226.996749][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 227.001528][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 227.007526][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.013866][ T8672] ? do_syscall_64+0x100/0x230 [ 227.018646][ T8672] __x64_sys_bpf+0x7c/0x90 [ 227.023085][ T8672] do_syscall_64+0xf3/0x230 [ 227.027604][ T8672] ? clear_bhb_loop+0x35/0x90 [ 227.032296][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.038202][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 227.042625][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.062241][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.070667][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 227.078672][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 227.086657][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 227.094655][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.102629][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 227.110616][ T8672] [ 227.113714][ T8672] BUG: Bad page state in process syz.1.799 pfn:676e1 [ 227.120540][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x8 pfn:0x676e1 [ 227.129346][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 227.136507][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 227.145108][ T8672] raw: 0000000000000008 0000000000000001 00000000ffffffff 0000000000000000 [ 227.153712][ T8672] page dumped because: page_pool leak [ 227.159099][ T8672] page_owner tracks the page as allocated [ 227.164807][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574242905, free_ts 218272250899 [ 227.181851][ T8672] post_alloc_hook+0x1f3/0x230 [ 227.186667][ T8672] get_page_from_freelist+0x3045/0x3190 [ 227.192249][ T8672] __alloc_pages_noprof+0x292/0x710 [ 227.197500][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 227.202987][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 227.208919][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 227.214124][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 227.219520][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 227.224900][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 227.229872][ T8672] __sys_bpf+0x48d/0x810 [ 227.234117][ T8672] __x64_sys_bpf+0x7c/0x90 [ 227.238646][ T8672] do_syscall_64+0xf3/0x230 [ 227.243158][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.249084][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 227.255411][ T8672] free_unref_page+0xcfb/0xf20 [ 227.260204][ T8672] __put_partials+0xeb/0x130 [ 227.264811][ T8672] put_cpu_partial+0x17c/0x250 [ 227.269589][ T8672] __slab_free+0x2ea/0x3d0 [ 227.274021][ T8672] qlist_free_all+0x9a/0x140 [ 227.278651][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 227.284111][ T8672] __kasan_slab_alloc+0x23/0x80 [ 227.288984][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 227.294883][ T8672] __alloc_skb+0x1c3/0x440 [ 227.299346][ T8672] netlink_ack+0x13f/0xa30 [ 227.303769][ T8672] netlink_rcv_skb+0x262/0x430 [ 227.308548][ T8672] netlink_unicast+0x7f6/0x990 [ 227.313318][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 227.318101][ T8672] __sock_sendmsg+0x221/0x270 [ 227.322804][ T8672] __sys_sendto+0x39b/0x4f0 [ 227.327354][ T8672] __x64_sys_sendto+0xde/0x100 [ 227.332154][ T8672] Modules linked in: [ 227.336089][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 227.348175][ T8672] Tainted: [B]=BAD_PAGE [ 227.352319][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.362382][ T8672] Call Trace: [ 227.365660][ T8672] [ 227.368601][ T8672] dump_stack_lvl+0x241/0x360 [ 227.373287][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.378487][ T8672] ? __pfx_print_modules+0x10/0x10 [ 227.383609][ T8672] bad_page+0x166/0x1b0 [ 227.387769][ T8672] free_unref_page+0xed0/0xf20 [ 227.392567][ T8672] skb_release_data+0x6dc/0x8a0 [ 227.397448][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 227.402495][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 227.408227][ T8672] ? __lock_acquire+0x1384/0x2050 [ 227.413264][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 227.419354][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 227.425347][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 227.431965][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 227.438564][ T8672] ? read_tsc+0x9/0x20 [ 227.442636][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 227.447841][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 227.454173][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 227.460358][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 227.466733][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 227.473436][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 227.478643][ T8672] ? __phys_addr+0xba/0x170 [ 227.483160][ T8672] ? build_skb_around+0x111/0x260 [ 227.488275][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 227.494173][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 227.499465][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 227.504927][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 227.510832][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 227.516402][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 227.522226][ T8672] ? synchronize_rcu+0x11b/0x360 [ 227.527179][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 227.532508][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 227.538765][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 227.544662][ T8672] ? _copy_from_user+0xa6/0xe0 [ 227.549433][ T8672] ? bpf_test_init+0x15a/0x180 [ 227.554192][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 227.559652][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 227.565024][ T8672] ? __pfx_lock_release+0x10/0x10 [ 227.570065][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 227.575883][ T8672] ? __fget_files+0x29/0x470 [ 227.580513][ T8672] ? fput+0x1a8/0x230 [ 227.584493][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 227.590299][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 227.595242][ T8672] __sys_bpf+0x48d/0x810 [ 227.599489][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 227.604262][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 227.610250][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.616598][ T8672] ? do_syscall_64+0x100/0x230 [ 227.621388][ T8672] __x64_sys_bpf+0x7c/0x90 [ 227.625812][ T8672] do_syscall_64+0xf3/0x230 [ 227.630335][ T8672] ? clear_bhb_loop+0x35/0x90 [ 227.635026][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.640928][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 227.645341][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.664957][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.673376][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 227.681358][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 227.689359][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 227.697341][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.705330][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 227.713315][ T8672] [ 227.716423][ T8672] BUG: Bad page state in process syz.1.799 pfn:676e0 [ 227.723193][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880676e6000 pfn:0x676e0 [ 227.733280][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 227.740423][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 227.749029][ T8672] raw: ffff8880676e6000 0000000000000001 00000000ffffffff 0000000000000000 [ 227.757645][ T8672] page dumped because: page_pool leak [ 227.763021][ T8672] page_owner tracks the page as allocated [ 227.768752][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574234900, free_ts 218272250899 [ 227.785736][ T8672] post_alloc_hook+0x1f3/0x230 [ 227.790534][ T8672] get_page_from_freelist+0x3045/0x3190 [ 227.796113][ T8672] __alloc_pages_noprof+0x292/0x710 [ 227.801325][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 227.806821][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 227.812741][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 227.817965][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 227.823346][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 227.828739][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 227.833681][ T8672] __sys_bpf+0x48d/0x810 [ 227.838139][ T8672] __x64_sys_bpf+0x7c/0x90 [ 227.842588][ T8672] do_syscall_64+0xf3/0x230 [ 227.847137][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.853052][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 227.859390][ T8672] free_unref_page+0xcfb/0xf20 [ 227.864160][ T8672] __put_partials+0xeb/0x130 [ 227.868775][ T8672] put_cpu_partial+0x17c/0x250 [ 227.873536][ T8672] __slab_free+0x2ea/0x3d0 [ 227.877966][ T8672] qlist_free_all+0x9a/0x140 [ 227.882577][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 227.888055][ T8672] __kasan_slab_alloc+0x23/0x80 [ 227.892920][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 227.898833][ T8672] __alloc_skb+0x1c3/0x440 [ 227.903247][ T8672] netlink_ack+0x13f/0xa30 [ 227.907676][ T8672] netlink_rcv_skb+0x262/0x430 [ 227.912434][ T8672] netlink_unicast+0x7f6/0x990 [ 227.917239][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 227.922043][ T8672] __sock_sendmsg+0x221/0x270 [ 227.926763][ T8672] __sys_sendto+0x39b/0x4f0 [ 227.931320][ T8672] __x64_sys_sendto+0xde/0x100 [ 227.936123][ T8672] Modules linked in: [ 227.940043][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 227.952126][ T8672] Tainted: [B]=BAD_PAGE [ 227.956283][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.966384][ T8672] Call Trace: [ 227.969705][ T8672] [ 227.972631][ T8672] dump_stack_lvl+0x241/0x360 [ 227.977330][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.982564][ T8672] ? __pfx_print_modules+0x10/0x10 [ 227.987700][ T8672] bad_page+0x166/0x1b0 [ 227.991857][ T8672] free_unref_page+0xed0/0xf20 [ 227.996643][ T8672] skb_release_data+0x6dc/0x8a0 [ 228.001537][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 228.006574][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 228.012328][ T8672] ? __lock_acquire+0x1384/0x2050 [ 228.017377][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 228.023503][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 228.029496][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 228.036096][ T8672] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 228.042633][ T8672] ? read_tsc+0x9/0x20 [ 228.046803][ T8672] ? timekeeping_get_ns+0x2c0/0x420 [ 228.052026][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 228.058360][ T8672] netif_receive_skb_list_internal+0xa51/0xe30 [ 228.064520][ T8672] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 228.070968][ T8672] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 228.077669][ T8672] ? __pfx_eth_type_trans+0x10/0x10 [ 228.082897][ T8672] ? __phys_addr+0xba/0x170 [ 228.087416][ T8672] ? build_skb_around+0x111/0x260 [ 228.092446][ T8672] ? __xdp_build_skb_from_frame+0x338/0x650 [ 228.098356][ T8672] netif_receive_skb_list+0x55/0x4b0 [ 228.103679][ T8672] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 228.109148][ T8672] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 228.115045][ T8672] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 228.120591][ T8672] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 228.126407][ T8672] ? synchronize_rcu+0x11b/0x360 [ 228.131452][ T8672] ? __pfx_synchronize_rcu+0x10/0x10 [ 228.136763][ T8672] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 228.143029][ T8672] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 228.148935][ T8672] ? _copy_from_user+0xa6/0xe0 [ 228.153730][ T8672] ? bpf_test_init+0x15a/0x180 [ 228.158495][ T8672] ? xdp_convert_md_to_buff+0x5b/0x330 [ 228.163956][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 228.169346][ T8672] ? __pfx_lock_release+0x10/0x10 [ 228.174378][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 228.180183][ T8672] ? __fget_files+0x29/0x470 [ 228.184794][ T8672] ? fput+0x1a8/0x230 [ 228.188799][ T8672] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 228.194607][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 228.199556][ T8672] __sys_bpf+0x48d/0x810 [ 228.203802][ T8672] ? __pfx___sys_bpf+0x10/0x10 [ 228.208572][ T8672] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 228.214561][ T8672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.220897][ T8672] ? do_syscall_64+0x100/0x230 [ 228.225664][ T8672] __x64_sys_bpf+0x7c/0x90 [ 228.230095][ T8672] do_syscall_64+0xf3/0x230 [ 228.234599][ T8672] ? clear_bhb_loop+0x35/0x90 [ 228.239288][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.245183][ T8672] RIP: 0033:0x7f4b2eb7dff9 [ 228.249598][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.269225][ T8672] RSP: 002b:00007f4b2fa5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.277659][ T8672] RAX: ffffffffffffffda RBX: 00007f4b2ed35f80 RCX: 00007f4b2eb7dff9 [ 228.285644][ T8672] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 228.293619][ T8672] RBP: 00007f4b2ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 228.301597][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.309566][ T8672] R13: 0000000000000000 R14: 00007f4b2ed35f80 R15: 00007ffdabd22978 [ 228.317562][ T8672] [ 228.320665][ T8672] BUG: Bad page state in process syz.1.799 pfn:67457 [ 228.327457][ T8672] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67457 [ 228.336247][ T8672] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 228.343400][ T8672] raw: 00fff00000000000 dead000000000040 ffff88805cef6000 0000000000000000 [ 228.352036][ T8672] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 228.360637][ T8672] page dumped because: page_pool leak [ 228.366036][ T8672] page_owner tracks the page as allocated [ 228.371756][ T8672] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8672, tgid 8670 (syz.1.799), ts 218574226892, free_ts 218272309488 [ 228.388715][ T8672] post_alloc_hook+0x1f3/0x230 [ 228.393487][ T8672] get_page_from_freelist+0x3045/0x3190 [ 228.399059][ T8672] __alloc_pages_noprof+0x292/0x710 [ 228.404255][ T8672] alloc_pages_bulk_noprof+0x729/0xd40 [ 228.409737][ T8672] __page_pool_alloc_pages_slow+0x122/0x690 [ 228.415638][ T8672] page_pool_alloc_pages+0xd0/0x1c0 [ 228.420882][ T8672] bpf_test_run_xdp_live+0x950/0x2160 [ 228.426298][ T8672] bpf_prog_test_run_xdp+0x805/0x11e0 [ 228.431698][ T8672] bpf_prog_test_run+0x2e4/0x360 [ 228.436698][ T8672] __sys_bpf+0x48d/0x810 [ 228.440992][ T8672] __x64_sys_bpf+0x7c/0x90 [ 228.445419][ T8672] do_syscall_64+0xf3/0x230 [ 228.449983][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.455931][ T8672] page last free pid 8635 tgid 8635 stack trace: [ 228.462292][ T8672] free_unref_page+0xcfb/0xf20 [ 228.467108][ T8672] __put_partials+0xeb/0x130 [ 228.471727][ T8672] put_cpu_partial+0x17c/0x250 [ 228.476545][ T8672] __slab_free+0x2ea/0x3d0 [ 228.480998][ T8672] qlist_free_all+0x9a/0x140 [ 228.485604][ T8672] kasan_quarantine_reduce+0x14f/0x170 [ 228.491109][ T8672] __kasan_slab_alloc+0x23/0x80 [ 228.496005][ T8672] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 228.501932][ T8672] __alloc_skb+0x1c3/0x440 [ 228.506403][ T8672] netlink_ack+0x13f/0xa30 [ 228.510880][ T8672] netlink_rcv_skb+0x262/0x430 [ 228.515643][ T8672] netlink_unicast+0x7f6/0x990 [ 228.520470][ T8672] netlink_sendmsg+0x8e4/0xcb0 [ 228.525234][ T8672] __sock_sendmsg+0x221/0x270 [ 228.529938][ T8672] __sys_sendto+0x39b/0x4f0 [ 228.534441][ T8672] __x64_sys_sendto+0xde/0x100 [ 228.539229][ T8672] Modules linked in: [ 228.543127][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.799 Tainted: G B 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 228.555232][ T8672] Tainted: [B]=BAD_PAGE [ 228.559381][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.569435][ T8672] Call Trace: [ 228.572707][ T8672] [ 228.575636][ T8672] dump_stack_lvl+0x241/0x360 [ 228.580325][ T8672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.585524][ T8672] ? __pfx_print_modules+0x10/0x10 [ 228.590642][ T8672] bad_page+0x166/0x1b0 [ 228.594801][ T8672] free_unref_page+0xed0/0xf20 [ 228.599577][ T8672] skb_release_data+0x6dc/0x8a0 [ 228.604434][ T8672] sk_skb_reason_drop+0x1c9/0x380 [ 228.609470][ T8672] __netif_receive_skb_core+0x3edd/0x4570 [ 228.615207][ T8672] ? __lock_acquire+0x1384/0x2050 [ 228.620255][ T8672] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 228.626369][ T8672] __netif_receive_skb_list_core+0x2b1/0x980 [ 228.632468][ T8672] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10