last executing test programs: 3.994744721s ago: executing program 4 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xac}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x3, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x38, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x40, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "4f882fd480b4ef11f5942de315c26038"}, @md5sig={0x13, 0x12, "f78c5aaea555008d4434df8d965c0f70"}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x66}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r9 = socket(0x2b, 0x1, 0x1) getsockopt$inet6_tcp_int(r9, 0x6, 0x11, 0x0, &(0x7f00000000c0)) bind$can_j1939(r7, &(0x7f0000000240)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000280)={0x1d, r8}, 0x18) sendmmsg(r7, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000180)) 3.013311186s ago: executing program 4 (id=859): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071106e00000058a3"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x10081) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 2.810454116s ago: executing program 4 (id=864): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0x1, 0xff, 0x0, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}, 0x9, 0x3, 0x9, 0x3, 0xd5, 0x4, 0x3}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r1, 0x3, 0x6f}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x8000, 0x0, 0x54}, 0x9c) 1.838761202s ago: executing program 4 (id=879): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 1.822181754s ago: executing program 4 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200f6ff0014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x40020c4) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x20, 0x15, 0xa, 0x903, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8009}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004f1000500067000000069078ac141400ac1e0001440b08ac1414bbe00000028917d779010100ac14142eb8ca41334bf73d00ffffffff44040000000000004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x8, 0x5, 0x6, 0x0, 0x2, 0x3}}, {0x4}}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000300), r1) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500b400000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)={0xa4, r7, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x18}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x188}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x20}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd7}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x60000000}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4841}, 0x40080) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000410007010000000000000000800a4e0000"], 0x1c}}, 0x0) accept4(r8, 0x0, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.68294205s ago: executing program 3 (id=882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') r5 = getpid() sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_GETNSID={0x34, 0x5a, 0x266ed364277884a, 0x70bd26, 0x25dfdbfc, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8, 0x2, r5}]}, 0x34}}, 0x4004) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f00000022c0)={0x11, 0x0, 0x0}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) 1.546893921s ago: executing program 3 (id=883): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x0) 1.220643244s ago: executing program 2 (id=888): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) (async) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000002240), &(0x7f0000002280)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013e00000000009500170000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'vxcan1\x00'}) (rerun: 64) 1.114126253s ago: executing program 2 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="180000005a000d0300000000000000000500008006000000"], 0x18}], 0x1}, 0x0) 1.080597042s ago: executing program 0 (id=891): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003c00)=ANY=[@ANYBLOB="e00000001000090500c63703b60000000000d00008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d08000000337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2828"], 0xe0}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05002300012200", 0x7) 1.006921417s ago: executing program 1 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) 865.335499ms ago: executing program 4 (id=893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708f700000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000000011636349a45f3fe403d15d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000680)="4cd9e2f56462ada6f2b4de0183c4b5c2bae45b0a361712814fdabd7ca266d22c411e20874a93bc49e991940377b46ab8011cbd99784aef99a116a54b5d383db7b1b82a79409e7c3da01c20434b6dad47d126feb66a1ae44ba8ef72e221f83865ce941b13f863bcf8bc42520ae8e0a15c90", &(0x7f00000003c0)="84b73e0aa02a5db9bbc30824c051a75a70fd5d9ff407393f3682b316e30bb966066787a1580a1e22c2000a2364921bc957c6fa0ba0f5c96299614d66c3a62221ff621c12d747f8906b34c7cff7207181414cb1", 0x844b, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000040)=0x3) 788.644154ms ago: executing program 0 (id=894): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x58, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000780)={'sit0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x8000, 0x80, 0x401, 0x0, {{0x6, 0x4, 0x2, 0x33, 0x18, 0x66, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, {[@rr={0x7, 0x3, 0x8}]}}}}}) connect$qrtr(r4, &(0x7f0000000000), 0xc) close(r4) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000c, 0x10, r4, 0x60f9b000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004340)={0xffffffffffffffff, 0xe0, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000004080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000040c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000004140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000004180), &(0x7f00000041c0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000004200)}}, 0x10) sendmmsg$inet(r2, &(0x7f00000043c0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="2b3926b92a81e52621e37ad33173d51c91f2ddcdea063e1454f611e7d8b2c1432e8f71e97318d0b7a6", 0x29}, {&(0x7f0000000240)="50b316c9b444f89c1bcf4ae1b8fbc1d66a50f10229f04d7294f19046651dc82251d35be2b046c69007d38ed469ba4b3717e097ccc26140", 0x37}], 0x2, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xcfb4}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="c66181e3eb951a810df624e1307943d6f38d2de574555dafbcea4001f0b436a4be70f653468caa76b525bd88f877796469b602b14bf6970b68ce06f64019", 0x3e}, {&(0x7f0000000380)="57b3f8f4255191a05a291a66bb6915c60305980ff291c8fc4fb04163c8fed0eeda9290aa", 0x24}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000000500)="afac858c0c171e29692eb52b5ecfc71e583b52ad835e0ca078c04189dccef5207d3affa8820731bc86af28465a77407bd9568c9b7bc5139944791eba618b4daec1649a8dc1d364d8fadfba4f0f1134f47235c09143665eab1ee4d2fec4c86a2012f4501dc41ea22d3770cc2ef7a75caaae50229f2601c7e15a3f40e3fda56e5f7103cea1e38b79da58c6f640f23f73eccae2bf15e0c068", 0x97}, {&(0x7f00000005c0)="7f55bc87fd3468b074ddcf595dc007f0efecacf01f69753954712803aaa5b0ee3be41e13d52d4b7c15ed7018c6a5ce6d12b9ec7fa19967c20a412efd9240fcf50729cd2ea5758e91e05b8262237b7170e664afdabaf58f0cce4ca880ab273d43ec0e313321b533f4a0f51b689254f9009f488738a2c74794392829d306fffb503f066076d94a60b7ee7aaca9cb6e10dbd956e95c807f5f2c708f4efbe2", 0x9d}], 0x6, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}, {{&(0x7f0000000700)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000740)="7a7b2ef54c4dcd560ebb3007dacb229de56d51b298a0f0463a59f11e9c34d0faf4e91e558c09ece03bd3124e8a8715af80a0d41895e34e4502ad6fedc3b6623a5d0e4410d0573484d24c62299d41597cccafc23f1895c3b68abc526c1c3a69bdc7975eb609eba9dfb472e8e6be485efc9027f1a25d49c469260b7b71924b7c8bbaac6c7328404e7933d66dd449b9cda8fe1ac3c5cd6f683d83", 0x99}, {&(0x7f0000000800)="db1106a82f4eaca090f5b95748e1972d14e9ef864d9a5b4fe7c89c500fcd373c53eb3ef1973935519f89d3404e85c8808e88763fae9b4ff3b1dc3cdebf71b5a73851f3128300f5e50558420630e24ca101c4fecce0656420a163650f476f5ab8c6b8520e032fbf49f34e2106af875c3f0e1d447da6929a585e7b02f9b5de824e5f161ed0204479f12a58e27a22094f119cd633797dfb1adbdc3b32333ab2138e27e013b02b46b46e5c0f0208a68dfb1eaf2751f0fb30721c0baf118393e381569cd202eabf320d6e5dfc68c17a5327", 0xcf}, {&(0x7f0000000900)="8b8681e5398ced7ab7d8d75bcf92940e6a", 0x11}, {&(0x7f0000000940)="efd3fc9d8aa766cc7adbe2961a1d6f462647ccee378f6b72495a9f2b78e289bf8241336befbef90b7824388c86e37788ac6da780e4a503390000a34e3d61af51440100d504806e23a36587d0012c62afffda200d9b8d2dcd2662e85092b86eab2d90f0a7e465aced162b35c9314e95e6237056763fa7b60b9d42310d924b7560118b5ee45073407b9110ecba59472a6bc1", 0x91}, {&(0x7f0000001b80)="ee698ee72a2487a3566ca779989954aeba095a2bb8cdaf1705997cca0fe802063138647f8ace71c847c2c778de215a38b0c642b7cc56b041c11b41e43152a17790fe9d4fec6cdca0c0cc6c2a25bf69d806203fc4ea5c22bf70e75710e4a50f4e42a31b6b72c3a74f0c7f6fa03ac695da5bf2abe9aa591aaabdeb9ff7aa84b74ae28c54d6b93d9145d0772cb357f79e017309dccd9ce69bf8a845924cff9bd7f721797a4c77945fa1494d7bd63eb65851609918eb1fbe48014ace89a0f3a14bc43f2a8cea9535b0045cbcd9ce23271a6e86cf639aa16f1bb5f990d23171fbff58e467e09cbdf13c3c71609d4186b3660fcd87894d", 0xf4}, {&(0x7f0000000a00)="2094dfe5d0b0f853fa355f4178b7e5fb2aacf0805fbd619c16343cef5768b8acfde20507f66d4975908d79", 0x2b}], 0x6}}, {{&(0x7f0000001c80)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000001cc0)="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", 0x1000}], 0x1}}, {{&(0x7f0000002d00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000004000)=[{&(0x7f0000002d40)="6ff3626473e5ffa290583162a0b90e7ed7dc0aaef48d020ab19d22587ac9c66910527aefa29f809c4770a59ab63e2a3569f70688ac7fb6713290f55c60be66577ff82ef6c2a03ac2980125b5357259f09fb037c4834a1392345768cf2f004986d07a2af34b52ca6f6ce88a7903cc301d99a803d030afcdd7e3ce3be69d2d8b8942fd8a20ef50a0c51df643534ce3abb6531bbebbfe1797df861ff61cba5ecdde93dcd26bc9a1ca45e44bc8316b0ce13161755141334244d56d8b7be8337b5432b5ef048aa88282158c747e185e311019fb828141e53fb68a0e19f035a096223265d75a3b", 0xe4}, {&(0x7f0000002e40)="e4aeedd02ceb81a9490d7cb51a73f722", 0x10}, {&(0x7f0000002e80)="4f71de91b7c367cdec382f5e3350b44a6b40f621c1ff9b2028f283c9d4ad640ebdaa1e0e4417012f88941d9ab534fc242f11cbee84e003f7b5373412e545a7c499", 0x41}, {&(0x7f0000002f00)="69125556e6ceb7c022e0cf1a0d61ad6c7cb2ee8d93fa50340276f6e8e606680487fd26ace3828aa7faddefcc01d2528586893dc1410b2d7da610", 0x3a}, {&(0x7f0000002f40)="fe12741974cdd91c4e711a26168d8148d38f80fe0f24254303fa4120db911216b28be0a2d5d647e5533326e89bb0247c108d3a", 0x33}, {&(0x7f0000002f80)="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", 0x1000}, {&(0x7f0000003f80)="1bd2efa3a9ef21c057d2efc5f1e861c0eb6983c6763d287822d74577e8f823fdc934bcfb15f46593b090880c27f17a3e8e701f60c7602798d84da92bba7fdec622655e34b26d2f6744f778f51f2ffc453fcb60cce09954645e8591fde42e653f9e27210d706c96a22d36c5031cbe700fca73ae285b3996", 0x77}], 0x7, &(0x7f0000004380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @remote}}}], 0x20}}], 0x5, 0x40) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newqdisc={0xa0, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0x80, 0xff13, 0x9, 0x0, 0xfffffffb, 0x10f}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x0, 0x0, 0x0, 0x0, 0x10001}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}, @TCA_NETEM_DELAY_DIST={0x1a, 0x2, "bb31dd582025e5bfe05b342a891035fe2abd168e2c8b"}]}}}]}, 0xa0}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) 788.268146ms ago: executing program 1 (id=895): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x102) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000140), 0xfffffdef) write(r0, &(0x7f0000000300)='n', 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip6gre0\x00', @local}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'ip6gre0\x00', @local}) syz_emit_ethernet(0xaf, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910"], 0x0) 714.822829ms ago: executing program 2 (id=896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ee, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000741c9934000000010440000000c0a01020000000000000000010000000900020073797a32000000000900010073797a30000000001800038014000080040001"], 0xd0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90006"], 0x124}}, 0xc000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'veth1_to_batadv\x00', {0x3}}) setsockopt$inet6_int(r3, 0x29, 0x1f, &(0x7f0000001c80)=0xfffffffd, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000010000000000000000000000000000200000028000480240001800b000100657874686472000014000280080001400000000008000640000000030900010073797a30000000000900020073797a3200020000140000001100e00000000000000000000000000a00"/124], 0x7c}}, 0x0) 688.436349ms ago: executing program 3 (id=897): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000ba8a7fdbf6def50a1d79d1f6df049607000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x800}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000000c0)="05000000010000", 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0xa8}}, 0x24000001) 623.794592ms ago: executing program 1 (id=898): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x44, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xbb5e}]}, 0x44}}, 0x4004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000580)=0xeca, 0x4) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x40, r6, 0xc31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x75, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd7}]}]}]}, 0x40}}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000280)}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8002000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {}, {0x1}}}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0x8, 0x0, 0x62) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async, rerun: 32) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f0000000080)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb6d}}], &(0x7f0000000140)='syzkaller\x00', 0x100, 0x56, &(0x7f0000000380)=""/86, 0x41100, 0x20, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x5, 0x5, 0x6, 0x4}, {0x0, 0x3, 0x5, 0x3}, {0x2, 0x5, 0xe, 0x7}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='snd_soc_jack_irq\x00', r13}, 0x18) 546.693906ms ago: executing program 2 (id=899): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x11, 0x0, 0x200, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40005d, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f00000005c0), 0x8, 0x2, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x35, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r5, r4}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0f0000000400000000000000", @ANYRES32=r0, @ANYBLOB="c1857032dd6de70ef82a2287523e7a1e3330f0f5c1e9103cf5f8d51a1225ee76c548f9582271de5012841f400c809ada2cc41e6129a785b1dfeb3e4d6d4df0b4dde8e43e99bae448f00f9ba2379960894b363f81cb198fca482b346ec763cc2a63d5bb12c727c72dffffffff1d0fa3d80fe61fbae9db3f1610de4976ac5a6699a4f054e8fd398d09338e63", @ANYRES64=r4], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x40, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x40}}, 0x0) socket$alg(0x26, 0x5, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0xf, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=ANY=[@ANYRES32=r6, @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYBLOB="d814726e2f681a35a6b69b0acc5b8a5b12e7772e69f8bcbb7e1f1f886e470f2b98d6e5e80872010f1694443968e868ed6be55899861dcce792ac36b4fa40077ed6fbe065a5d4ae50cc25376c9ebf7e2025b46cc8b48e15895bb1fb8ae4567f373d5da7a820c8fbedb3528e12e8a4da10586adf3dba472f46133f", @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 538.791247ms ago: executing program 0 (id=900): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c30014016800"}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="06987728e729ecb494924da9913d596cb581d832ab19937b137f1692acf62aeb0c2fade94b8aefad67a53c4c9156a4832a4e0e90e3e1e9dc0f2acc20598fd58f57a34db4b44479e52edbd8c946a0f25d9fa32717aafdad752136eb48111c2d7c10da26cb5afca71e4fa890ac1830cc7c6e57ceb18a738f3dcc19c2559e6c2a19dbdc2ba64e56c3fa5bf2bba41f496fc4c9995966aee50ac5379065c40773628b174417c5b56c8cc39a928cd97ce7f042b8255136c4d641514343743aae1e3a8df492e31d00", 0xc5}], 0x1}}], 0x1, 0x8000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="46003300d000000008021100000108021100000050505050505000000f050000100072060303030303032d1a000000000000000034aa52b100000000000000000000007602000000000000daa7db542eaf86"], 0x64}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r7, 0x20000005) socket$inet6(0xa, 0x6, 0x0) shutdown(r0, 0x1) 511.13591ms ago: executing program 3 (id=901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000010000300", @ANYBLOB], 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000001c00018008000700", @ANYRES32=0x0, @ANYBLOB="080003007f000001080006"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x7, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYBLOB="000000000900000018", @ANYRES32=r4, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000400)=[{0x0}], 0x1) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r4, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x40084) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c280000500030004"], 0x48}}, 0x0) 488.740602ms ago: executing program 1 (id=902): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2}]}, @mark={0xc, 0x15, {0x0, 0x1}}]}, 0x178}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002740)={'tunl0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r9, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="01ed000012ac00000000000000a6b6"], 0x14}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000020047e1d9a63200001200000010000700000000"], 0x48) close(r12) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f00000000c0)=r16, 0x4) sendmsg$unix(r15, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, &(0x7f0000002b40), 0x0, 0x0, &(0x7f0000002780)={0x11, 0x8847, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 387.641752ms ago: executing program 2 (id=903): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000580), 0x0}, 0x20) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a20014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x100, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000002c0)={0xffffffff80000001, 0x4, 0x9, 0xffffffff, 0x7, 0x8, 0x2, 0x8}, &(0x7f0000000300)={0xe, 0xfff, 0x10001, 0x50, 0x80000001, 0x4, 0x9, 0x8}, &(0x7f0000000340)={0x200, 0x0, 0xffffffff, 0xb739, 0x101, 0x0, 0x10000, 0x7}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x1]}, 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r10}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}]}, 0x40}}, 0x0) 376.587072ms ago: executing program 0 (id=904): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00050a000000000000000002000000fc"], 0x1c}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r0, 0x2) 351.14627ms ago: executing program 1 (id=905): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8015, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) 234.510455ms ago: executing program 3 (id=906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @remote, 0x4}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFALIASn={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$kcm(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8], 0x4c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x3}, {0x6, 0x0, 0x3, 0xffffffff}]}) write$ppp(r9, &(0x7f0000000140)="1627", 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x284, 0x31, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9e}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x82}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4a9e}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3e9e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6c91877}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc13}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x46e}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf9e4}}]}]}, 0x284}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000020202000900030073797a320000000009000100737d"], 0x2c}, 0x1, 0x40030000000000}, 0x2000c040) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="2df08e1e4b3be3ff01ce8025ff6c7d0becdc635329e4a209b24bc756682691f9a47e3f013c0e575d45d797840ab65ac6e287392fcaa313d3b2556652fc7686f1bd3b88a6e96c883e870874624c590c115e0236eb28cc", @ANYRES16=r12, @ANYBLOB="00042dbd7000ffdbdf250300000014000200697036677265300000000000000000000900010073797a32000000000900030073797a3100000000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xb6c0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f00000006c0)=""/89, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) listen(r0, 0x0) 214.874097ms ago: executing program 0 (id=907): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000e0000711232000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 201.221747ms ago: executing program 1 (id=908): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500080000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r3, 0x31b}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 50.567394ms ago: executing program 0 (id=909): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a50000000060a0b0400000000000000000200000224000480200001800700010063740000140002800800024000000004080004400000000000000900020073797a32005c4225f1da3d9fe473629b00400014000000110001000000000000000100010000"], 0x78}}, 0x0) (rerun: 32) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0xf, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc9c}]]}, 0x6c}}, 0x0) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000030525bd700000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000", @ANYRES32=r8, @ANYBLOB="08001f00"], 0x58}}, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) write$cgroup_int(r11, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r11, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7}) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) (async, rerun: 64) r13 = socket$netlink(0x10, 0x3, 0x13) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r13) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x7f, @empty, 0x7}}, 0xd1, 0xd1}, 0x90) (async) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 47.537213ms ago: executing program 2 (id=910): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN={0x3a}, @TCA_HTB_DIRECT_QLEN={0x2}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x68}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64=r1, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES64=r1], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0xfffffffe, @local, 0x10000}}, 0x0, 0x0, 0x5, 0x0, "1bc2ac41d4429ebc7862ce028fb563937ef6a6d7b643ffdb5def39ffd1db871c1f82a41d264b53b15515c76f6061cd727a38b1d99783e95cc863ad677288b8beb2a4474bb8fec39d9e54af280f9e1987"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffd}]}, 0x48}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000) listen(r5, 0xfff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff00000000bfa1000000000000070100002bffffffb702000008000000b7030000000000008500000006000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r10, 0x111, 0x1, 0x0, 0xdee80f9d8f6c9095) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000cc0)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x800}, 0x1, 0x0, 0x5, 0x7, 0x6, 'syz1\x00', "c366c88125fa10af1ed3bcdbe9d15af0a81d990414e7274c22c3c2bcb4c5c8ed", "0024c23dd5f02332903e0d8695e816108da7aa82374e0fff70a3653521b4c830", [{0xc1d, 0x4, {0x0, 0x4}}, {0xf8, 0x6, {0x2, 0x1}}, {0x4, 0x6, {0x3, 0x80000001}}, {0x0, 0x2, {0x1, 0x8}}, {0x3, 0x3, {0x2, 0x5}}, {0xd, 0x2, {0x1, 0x7fdf}}, {0x91b1, 0x0, {0x0, 0x5}}, {0x5, 0xfffd, {0x1, 0xec000000}}, {0x8db1, 0x5, {0x2, 0x4}}, {0xfffa, 0x0, {0x0, 0x4}}, {0x6, 0x40, {0x1, 0x2}}, {0x40, 0x3, {0x0, 0x1}}, {0x2, 0x8, {0x3, 0x4}}, {0xfffe, 0x4, {0x2, 0x2}}, {0x4, 0x9187, {0x0, 0x7}}, {0x97, 0x3, {0x1, 0x3}}, {0x5, 0x9b, {0x0, 0x10001}}, {0x6, 0x2, {0x2, 0x8}}, {0x0, 0x2, {0x1, 0x7}}, {0x5, 0x0, {0x2, 0x6}}, {0x8, 0xffd8, {0x0, 0xa09}}, {0x200, 0xa12f, {0x0, 0xb}}, {0x40, 0x3, {0x1, 0x401}}, {0x3, 0x3, {0x1, 0x53d}}, {0x5, 0x81, {0x1, 0x1a0c}}, {0x7, 0x0, {0x1, 0xfffffff3}}, {0x2, 0x3, {0x2, 0x1}}, {0x26e9, 0x4, {0x2, 0x80000000}}, {0xfffe, 0x0, {0x0, 0x1}}, {0x7f, 0x8001, {0x0, 0xbc01}}, {0x1, 0x2, {0x0, 0xffffffff}}, {0x9, 0x2, {0x1, 0x7}}, {0x9, 0x8, {0x1, 0x545}}, {0x3, 0x83, {0x3, 0xa}}, {0x9, 0xd, {0x1, 0x7fff}}, {0x0, 0x4a, {0x3, 0x2}}, {0xfffc, 0x7, {0x1, 0x7ff}}, {0xb6b, 0xe, {0x3, 0x7}}, {0x8, 0x8ea, {0x2, 0xffffff57}}, {0x4, 0x14, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x2, 0x6, 0x2, 0x3, 0x16, 'syz0\x00', "03810cb89fd706e0d3faed293a8504aea2875c998a00fe25532d4a458a725812", "de849a46e55140476282606e255137fd990b2387396b040d37766d1b8c33d396", [{0xe, 0xb227, {0x0, 0x3c4}}, {0xdaa, 0x405, {0x1, 0x2}}, {0x401, 0x300, {0x0, 0x4}}, {0x4, 0x9, {0x2, 0x9}}, {0x0, 0x5, {0x3, 0xff}}, {0x3, 0x800, {0x2, 0x8}}, {0x479, 0x0, {0x3, 0x2}}, {0x83, 0x6, {0x2, 0x10}}, {0x5, 0x7cc, {0x1, 0x7ff}}, {0x9c05, 0x8, {0x3, 0x66}}, {0x4, 0x5, {0x0, 0x2}}, {0x2, 0x5, {0x2, 0xc}}, {0x25, 0x5, {0x1, 0x4}}, {0x6, 0x8, {0x0, 0x2}}, {0x8001, 0x4, {0x0, 0x3}}, {0x0, 0xe5f, {0x2, 0x9}}, {0x1, 0x8a8, {0x1, 0x3}}, {0x1, 0x8, {0x0, 0x5}}, {0x2, 0x3, {0x0, 0x360}}, {0x8, 0x0, {0x1, 0xe}}, {0x8, 0xfb8, {0x2, 0x800}}, {0x6, 0x8, {0x3}}, {0xfb1a, 0x6, {0x108f608486b17452, 0x4}}, {0x7fff, 0x3, {0x1, 0x5}}, {0xc, 0x6, {0x2}}, {0x8731, 0xffff, {0x3, 0x3ff}}, {0x7f, 0x100, {0x2}}, {0x4, 0x4, {0x0, 0xd}}, {0x3, 0x1000, {0x2, 0xfffffffa}}, {0xd, 0x8, {0x1, 0x7}}, {0x5, 0x9c05, {0x0, 0x4}}, {0xe884, 0x2, {0x0, 0x7}}, {0xb2, 0x7ff, {0x1, 0x8}}, {0x3, 0xa, {0x3, 0x200}}, {0x0, 0x4, {0x0, 0x99d}}, {0x3, 0x5, {0x1, 0xbfb}}, {0x7f, 0xc, {0x0, 0x3}}, {0x0, 0x6, {0x0, 0x5ef}}, {0x0, 0x0, {0x0, 0xf93}}, {0x565, 0x8001, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x1, 0x4, 0x5, 0x8, 0x19, 'syz0\x00', "d21b6c723d20170e884e68c2cb9fca028f98c4dc82d9f0eefc80c6d38b52808f", "9df61dc5a38a5801f44eede4cf7565e8b3750e62d3eb6311f673caec603c346e", [{0x8, 0x1, {0x0, 0x3}}, {0x7, 0x0, {0x3}}, {0xf, 0xd, {0x3, 0x6}}, {0x6, 0x4, {0x1, 0x4}}, {0x9, 0x9, {0x2, 0x6}}, {0x63, 0x4, {0x3, 0xd}}, {0x2, 0x3ff, {0x1, 0xa}}, {0x1, 0x7, {0x0, 0x7fffffff}}, {0x3, 0x8, {0x2}}, {0x5, 0x5, {0x3, 0x5}}, {0x9afb, 0x8, {0x3, 0x3}}, {0xffff, 0x5, {0x3, 0x9}}, {0x83, 0x4, {0x3, 0x4}}, {0x8, 0xfff9, {0x3, 0x7}}, {0xff96, 0x0, {0x1, 0x1}}, {0x9, 0x8001, {0x1, 0x1ff}}, {0x5, 0xc, {0x2, 0x40}}, {0x7, 0x4, {0x2, 0x10000}}, {0x2, 0x2, {0x0, 0x3a51}}, {0x78b4, 0x5, {0x0, 0x9}}, {0xfe00, 0x8ef0, {0x1, 0x9}}, {0x33, 0xffff, {0x0, 0x8001}}, {0xa, 0x5, {0x3, 0xcdc5}}, {0xff, 0x8, {0x3, 0xb4b7}}, {0x8, 0x4, {0x2, 0x9}}, {0x4, 0x7, {0x0, 0xb}}, {0xca, 0x6, {0x3}}, {0x9, 0x7, {0x0, 0x5}}, {0xfffa, 0xd, {0x1, 0x5}}, {0x1, 0x9, {0x3, 0x3ff}}, {0x8, 0xf7, {0x2, 0x3}}, {0x6, 0xaae, {0x3, 0x7}}, {0x1, 0xfff7, {0x2, 0x4}}, {0x3, 0x6, {0x0, 0x2}}, {0x992e, 0x8, {0x0, 0xfffff3a7}}, {0xf7ac, 0x9, {0x1, 0x2}}, {0x5, 0x5, {0x0, 0x40}}, {0x3, 0xf15c, {0x2, 0xfff}}, {0x2786, 0x2, {0x0, 0x401}}, {0xf38, 0xfffa, {0x2, 0x8}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d930c5c9707e71fd"], 0x0) tee(r5, r10, 0x83a3, 0x2) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000000)="0a000000010000", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000000000000000000000000000044010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000029dbfa9a33e900"/34], 0x48) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x8, 0x9}, &(0x7f0000000600)=0x90) 0s ago: executing program 3 (id=911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x33, &(0x7f0000000000)={@remote, @remote, @void, {@mpls_mc={0x8848, {[{0x40}, {0x200, 0x0, 0x1}, {0x3}, {0xffff7}, {0x81}, {0x5, 0x0, 0x1}, {0x6}, {0x4}], @llc={@llc={0x80, 0xf0, "e6cf", "a2"}}}}}}, &(0x7f0000000040)={0x1, 0x2, [0x783, 0x6a, 0x4f4, 0x254]}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0xfffffed7, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x0, 0x5, @local}]}]}, 0xac}}, 0x0) kernel console output (not intermixed with test programs): pact the performance. Setting the MTU to 1560 would solve the problem. [ 92.490737][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.645706][ T6323] hsr_slave_0: entered promiscuous mode [ 92.678705][ T6323] hsr_slave_1: entered promiscuous mode [ 92.692121][ T6323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.706001][ T6323] Cannot create hsr debugfs directory [ 92.716988][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.343'. [ 92.946047][ T6503] netlink: 44 bytes leftover after parsing attributes in process `syz.3.350'. [ 93.262562][ T6323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.273659][ T6323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.303443][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 93.454340][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 93.575968][ T6323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.586680][ T6323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.653238][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.357'. [ 93.700911][ T6323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.715488][ T6323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 93.733348][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'. [ 93.858289][ T6540] netlink: 'syz.4.360': attribute type 9 has an invalid length. [ 93.865969][ T6540] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.360'. [ 93.894793][ T6546] FAULT_INJECTION: forcing a failure. [ 93.894793][ T6546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.934416][ T6546] CPU: 0 UID: 0 PID: 6546 Comm: syz.3.363 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 93.945074][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.955161][ T6546] Call Trace: [ 93.958462][ T6546] [ 93.961405][ T6546] dump_stack_lvl+0x241/0x360 [ 93.966157][ T6546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.971384][ T6546] ? __pfx__printk+0x10/0x10 [ 93.976015][ T6546] ? __pfx_lock_release+0x10/0x10 [ 93.981081][ T6546] should_fail_ex+0x3b0/0x4e0 [ 93.985795][ T6546] _copy_from_iter+0x1ed/0x1d60 [ 93.990674][ T6546] ? __virt_addr_valid+0x183/0x530 [ 93.995817][ T6546] ? __pfx_lock_release+0x10/0x10 [ 94.000882][ T6546] ? __alloc_skb+0x28f/0x440 [ 94.005499][ T6546] ? __pfx__copy_from_iter+0x10/0x10 [ 94.010817][ T6546] ? __virt_addr_valid+0x183/0x530 [ 94.015960][ T6546] ? __virt_addr_valid+0x183/0x530 [ 94.021102][ T6546] ? __virt_addr_valid+0x45f/0x530 [ 94.026243][ T6546] ? __check_object_size+0x48e/0x900 [ 94.031559][ T6546] netlink_sendmsg+0x73d/0xcb0 [ 94.036373][ T6546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.041696][ T6546] ? aa_sock_msg_perm+0x91/0x160 [ 94.046673][ T6546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.051980][ T6546] __sock_sendmsg+0x221/0x270 [ 94.056695][ T6546] ____sys_sendmsg+0x52a/0x7e0 [ 94.061498][ T6546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.066215][ T6323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.066801][ T6546] __sys_sendmmsg+0x3ab/0x730 [ 94.077253][ T6323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 94.081663][ T6546] ? __pfx___sys_sendmmsg+0x10/0x10 [ 94.081697][ T6546] ? __pfx_lock_release+0x10/0x10 [ 94.102253][ T6546] ? kstrtouint_from_user+0x128/0x190 [ 94.107689][ T6546] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 94.113617][ T6546] ? ksys_write+0x229/0x2b0 [ 94.118153][ T6546] ? __pfx_lock_release+0x10/0x10 [ 94.123225][ T6546] ? vfs_write+0x7bf/0xc90 [ 94.127663][ T6546] ? kmem_cache_free+0x1a2/0x420 [ 94.132629][ T6546] ? __mutex_unlock_slowpath+0x21d/0x750 [ 94.138293][ T6546] ? __fget_files+0x3f3/0x470 [ 94.143010][ T6546] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.149036][ T6546] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.155405][ T6546] ? do_syscall_64+0x100/0x230 [ 94.160207][ T6546] __x64_sys_sendmmsg+0xa0/0xb0 [ 94.165094][ T6546] do_syscall_64+0xf3/0x230 [ 94.169624][ T6546] ? clear_bhb_loop+0x35/0x90 [ 94.174328][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.180251][ T6546] RIP: 0033:0x7fe96437dff9 [ 94.184688][ T6546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.188145][ T5234] Bluetooth: hci5: command tx timeout [ 94.204295][ T6546] RSP: 002b:00007fe965172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.204322][ T6546] RAX: ffffffffffffffda RBX: 00007fe964535f80 RCX: 00007fe96437dff9 [ 94.204337][ T6546] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 94.204350][ T6546] RBP: 00007fe965172090 R08: 0000000000000000 R09: 0000000000000000 [ 94.204362][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.204374][ T6546] R13: 0000000000000000 R14: 00007fe964535f80 R15: 00007fff905863b8 [ 94.204399][ T6546] [ 94.371307][ T6554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.570864][ T6554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.746127][ T6554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.799706][ T6578] team0: entered promiscuous mode [ 94.804984][ T6578] team_slave_0: entered promiscuous mode [ 94.813356][ T6578] team_slave_1: entered promiscuous mode [ 94.829969][ T6567] lo speed is unknown, defaulting to 1000 [ 95.271655][ T6554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.348261][ T6323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.362523][ T6323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.406068][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 95.419863][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 95.426841][ T6323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.466749][ T6323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.486248][ T6554] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.525305][ T6554] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539687][ T6554] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.577110][ T6554] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.634296][ T6580] team0: left promiscuous mode [ 95.640432][ T6580] team_slave_0: left promiscuous mode [ 95.649354][ T6580] team_slave_1: left promiscuous mode [ 95.785637][ T6593] netlink: 68 bytes leftover after parsing attributes in process `syz.4.374'. [ 95.875780][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.919582][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.933312][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.940474][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.965552][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.972687][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.012387][ T6323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.022927][ T6323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.086463][ T6601] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.100797][ T6601] netlink: 1 bytes leftover after parsing attributes in process `syz.0.377'. [ 96.244843][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.278110][ T5234] Bluetooth: hci5: command tx timeout [ 96.314051][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 96.429901][ T6323] veth0_vlan: entered promiscuous mode [ 96.444383][ T6323] veth1_vlan: entered promiscuous mode [ 96.486854][ T6323] veth0_macvtap: entered promiscuous mode [ 96.496350][ T6323] veth1_macvtap: entered promiscuous mode [ 96.512055][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.522666][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.532928][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.543531][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.553769][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.565035][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.577219][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.587168][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.598432][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.608509][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.619090][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.628997][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.639532][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.650671][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.661775][ T6323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.671850][ T6323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.681444][ T6323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.690430][ T6323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.858123][ T1834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.865993][ T1834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.950961][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 96.997429][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.008405][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.009975][ T6624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.383'. [ 97.520030][ T6660] Bluetooth: MGMT ver 1.23 [ 97.621252][ T6657] netlink: 'syz.3.392': attribute type 12 has an invalid length. [ 98.349144][ T5234] Bluetooth: hci5: command tx timeout [ 98.520398][ T6688] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 98.561237][ T6691] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 98.573203][ T6694] tipc: Started in network mode [ 98.579275][ T6694] tipc: Node identity ffffffff, cluster identity 4711 [ 98.586185][ T6694] tipc: Node number set to 4294967295 [ 98.605642][ T6695] netlink: 'syz.1.401': attribute type 7 has an invalid length. [ 98.785386][ T6700] tipc: Started in network mode [ 98.817738][ T6700] tipc: Node identity ac141427, cluster identity 4711 [ 98.855044][ T6700] tipc: Enabled bearer , priority 10 [ 98.938246][ T6702] lo speed is unknown, defaulting to 1000 [ 98.943737][ T6711] __nla_validate_parse: 6 callbacks suppressed [ 98.943755][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 99.019512][ T6715] x_tables: duplicate underflow at hook 1 [ 99.584328][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.643649][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 99.687714][ T6731] bridge_slave_1: left allmulticast mode [ 99.700843][ T6731] bridge_slave_1: left promiscuous mode [ 99.706618][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.784702][ T6731] bridge_slave_0: left allmulticast mode [ 99.810305][ T6731] bridge_slave_0: left promiscuous mode [ 99.833943][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.883110][ T6731] bond0: (slave bridge0): Releasing backup interface [ 99.947145][ T6751] netlink: 'syz.4.423': attribute type 10 has an invalid length. [ 99.966080][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 99.977418][ T5279] tipc: Node number set to 2886997031 [ 100.335333][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 100.422741][ T6767] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 100.463033][ T6767] sch_fq: defrate 0 ignored. [ 134.317982][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.324319][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.890777][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.932327][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.941613][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.952587][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.964190][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.982413][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.008656][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.009628][ T5247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.021638][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.028794][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.033017][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.039878][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.054765][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.060117][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.064214][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.086445][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.092019][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.094995][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.102429][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.109529][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.119209][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.124011][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.131599][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.147355][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 151.172912][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.175306][ T5247] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 151.191484][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 151.215724][ T5243] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 151.249455][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 151.264570][ T5243] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 151.386313][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.417027][ T6792] lo speed is unknown, defaulting to 1000 [ 151.507025][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.531237][ T6793] lo speed is unknown, defaulting to 1000 [ 151.580507][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.654642][ T6789] lo speed is unknown, defaulting to 1000 [ 151.678622][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.820860][ T6787] lo speed is unknown, defaulting to 1000 [ 151.865581][ T6792] chnl_net:caif_netlink_parms(): no params data found [ 151.895725][ T52] bridge_slave_1: left allmulticast mode [ 151.908041][ T52] bridge_slave_1: left promiscuous mode [ 151.915259][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.928131][ T52] bridge_slave_0: left allmulticast mode [ 151.934073][ T52] bridge_slave_0: left promiscuous mode [ 151.940330][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.324351][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.336062][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.346518][ T52] bond0 (unregistering): Released all slaves [ 152.376048][ T6790] lo speed is unknown, defaulting to 1000 [ 152.441305][ T52] ÊüðÿG: left promiscuous mode [ 152.617827][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.624941][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.637436][ T6792] bridge_slave_0: entered allmulticast mode [ 152.644306][ T6792] bridge_slave_0: entered promiscuous mode [ 152.652598][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.660352][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.667834][ T6792] bridge_slave_1: entered allmulticast mode [ 152.675001][ T6792] bridge_slave_1: entered promiscuous mode [ 152.795235][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.863453][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.980664][ T6793] chnl_net:caif_netlink_parms(): no params data found [ 152.997114][ T6792] team0: Port device team_slave_0 added [ 153.018860][ T52] hsr_slave_0: left promiscuous mode [ 153.036634][ T52] hsr_slave_1: left promiscuous mode [ 153.057969][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.065565][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.085160][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.101291][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.136641][ T52] veth1_macvtap: left promiscuous mode [ 153.147310][ T52] veth0_macvtap: left promiscuous mode [ 153.164331][ T52] veth1_vlan: left promiscuous mode [ 153.170036][ T52] veth0_vlan: left promiscuous mode [ 153.236145][ T5240] Bluetooth: hci6: command tx timeout [ 153.237077][ T5243] Bluetooth: hci2: command tx timeout [ 153.243281][ T5240] Bluetooth: hci7: command tx timeout [ 153.308382][ T5240] Bluetooth: hci8: command tx timeout [ 153.314472][ T5240] Bluetooth: hci0: command tx timeout [ 153.682836][ T52] team0 (unregistering): Port device team_slave_1 removed [ 153.724930][ T52] team0 (unregistering): Port device team_slave_0 removed [ 154.088366][ T6792] team0: Port device team_slave_1 added [ 154.165167][ T6789] chnl_net:caif_netlink_parms(): no params data found [ 154.262658][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.274613][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.301308][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.312736][ T6787] chnl_net:caif_netlink_parms(): no params data found [ 154.323997][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.331647][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.358216][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.379364][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.386605][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.394778][ T6793] bridge_slave_0: entered allmulticast mode [ 154.409939][ T6793] bridge_slave_0: entered promiscuous mode [ 154.417692][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.424902][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.432204][ T6793] bridge_slave_1: entered allmulticast mode [ 154.439442][ T6793] bridge_slave_1: entered promiscuous mode [ 154.584730][ T6793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.602934][ T6793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.788280][ T6793] team0: Port device team_slave_0 added [ 154.810282][ T6792] hsr_slave_0: entered promiscuous mode [ 154.827842][ T6792] hsr_slave_1: entered promiscuous mode [ 154.834084][ T6792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.852840][ T6792] Cannot create hsr debugfs directory [ 154.877847][ T6790] chnl_net:caif_netlink_parms(): no params data found [ 154.935015][ T6793] team0: Port device team_slave_1 added [ 155.017078][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.025678][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.036026][ T6789] bridge_slave_0: entered allmulticast mode [ 155.043328][ T6789] bridge_slave_0: entered promiscuous mode [ 155.051663][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.059120][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.066307][ T6789] bridge_slave_1: entered allmulticast mode [ 155.073289][ T6789] bridge_slave_1: entered promiscuous mode [ 155.106312][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.113986][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.121716][ T6787] bridge_slave_0: entered allmulticast mode [ 155.130997][ T6787] bridge_slave_0: entered promiscuous mode [ 155.139538][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.146649][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.155159][ T6787] bridge_slave_1: entered allmulticast mode [ 155.162229][ T6787] bridge_slave_1: entered promiscuous mode [ 155.175440][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.182784][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.209211][ T6793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.277116][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.288122][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.314792][ T5240] Bluetooth: hci2: command tx timeout [ 155.314802][ T54] Bluetooth: hci6: command tx timeout [ 155.325960][ T5240] Bluetooth: hci7: command tx timeout [ 155.327350][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.367142][ T6789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.387911][ T54] Bluetooth: hci0: command tx timeout [ 155.393367][ T54] Bluetooth: hci8: command tx timeout [ 155.414247][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.425789][ T6789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.435559][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.442845][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.457308][ T6790] bridge_slave_0: entered allmulticast mode [ 155.464423][ T6790] bridge_slave_0: entered promiscuous mode [ 155.503906][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.534877][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.544806][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.554025][ T6790] bridge_slave_1: entered allmulticast mode [ 155.564677][ T6790] bridge_slave_1: entered promiscuous mode [ 155.600611][ T6793] hsr_slave_0: entered promiscuous mode [ 155.607077][ T6793] hsr_slave_1: entered promiscuous mode [ 155.613992][ T6793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.622119][ T6793] Cannot create hsr debugfs directory [ 155.655218][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.727211][ T6787] team0: Port device team_slave_0 added [ 155.750870][ T6789] team0: Port device team_slave_0 added [ 155.852399][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.882218][ T6787] team0: Port device team_slave_1 added [ 155.909305][ T6789] team0: Port device team_slave_1 added [ 155.917885][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.946907][ T6789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.954088][ T6789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.983814][ T6789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.043693][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.096230][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.109832][ T6789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.116916][ T6789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.143575][ T6789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.192615][ T6792] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.208916][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.215889][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.242123][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.268628][ T6792] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.330482][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.361263][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.373173][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.406751][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.442753][ T6790] team0: Port device team_slave_0 added [ 156.466285][ T6792] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.512959][ T6790] team0: Port device team_slave_1 added [ 156.539512][ T6789] hsr_slave_0: entered promiscuous mode [ 156.546026][ T6789] hsr_slave_1: entered promiscuous mode [ 156.552346][ T6789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.560320][ T6789] Cannot create hsr debugfs directory [ 156.643438][ T6792] bond0: (slave netdevsim0): Releasing backup interface [ 156.665888][ T6792] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.764130][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.775930][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.808307][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.835566][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.854493][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.893186][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.993893][ T6787] hsr_slave_0: entered promiscuous mode [ 157.002218][ T6787] hsr_slave_1: entered promiscuous mode [ 157.009084][ T6787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.016751][ T6787] Cannot create hsr debugfs directory [ 157.158684][ T6790] hsr_slave_0: entered promiscuous mode [ 157.165232][ T6790] hsr_slave_1: entered promiscuous mode [ 157.171768][ T6790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.185024][ T6790] Cannot create hsr debugfs directory [ 157.271943][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.329668][ T6792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.346398][ T6793] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.382163][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.393572][ T54] Bluetooth: hci2: command tx timeout [ 157.393601][ T5243] Bluetooth: hci7: command tx timeout [ 157.404513][ T5240] Bluetooth: hci6: command tx timeout [ 157.422307][ T6792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.437382][ T6792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 157.451436][ T6793] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.467780][ T5243] Bluetooth: hci0: command tx timeout [ 157.473603][ T5240] Bluetooth: hci8: command tx timeout [ 157.516880][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.536495][ T6792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 157.566845][ T6793] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.612605][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.649125][ T6793] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.863054][ T52] bridge_slave_1: left allmulticast mode [ 157.870621][ T52] bridge_slave_1: left promiscuous mode [ 157.877588][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.887250][ T52] bridge_slave_0: left allmulticast mode [ 157.894122][ T52] bridge_slave_0: left promiscuous mode [ 157.900141][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.784539][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.795695][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.813923][ T52] bond0 (unregistering): Released all slaves [ 158.926786][ T52] bond0 (unregistering): Released all slaves [ 158.943238][ T52] bond1 (unregistering): Released all slaves [ 159.062506][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.074672][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.085370][ T52] bond0 (unregistering): Released all slaves [ 159.165741][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.244287][ T52] ÊüðÿG: left promiscuous mode [ 159.282061][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.340118][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.347352][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.383096][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.390279][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.442040][ T52] tipc: Left network mode [ 159.485001][ T5240] Bluetooth: hci2: command tx timeout [ 159.485050][ T5243] Bluetooth: hci7: command tx timeout [ 159.490602][ T5240] Bluetooth: hci6: command tx timeout [ 159.547915][ T5243] Bluetooth: hci8: command tx timeout [ 159.560419][ T54] Bluetooth: hci0: command tx timeout [ 159.632157][ T52] tipc: Disabling bearer [ 159.649134][ T52] tipc: Left network mode [ 160.029783][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.230311][ T6787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.246970][ T6787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.296934][ T6787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.306812][ T6792] veth0_vlan: entered promiscuous mode [ 160.333015][ T6787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.406650][ T6792] veth1_vlan: entered promiscuous mode [ 160.499537][ T6792] veth0_macvtap: entered promiscuous mode [ 160.524573][ T6792] veth1_macvtap: entered promiscuous mode [ 160.606677][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.618305][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.634459][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.657715][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.677036][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.694104][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.705439][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.750238][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.782897][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.793608][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.804453][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.816398][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.826526][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.838279][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.850992][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.902524][ T6792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.915527][ T6792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.925146][ T6792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.934028][ T6792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.010240][ T6787] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.031037][ T6793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.072088][ T6793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.098520][ T6793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.186127][ T6793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.235587][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.242799][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.277300][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.284421][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.359855][ T52] hsr_slave_0: left promiscuous mode [ 161.365577][ T52] hsr_slave_1: left promiscuous mode [ 161.378333][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.385887][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.394350][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.401961][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.414780][ T52] hsr_slave_0: left promiscuous mode [ 161.422150][ T52] hsr_slave_1: left promiscuous mode [ 161.432309][ T52] hsr_slave_0: left promiscuous mode [ 161.440389][ T52] hsr_slave_1: left promiscuous mode [ 161.446119][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.454232][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.463155][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.470743][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.514161][ T52] veth1_macvtap: left promiscuous mode [ 161.522867][ T52] veth0_macvtap: left promiscuous mode [ 161.528527][ T52] veth1_vlan: left promiscuous mode [ 161.533852][ T52] veth0_vlan: left promiscuous mode [ 161.541489][ T52] veth1_macvtap: left promiscuous mode [ 161.546980][ T52] veth0_macvtap: left promiscuous mode [ 161.554226][ T52] veth1_vlan: left promiscuous mode [ 161.560909][ T52] veth0_vlan: left promiscuous mode [ 161.568138][ T52] veth1_macvtap: left promiscuous mode [ 161.573676][ T52] veth0_macvtap: left promiscuous mode [ 161.579617][ T52] veth1_vlan: left promiscuous mode [ 161.584947][ T52] veth0_vlan: left promiscuous mode [ 162.131827][ T52] team0 (unregistering): Port device team_slave_1 removed [ 162.169198][ T52] team0 (unregistering): Port device team_slave_0 removed [ 163.571143][ T52] team0 (unregistering): Port device team_slave_1 removed [ 163.608954][ T52] team0 (unregistering): Port device team_slave_0 removed [ 164.051818][ T6789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.085616][ T6789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.115963][ T6789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.138760][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.146591][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.167913][ T6789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.288717][ T6790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.309273][ T6790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.316529][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.334877][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.376682][ T6790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.416038][ T6790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.600246][ T6916] netlink: 80 bytes leftover after parsing attributes in process `syz.3.437'. [ 164.613449][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.685631][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.784824][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.792000][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.801144][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.808309][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.882931][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.085331][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.130376][ T6787] veth0_vlan: entered promiscuous mode [ 165.205715][ T6789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.270671][ T6790] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.291000][ T6787] veth1_vlan: entered promiscuous mode [ 165.342444][ T6789] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.386576][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.393768][ T1834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.459921][ T1834] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.467061][ T1834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.514510][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.521714][ T1834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.550979][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.558176][ T1834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.643744][ T6787] veth0_macvtap: entered promiscuous mode [ 165.716854][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.737262][ T6787] veth1_macvtap: entered promiscuous mode [ 165.741616][ T52] IPVS: stop unused estimator thread 0... [ 165.805499][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.839925][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.858516][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.878014][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.912502][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.931782][ T6790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.996197][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.030303][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.058269][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.086134][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.107156][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.129536][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.151143][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 166.167691][ T6957] bridge_slave_1: left allmulticast mode [ 166.175550][ T6957] bridge_slave_1: left promiscuous mode [ 166.188528][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.204098][ T6957] bridge_slave_0: left allmulticast mode [ 166.215850][ T6957] bridge_slave_0: left promiscuous mode [ 166.224592][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.310143][ T6787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.337717][ T6787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.346465][ T6787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.378806][ T6787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.466561][ T6789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.621383][ T6793] veth0_vlan: entered promiscuous mode [ 166.721311][ T6793] veth1_vlan: entered promiscuous mode [ 166.743445][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.765517][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.774880][ T6789] veth0_vlan: entered promiscuous mode [ 166.876974][ T6789] veth1_vlan: entered promiscuous mode [ 166.889692][ T6793] veth0_macvtap: entered promiscuous mode [ 166.904772][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.927865][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.935877][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.939060][ T6793] veth1_macvtap: entered promiscuous mode [ 167.127343][ T6789] veth0_macvtap: entered promiscuous mode [ 167.156928][ T6789] veth1_macvtap: entered promiscuous mode [ 167.204047][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.247561][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.257435][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.282812][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.287964][ T7012] netlink: 148 bytes leftover after parsing attributes in process `syz.3.447'. [ 167.293380][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.344048][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.385817][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.444395][ T6790] veth0_vlan: entered promiscuous mode [ 167.479061][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.502213][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.517541][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.550185][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.562976][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.579218][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.590665][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 167.613149][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.637166][ T6793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.676185][ T6793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.718930][ T6793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.737556][ T6793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.762649][ T6790] veth1_vlan: entered promiscuous mode [ 167.811270][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 167.841046][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.857826][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.884650][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.900825][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.914360][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.936964][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.948107][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.969882][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.987404][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.008573][ T7033] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 168.037016][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 168.233537][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.260033][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.283551][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.296123][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.314817][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.326436][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.377753][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.406064][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.451169][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.462293][ T6789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.474503][ T6789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.485953][ T6789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.495403][ T6789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.589090][ T7053] netlink: 'syz.3.452': attribute type 12 has an invalid length. [ 168.707293][ T6790] veth0_macvtap: entered promiscuous mode [ 168.811105][ T6790] veth1_macvtap: entered promiscuous mode [ 168.865819][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.901689][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.986573][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.008421][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.027918][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.046482][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.057414][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.079388][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.096293][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.115003][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.125280][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.142343][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.154700][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.176589][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.207711][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.293463][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.333197][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.357726][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.376985][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.387126][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.399481][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.409380][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.422498][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.434694][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.445395][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.456860][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.479889][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 169.518055][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 169.611336][ T7083] netlink: 'syz.0.456': attribute type 12 has an invalid length. [ 169.665128][ T6790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.690796][ T6790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.719313][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.457'. [ 169.728454][ T6790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.748136][ T6790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.760134][ T6379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.793743][ T6379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.935359][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 169.977903][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.987111][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.180217][ T7111] netlink: 'syz.3.458': attribute type 12 has an invalid length. [ 170.263521][ T6379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.285403][ T6379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.329822][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.436'. [ 170.414629][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.448269][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.466627][ T7125] netlink: 'syz.0.460': attribute type 12 has an invalid length. [ 170.660992][ T7133] syz_tun: entered promiscuous mode [ 170.675163][ T7133] batadv_slave_0: entered promiscuous mode [ 170.704069][ T7133] syz_tun: left promiscuous mode [ 170.714665][ T7133] batadv_slave_0: left promiscuous mode [ 170.776991][ T7129] sch_fq: defrate 32769 ignored. [ 171.317374][ T7156] netlink: 'syz.1.466': attribute type 12 has an invalid length. [ 171.603552][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.470'. [ 171.788028][ T7170] Cannot find del_set index 4 as target [ 171.892451][ T7175] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 171.912034][ T7175] netlink: 9356 bytes leftover after parsing attributes in process `syz.4.474'. [ 171.942922][ T7175] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 172.192271][ T7188] syz.1.478[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.192368][ T7188] syz.1.478[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.224807][ T7188] syz.1.478[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.274784][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 172.298197][ T7196] netlink: 'syz.2.476': attribute type 12 has an invalid length. [ 172.654053][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.480'. [ 172.829151][ T7202] netlink: 'syz.0.482': attribute type 3 has an invalid length. [ 172.877274][ T7202] netlink: 'syz.0.482': attribute type 21 has an invalid length. [ 172.931869][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.989464][ T7213] macvlan2: entered promiscuous mode [ 173.022607][ T7213] vlan0: entered promiscuous mode [ 173.040234][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 173.073329][ T7211] bridge_slave_1: left allmulticast mode [ 173.094803][ T7211] bridge_slave_1: left promiscuous mode [ 173.102094][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.120877][ T7211] bridge_slave_0: left allmulticast mode [ 173.126732][ T7211] bridge_slave_0: left promiscuous mode [ 173.139434][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.243401][ T7216] lo speed is unknown, defaulting to 1000 [ 173.711446][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 174.068303][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 181.257722][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 194.569887][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.576221][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.007404][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.018184][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.026340][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.046067][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.347665][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.348610][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.365967][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.387797][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.396220][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.406051][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.437719][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.459820][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.469800][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.479681][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.489703][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.496839][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.504033][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.512571][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.522305][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.530088][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.660531][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.668651][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.687756][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 205.722450][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.833929][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 205.844159][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 205.906472][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 205.915545][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 205.939054][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 205.954410][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 206.051424][ T2896] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.071385][ T7273] lo speed is unknown, defaulting to 1000 [ 206.202187][ T2896] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.226023][ T7268] lo speed is unknown, defaulting to 1000 [ 206.332132][ T2896] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.374648][ T7265] lo speed is unknown, defaulting to 1000 [ 206.461762][ T2896] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.492967][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 206.552139][ T7275] lo speed is unknown, defaulting to 1000 [ 206.670402][ T7269] lo speed is unknown, defaulting to 1000 [ 206.671450][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.683819][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.691167][ T7273] bridge_slave_0: entered allmulticast mode [ 206.698278][ T7273] bridge_slave_0: entered promiscuous mode [ 206.706976][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.714446][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.721782][ T7273] bridge_slave_1: entered allmulticast mode [ 206.730947][ T7273] bridge_slave_1: entered promiscuous mode [ 206.878343][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.892542][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.993148][ T2896] bridge_slave_1: left allmulticast mode [ 206.999241][ T2896] bridge_slave_1: left promiscuous mode [ 207.004887][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.017341][ T2896] bridge_slave_0: left allmulticast mode [ 207.023246][ T2896] bridge_slave_0: left promiscuous mode [ 207.029060][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.384698][ T2896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.397891][ T2896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.409594][ T2896] bond0 (unregistering): Released all slaves [ 207.550381][ T7273] team0: Port device team_slave_0 added [ 207.621643][ T7273] team0: Port device team_slave_1 added [ 207.644073][ T7275] chnl_net:caif_netlink_parms(): no params data found [ 207.674884][ T7268] chnl_net:caif_netlink_parms(): no params data found [ 207.752555][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.767021][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.794360][ T54] Bluetooth: hci5: command tx timeout [ 207.794371][ T5243] Bluetooth: hci0: command tx timeout [ 207.805129][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.821760][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.828831][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.854872][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.867780][ T54] Bluetooth: hci1: command tx timeout [ 207.867818][ T5243] Bluetooth: hci4: command tx timeout [ 207.922738][ T7265] chnl_net:caif_netlink_parms(): no params data found [ 208.026463][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.034205][ T5243] Bluetooth: hci9: command tx timeout [ 208.040567][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.048278][ T7268] bridge_slave_0: entered allmulticast mode [ 208.061313][ T7268] bridge_slave_0: entered promiscuous mode [ 208.173299][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.186302][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.193976][ T7268] bridge_slave_1: entered allmulticast mode [ 208.201287][ T7268] bridge_slave_1: entered promiscuous mode [ 208.226079][ T2896] hsr_slave_0: left promiscuous mode [ 208.234875][ T2896] hsr_slave_1: left promiscuous mode [ 208.240862][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.248401][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.256226][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.263843][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.286170][ T2896] veth1_vlan: left promiscuous mode [ 208.291704][ T2896] veth0_vlan: left promiscuous mode [ 208.688199][ T2896] team0 (unregistering): Port device team_slave_1 removed [ 208.742530][ T2896] team0 (unregistering): Port device team_slave_0 removed [ 209.195013][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.202398][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.211730][ T7275] bridge_slave_0: entered allmulticast mode [ 209.220372][ T7275] bridge_slave_0: entered promiscuous mode [ 209.246875][ T7273] hsr_slave_0: entered promiscuous mode [ 209.253562][ T7273] hsr_slave_1: entered promiscuous mode [ 209.264978][ T7273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.272615][ T7273] Cannot create hsr debugfs directory [ 209.296099][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.325966][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.338453][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.345689][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.353228][ T7275] bridge_slave_1: entered allmulticast mode [ 209.360412][ T7275] bridge_slave_1: entered promiscuous mode [ 209.383572][ T7265] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.390914][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.398273][ T7265] bridge_slave_0: entered allmulticast mode [ 209.405394][ T7265] bridge_slave_0: entered promiscuous mode [ 209.436385][ T7269] chnl_net:caif_netlink_parms(): no params data found [ 209.477739][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.485720][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.495840][ T7265] bridge_slave_1: entered allmulticast mode [ 209.504430][ T7265] bridge_slave_1: entered promiscuous mode [ 209.536160][ T7268] team0: Port device team_slave_0 added [ 209.553680][ T7275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.605384][ T7265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.640539][ T7268] team0: Port device team_slave_1 added [ 209.671826][ T7275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.693575][ T7265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.770915][ T7265] team0: Port device team_slave_0 added [ 209.782345][ T7265] team0: Port device team_slave_1 added [ 209.824757][ T7275] team0: Port device team_slave_0 added [ 209.836729][ T7275] team0: Port device team_slave_1 added [ 209.865966][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.873868][ T5243] Bluetooth: hci0: command tx timeout [ 209.878031][ T54] Bluetooth: hci5: command tx timeout [ 209.893444][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.920393][ T7268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.947739][ T54] Bluetooth: hci1: command tx timeout [ 209.947893][ T5243] Bluetooth: hci4: command tx timeout [ 209.974938][ T7265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.982040][ T7265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.008140][ T7265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.025017][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.033403][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.062237][ T7268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.086125][ T7275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.093282][ T7275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.113875][ T5243] Bluetooth: hci9: command tx timeout [ 210.119484][ T7275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.138007][ T7275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.144974][ T7275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.173740][ T7275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.187129][ T7265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.202209][ T7265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.237526][ T7265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.268088][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.275198][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.288404][ T7269] bridge_slave_0: entered allmulticast mode [ 210.297211][ T7269] bridge_slave_0: entered promiscuous mode [ 210.308610][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.315714][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.323125][ T7269] bridge_slave_1: entered allmulticast mode [ 210.331714][ T7269] bridge_slave_1: entered promiscuous mode [ 210.439411][ T7275] hsr_slave_0: entered promiscuous mode [ 210.448248][ T7275] hsr_slave_1: entered promiscuous mode [ 210.455836][ T7275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.463718][ T7275] Cannot create hsr debugfs directory [ 210.544395][ T7273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.572869][ T7268] hsr_slave_0: entered promiscuous mode [ 210.579562][ T7268] hsr_slave_1: entered promiscuous mode [ 210.585543][ T7268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.593263][ T7268] Cannot create hsr debugfs directory [ 210.606140][ T7269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.647869][ T7265] hsr_slave_0: entered promiscuous mode [ 210.654105][ T7265] hsr_slave_1: entered promiscuous mode [ 210.660380][ T7265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.668073][ T7265] Cannot create hsr debugfs directory [ 210.692177][ T7273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.718580][ T7269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.756670][ T1834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.855860][ T7273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.887101][ T1834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.930075][ T7269] team0: Port device team_slave_0 added [ 210.983870][ T7273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.019327][ T7269] team0: Port device team_slave_1 added [ 211.041459][ T1834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.113839][ T1834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.163632][ T7269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.172576][ T7269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.200254][ T7269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.220739][ T7269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.227888][ T7269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.254314][ T7269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.436801][ T7269] hsr_slave_0: entered promiscuous mode [ 211.443958][ T7269] hsr_slave_1: entered promiscuous mode [ 211.450465][ T7269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.458591][ T7269] Cannot create hsr debugfs directory [ 211.501152][ T7273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.536396][ T7268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.564908][ T7273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.575388][ T7273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.605629][ T7273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.634367][ T7268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.721796][ T7268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.800193][ T7268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.836265][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.864351][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.916187][ T1834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.942452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.949584][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.957855][ T5243] Bluetooth: hci0: command tx timeout [ 211.958007][ T54] Bluetooth: hci5: command tx timeout [ 212.012604][ T1834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.027703][ T54] Bluetooth: hci4: command tx timeout [ 212.039688][ T54] Bluetooth: hci1: command tx timeout [ 212.049761][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.056963][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.102039][ T1834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.121886][ T7268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.132298][ T7268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.166654][ T7268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.191206][ T54] Bluetooth: hci9: command tx timeout [ 212.205151][ T1834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.223688][ T7268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.382161][ T1834] bridge_slave_1: left allmulticast mode [ 212.399062][ T1834] bridge_slave_1: left promiscuous mode [ 212.405563][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.418270][ T1834] bridge_slave_0: left allmulticast mode [ 212.423956][ T1834] bridge_slave_0: left promiscuous mode [ 212.430402][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.441654][ T1834] bridge_slave_1: left allmulticast mode [ 212.447337][ T1834] bridge_slave_1: left promiscuous mode [ 212.453283][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.462741][ T1834] bridge_slave_0: left allmulticast mode [ 212.468941][ T1834] bridge_slave_0: left promiscuous mode [ 212.474723][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.267408][ T1834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.280696][ T1834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.291266][ T1834] bond0 (unregistering): Released all slaves [ 213.405083][ T1834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.416251][ T1834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.428372][ T1834] bond0 (unregistering): Released all slaves [ 213.535466][ T1834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.550625][ T1834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.566046][ T1834] bond0 (unregistering): Released all slaves [ 213.665853][ T7268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.742471][ T7268] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.830467][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.837625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.885971][ T7265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.902709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.909867][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.927665][ T7265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.938344][ T7265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.956425][ T7265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.976225][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.035284][ T54] Bluetooth: hci0: command tx timeout [ 214.040926][ T5243] Bluetooth: hci5: command tx timeout [ 214.105705][ T7273] veth0_vlan: entered promiscuous mode [ 214.117840][ T54] Bluetooth: hci1: command tx timeout [ 214.118768][ T5243] Bluetooth: hci4: command tx timeout [ 214.153677][ T7273] veth1_vlan: entered promiscuous mode [ 214.267851][ T5243] Bluetooth: hci9: command tx timeout [ 214.355305][ T7273] veth0_macvtap: entered promiscuous mode [ 214.373218][ T7273] veth1_macvtap: entered promiscuous mode [ 214.451839][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.464203][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.494449][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.505942][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.516318][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.527291][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.538661][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.549274][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.559109][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.569612][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.580909][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.654421][ T7275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.673231][ T7265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.681805][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.696364][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.708941][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.719710][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.729763][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.740702][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.750809][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.761459][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.771530][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.782898][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.794256][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.861084][ T7275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.883632][ T7275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.894140][ T7275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.991410][ T7273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.013671][ T7273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.032801][ T7273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.043902][ T7273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.061244][ T7265] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.098926][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.137638][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.144807][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.181049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.188232][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.300938][ T1834] hsr_slave_0: left promiscuous mode [ 215.306863][ T1834] hsr_slave_1: left promiscuous mode [ 215.312982][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.327684][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.343022][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.350756][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.362558][ T1834] hsr_slave_0: left promiscuous mode [ 215.369965][ T1834] hsr_slave_1: left promiscuous mode [ 215.376432][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.384410][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.399012][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.406471][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.417876][ T1834] hsr_slave_0: left promiscuous mode [ 215.424081][ T1834] hsr_slave_1: left promiscuous mode [ 215.430210][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.437757][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.445447][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.454396][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.496998][ T1834] veth1_macvtap: left promiscuous mode [ 215.503218][ T1834] veth0_macvtap: left promiscuous mode [ 215.509627][ T1834] veth1_vlan: left promiscuous mode [ 215.514897][ T1834] veth0_vlan: left promiscuous mode [ 215.521219][ T1834] veth1_macvtap: left promiscuous mode [ 215.526762][ T1834] veth0_macvtap: left promiscuous mode [ 215.532428][ T1834] veth1_vlan: left promiscuous mode [ 215.537841][ T1834] veth0_vlan: left promiscuous mode [ 215.543609][ T1834] veth1_macvtap: left promiscuous mode [ 215.549803][ T1834] veth0_macvtap: left promiscuous mode [ 215.557619][ T1834] veth1_vlan: left promiscuous mode [ 215.562935][ T1834] veth0_vlan: left promiscuous mode [ 216.161736][ T1834] team0 (unregistering): Port device team_slave_1 removed [ 216.217787][ T1834] team0 (unregistering): Port device team_slave_0 removed [ 216.926707][ T1834] team0 (unregistering): Port device team_slave_1 removed [ 216.970675][ T1834] team0 (unregistering): Port device team_slave_0 removed [ 217.697107][ T1834] team0 (unregistering): Port device team_slave_1 removed [ 217.744254][ T1834] team0 (unregistering): Port device team_slave_0 removed [ 218.368298][ T7268] veth0_vlan: entered promiscuous mode [ 218.426376][ T7275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.443800][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.467367][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.518124][ T7268] veth1_vlan: entered promiscuous mode [ 218.597404][ T7275] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.604903][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.628512][ T7269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.634602][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.677937][ T7269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.698700][ T7269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.715386][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.722548][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.756567][ T7269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.779771][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.786996][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.827418][ T7268] veth0_macvtap: entered promiscuous mode [ 218.858088][ T7268] veth1_macvtap: entered promiscuous mode [ 218.895607][ T7323] bridge_slave_1: left allmulticast mode [ 218.902687][ T7323] bridge_slave_1: left promiscuous mode [ 218.909386][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.981795][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.993832][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.007990][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.018766][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.028988][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.041279][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.059962][ T7268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.084737][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.098561][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.108505][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.119031][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.131438][ T7268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.143378][ T7268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.156952][ T7268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.199803][ T7268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.214259][ T7268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.223234][ T7268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.244073][ T7268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.266475][ T7265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.330071][ T7327] __nla_validate_parse: 1 callbacks suppressed [ 219.330090][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 219.606731][ T7269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.629490][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.637323][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.668251][ T7265] veth0_vlan: entered promiscuous mode [ 219.675417][ T7327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.509'. [ 219.685626][ T7275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.738764][ T7269] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.767887][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.776863][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.786561][ T7265] veth1_vlan: entered promiscuous mode [ 219.802183][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.809538][ T6379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.875089][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.882377][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.387143][ T7265] veth0_macvtap: entered promiscuous mode [ 236.438755][ T7349] Bluetooth: MGMT ver 1.23 [ 236.447389][ T7265] veth1_macvtap: entered promiscuous mode [ 236.515688][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.577522][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.587383][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.633813][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.654025][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.677665][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.708842][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.720209][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.770094][ T7265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.791472][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.839205][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.855820][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.859350][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.875901][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.877885][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.886367][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.903361][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.903816][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.913219][ T7265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.913243][ T7265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.914489][ T7265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.932498][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.966712][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.981584][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.024476][ T7265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.034759][ T7265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.044421][ T7265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.053537][ T7265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.120824][ T7356] lo speed is unknown, defaulting to 1000 [ 237.125061][ T7269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.146213][ T7275] veth0_vlan: entered promiscuous mode [ 237.223114][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.309067][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.344085][ T7275] veth1_vlan: entered promiscuous mode [ 237.399755][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.474334][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.478720][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.497578][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.504263][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.562101][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.626298][ T7269] veth0_vlan: entered promiscuous mode [ 237.639849][ T7269] veth1_vlan: entered promiscuous mode [ 237.686669][ T7275] veth0_macvtap: entered promiscuous mode [ 237.730663][ T7275] veth1_macvtap: entered promiscuous mode [ 237.756898][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.793473][ T7269] veth0_macvtap: entered promiscuous mode [ 237.805349][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 237.814375][ T7367] bridge_slave_1: left allmulticast mode [ 237.820280][ T7367] bridge_slave_1: left promiscuous mode [ 237.826046][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.834758][ T7367] bridge_slave_0: left allmulticast mode [ 237.841737][ T7367] bridge_slave_0: left promiscuous mode [ 237.847641][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.913193][ T7356] chnl_net:caif_netlink_parms(): no params data found [ 237.936448][ T52] bridge_slave_0: left allmulticast mode [ 237.942848][ T52] bridge_slave_0: left promiscuous mode [ 237.949183][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.319952][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.333164][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.344323][ T52] bond0 (unregistering): Released all slaves [ 238.362882][ T7269] veth1_macvtap: entered promiscuous mode [ 238.434700][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.457983][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.479057][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.499834][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.510429][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.521179][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.531905][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.545689][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.569071][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.587606][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.611390][ T7275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.796314][ T7371] lo speed is unknown, defaulting to 1000 [ 238.889267][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.900352][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.910693][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.921245][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.931171][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.941646][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.951500][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.961994][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.971850][ T7275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.978878][ T7386] validate_nla: 1 callbacks suppressed [ 238.978894][ T7386] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 238.982344][ T7275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.008953][ T7275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.037263][ T7386] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.517'. [ 239.077689][ T54] Bluetooth: hci0: command tx timeout [ 239.150006][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.157399][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.175409][ T7356] bridge_slave_0: entered allmulticast mode [ 239.182869][ T7356] bridge_slave_0: entered promiscuous mode [ 239.192274][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.203388][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.216521][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.242570][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.261485][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.282953][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.298403][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.317622][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.334562][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.345095][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.356740][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.367238][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.384868][ T7389] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 239.393754][ T7269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.406516][ T7275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.416503][ T7275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.425546][ T7275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.434699][ T7275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.463605][ T7390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.518'. [ 239.478442][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.485596][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.493013][ T7356] bridge_slave_1: entered allmulticast mode [ 239.501878][ T7356] bridge_slave_1: entered promiscuous mode [ 239.515105][ T7389] netlink: 2 bytes leftover after parsing attributes in process `syz.0.518'. [ 239.767247][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.807530][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.817399][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.859833][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.870997][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.883662][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.893821][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.904547][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.915970][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.927374][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.937421][ T7269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.948136][ T7269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.959656][ T7269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.982149][ T7356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.997952][ T7356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.038113][ T52] hsr_slave_0: left promiscuous mode [ 240.044235][ T52] hsr_slave_1: left promiscuous mode [ 240.055224][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.062911][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.071445][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.078992][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.103742][ T52] veth1_macvtap: left promiscuous mode [ 240.111888][ T52] veth0_macvtap: left promiscuous mode [ 240.117546][ T52] veth1_vlan: left promiscuous mode [ 240.122834][ T52] veth0_vlan: left promiscuous mode [ 240.613424][ T52] team0 (unregistering): Port device team_slave_1 removed [ 240.657616][ T52] team0 (unregistering): Port device team_slave_0 removed [ 241.047790][ T7269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.059933][ T7269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.068970][ T7269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.087240][ T7269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.153846][ T54] Bluetooth: hci0: command tx timeout [ 241.358569][ T7356] team0: Port device team_slave_0 added [ 241.388730][ T7356] team0: Port device team_slave_1 added [ 241.499914][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.511220][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.549977][ T7356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.598906][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.612341][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.638966][ T7356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.747343][ T7356] hsr_slave_0: entered promiscuous mode [ 241.758606][ T7356] hsr_slave_1: entered promiscuous mode [ 241.769626][ T7356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.777353][ T7356] Cannot create hsr debugfs directory [ 241.806360][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.838356][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.883142][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 242.063464][ T6379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.076682][ T7414] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.077376][ T6379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.095938][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.109151][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.159876][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.187748][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.414955][ T7432] netlink: 2 bytes leftover after parsing attributes in process `syz.4.527'. [ 242.415201][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 242.450913][ T7427] nbd: socks must be embedded in a SOCK_ITEM attr [ 242.468157][ T7433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.527'. [ 242.525423][ T7433] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 242.767506][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 242.781363][ T7434] syz_tun: entered promiscuous mode [ 242.786745][ T7434] macsec1: entered promiscuous mode [ 242.795988][ T7434] syz_tun: left promiscuous mode [ 243.003520][ T7441] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.023262][ T7356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.045204][ T7356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.085597][ T7356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.144650][ T7356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.227836][ T54] Bluetooth: hci0: command tx timeout [ 243.255731][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 243.475780][ T7463] netlink: 'syz.4.536': attribute type 22 has an invalid length. [ 243.479456][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.506085][ T7463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.536'. [ 243.574400][ T7356] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.645752][ T7470] IPv6: sit1: Disabled Multicast RS [ 243.685603][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'. [ 243.697707][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.704895][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.742304][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.749507][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.889429][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 243.908863][ T7356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.293602][ T7499] dummy0: entered promiscuous mode [ 244.402792][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.504241][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 244.530467][ T7504] bridge_slave_1: left allmulticast mode [ 244.557005][ T7504] bridge_slave_1: left promiscuous mode [ 244.576392][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.600945][ T7504] bridge_slave_0: left allmulticast mode [ 244.606639][ T7504] bridge_slave_0: left promiscuous mode [ 244.626397][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.786817][ T7356] veth0_vlan: entered promiscuous mode [ 244.798614][ T7356] veth1_vlan: entered promiscuous mode [ 244.823404][ T7356] veth0_macvtap: entered promiscuous mode [ 244.883543][ T7356] veth1_macvtap: entered promiscuous mode [ 244.901702][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.912989][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.924745][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.935380][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.946711][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.966043][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.978497][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.007130][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.024556][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.037580][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.057251][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.078220][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.098839][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.138665][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.165870][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.199149][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.230145][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.231101][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 245.265783][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.287612][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.297855][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.309338][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.318980][ T54] Bluetooth: hci0: command tx timeout [ 245.320817][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.346282][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.374348][ T7356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.414274][ T7356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.451778][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.530855][ T7356] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.540549][ T7356] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.550719][ T7356] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.561454][ T7356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.672030][ T7531] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 245.721710][ T7531] geneve0: entered promiscuous mode [ 245.744537][ T7531] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 245.857805][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.874985][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.001521][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.011221][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.080675][ T7553] netlink: 232 bytes leftover after parsing attributes in process `syz.0.560'. [ 246.097850][ T7553] netlink: 72 bytes leftover after parsing attributes in process `syz.0.560'. [ 246.361473][ T7570] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 246.418901][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 246.502176][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 246.591628][ T7584] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 247.114561][ T7619] netlink: 'syz.2.578': attribute type 13 has an invalid length. [ 247.154373][ T7619] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 247.306878][ T7627] netlink: 'syz.2.578': attribute type 13 has an invalid length. [ 247.316074][ T7627] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 247.491778][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.520725][ T7641] netlink: 'syz.2.585': attribute type 10 has an invalid length. [ 247.604348][ T7641] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.637742][ T7647] openvswitch: netlink: ct_state flags 00008300 unsupported [ 247.637870][ T7638] bridge_slave_1: left allmulticast mode [ 247.669601][ T7638] bridge_slave_1: left promiscuous mode [ 247.687754][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.722357][ T7638] bridge_slave_0: left allmulticast mode [ 247.728160][ T7638] bridge_slave_0: left promiscuous mode [ 247.734175][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.891127][ T7652] tun0: tun_chr_ioctl cmd 2148553947 [ 247.974464][ T7659] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 248.095694][ T7657] lo speed is unknown, defaulting to 1000 [ 248.138860][ T7666] sctp: [Deprecated]: syz.3.593 (pid 7666) Use of int in max_burst socket option deprecated. [ 248.138860][ T7666] Use struct sctp_assoc_value instead [ 248.272904][ T7670] __nla_validate_parse: 5 callbacks suppressed [ 248.272925][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 248.387238][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 249.121403][ T7701] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 249.232346][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.302108][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 249.338384][ T7705] bridge_slave_1: left allmulticast mode [ 249.375604][ T7705] bridge_slave_1: left promiscuous mode [ 249.385339][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.541229][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 249.559346][ T7705] bridge_slave_0: left allmulticast mode [ 249.568162][ T7705] bridge_slave_0: left promiscuous mode [ 249.591492][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.998517][ T7726] lo speed is unknown, defaulting to 1000 [ 250.330333][ T7731] syzkaller0: entered promiscuous mode [ 250.347322][ T7731] syzkaller0: entered allmulticast mode [ 250.383543][ T7737] gre1: entered promiscuous mode [ 250.400288][ T7737] gre1: entered allmulticast mode [ 250.730867][ T7747] netlink: 332 bytes leftover after parsing attributes in process `syz.3.614'. [ 250.742718][ T7747] netlink: 104 bytes leftover after parsing attributes in process `syz.3.614'. [ 250.752458][ T7747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.614'. [ 250.985762][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 251.062502][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 251.076880][ T7755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.614'. [ 252.557647][ T7750] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 252.579361][ T7757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.586647][ T7757] IPv6: NLM_F_CREATE should be set when creating new route [ 252.741768][ T7762] ax25_connect(): syz.3.618 uses autobind, please contact jreuter@yaina.de [ 252.881088][ T7772] netlink: 'syz.4.619': attribute type 10 has an invalid length. [ 252.973350][ T7772] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 253.522311][ T7810] __nla_validate_parse: 6 callbacks suppressed [ 253.522330][ T7810] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.632'. [ 253.537894][ T7810] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.632'. [ 253.714885][ T7821] sctp: [Deprecated]: syz.0.633 (pid 7821) Use of int in max_burst socket option. [ 253.714885][ T7821] Use struct sctp_assoc_value instead [ 253.773325][ T7813] netlink: 'syz.1.634': attribute type 142 has an invalid length. [ 253.966650][ T7833] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 253.996802][ T7839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.639'. [ 254.019125][ T7842] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 254.055954][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 254.065581][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 254.125501][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 254.482596][ T7861] netlink: 'syz.1.646': attribute type 4 has an invalid length. [ 254.752633][ T7880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.653'. [ 254.775405][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 254.798619][ T7880] lo speed is unknown, defaulting to 1000 [ 254.876885][ T7882] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.064356][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 255.713582][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 255.739093][ T7913] netlink: 'syz.3.661': attribute type 7 has an invalid length. [ 255.949554][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.957600][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.956824][ T7972] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 257.235032][ T7979] lo speed is unknown, defaulting to 1000 [ 257.992891][ T8005] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 258.340002][ T8017] raw_sendmsg: syz.2.692 forgot to set AF_INET. Fix it! [ 258.406043][ T8016] lo speed is unknown, defaulting to 1000 [ 259.296917][ T8033] lo speed is unknown, defaulting to 1000 [ 259.312759][ T8021] wg1: entered promiscuous mode [ 259.318902][ T8021] vlan2: entered promiscuous mode [ 259.347308][ T8021] wg1: left promiscuous mode [ 259.892893][ T8018] lo speed is unknown, defaulting to 1000 [ 260.205698][ T8041] lo speed is unknown, defaulting to 1000 [ 260.320013][ T8033] netlink: 'syz.2.698': attribute type 10 has an invalid length. [ 260.703452][ T8055] __nla_validate_parse: 5 callbacks suppressed [ 260.703472][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 260.898409][ T8064] block nbd2: not configured, cannot reconfigure [ 260.905695][ T8063] block nbd2: not configured, cannot reconfigure [ 261.077724][ T8069] netlink: 'syz.1.707': attribute type 12 has an invalid length. [ 261.088507][ T8075] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 261.116320][ T8075] netlink: 9320 bytes leftover after parsing attributes in process `syz.2.708'. [ 261.158463][ T8075] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 261.187519][ T8075] netlink: 'syz.2.708': attribute type 2 has an invalid length. [ 261.790462][ T8087] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.712'. [ 261.822947][ T8087] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 261.890294][ T8094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.713'. [ 262.125714][ T8109] sctp: [Deprecated]: syz.1.719 (pid 8109) Use of int in maxseg socket option. [ 262.125714][ T8109] Use struct sctp_assoc_value instead [ 262.256560][ T8117] lo speed is unknown, defaulting to 1000 [ 262.410899][ T8131] netlink: 56 bytes leftover after parsing attributes in process `syz.4.726'. [ 262.434072][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.726'. [ 262.443499][ T8128] netlink: 72 bytes leftover after parsing attributes in process `syz.3.725'. [ 262.457914][ T8128] netlink: 'syz.3.725': attribute type 5 has an invalid length. [ 262.489703][ T8128] ip6erspan0: entered promiscuous mode [ 262.510182][ T8125] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 262.522634][ T8125] syzkaller0: linktype set to 512 [ 262.662109][ T8135] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 262.680403][ T8135] netlink: 224 bytes leftover after parsing attributes in process `syz.2.728'. [ 262.708868][ T8139] Cannot find del_set index 4 as target [ 262.722957][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 262.737362][ T8142] netlink: 68 bytes leftover after parsing attributes in process `syz.2.728'. [ 263.243718][ T8167] bond0: (slave bond_slave_0): Releasing backup interface [ 263.295025][ T8167] bond0: (slave bond_slave_1): Releasing backup interface [ 263.352964][ T8167] team0: Port device team_slave_0 removed [ 263.413690][ T8167] team0: Port device team_slave_1 removed [ 263.439531][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.478248][ T8167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.505795][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.534673][ T8167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.673979][ T8168] team0: Port device wg2 added [ 263.712321][ T8176] veth1_macvtap: entered allmulticast mode [ 264.336256][ T8236] openvswitch: netlink: IP tunnel dst address not specified [ 264.496114][ T8249] netlink: 'syz.3.758': attribute type 8 has an invalid length. [ 264.517585][ T8247] netlink: 'syz.4.759': attribute type 13 has an invalid length. [ 264.610077][ T8255] macvlan0: entered allmulticast mode [ 264.625130][ T8255] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 264.648185][ T8255] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 264.663816][ T8255] team0: Port device macvlan0 added [ 264.676772][ T8256] macvlan1: entered allmulticast mode [ 264.690814][ T8256] team0: Port device macvlan1 added [ 265.059832][ T8281] IPVS: length: 224 != 24 [ 265.130766][ T8286] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 265.743887][ T8326] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 265.788608][ T8326] validate_nla: 1 callbacks suppressed [ 265.788628][ T8326] netlink: 'syz.1.784': attribute type 32 has an invalid length. [ 265.849226][ T8326] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 265.878003][ T8326] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 265.896941][ T8326] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 265.906212][ T8326] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 265.919574][ T8326] geneve2: entered promiscuous mode [ 265.925015][ T8326] geneve2: entered allmulticast mode [ 266.013652][ T8341] __nla_validate_parse: 8 callbacks suppressed [ 266.013700][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 266.097832][ T8349] (unnamed net_device) (uninitialized): down delay (2147483647) is not a multiple of miimon (100), value rounded to 2147483600 ms [ 266.147878][ T8349] bond1: entered allmulticast mode [ 266.167850][ T8349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.497713][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 266.528659][ T8386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.532147][ T8383] xt_bpf: check failed: parse error [ 266.717947][ T8394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.804'. [ 266.719371][ T8391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.805'. [ 266.776541][ T8391] unsupported nlmsg_type 40 [ 266.973192][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 267.181308][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 267.201697][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 267.227380][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'. [ 267.313828][ T8432] netlink: 'syz.3.818': attribute type 3 has an invalid length. [ 267.515843][ T8448] netlink: 'syz.3.819': attribute type 12 has an invalid length. [ 267.541351][ T8444] delete_channel: no stack [ 267.658248][ T8455] netlink: 'syz.2.823': attribute type 46 has an invalid length. [ 267.666525][ T8455] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.823'. [ 267.741666][ T8457] netlink: 666 bytes leftover after parsing attributes in process `syz.1.826'. [ 267.875124][ T8464] syzkaller1: entered promiscuous mode [ 267.883782][ T8464] syzkaller1: entered allmulticast mode [ 269.148331][ T8537] netlink: 'syz.3.847': attribute type 12 has an invalid length. [ 269.509811][ T8556] netlink: 'syz.2.853': attribute type 21 has an invalid length. [ 269.626076][ T8563] netlink: 'syz.2.856': attribute type 23 has an invalid length. [ 269.822804][ T8574] netlink: 'syz.2.858': attribute type 2 has an invalid length. [ 270.259278][ T8606] xt_TCPMSS: Only works on TCP SYN packets [ 270.281136][ T8606] bond0: entered promiscuous mode [ 270.286298][ T8606] bond_slave_0: entered promiscuous mode [ 270.297671][ T8606] bond_slave_1: entered promiscuous mode [ 270.321573][ T8606] tipc: Failed to obtain node identity [ 270.327207][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 270.339113][ T8610] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 270.544519][ T8617] vlan2: entered promiscuous mode [ 270.665214][ T8628] netlink: 'syz.2.876': attribute type 12 has an invalid length. [ 270.964024][ T8638] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 270.979507][ T8638] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 271.091282][ T8641] team_slave_0: entered promiscuous mode [ 271.097350][ T8641] team_slave_1: entered promiscuous mode [ 271.104974][ T8641] macvtap1: entered promiscuous mode [ 271.110519][ T8641] team0: entered promiscuous mode [ 271.116205][ T8641] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 271.267031][ T8651] lo speed is unknown, defaulting to 1000 [ 271.777858][ T8675] validate_nla: 1 callbacks suppressed [ 271.777872][ T8675] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 271.827388][ T8677] __nla_validate_parse: 13 callbacks suppressed [ 271.855760][ T8675] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.890'. [ 271.887763][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 272.016624][ T8686] openvswitch: netlink: Actions may not be safe on all matching packets [ 272.082181][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.894'. [ 272.129299][ T8692] Bluetooth: MGMT ver 1.23 [ 272.307166][ T8705] netlink: 'syz.3.901': attribute type 3 has an invalid length. [ 272.332269][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.901'. [ 272.368296][ T8707] syzkaller0: entered allmulticast mode [ 272.382041][ T8707] syzkaller0: left allmulticast mode [ 272.744925][ T8726] netlink: 56 bytes leftover after parsing attributes in process `syz.2.910'. [ 272.752712][ T8724] BUG: Bad page state in process syz.1.908 pfn:2566a [ 272.761067][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802566af00 pfn:0x2566a [ 272.771219][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 272.778422][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 272.787036][ T8724] raw: ffff88802566af00 0000000000000001 00000000ffffffff 0000000000000000 [ 272.795687][ T8724] page dumped because: page_pool leak [ 272.801149][ T8724] page_owner tracks the page as allocated [ 272.806887][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695967699, free_ts 272629973885 [ 272.823867][ T8724] post_alloc_hook+0x1f3/0x230 [ 272.828712][ T8724] get_page_from_freelist+0x3045/0x3190 [ 272.834291][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 272.839558][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 272.845047][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 272.851019][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 272.856253][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 272.861693][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 272.867094][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 272.872105][ T8724] __sys_bpf+0x48d/0x810 [ 272.876369][ T8724] __x64_sys_bpf+0x7c/0x90 [ 272.880821][ T8724] do_syscall_64+0xf3/0x230 [ 272.885351][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.891328][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 272.897711][ T8724] free_unref_folios+0xf12/0x18d0 [ 272.902758][ T8724] folios_put_refs+0x76c/0x860 [ 272.907586][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 272.913237][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 272.917879][ T8724] tlb_finish_mmu+0xd4/0x200 [ 272.922483][ T8724] exit_mmap+0x496/0xc40 [ 272.926728][ T8724] __mmput+0x115/0x390 [ 272.930875][ T8724] exit_mm+0x220/0x310 [ 272.934971][ T8724] do_exit+0x9b2/0x28e0 [ 272.939194][ T8724] do_group_exit+0x207/0x2c0 [ 272.943808][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 272.948877][ T8724] x64_sys_call+0x2634/0x2640 [ 272.953577][ T8724] do_syscall_64+0xf3/0x230 [ 272.958126][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.964033][ T8724] Modules linked in: [ 272.967991][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 272.978581][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.988649][ T8724] Call Trace: [ 272.991926][ T8724] [ 272.994855][ T8724] dump_stack_lvl+0x241/0x360 [ 272.999542][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.004738][ T8724] ? __pfx_print_modules+0x10/0x10 [ 273.009865][ T8724] bad_page+0x166/0x1b0 [ 273.014026][ T8724] free_unref_page+0xed0/0xf20 [ 273.018791][ T8724] skb_release_data+0x6dc/0x8a0 [ 273.023651][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 273.028683][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 273.033277][ T8724] packet_rcv+0x16f/0x14b0 [ 273.037699][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 273.042550][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 273.048537][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 273.055035][ T8724] ? read_tsc+0x9/0x20 [ 273.059102][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 273.064304][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 273.070629][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 273.076783][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 273.083114][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 273.089791][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 273.095076][ T8724] ? __phys_addr+0xba/0x170 [ 273.099576][ T8724] ? build_skb_around+0x111/0x260 [ 273.104610][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 273.110511][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 273.115805][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 273.121267][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 273.127169][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 273.132724][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 273.138532][ T8724] ? synchronize_rcu+0x11b/0x360 [ 273.143476][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 273.148773][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 273.155025][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 273.160921][ T8724] ? _copy_from_user+0xa6/0xe0 [ 273.165687][ T8724] ? bpf_test_init+0x15a/0x180 [ 273.170449][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 273.175909][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 273.181288][ T8724] ? __pfx_lock_release+0x10/0x10 [ 273.186320][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.192124][ T8724] ? __fget_files+0x29/0x470 [ 273.196719][ T8724] ? fput+0x1a8/0x230 [ 273.200713][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.206524][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 273.211469][ T8724] __sys_bpf+0x48d/0x810 [ 273.215713][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 273.220496][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.226490][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.232831][ T8724] ? do_syscall_64+0x100/0x230 [ 273.237605][ T8724] __x64_sys_bpf+0x7c/0x90 [ 273.242031][ T8724] do_syscall_64+0xf3/0x230 [ 273.246529][ T8724] ? clear_bhb_loop+0x35/0x90 [ 273.251212][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.257116][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 273.261528][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.281221][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.289632][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 273.297615][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 273.305595][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 273.313589][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.321564][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 273.329554][ T8724] [ 273.332644][ T8724] Disabling lock debugging due to kernel taint [ 273.338905][ T8724] BUG: Bad page state in process syz.1.908 pfn:30b74 [ 273.345677][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030b74f00 pfn:0x30b74 [ 273.355881][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.363058][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 273.371672][ T8724] raw: ffff888030b74f00 0000000000000001 00000000ffffffff 0000000000000000 [ 273.380286][ T8724] page dumped because: page_pool leak [ 273.385656][ T8724] page_owner tracks the page as allocated [ 273.391409][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695956266, free_ts 272629982570 [ 273.408391][ T8724] post_alloc_hook+0x1f3/0x230 [ 273.413171][ T8724] get_page_from_freelist+0x3045/0x3190 [ 273.418801][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 273.424034][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 273.429536][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 273.435442][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 273.440679][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 273.446066][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 273.451493][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 273.456451][ T8724] __sys_bpf+0x48d/0x810 [ 273.460728][ T8724] __x64_sys_bpf+0x7c/0x90 [ 273.465154][ T8724] do_syscall_64+0xf3/0x230 [ 273.469687][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.475598][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 273.482127][ T8724] free_unref_folios+0xf12/0x18d0 [ 273.487157][ T8724] folios_put_refs+0x76c/0x860 [ 273.491975][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 273.497657][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 273.502271][ T8724] tlb_finish_mmu+0xd4/0x200 [ 273.506876][ T8724] exit_mmap+0x496/0xc40 [ 273.511163][ T8724] __mmput+0x115/0x390 [ 273.515256][ T8724] exit_mm+0x220/0x310 [ 273.519369][ T8724] do_exit+0x9b2/0x28e0 [ 273.523532][ T8724] do_group_exit+0x207/0x2c0 [ 273.528174][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 273.533205][ T8724] x64_sys_call+0x2634/0x2640 [ 273.537893][ T8724] do_syscall_64+0xf3/0x230 [ 273.542380][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.548306][ T8724] Modules linked in: [ 273.552212][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 273.564263][ T8724] Tainted: [B]=BAD_PAGE [ 273.568395][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.578433][ T8724] Call Trace: [ 273.581711][ T8724] [ 273.584627][ T8724] dump_stack_lvl+0x241/0x360 [ 273.589324][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.594604][ T8724] ? __pfx_print_modules+0x10/0x10 [ 273.599735][ T8724] bad_page+0x166/0x1b0 [ 273.603901][ T8724] free_unref_page+0xed0/0xf20 [ 273.608666][ T8724] skb_release_data+0x6dc/0x8a0 [ 273.613612][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 273.618626][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 273.623224][ T8724] packet_rcv+0x16f/0x14b0 [ 273.627625][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 273.632458][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 273.638427][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 273.644999][ T8724] ? read_tsc+0x9/0x20 [ 273.649066][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 273.654252][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 273.660575][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 273.666730][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 273.673050][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 273.679717][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 273.684903][ T8724] ? __phys_addr+0xba/0x170 [ 273.689396][ T8724] ? build_skb_around+0x111/0x260 [ 273.694409][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 273.700311][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 273.705590][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 273.711046][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 273.716940][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 273.722484][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 273.728284][ T8724] ? synchronize_rcu+0x11b/0x360 [ 273.733212][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 273.738500][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 273.744735][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 273.750622][ T8724] ? _copy_from_user+0xa6/0xe0 [ 273.755379][ T8724] ? bpf_test_init+0x15a/0x180 [ 273.760137][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 273.765598][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 273.771002][ T8724] ? __pfx_lock_release+0x10/0x10 [ 273.776024][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.781822][ T8724] ? __fget_files+0x29/0x470 [ 273.786416][ T8724] ? fput+0x1a8/0x230 [ 273.790389][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 273.796189][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 273.801123][ T8724] __sys_bpf+0x48d/0x810 [ 273.805360][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 273.810118][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.816099][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.822507][ T8724] ? do_syscall_64+0x100/0x230 [ 273.827261][ T8724] __x64_sys_bpf+0x7c/0x90 [ 273.831668][ T8724] do_syscall_64+0xf3/0x230 [ 273.836161][ T8724] ? clear_bhb_loop+0x35/0x90 [ 273.840829][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.846716][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 273.851116][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.870890][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.879297][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 273.887254][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 273.895213][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 273.903173][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.911135][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 273.919108][ T8724] [ 273.922205][ T8724] BUG: Bad page state in process syz.1.908 pfn:2c270 [ 273.929032][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c270f00 pfn:0x2c270 [ 273.939124][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.946248][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 273.954959][ T8724] raw: ffff88802c270f00 0000000000000001 00000000ffffffff 0000000000000000 [ 273.963643][ T8724] page dumped because: page_pool leak [ 273.969012][ T8724] page_owner tracks the page as allocated [ 273.974707][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695945047, free_ts 272629992237 [ 273.991648][ T8724] post_alloc_hook+0x1f3/0x230 [ 273.996406][ T8724] get_page_from_freelist+0x3045/0x3190 [ 274.001991][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 274.007266][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 274.012731][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 274.018630][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 274.023818][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 274.029303][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 274.034673][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 274.039633][ T8724] __sys_bpf+0x48d/0x810 [ 274.043870][ T8724] __x64_sys_bpf+0x7c/0x90 [ 274.048297][ T8724] do_syscall_64+0xf3/0x230 [ 274.052785][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.058692][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 274.065002][ T8724] free_unref_folios+0xf12/0x18d0 [ 274.070062][ T8724] folios_put_refs+0x76c/0x860 [ 274.074832][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 274.080490][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 274.085090][ T8724] tlb_finish_mmu+0xd4/0x200 [ 274.089694][ T8724] exit_mmap+0x496/0xc40 [ 274.093947][ T8724] __mmput+0x115/0x390 [ 274.098048][ T8724] exit_mm+0x220/0x310 [ 274.102118][ T8724] do_exit+0x9b2/0x28e0 [ 274.106268][ T8724] do_group_exit+0x207/0x2c0 [ 274.110865][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 274.115870][ T8724] x64_sys_call+0x2634/0x2640 [ 274.120640][ T8724] do_syscall_64+0xf3/0x230 [ 274.125136][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.131079][ T8724] Modules linked in: [ 274.134987][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 274.147052][ T8724] Tainted: [B]=BAD_PAGE [ 274.151187][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.161229][ T8724] Call Trace: [ 274.164495][ T8724] [ 274.167415][ T8724] dump_stack_lvl+0x241/0x360 [ 274.172096][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.177543][ T8724] ? __pfx_print_modules+0x10/0x10 [ 274.182650][ T8724] bad_page+0x166/0x1b0 [ 274.186883][ T8724] free_unref_page+0xed0/0xf20 [ 274.191645][ T8724] skb_release_data+0x6dc/0x8a0 [ 274.196503][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 274.201515][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 274.206095][ T8724] packet_rcv+0x16f/0x14b0 [ 274.210505][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 274.215344][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 274.221316][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 274.227811][ T8724] ? read_tsc+0x9/0x20 [ 274.231872][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 274.237063][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 274.243383][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 274.249534][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 274.255852][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 274.262516][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 274.267705][ T8724] ? __phys_addr+0xba/0x170 [ 274.272197][ T8724] ? build_skb_around+0x111/0x260 [ 274.277229][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 274.283134][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 274.288417][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 274.293871][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 274.299764][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 274.305309][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 274.311106][ T8724] ? synchronize_rcu+0x11b/0x360 [ 274.316036][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 274.321318][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 274.327556][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 274.333445][ T8724] ? _copy_from_user+0xa6/0xe0 [ 274.338207][ T8724] ? bpf_test_init+0x15a/0x180 [ 274.342967][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 274.348421][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 274.353796][ T8724] ? __pfx_lock_release+0x10/0x10 [ 274.358817][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.364616][ T8724] ? __fget_files+0x29/0x470 [ 274.369199][ T8724] ? fput+0x1a8/0x230 [ 274.373171][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.378970][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 274.383920][ T8724] __sys_bpf+0x48d/0x810 [ 274.388158][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 274.392936][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.398915][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.405234][ T8724] ? do_syscall_64+0x100/0x230 [ 274.409986][ T8724] __x64_sys_bpf+0x7c/0x90 [ 274.414394][ T8724] do_syscall_64+0xf3/0x230 [ 274.418882][ T8724] ? clear_bhb_loop+0x35/0x90 [ 274.423561][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.429451][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 274.433856][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.453469][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.461889][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 274.469859][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 274.477838][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 274.485800][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.493765][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 274.501736][ T8724] [ 274.504812][ T8724] BUG: Bad page state in process syz.1.908 pfn:2f2d2 [ 274.509670][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 274.511596][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f2d2f00 pfn:0x2f2d2 [ 274.527823][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 274.534962][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 274.543574][ T8724] raw: ffff88802f2d2f00 0000000000000001 00000000ffffffff 0000000000000000 [ 274.552160][ T8724] page dumped because: page_pool leak [ 274.557529][ T8724] page_owner tracks the page as allocated [ 274.563229][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695933734, free_ts 272630000603 [ 274.580173][ T8724] post_alloc_hook+0x1f3/0x230 [ 274.584941][ T8724] get_page_from_freelist+0x3045/0x3190 [ 274.590512][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 274.595785][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 274.601247][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 274.607122][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 274.612331][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 274.617719][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 274.623275][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 274.628219][ T8724] __sys_bpf+0x48d/0x810 [ 274.632446][ T8724] __x64_sys_bpf+0x7c/0x90 [ 274.636850][ T8724] do_syscall_64+0xf3/0x230 [ 274.641405][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.647308][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 274.653817][ T8724] free_unref_folios+0xf12/0x18d0 [ 274.658840][ T8724] folios_put_refs+0x76c/0x860 [ 274.663586][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 274.669225][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 274.673975][ T8724] tlb_finish_mmu+0xd4/0x200 [ 274.678603][ T8724] exit_mmap+0x496/0xc40 [ 274.682843][ T8724] __mmput+0x115/0x390 [ 274.686895][ T8724] exit_mm+0x220/0x310 [ 274.690970][ T8724] do_exit+0x9b2/0x28e0 [ 274.695109][ T8724] do_group_exit+0x207/0x2c0 [ 274.699696][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 274.704791][ T8724] x64_sys_call+0x2634/0x2640 [ 274.709477][ T8724] do_syscall_64+0xf3/0x230 [ 274.713962][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.719864][ T8724] Modules linked in: [ 274.723747][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 274.735790][ T8724] Tainted: [B]=BAD_PAGE [ 274.739929][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.749967][ T8724] Call Trace: [ 274.753242][ T8724] [ 274.756152][ T8724] dump_stack_lvl+0x241/0x360 [ 274.760814][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.765995][ T8724] ? __pfx_print_modules+0x10/0x10 [ 274.771096][ T8724] bad_page+0x166/0x1b0 [ 274.775238][ T8724] free_unref_page+0xed0/0xf20 [ 274.780012][ T8724] skb_release_data+0x6dc/0x8a0 [ 274.784854][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 274.789861][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 274.794450][ T8724] packet_rcv+0x16f/0x14b0 [ 274.798852][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 274.803686][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 274.809655][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 274.816145][ T8724] ? read_tsc+0x9/0x20 [ 274.820197][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 274.825382][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 274.831696][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 274.837848][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 274.844177][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 274.850846][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 274.856040][ T8724] ? __phys_addr+0xba/0x170 [ 274.860530][ T8724] ? build_skb_around+0x111/0x260 [ 274.865542][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 274.871431][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 274.876707][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 274.882162][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 274.888051][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 274.893591][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 274.899390][ T8724] ? synchronize_rcu+0x11b/0x360 [ 274.904316][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 274.909596][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 274.915848][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 274.921745][ T8724] ? _copy_from_user+0xa6/0xe0 [ 274.926504][ T8724] ? bpf_test_init+0x15a/0x180 [ 274.931263][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 274.936718][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 274.942083][ T8724] ? __pfx_lock_release+0x10/0x10 [ 274.947109][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.952922][ T8724] ? __fget_files+0x29/0x470 [ 274.957506][ T8724] ? fput+0x1a8/0x230 [ 274.961479][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.967280][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 274.972209][ T8724] __sys_bpf+0x48d/0x810 [ 274.976441][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 274.981198][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.987173][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.993497][ T8724] ? do_syscall_64+0x100/0x230 [ 274.998250][ T8724] __x64_sys_bpf+0x7c/0x90 [ 275.002663][ T8724] do_syscall_64+0xf3/0x230 [ 275.007158][ T8724] ? clear_bhb_loop+0x35/0x90 [ 275.011821][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.017707][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 275.022112][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.041708][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.050236][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 275.058288][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 275.066245][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 275.074207][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.082167][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 275.090137][ T8724] [ 275.093211][ T8724] BUG: Bad page state in process syz.1.908 pfn:28a45 [ 275.100012][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028a45780 pfn:0x28a45 [ 275.110115][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 275.117233][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 275.125842][ T8724] raw: ffff888028a45780 0000000000000001 00000000ffffffff 0000000000000000 [ 275.134436][ T8724] page dumped because: page_pool leak [ 275.139842][ T8724] page_owner tracks the page as allocated [ 275.145549][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695922265, free_ts 272630009372 [ 275.162523][ T8724] post_alloc_hook+0x1f3/0x230 [ 275.167281][ T8724] get_page_from_freelist+0x3045/0x3190 [ 275.172862][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 275.178074][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 275.183521][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 275.189463][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 275.194651][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 275.200034][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 275.205391][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 275.210344][ T8724] __sys_bpf+0x48d/0x810 [ 275.214576][ T8724] __x64_sys_bpf+0x7c/0x90 [ 275.219002][ T8724] do_syscall_64+0xf3/0x230 [ 275.223491][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.229421][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 275.235744][ T8724] free_unref_folios+0xf12/0x18d0 [ 275.240800][ T8724] folios_put_refs+0x76c/0x860 [ 275.245552][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 275.251210][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 275.255819][ T8724] tlb_finish_mmu+0xd4/0x200 [ 275.260455][ T8724] exit_mmap+0x496/0xc40 [ 275.264705][ T8724] __mmput+0x115/0x390 [ 275.268798][ T8724] exit_mm+0x220/0x310 [ 275.272849][ T8724] do_exit+0x9b2/0x28e0 [ 275.276985][ T8724] do_group_exit+0x207/0x2c0 [ 275.281585][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 275.286594][ T8724] x64_sys_call+0x2634/0x2640 [ 275.291323][ T8724] do_syscall_64+0xf3/0x230 [ 275.295828][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.301757][ T8724] Modules linked in: [ 275.305642][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 275.317697][ T8724] Tainted: [B]=BAD_PAGE [ 275.321838][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.331905][ T8724] Call Trace: [ 275.335189][ T8724] [ 275.338120][ T8724] dump_stack_lvl+0x241/0x360 [ 275.342801][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.347995][ T8724] ? __pfx_print_modules+0x10/0x10 [ 275.353101][ T8724] bad_page+0x166/0x1b0 [ 275.357267][ T8724] free_unref_page+0xed0/0xf20 [ 275.362034][ T8724] skb_release_data+0x6dc/0x8a0 [ 275.366976][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 275.371997][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 275.376579][ T8724] packet_rcv+0x16f/0x14b0 [ 275.380998][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 275.385866][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 275.391852][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 275.398365][ T8724] ? read_tsc+0x9/0x20 [ 275.402425][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 275.407629][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 275.414416][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 275.420575][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 275.426904][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 275.433578][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 275.438773][ T8724] ? __phys_addr+0xba/0x170 [ 275.443268][ T8724] ? build_skb_around+0x111/0x260 [ 275.448285][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 275.454171][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 275.459457][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 275.464917][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 275.470808][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 275.476352][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 275.482151][ T8724] ? synchronize_rcu+0x11b/0x360 [ 275.487079][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 275.492363][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 275.498600][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 275.504486][ T8724] ? _copy_from_user+0xa6/0xe0 [ 275.509245][ T8724] ? bpf_test_init+0x15a/0x180 [ 275.514012][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 275.519464][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 275.524831][ T8724] ? __pfx_lock_release+0x10/0x10 [ 275.529853][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 275.535757][ T8724] ? __fget_files+0x29/0x470 [ 275.540340][ T8724] ? fput+0x1a8/0x230 [ 275.544579][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 275.550382][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 275.555314][ T8724] __sys_bpf+0x48d/0x810 [ 275.559556][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 275.564329][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.570328][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.576650][ T8724] ? do_syscall_64+0x100/0x230 [ 275.581406][ T8724] __x64_sys_bpf+0x7c/0x90 [ 275.585813][ T8724] do_syscall_64+0xf3/0x230 [ 275.590305][ T8724] ? clear_bhb_loop+0x35/0x90 [ 275.594972][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.600864][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 275.605276][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.624885][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.633307][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 275.641275][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 275.649237][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 275.657196][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.665157][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 275.673128][ T8724] [ 275.676199][ T8724] BUG: Bad page state in process syz.1.908 pfn:29324 [ 275.683007][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x128 pfn:0x29324 [ 275.691977][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 275.699126][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 275.707831][ T8724] raw: 0000000000000128 0000000000000001 00000000ffffffff 0000000000000000 [ 275.716420][ T8724] page dumped because: page_pool leak [ 275.721815][ T8724] page_owner tracks the page as allocated [ 275.727563][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695910714, free_ts 272630018100 [ 275.744544][ T8724] post_alloc_hook+0x1f3/0x230 [ 275.749325][ T8724] get_page_from_freelist+0x3045/0x3190 [ 275.754957][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 275.760184][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 275.765661][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 275.771592][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 275.776890][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 275.782297][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 275.787693][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 275.792648][ T8724] __sys_bpf+0x48d/0x810 [ 275.796885][ T8724] __x64_sys_bpf+0x7c/0x90 [ 275.801331][ T8724] do_syscall_64+0xf3/0x230 [ 275.805824][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.811740][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 275.818096][ T8724] free_unref_folios+0xf12/0x18d0 [ 275.823124][ T8724] folios_put_refs+0x76c/0x860 [ 275.827904][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 275.833527][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 275.838201][ T8724] tlb_finish_mmu+0xd4/0x200 [ 275.842798][ T8724] exit_mmap+0x496/0xc40 [ 275.847039][ T8724] __mmput+0x115/0x390 [ 275.851147][ T8724] exit_mm+0x220/0x310 [ 275.855218][ T8724] do_exit+0x9b2/0x28e0 [ 275.859378][ T8724] do_group_exit+0x207/0x2c0 [ 275.863969][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 275.869120][ T8724] x64_sys_call+0x2634/0x2640 [ 275.873883][ T8724] do_syscall_64+0xf3/0x230 [ 275.878394][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.884366][ T8724] Modules linked in: [ 275.888267][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 275.900329][ T8724] Tainted: [B]=BAD_PAGE [ 275.904462][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.914501][ T8724] Call Trace: [ 275.917766][ T8724] [ 275.920686][ T8724] dump_stack_lvl+0x241/0x360 [ 275.925351][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.930534][ T8724] ? __pfx_print_modules+0x10/0x10 [ 275.935652][ T8724] bad_page+0x166/0x1b0 [ 275.939795][ T8724] free_unref_page+0xed0/0xf20 [ 275.944544][ T8724] skb_release_data+0x6dc/0x8a0 [ 275.949393][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 275.954415][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 275.959012][ T8724] packet_rcv+0x16f/0x14b0 [ 275.963424][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 275.968277][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 275.974257][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 275.980756][ T8724] ? read_tsc+0x9/0x20 [ 275.984823][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 275.990020][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 275.996340][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 276.002488][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 276.008808][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 276.015490][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 276.020678][ T8724] ? __phys_addr+0xba/0x170 [ 276.025170][ T8724] ? build_skb_around+0x111/0x260 [ 276.030187][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 276.036162][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 276.041439][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 276.046893][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 276.052792][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 276.058332][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 276.064130][ T8724] ? synchronize_rcu+0x11b/0x360 [ 276.069062][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 276.074354][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 276.080593][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 276.086480][ T8724] ? _copy_from_user+0xa6/0xe0 [ 276.091239][ T8724] ? bpf_test_init+0x15a/0x180 [ 276.096082][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 276.101538][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 276.106907][ T8724] ? __pfx_lock_release+0x10/0x10 [ 276.111973][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.117773][ T8724] ? __fget_files+0x29/0x470 [ 276.122355][ T8724] ? fput+0x1a8/0x230 [ 276.126326][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.132126][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 276.137059][ T8724] __sys_bpf+0x48d/0x810 [ 276.141308][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 276.146076][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.152076][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.158398][ T8724] ? do_syscall_64+0x100/0x230 [ 276.163149][ T8724] __x64_sys_bpf+0x7c/0x90 [ 276.167555][ T8724] do_syscall_64+0xf3/0x230 [ 276.172046][ T8724] ? clear_bhb_loop+0x35/0x90 [ 276.176715][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.182606][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 276.187138][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.206822][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.215244][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 276.223203][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 276.231179][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 276.239137][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.247128][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 276.255124][ T8724] [ 276.258210][ T8724] BUG: Bad page state in process syz.1.908 pfn:31a2d [ 276.264988][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x213 pfn:0x31a2d [ 276.273970][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 276.281130][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 276.289758][ T8724] raw: 0000000000000213 0000000000000001 00000000ffffffff 0000000000000000 [ 276.298374][ T8724] page dumped because: page_pool leak [ 276.303736][ T8724] page_owner tracks the page as allocated [ 276.309494][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695899201, free_ts 272630032307 [ 276.326446][ T8724] post_alloc_hook+0x1f3/0x230 [ 276.331222][ T8724] get_page_from_freelist+0x3045/0x3190 [ 276.336804][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 276.342025][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 276.347495][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 276.353561][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 276.358790][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 276.364170][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 276.369558][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 276.374484][ T8724] __sys_bpf+0x48d/0x810 [ 276.378761][ T8724] __x64_sys_bpf+0x7c/0x90 [ 276.383182][ T8724] do_syscall_64+0xf3/0x230 [ 276.387693][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.393577][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 276.399905][ T8724] free_unref_folios+0xf12/0x18d0 [ 276.404914][ T8724] folios_put_refs+0x76c/0x860 [ 276.409698][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 276.415317][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 276.419948][ T8724] tlb_finish_mmu+0xd4/0x200 [ 276.424549][ T8724] exit_mmap+0x496/0xc40 [ 276.428813][ T8724] __mmput+0x115/0x390 [ 276.432879][ T8724] exit_mm+0x220/0x310 [ 276.436935][ T8724] do_exit+0x9b2/0x28e0 [ 276.441147][ T8724] do_group_exit+0x207/0x2c0 [ 276.445749][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 276.450788][ T8724] x64_sys_call+0x2634/0x2640 [ 276.455456][ T8724] do_syscall_64+0xf3/0x230 [ 276.459967][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.465908][ T8724] Modules linked in: [ 276.469813][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 276.481864][ T8724] Tainted: [B]=BAD_PAGE [ 276.485996][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.496034][ T8724] Call Trace: [ 276.499299][ T8724] [ 276.502214][ T8724] dump_stack_lvl+0x241/0x360 [ 276.506902][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.512105][ T8724] ? __pfx_print_modules+0x10/0x10 [ 276.517212][ T8724] bad_page+0x166/0x1b0 [ 276.521357][ T8724] free_unref_page+0xed0/0xf20 [ 276.526106][ T8724] skb_release_data+0x6dc/0x8a0 [ 276.530958][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 276.535966][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 276.540552][ T8724] packet_rcv+0x16f/0x14b0 [ 276.544953][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 276.549786][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 276.555756][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 276.562256][ T8724] ? read_tsc+0x9/0x20 [ 276.566315][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 276.571501][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 276.577826][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 276.583997][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 276.590322][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 276.596993][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 276.602184][ T8724] ? __phys_addr+0xba/0x170 [ 276.606692][ T8724] ? build_skb_around+0x111/0x260 [ 276.611718][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 276.617613][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 276.622911][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 276.628376][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 276.634269][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 276.639811][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 276.645608][ T8724] ? synchronize_rcu+0x11b/0x360 [ 276.650535][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 276.655818][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 276.662054][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 276.667945][ T8724] ? _copy_from_user+0xa6/0xe0 [ 276.672702][ T8724] ? bpf_test_init+0x15a/0x180 [ 276.677460][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 276.682920][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 276.688291][ T8724] ? __pfx_lock_release+0x10/0x10 [ 276.693315][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.699128][ T8724] ? __fget_files+0x29/0x470 [ 276.703710][ T8724] ? fput+0x1a8/0x230 [ 276.707684][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 276.713482][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 276.718411][ T8724] __sys_bpf+0x48d/0x810 [ 276.722643][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 276.727400][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.733378][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.739701][ T8724] ? do_syscall_64+0x100/0x230 [ 276.744453][ T8724] __x64_sys_bpf+0x7c/0x90 [ 276.749295][ T8724] do_syscall_64+0xf3/0x230 [ 276.753790][ T8724] ? clear_bhb_loop+0x35/0x90 [ 276.758456][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.764342][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 276.768808][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.788407][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.796814][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 276.804775][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 276.812736][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 276.820693][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.828652][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 276.836625][ T8724] [ 276.839702][ T8724] BUG: Bad page state in process syz.1.908 pfn:616b5 [ 276.846479][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880616b5f00 pfn:0x616b5 [ 276.856596][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 276.863728][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 276.872320][ T8724] raw: ffff8880616b5f00 0000000000000001 00000000ffffffff 0000000000000000 [ 276.880895][ T8724] page dumped because: page_pool leak [ 276.886240][ T8724] page_owner tracks the page as allocated [ 276.891960][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695887876, free_ts 272630040992 [ 276.908898][ T8724] post_alloc_hook+0x1f3/0x230 [ 276.913654][ T8724] get_page_from_freelist+0x3045/0x3190 [ 276.919206][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 276.924383][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 276.929836][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 276.935713][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 276.940918][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 276.946277][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 276.951661][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 276.956580][ T8724] __sys_bpf+0x48d/0x810 [ 276.960834][ T8724] __x64_sys_bpf+0x7c/0x90 [ 276.965236][ T8724] do_syscall_64+0xf3/0x230 [ 276.969766][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.975689][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 276.982024][ T8724] free_unref_folios+0xf12/0x18d0 [ 276.987033][ T8724] folios_put_refs+0x76c/0x860 [ 276.991819][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 276.997582][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 277.002188][ T8724] tlb_finish_mmu+0xd4/0x200 [ 277.006775][ T8724] exit_mmap+0x496/0xc40 [ 277.011028][ T8724] __mmput+0x115/0x390 [ 277.015339][ T8724] exit_mm+0x220/0x310 [ 277.019404][ T8724] do_exit+0x9b2/0x28e0 [ 277.023622][ T8724] do_group_exit+0x207/0x2c0 [ 277.028211][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 277.033220][ T8724] x64_sys_call+0x2634/0x2640 [ 277.037899][ T8724] do_syscall_64+0xf3/0x230 [ 277.042380][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.048278][ T8724] Modules linked in: [ 277.052174][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 277.064215][ T8724] Tainted: [B]=BAD_PAGE [ 277.068357][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.078479][ T8724] Call Trace: [ 277.082173][ T8724] [ 277.085086][ T8724] dump_stack_lvl+0x241/0x360 [ 277.089745][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.094936][ T8724] ? __pfx_print_modules+0x10/0x10 [ 277.100062][ T8724] bad_page+0x166/0x1b0 [ 277.104200][ T8724] free_unref_page+0xed0/0xf20 [ 277.108966][ T8724] skb_release_data+0x6dc/0x8a0 [ 277.113837][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 277.118859][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 277.123442][ T8724] packet_rcv+0x16f/0x14b0 [ 277.127853][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 277.132696][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 277.138672][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 277.145163][ T8724] ? read_tsc+0x9/0x20 [ 277.149221][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 277.154412][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 277.160734][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 277.166883][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 277.173202][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 277.179868][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 277.185057][ T8724] ? __phys_addr+0xba/0x170 [ 277.189547][ T8724] ? build_skb_around+0x111/0x260 [ 277.194560][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 277.200452][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 277.205733][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 277.211188][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 277.217077][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 277.222619][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 277.228422][ T8724] ? synchronize_rcu+0x11b/0x360 [ 277.233357][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 277.238640][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 277.244877][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 277.250767][ T8724] ? _copy_from_user+0xa6/0xe0 [ 277.255527][ T8724] ? bpf_test_init+0x15a/0x180 [ 277.260287][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 277.265752][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 277.271123][ T8724] ? __pfx_lock_release+0x10/0x10 [ 277.276166][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.281970][ T8724] ? __fget_files+0x29/0x470 [ 277.286554][ T8724] ? fput+0x1a8/0x230 [ 277.290526][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.296338][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 277.301270][ T8724] __sys_bpf+0x48d/0x810 [ 277.305505][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 277.310266][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.316242][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.322563][ T8724] ? do_syscall_64+0x100/0x230 [ 277.327317][ T8724] __x64_sys_bpf+0x7c/0x90 [ 277.331753][ T8724] do_syscall_64+0xf3/0x230 [ 277.336266][ T8724] ? clear_bhb_loop+0x35/0x90 [ 277.340946][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.346839][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 277.351243][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.370845][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.379253][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 277.387214][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 277.395173][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 277.403135][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.411099][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 277.419075][ T8724] [ 277.422162][ T8724] BUG: Bad page state in process syz.1.908 pfn:12fd8 [ 277.428977][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888012fd8f00 pfn:0x12fd8 [ 277.439075][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 277.446185][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 277.454799][ T8724] raw: ffff888012fd8f00 0000000000000001 00000000ffffffff 0000000000000000 [ 277.463423][ T8724] page dumped because: page_pool leak [ 277.468823][ T8724] page_owner tracks the page as allocated [ 277.474528][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695876668, free_ts 272630049658 [ 277.491466][ T8724] post_alloc_hook+0x1f3/0x230 [ 277.496237][ T8724] get_page_from_freelist+0x3045/0x3190 [ 277.501827][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 277.507021][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 277.512517][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 277.518421][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 277.523957][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 277.529338][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 277.534692][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 277.539649][ T8724] __sys_bpf+0x48d/0x810 [ 277.543874][ T8724] __x64_sys_bpf+0x7c/0x90 [ 277.548294][ T8724] do_syscall_64+0xf3/0x230 [ 277.552778][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.558704][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 277.565138][ T8724] free_unref_folios+0xf12/0x18d0 [ 277.570199][ T8724] folios_put_refs+0x76c/0x860 [ 277.574991][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 277.580751][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 277.585363][ T8724] tlb_finish_mmu+0xd4/0x200 [ 277.590014][ T8724] exit_mmap+0x496/0xc40 [ 277.594243][ T8724] __mmput+0x115/0x390 [ 277.598327][ T8724] exit_mm+0x220/0x310 [ 277.602380][ T8724] do_exit+0x9b2/0x28e0 [ 277.606531][ T8724] do_group_exit+0x207/0x2c0 [ 277.611193][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 277.616234][ T8724] x64_sys_call+0x2634/0x2640 [ 277.620942][ T8724] do_syscall_64+0xf3/0x230 [ 277.625426][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.631339][ T8724] Modules linked in: [ 277.635222][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 277.647271][ T8724] Tainted: [B]=BAD_PAGE [ 277.651403][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.661445][ T8724] Call Trace: [ 277.664709][ T8724] [ 277.667637][ T8724] dump_stack_lvl+0x241/0x360 [ 277.672303][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.677482][ T8724] ? __pfx_print_modules+0x10/0x10 [ 277.682578][ T8724] bad_page+0x166/0x1b0 [ 277.686732][ T8724] free_unref_page+0xed0/0xf20 [ 277.691487][ T8724] skb_release_data+0x6dc/0x8a0 [ 277.696328][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 277.701331][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 277.705928][ T8724] packet_rcv+0x16f/0x14b0 [ 277.710333][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 277.715174][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 277.721141][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 277.727628][ T8724] ? read_tsc+0x9/0x20 [ 277.731677][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 277.736857][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 277.743177][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 277.749342][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 277.755660][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 277.762335][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 277.767527][ T8724] ? __phys_addr+0xba/0x170 [ 277.772033][ T8724] ? build_skb_around+0x111/0x260 [ 277.777045][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 277.782930][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 277.788238][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 277.793958][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 277.799851][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 277.805394][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 277.811202][ T8724] ? synchronize_rcu+0x11b/0x360 [ 277.816145][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 277.821432][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 277.827844][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 277.833730][ T8724] ? _copy_from_user+0xa6/0xe0 [ 277.838492][ T8724] ? bpf_test_init+0x15a/0x180 [ 277.843249][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 277.848708][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 277.854078][ T8724] ? __pfx_lock_release+0x10/0x10 [ 277.859099][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.864901][ T8724] ? __fget_files+0x29/0x470 [ 277.869489][ T8724] ? fput+0x1a8/0x230 [ 277.873459][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.879258][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 277.884188][ T8724] __sys_bpf+0x48d/0x810 [ 277.888457][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 277.893215][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.899190][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.905515][ T8724] ? do_syscall_64+0x100/0x230 [ 277.910270][ T8724] __x64_sys_bpf+0x7c/0x90 [ 277.914767][ T8724] do_syscall_64+0xf3/0x230 [ 277.919351][ T8724] ? clear_bhb_loop+0x35/0x90 [ 277.924018][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.929909][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 277.934404][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.954005][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.962410][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 277.970375][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 277.978333][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 277.986298][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.994280][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 278.002260][ T8724] [ 278.005374][ T8724] BUG: Bad page state in process syz.1.908 pfn:58c7c [ 278.012191][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058c7cf00 pfn:0x58c7c [ 278.022395][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 278.029634][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 278.038250][ T8724] raw: ffff888058c7cf00 0000000000000001 00000000ffffffff 0000000000000000 [ 278.046814][ T8724] page dumped because: page_pool leak [ 278.052187][ T8724] page_owner tracks the page as allocated [ 278.057921][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695865070, free_ts 272630058815 [ 278.074879][ T8724] post_alloc_hook+0x1f3/0x230 [ 278.079656][ T8724] get_page_from_freelist+0x3045/0x3190 [ 278.085182][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 278.090387][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 278.095827][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 278.101733][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 278.106914][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 278.112302][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 278.117693][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 278.122637][ T8724] __sys_bpf+0x48d/0x810 [ 278.126866][ T8724] __x64_sys_bpf+0x7c/0x90 [ 278.131294][ T8724] do_syscall_64+0xf3/0x230 [ 278.135779][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.141678][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 278.148021][ T8724] free_unref_folios+0xf12/0x18d0 [ 278.153044][ T8724] folios_put_refs+0x76c/0x860 [ 278.157812][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 278.163422][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 278.168027][ T8724] tlb_finish_mmu+0xd4/0x200 [ 278.172599][ T8724] exit_mmap+0x496/0xc40 [ 278.176817][ T8724] __mmput+0x115/0x390 [ 278.180894][ T8724] exit_mm+0x220/0x310 [ 278.184946][ T8724] do_exit+0x9b2/0x28e0 [ 278.189118][ T8724] do_group_exit+0x207/0x2c0 [ 278.193704][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 278.198731][ T8724] x64_sys_call+0x2634/0x2640 [ 278.203406][ T8724] do_syscall_64+0xf3/0x230 [ 278.207932][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.213838][ T8724] Modules linked in: [ 278.217779][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 278.229867][ T8724] Tainted: [B]=BAD_PAGE [ 278.234025][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.244074][ T8724] Call Trace: [ 278.247353][ T8724] [ 278.250274][ T8724] dump_stack_lvl+0x241/0x360 [ 278.254947][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.260137][ T8724] ? __pfx_print_modules+0x10/0x10 [ 278.265248][ T8724] bad_page+0x166/0x1b0 [ 278.269397][ T8724] free_unref_page+0xed0/0xf20 [ 278.274151][ T8724] skb_release_data+0x6dc/0x8a0 [ 278.278998][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 278.284014][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 278.288597][ T8724] packet_rcv+0x16f/0x14b0 [ 278.293154][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 278.298014][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 278.304012][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 278.310520][ T8724] ? read_tsc+0x9/0x20 [ 278.314583][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 278.319775][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 278.326113][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 278.332291][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 278.338626][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 278.345295][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 278.350483][ T8724] ? __phys_addr+0xba/0x170 [ 278.354990][ T8724] ? build_skb_around+0x111/0x260 [ 278.360003][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 278.365891][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 278.371172][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 278.376625][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 278.382520][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 278.388066][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 278.393863][ T8724] ? synchronize_rcu+0x11b/0x360 [ 278.398794][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 278.404078][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 278.410314][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 278.416215][ T8724] ? _copy_from_user+0xa6/0xe0 [ 278.420990][ T8724] ? bpf_test_init+0x15a/0x180 [ 278.425765][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 278.431241][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 278.436632][ T8724] ? __pfx_lock_release+0x10/0x10 [ 278.441843][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 278.447740][ T8724] ? __fget_files+0x29/0x470 [ 278.452332][ T8724] ? fput+0x1a8/0x230 [ 278.456326][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 278.462127][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 278.467062][ T8724] __sys_bpf+0x48d/0x810 [ 278.471385][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 278.476143][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.482136][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.488479][ T8724] ? do_syscall_64+0x100/0x230 [ 278.493334][ T8724] __x64_sys_bpf+0x7c/0x90 [ 278.497755][ T8724] do_syscall_64+0xf3/0x230 [ 278.502359][ T8724] ? clear_bhb_loop+0x35/0x90 [ 278.507037][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.512932][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 278.517343][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.536959][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.545382][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 278.553369][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 278.561346][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 278.569309][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.577444][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 278.585503][ T8724] [ 278.588587][ T8724] BUG: Bad page state in process syz.1.908 pfn:510a6 [ 278.595368][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880510a6f00 pfn:0x510a6 [ 278.605459][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 278.612598][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 278.621199][ T8724] raw: ffff8880510a6f00 0000000000000001 00000000ffffffff 0000000000000000 [ 278.629788][ T8724] page dumped because: page_pool leak [ 278.635145][ T8724] page_owner tracks the page as allocated [ 278.640870][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695853566, free_ts 272630068654 [ 278.657909][ T8724] post_alloc_hook+0x1f3/0x230 [ 278.662665][ T8724] get_page_from_freelist+0x3045/0x3190 [ 278.668224][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 278.673406][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 278.678883][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 278.684761][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 278.689983][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 278.695347][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 278.700722][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 278.705702][ T8724] __sys_bpf+0x48d/0x810 [ 278.709976][ T8724] __x64_sys_bpf+0x7c/0x90 [ 278.714393][ T8724] do_syscall_64+0xf3/0x230 [ 278.718894][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.724779][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 278.731105][ T8724] free_unref_folios+0xf12/0x18d0 [ 278.736129][ T8724] folios_put_refs+0x76c/0x860 [ 278.740941][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 278.746575][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 278.751189][ T8724] tlb_finish_mmu+0xd4/0x200 [ 278.755847][ T8724] exit_mmap+0x496/0xc40 [ 278.760091][ T8724] __mmput+0x115/0x390 [ 278.764142][ T8724] exit_mm+0x220/0x310 [ 278.768211][ T8724] do_exit+0x9b2/0x28e0 [ 278.772343][ T8724] do_group_exit+0x207/0x2c0 [ 278.776907][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 278.781927][ T8724] x64_sys_call+0x2634/0x2640 [ 278.786597][ T8724] do_syscall_64+0xf3/0x230 [ 278.791109][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.797005][ T8724] Modules linked in: [ 278.800905][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 278.812974][ T8724] Tainted: [B]=BAD_PAGE [ 278.817102][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.827135][ T8724] Call Trace: [ 278.830395][ T8724] [ 278.833305][ T8724] dump_stack_lvl+0x241/0x360 [ 278.837980][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.843159][ T8724] ? __pfx_print_modules+0x10/0x10 [ 278.848253][ T8724] bad_page+0x166/0x1b0 [ 278.852388][ T8724] free_unref_page+0xed0/0xf20 [ 278.857128][ T8724] skb_release_data+0x6dc/0x8a0 [ 278.861986][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 278.867094][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 278.871679][ T8724] packet_rcv+0x16f/0x14b0 [ 278.876087][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 278.880926][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 278.886902][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 278.893483][ T8724] ? read_tsc+0x9/0x20 [ 278.897544][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 278.902730][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 278.909049][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 278.915196][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 278.921523][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 278.928190][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 278.933389][ T8724] ? __phys_addr+0xba/0x170 [ 278.937968][ T8724] ? build_skb_around+0x111/0x260 [ 278.942985][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 278.948873][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 278.954153][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 278.959606][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 278.965499][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 278.971040][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 278.976837][ T8724] ? synchronize_rcu+0x11b/0x360 [ 278.981764][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 278.987130][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 278.993367][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 278.999253][ T8724] ? _copy_from_user+0xa6/0xe0 [ 279.004013][ T8724] ? bpf_test_init+0x15a/0x180 [ 279.008779][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 279.014248][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 279.019627][ T8724] ? __pfx_lock_release+0x10/0x10 [ 279.024680][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 279.030482][ T8724] ? __fget_files+0x29/0x470 [ 279.035072][ T8724] ? fput+0x1a8/0x230 [ 279.039046][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 279.044848][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 279.049804][ T8724] __sys_bpf+0x48d/0x810 [ 279.054062][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 279.058838][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.064826][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.071152][ T8724] ? do_syscall_64+0x100/0x230 [ 279.075904][ T8724] __x64_sys_bpf+0x7c/0x90 [ 279.080311][ T8724] do_syscall_64+0xf3/0x230 [ 279.084799][ T8724] ? clear_bhb_loop+0x35/0x90 [ 279.089473][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.095360][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 279.099764][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.119359][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.127851][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 279.135812][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 279.143772][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 279.151734][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.159693][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 279.167666][ T8724] [ 279.170746][ T8724] BUG: Bad page state in process syz.1.908 pfn:2722b [ 279.177555][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2010d pfn:0x2722b [ 279.186845][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 279.193973][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 279.202568][ T8724] raw: 000000000002010d 0000000000000001 00000000ffffffff 0000000000000000 [ 279.211155][ T8724] page dumped because: page_pool leak [ 279.216502][ T8724] page_owner tracks the page as allocated [ 279.222226][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695842201, free_ts 272630077664 [ 279.239243][ T8724] post_alloc_hook+0x1f3/0x230 [ 279.243992][ T8724] get_page_from_freelist+0x3045/0x3190 [ 279.249583][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 279.254776][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 279.260247][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 279.266134][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 279.271356][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 279.276723][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 279.282116][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 279.287039][ T8724] __sys_bpf+0x48d/0x810 [ 279.291300][ T8724] __x64_sys_bpf+0x7c/0x90 [ 279.295698][ T8724] do_syscall_64+0xf3/0x230 [ 279.300222][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.306118][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 279.312469][ T8724] free_unref_folios+0xf12/0x18d0 [ 279.317512][ T8724] folios_put_refs+0x76c/0x860 [ 279.322293][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 279.327968][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 279.332562][ T8724] tlb_finish_mmu+0xd4/0x200 [ 279.337190][ T8724] exit_mmap+0x496/0xc40 [ 279.341444][ T8724] __mmput+0x115/0x390 [ 279.345530][ T8724] exit_mm+0x220/0x310 [ 279.349633][ T8724] do_exit+0x9b2/0x28e0 [ 279.353775][ T8724] do_group_exit+0x207/0x2c0 [ 279.358380][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 279.363397][ T8724] x64_sys_call+0x2634/0x2640 [ 279.368123][ T8724] do_syscall_64+0xf3/0x230 [ 279.372626][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.378551][ T8724] Modules linked in: [ 279.382432][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 279.394480][ T8724] Tainted: [B]=BAD_PAGE [ 279.398610][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.408644][ T8724] Call Trace: [ 279.411905][ T8724] [ 279.414821][ T8724] dump_stack_lvl+0x241/0x360 [ 279.419593][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.424826][ T8724] ? __pfx_print_modules+0x10/0x10 [ 279.429944][ T8724] bad_page+0x166/0x1b0 [ 279.434093][ T8724] free_unref_page+0xed0/0xf20 [ 279.438859][ T8724] skb_release_data+0x6dc/0x8a0 [ 279.443745][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 279.448775][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 279.453372][ T8724] packet_rcv+0x16f/0x14b0 [ 279.457794][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 279.463075][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 279.469056][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 279.475584][ T8724] ? read_tsc+0x9/0x20 [ 279.479734][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 279.484924][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 279.491248][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 279.497397][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 279.503720][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 279.510474][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 279.515663][ T8724] ? __phys_addr+0xba/0x170 [ 279.520153][ T8724] ? build_skb_around+0x111/0x260 [ 279.525164][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 279.531051][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 279.536421][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 279.541875][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 279.547771][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 279.553314][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 279.559121][ T8724] ? synchronize_rcu+0x11b/0x360 [ 279.564051][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 279.569353][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 279.575622][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 279.581526][ T8724] ? _copy_from_user+0xa6/0xe0 [ 279.586294][ T8724] ? bpf_test_init+0x15a/0x180 [ 279.591054][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 279.596509][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 279.601884][ T8724] ? __pfx_lock_release+0x10/0x10 [ 279.606907][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 279.612721][ T8724] ? __fget_files+0x29/0x470 [ 279.617304][ T8724] ? fput+0x1a8/0x230 [ 279.621279][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 279.627104][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 279.632053][ T8724] __sys_bpf+0x48d/0x810 [ 279.636296][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 279.641063][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.647046][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.653373][ T8724] ? do_syscall_64+0x100/0x230 [ 279.658142][ T8724] __x64_sys_bpf+0x7c/0x90 [ 279.662549][ T8724] do_syscall_64+0xf3/0x230 [ 279.667043][ T8724] ? clear_bhb_loop+0x35/0x90 [ 279.671709][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.677602][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 279.682007][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.701614][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.710021][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 279.717984][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 279.725944][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 279.733905][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.741863][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 279.749847][ T8724] [ 279.752927][ T8724] BUG: Bad page state in process syz.1.908 pfn:2e548 [ 279.759739][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e548f00 pfn:0x2e548 [ 279.769853][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 279.776970][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 279.785656][ T8724] raw: ffff88802e548f00 0000000000000001 00000000ffffffff 0000000000000000 [ 279.794412][ T8724] page dumped because: page_pool leak [ 279.799811][ T8724] page_owner tracks the page as allocated [ 279.805524][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695830859, free_ts 272630086422 [ 279.822458][ T8724] post_alloc_hook+0x1f3/0x230 [ 279.827210][ T8724] get_page_from_freelist+0x3045/0x3190 [ 279.832760][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 279.837964][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 279.843401][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 279.849299][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 279.854479][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 279.859860][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 279.865220][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 279.870162][ T8724] __sys_bpf+0x48d/0x810 [ 279.874386][ T8724] __x64_sys_bpf+0x7c/0x90 [ 279.878836][ T8724] do_syscall_64+0xf3/0x230 [ 279.883320][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.889358][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 279.895680][ T8724] free_unref_folios+0xf12/0x18d0 [ 279.900706][ T8724] folios_put_refs+0x76c/0x860 [ 279.905448][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 279.911103][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 279.915676][ T8724] tlb_finish_mmu+0xd4/0x200 [ 279.920267][ T8724] exit_mmap+0x496/0xc40 [ 279.924487][ T8724] __mmput+0x115/0x390 [ 279.928559][ T8724] exit_mm+0x220/0x310 [ 279.932694][ T8724] do_exit+0x9b2/0x28e0 [ 279.936826][ T8724] do_group_exit+0x207/0x2c0 [ 279.941437][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 279.946439][ T8724] x64_sys_call+0x2634/0x2640 [ 279.951119][ T8724] do_syscall_64+0xf3/0x230 [ 279.955604][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.961522][ T8724] Modules linked in: [ 279.965427][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 279.977491][ T8724] Tainted: [B]=BAD_PAGE [ 279.981630][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.991673][ T8724] Call Trace: [ 279.994941][ T8724] [ 279.997865][ T8724] dump_stack_lvl+0x241/0x360 [ 280.002539][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.007727][ T8724] ? __pfx_print_modules+0x10/0x10 [ 280.012835][ T8724] bad_page+0x166/0x1b0 [ 280.016984][ T8724] free_unref_page+0xed0/0xf20 [ 280.021741][ T8724] skb_release_data+0x6dc/0x8a0 [ 280.026585][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 280.031606][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 280.036202][ T8724] packet_rcv+0x16f/0x14b0 [ 280.040613][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 280.045456][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 280.051437][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 280.057928][ T8724] ? read_tsc+0x9/0x20 [ 280.061996][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 280.067192][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 280.073518][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 280.079672][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 280.085993][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 280.092659][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 280.097850][ T8724] ? __phys_addr+0xba/0x170 [ 280.102343][ T8724] ? build_skb_around+0x111/0x260 [ 280.107357][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 280.113255][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 280.118538][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 280.123996][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 280.129888][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 280.135439][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 280.141239][ T8724] ? synchronize_rcu+0x11b/0x360 [ 280.146168][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 280.151569][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 280.157812][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 280.163699][ T8724] ? _copy_from_user+0xa6/0xe0 [ 280.168466][ T8724] ? bpf_test_init+0x15a/0x180 [ 280.173226][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 280.178684][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 280.184055][ T8724] ? __pfx_lock_release+0x10/0x10 [ 280.189081][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 280.194978][ T8724] ? __fget_files+0x29/0x470 [ 280.199564][ T8724] ? fput+0x1a8/0x230 [ 280.203538][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 280.209339][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 280.214285][ T8724] __sys_bpf+0x48d/0x810 [ 280.218525][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 280.223285][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.229264][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.235588][ T8724] ? do_syscall_64+0x100/0x230 [ 280.240344][ T8724] __x64_sys_bpf+0x7c/0x90 [ 280.244759][ T8724] do_syscall_64+0xf3/0x230 [ 280.249255][ T8724] ? clear_bhb_loop+0x35/0x90 [ 280.253922][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.259812][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 280.264219][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.283836][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.292254][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 280.300226][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 280.308277][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 280.316241][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.324201][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 280.332191][ T8724] [ 280.335272][ T8724] BUG: Bad page state in process syz.1.908 pfn:5d54b [ 280.342080][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d54bf00 pfn:0x5d54b [ 280.352162][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 280.359295][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 280.367895][ T8724] raw: ffff88805d54bf00 0000000000000001 00000000ffffffff 0000000000000000 [ 280.376557][ T8724] page dumped because: page_pool leak [ 280.381937][ T8724] page_owner tracks the page as allocated [ 280.387670][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695819388, free_ts 272630095297 [ 280.404615][ T8724] post_alloc_hook+0x1f3/0x230 [ 280.409416][ T8724] get_page_from_freelist+0x3045/0x3190 [ 280.414941][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 280.420140][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 280.425577][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 280.431476][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 280.436753][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 280.442146][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 280.447534][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 280.452496][ T8724] __sys_bpf+0x48d/0x810 [ 280.456750][ T8724] __x64_sys_bpf+0x7c/0x90 [ 280.461184][ T8724] do_syscall_64+0xf3/0x230 [ 280.465682][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.471623][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 280.477984][ T8724] free_unref_folios+0xf12/0x18d0 [ 280.483024][ T8724] folios_put_refs+0x76c/0x860 [ 280.487821][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 280.493449][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 280.498063][ T8724] tlb_finish_mmu+0xd4/0x200 [ 280.502660][ T8724] exit_mmap+0x496/0xc40 [ 280.506878][ T8724] __mmput+0x115/0x390 [ 280.510959][ T8724] exit_mm+0x220/0x310 [ 280.515006][ T8724] do_exit+0x9b2/0x28e0 [ 280.519159][ T8724] do_group_exit+0x207/0x2c0 [ 280.523731][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 280.528766][ T8724] x64_sys_call+0x2634/0x2640 [ 280.533605][ T8724] do_syscall_64+0xf3/0x230 [ 280.538107][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.544162][ T8724] Modules linked in: [ 280.548080][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 280.560143][ T8724] Tainted: [B]=BAD_PAGE [ 280.564282][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.574333][ T8724] Call Trace: [ 280.577600][ T8724] [ 280.580536][ T8724] dump_stack_lvl+0x241/0x360 [ 280.585209][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.590396][ T8724] ? __pfx_print_modules+0x10/0x10 [ 280.595543][ T8724] bad_page+0x166/0x1b0 [ 280.599697][ T8724] free_unref_page+0xed0/0xf20 [ 280.604444][ T8724] skb_release_data+0x6dc/0x8a0 [ 280.609293][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 280.614315][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 280.618899][ T8724] packet_rcv+0x16f/0x14b0 [ 280.623312][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 280.628157][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 280.634136][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 280.640631][ T8724] ? read_tsc+0x9/0x20 [ 280.644701][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 280.649896][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 280.656300][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 280.662450][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 280.668770][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 280.675436][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 280.680629][ T8724] ? __phys_addr+0xba/0x170 [ 280.685124][ T8724] ? build_skb_around+0x111/0x260 [ 280.690139][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 280.696027][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 280.701306][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 280.706761][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 280.712656][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 280.718195][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 280.723993][ T8724] ? synchronize_rcu+0x11b/0x360 [ 280.728921][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 280.734201][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 280.740436][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 280.746322][ T8724] ? _copy_from_user+0xa6/0xe0 [ 280.751515][ T8724] ? bpf_test_init+0x15a/0x180 [ 280.756283][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 280.761740][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 280.767108][ T8724] ? __pfx_lock_release+0x10/0x10 [ 280.772144][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 280.777942][ T8724] ? __fget_files+0x29/0x470 [ 280.782556][ T8724] ? fput+0x1a8/0x230 [ 280.786630][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 280.792441][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 280.797376][ T8724] __sys_bpf+0x48d/0x810 [ 280.801613][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 280.806372][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.812352][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.818676][ T8724] ? do_syscall_64+0x100/0x230 [ 280.823427][ T8724] __x64_sys_bpf+0x7c/0x90 [ 280.827832][ T8724] do_syscall_64+0xf3/0x230 [ 280.832320][ T8724] ? clear_bhb_loop+0x35/0x90 [ 280.836983][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.842870][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 280.847285][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.866884][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.875291][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 280.883255][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 280.891223][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 280.899184][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.907146][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 280.915118][ T8724] [ 280.918188][ T8724] BUG: Bad page state in process syz.1.908 pfn:51435 [ 280.925049][ T8724] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888051435000 pfn:0x51435 [ 280.935251][ T8724] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 280.942384][ T8724] raw: 00fff00000000000 dead000000000040 ffff88807e50d000 0000000000000000 [ 280.951147][ T8724] raw: ffff888051435000 0000000000000001 00000000ffffffff 0000000000000000 [ 280.959734][ T8724] page dumped because: page_pool leak [ 280.965099][ T8724] page_owner tracks the page as allocated [ 280.970824][ T8724] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8724, tgid 8721 (syz.1.908), ts 272695808116, free_ts 272630104906 [ 280.987858][ T8724] post_alloc_hook+0x1f3/0x230 [ 280.992631][ T8724] get_page_from_freelist+0x3045/0x3190 [ 280.998204][ T8724] __alloc_pages_noprof+0x256/0x6c0 [ 281.003389][ T8724] alloc_pages_bulk_noprof+0x729/0xd40 [ 281.008855][ T8724] __page_pool_alloc_pages_slow+0x122/0x690 [ 281.014733][ T8724] page_pool_alloc_pages+0xd0/0x1c0 [ 281.019941][ T8724] bpf_test_run_xdp_live+0x950/0x2160 [ 281.025301][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 281.030680][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 281.035603][ T8724] __sys_bpf+0x48d/0x810 [ 281.039860][ T8724] __x64_sys_bpf+0x7c/0x90 [ 281.044269][ T8724] do_syscall_64+0xf3/0x230 [ 281.048800][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.054720][ T8724] page last free pid 8719 tgid 8719 stack trace: [ 281.061074][ T8724] free_unref_folios+0xf12/0x18d0 [ 281.066080][ T8724] folios_put_refs+0x76c/0x860 [ 281.070865][ T8724] free_pages_and_swap_cache+0x5c8/0x690 [ 281.076566][ T8724] tlb_flush_mmu+0x3a3/0x680 [ 281.081169][ T8724] tlb_finish_mmu+0xd4/0x200 [ 281.085747][ T8724] exit_mmap+0x496/0xc40 [ 281.090020][ T8724] __mmput+0x115/0x390 [ 281.094115][ T8724] exit_mm+0x220/0x310 [ 281.098190][ T8724] do_exit+0x9b2/0x28e0 [ 281.102328][ T8724] do_group_exit+0x207/0x2c0 [ 281.106913][ T8724] __x64_sys_exit_group+0x3f/0x40 [ 281.111987][ T8724] x64_sys_call+0x2634/0x2640 [ 281.116672][ T8724] do_syscall_64+0xf3/0x230 [ 281.121207][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.127099][ T8724] Modules linked in: [ 281.131006][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.1.908 Tainted: G B 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 281.143065][ T8724] Tainted: [B]=BAD_PAGE [ 281.147202][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.157329][ T8724] Call Trace: [ 281.160614][ T8724] [ 281.163558][ T8724] dump_stack_lvl+0x241/0x360 [ 281.168232][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.173411][ T8724] ? __pfx_print_modules+0x10/0x10 [ 281.178509][ T8724] bad_page+0x166/0x1b0 [ 281.182675][ T8724] free_unref_page+0xed0/0xf20 [ 281.187449][ T8724] skb_release_data+0x6dc/0x8a0 [ 281.192445][ T8724] sk_skb_reason_drop+0x1c9/0x380 [ 281.197582][ T8724] ? packet_rcv+0x5cb/0x14b0 [ 281.202158][ T8724] packet_rcv+0x16f/0x14b0 [ 281.206581][ T8724] ? __pfx_packet_rcv+0x10/0x10 [ 281.211417][ T8724] __netif_receive_skb_list_core+0x4ed/0x980 [ 281.217387][ T8724] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 281.223876][ T8724] ? read_tsc+0x9/0x20 [ 281.227950][ T8724] ? timekeeping_get_ns+0x2c0/0x420 [ 281.233136][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 281.239463][ T8724] netif_receive_skb_list_internal+0xa51/0xe30 [ 281.245616][ T8724] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 281.252025][ T8724] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 281.258695][ T8724] ? __pfx_eth_type_trans+0x10/0x10 [ 281.263885][ T8724] ? __phys_addr+0xba/0x170 [ 281.268379][ T8724] ? build_skb_around+0x111/0x260 [ 281.273390][ T8724] ? __xdp_build_skb_from_frame+0x313/0x650 [ 281.279279][ T8724] netif_receive_skb_list+0x55/0x4b0 [ 281.284557][ T8724] bpf_test_run_xdp_live+0x1b0d/0x2160 [ 281.290015][ T8724] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 281.295922][ T8724] ? bpf_test_run_xdp_live+0x5d6/0x2160 [ 281.301486][ T8724] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 281.307307][ T8724] ? synchronize_rcu+0x11b/0x360 [ 281.312249][ T8724] ? __pfx_synchronize_rcu+0x10/0x10 [ 281.317542][ T8724] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 281.324135][ T8724] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 281.330026][ T8724] ? _copy_from_user+0xa6/0xe0 [ 281.334789][ T8724] ? bpf_test_init+0x15a/0x180 [ 281.339555][ T8724] ? xdp_convert_md_to_buff+0x5b/0x330 [ 281.345101][ T8724] bpf_prog_test_run_xdp+0x805/0x11e0 [ 281.350470][ T8724] ? __pfx_lock_release+0x10/0x10 [ 281.355494][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.361299][ T8724] ? __fget_files+0x29/0x470 [ 281.365887][ T8724] ? fput+0x1a8/0x230 [ 281.369861][ T8724] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.375665][ T8724] bpf_prog_test_run+0x2e4/0x360 [ 281.380598][ T8724] __sys_bpf+0x48d/0x810 [ 281.384838][ T8724] ? __pfx___sys_bpf+0x10/0x10 [ 281.389600][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.395582][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.401911][ T8724] ? do_syscall_64+0x100/0x230 [ 281.406671][ T8724] __x64_sys_bpf+0x7c/0x90 [ 281.411081][ T8724] do_syscall_64+0xf3/0x230 [ 281.415575][ T8724] ? clear_bhb_loop+0x35/0x90 [ 281.420243][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.426135][ T8724] RIP: 0033:0x7fd4faf7dff9 [ 281.430977][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.450579][ T8724] RSP: 002b:00007fd4fa9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.458987][ T8724] RAX: ffffffffffffffda RBX: 00007fd4fb136058 RCX: 00007fd4faf7dff9 [ 281.466949][ T8724] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 281.474910][ T8724] RBP: 00007fd4faff0296 R08: 0000000000000000 R09: 0000000000000000 [ 281.482890][ T8724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.490874][ T8724] R13: 0000000000000000 R14: 00007fd4fb136058 R15: 00007ffea4495108 [ 281.498853][ T8724] [ 281.521343][ T54] Bluetooth: hci0: command 0x0405 tx timeout