last executing test programs:

1m59.186084667s ago: executing program 4 (id=1639):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18004000000000000000000000000017870425e40095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000040)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'xfrm0\x00', 0x400})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b7e, 0x4, @perf_config_ext={0x9, 0x8000000000000001}, 0x115105, 0x35, 0xfffffbff, 0x7, 0x2, 0xb, 0xf7fa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000340)=r6}, 0x20)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r9, 0x0, 0x2, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)

1m37.016445408s ago: executing program 4 (id=1639):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18004000000000000000000000000017870425e40095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000040)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'xfrm0\x00', 0x400})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b7e, 0x4, @perf_config_ext={0x9, 0x8000000000000001}, 0x115105, 0x35, 0xfffffbff, 0x7, 0x2, 0xb, 0xf7fa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000340)=r6}, 0x20)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r9, 0x0, 0x2, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)

1m17.121595771s ago: executing program 4 (id=1639):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18004000000000000000000000000017870425e40095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000040)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'xfrm0\x00', 0x400})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b7e, 0x4, @perf_config_ext={0x9, 0x8000000000000001}, 0x115105, 0x35, 0xfffffbff, 0x7, 0x2, 0xb, 0xf7fa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000340)=r6}, 0x20)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r9, 0x0, 0x2, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)

59.534516804s ago: executing program 4 (id=1639):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18004000000000000000000000000017870425e40095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000040)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'xfrm0\x00', 0x400})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b7e, 0x4, @perf_config_ext={0x9, 0x8000000000000001}, 0x115105, 0x35, 0xfffffbff, 0x7, 0x2, 0xb, 0xf7fa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000340)=r6}, 0x20)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r9, 0x0, 0x2, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)

39.748998885s ago: executing program 4 (id=1639):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18004000000000000000000000000017870425e40095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000040)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'xfrm0\x00', 0x400})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b7e, 0x4, @perf_config_ext={0x9, 0x8000000000000001}, 0x115105, 0x35, 0xfffffbff, 0x7, 0x2, 0xb, 0xf7fa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000340)=r6}, 0x20)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r9, 0x0, 0x2, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)

16.159231445s ago: executing program 2 (id=2964):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x142, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fff, 0x5}, 0x80000, 0xca, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6a8a}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0b00e1e5"], 0x9a)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000b000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})

15.77324002s ago: executing program 2 (id=2966):
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2)

14.747891743s ago: executing program 2 (id=2973):
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10410, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xbd21, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20000000)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500000090000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

14.038982192s ago: executing program 2 (id=2976):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

13.567824728s ago: executing program 2 (id=2980):
r0 = socket$kcm(0x2, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)

13.103865744s ago: executing program 2 (id=2982):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x100001c, &(0x7f00000011c0)="b9ff030f6044238cb89e14f088a820ff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x13, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x10}, 0x2c)

12.955674086s ago: executing program 4 (id=1639):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18004000000000000000000000000017870425e40095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000040)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'xfrm0\x00', 0x400})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40107b7e, 0x4, @perf_config_ext={0x9, 0x8000000000000001}, 0x115105, 0x35, 0xfffffbff, 0x7, 0x2, 0xb, 0xf7fa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x9)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000340)=r6}, 0x20)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_devices(r9, 0x0, 0x2, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)

2.488549558s ago: executing program 1 (id=3025):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800400000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

2.470593939s ago: executing program 0 (id=3026):
r0 = socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}, 0x1)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0x0)

2.325811861s ago: executing program 1 (id=3027):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394", 0xf}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
close(r0)

2.193144972s ago: executing program 0 (id=3028):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000300)='cpuacct.stat\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

2.192669482s ago: executing program 3 (id=3029):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0xd, 0xf, 0x6, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x4}, 0x400, 0xe584, 0x0, 0x4, 0x5c, 0x1, 0xcf, 0x0, 0x2, 0x0, 0xec4}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000037f9ffffffffffffff00000400000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f0000000400000004"], 0x50)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fed, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14947, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7f, 0x6, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0xffffffffffffffff, r4, 0x9)
r5 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3d, &(0x7f00000002c0), 0x8)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x11}}], 0x18}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f0000000080), 0x0}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
socket$kcm(0x10, 0x2, 0x10)

2.058688654s ago: executing program 1 (id=3030):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x6, 0x8}, 0x104101, 0x0, 0xf, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001}, 0x0, 0x4, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={0x0, 0x8}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x224c43, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f00000002c0))

1.980606145s ago: executing program 0 (id=3031):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080))
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1001)
socket$kcm(0x10, 0x3, 0x10)

1.835859147s ago: executing program 3 (id=3032):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000)

1.713922578s ago: executing program 0 (id=3033):
r0 = socket$kcm(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000500)=@abs={0x1, 0x5c, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x408c0}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
sendmsg$inet(r2, 0x0, 0x801)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000001c80)={&(0x7f0000001800)=@alg, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001880)=""/70, 0x46}, {&(0x7f0000001900)=""/197, 0xc5}, {&(0x7f0000001a00)=""/224, 0xe0}], 0x3, &(0x7f0000001bc0)=""/177, 0xb1}, 0x10000)
r4 = syz_clone(0x16010000, &(0x7f0000001680)="a158d7af15d5dfdbffd29ffc837fca57aee1ccafce8ebe429a8eebeb37a290210dab0069d59b8b18f516a51466ff6f76fa8378860cf0c8ea10fbad911893c9c671a36b51adb1eeeafe31652b0747c8984438d58c14a30b2c8db1f2d92611cedff834bf0c7e4400e87e5c8b4999f4bf166a97df2f16f02ca28f6e90a2", 0x7c, &(0x7f0000000240), &(0x7f0000001700), 0x0)
perf_event_open(&(0x7f0000001600)={0x1, 0x80, 0x1, 0x6, 0x8, 0x1, 0x0, 0x2, 0x80000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000200), 0x9}, 0x8000, 0xd6b, 0x6e, 0x6, 0x3, 0x1, 0x7, 0x0, 0x8, 0x0, 0x7fffffff}, r4, 0x7, r2, 0x9)

1.439378102s ago: executing program 3 (id=3034):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004084)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac018015ac1720d1bd", 0x33fe0}], 0x1}, 0x0) (fail_nth: 1)

1.189007655s ago: executing program 1 (id=3035):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080))

1.001161357s ago: executing program 3 (id=3036):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800400000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

878.942419ms ago: executing program 3 (id=3037):
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x8044815)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)

793.39129ms ago: executing program 1 (id=3038):
r0 = socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}, 0x1)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0x0)

712.539401ms ago: executing program 0 (id=3039):
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x8044815)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)

315.084876ms ago: executing program 3 (id=3040):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000300)='cpuacct.stat\x00', 0x0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

108.939029ms ago: executing program 1 (id=3041):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x7a44, 0x1700)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
unlink(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x800c6613, 0x20ffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) (fail_nth: 1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(0xffffffffffffffff)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451)

0s ago: executing program 0 (id=3042):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe93, 0x100000001}, 0x0, 0x4, 0x0, 0xf, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080))
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1001)
socket$kcm(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

_0 (retrying later): interface not active
[  472.300597][T12932] FAULT_INJECTION: forcing a failure.
[  472.300597][T12932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.317756][T12932] CPU: 0 PID: 12932 Comm: syz.0.2657 Not tainted 6.1.135-syzkaller #0
[  472.325947][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  472.336034][T12932] Call Trace:
[  472.339330][T12932]  <TASK>
[  472.342258][T12932]  dump_stack_lvl+0x168/0x22e
[  472.346949][T12932]  ? show_regs_print_info+0x12/0x12
[  472.352149][T12932]  ? load_image+0x3b0/0x3b0
[  472.356663][T12932]  ? __lock_acquire+0x7c50/0x7c50
[  472.361702][T12932]  should_fail_ex+0x399/0x4d0
[  472.366384][T12932]  _copy_from_user+0x2c/0x170
[  472.371071][T12932]  __sys_bpf+0x265/0x6d0
[  472.375325][T12932]  ? bpf_link_show_fdinfo+0x310/0x310
[  472.380713][T12932]  ? lock_chain_count+0x20/0x20
[  472.385590][T12932]  __x64_sys_bpf+0x78/0x90
[  472.390036][T12932]  do_syscall_64+0x4c/0xa0
[  472.394454][T12932]  ? clear_bhb_loop+0x45/0xa0
[  472.399125][T12932]  ? clear_bhb_loop+0x45/0xa0
[  472.403823][T12932]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  472.409723][T12932] RIP: 0033:0x7fa0d298e969
[  472.414155][T12932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.433762][T12932] RSP: 002b:00007fa0d3829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  472.442180][T12932] RAX: ffffffffffffffda RBX: 00007fa0d2bb5fa0 RCX: 00007fa0d298e969
[  472.450238][T12932] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000011
[  472.458209][T12932] RBP: 00007fa0d3829090 R08: 0000000000000000 R09: 0000000000000000
[  472.466184][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.474160][T12932] R13: 0000000000000000 R14: 00007fa0d2bb5fa0 R15: 00007ffe72ae71a8
[  472.482144][T12932]  </TASK>
[  472.520953][T12831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.533359][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.594981][T12831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.633266][   T47] Bluetooth: hci0: command 0x041b tx timeout
[  472.697673][T12943] bond_slave_1: mtu less than device minimum
[  472.730614][T12831] device hsr_slave_0 entered promiscuous mode
[  473.306052][T12831] device hsr_slave_1 entered promiscuous mode
[  473.841910][T12975] FAULT_INJECTION: forcing a failure.
[  473.841910][T12975] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.879906][T12975] CPU: 0 PID: 12975 Comm: syz.0.2668 Not tainted 6.1.135-syzkaller #0
[  473.888211][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  473.898319][T12975] Call Trace:
[  473.901617][T12975]  <TASK>
[  473.904571][T12975]  dump_stack_lvl+0x168/0x22e
[  473.909293][T12975]  ? show_regs_print_info+0x12/0x12
[  473.914526][T12975]  ? load_image+0x3b0/0x3b0
[  473.919059][T12975]  ? __lock_acquire+0x7c50/0x7c50
[  473.924126][T12975]  should_fail_ex+0x399/0x4d0
[  473.928840][T12975]  _copy_from_user+0x2c/0x170
[  473.933551][T12975]  ___sys_recvmsg+0x12b/0x510
[  473.938267][T12975]  ? __sys_recvmsg+0x270/0x270
[  473.943095][T12975]  ? common_file_perm+0x171/0x1c0
[  473.948155][T12975]  ? __fget_files+0x44a/0x4d0
[  473.952874][T12975]  ? __fdget+0x17c/0x200
[  473.957154][T12975]  __x64_sys_recvmsg+0x1eb/0x2b0
[  473.962154][T12975]  ? ___sys_recvmsg+0x510/0x510
[  473.967055][T12975]  ? lockdep_hardirqs_on+0x94/0x140
[  473.972308][T12975]  do_syscall_64+0x4c/0xa0
[  473.976738][T12975]  ? clear_bhb_loop+0x45/0xa0
[  473.981418][T12975]  ? clear_bhb_loop+0x45/0xa0
[  473.986102][T12975]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  473.992012][T12975] RIP: 0033:0x7fa0d298e969
[  473.996435][T12975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  474.016147][T12975] RSP: 002b:00007fa0d3829038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  474.024575][T12975] RAX: ffffffffffffffda RBX: 00007fa0d2bb5fa0 RCX: 00007fa0d298e969
[  474.032558][T12975] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[  474.040536][T12975] RBP: 00007fa0d3829090 R08: 0000000000000000 R09: 0000000000000000
[  474.048514][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.056486][T12975] R13: 0000000000000000 R14: 00007fa0d2bb5fa0 R15: 00007ffe72ae71a8
[  474.064468][T12975]  </TASK>
[  474.424691][T12990] bond_slave_1: mtu less than device minimum
[  474.472016][T12996] FAULT_INJECTION: forcing a failure.
[  474.472016][T12996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  474.497201][T12996] CPU: 0 PID: 12996 Comm: syz.0.2672 Not tainted 6.1.135-syzkaller #0
[  474.505508][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  474.515603][T12996] Call Trace:
[  474.518900][T12996]  <TASK>
[  474.521851][T12996]  dump_stack_lvl+0x168/0x22e
[  474.526570][T12996]  ? show_regs_print_info+0x12/0x12
[  474.531803][T12996]  ? load_image+0x3b0/0x3b0
[  474.536338][T12996]  ? __lock_acquire+0x7c50/0x7c50
[  474.541398][T12996]  ? perf_trace_lock+0xf3/0x370
[  474.546293][T12996]  should_fail_ex+0x399/0x4d0
[  474.551011][T12996]  _copy_from_user+0x2c/0x170
[  474.555757][T12996]  ___sys_recvmsg+0x12b/0x510
[  474.560478][T12996]  ? __sys_recvmsg+0x270/0x270
[  474.565289][T12996]  ? common_file_perm+0x171/0x1c0
[  474.570352][T12996]  ? __fget_files+0x44a/0x4d0
[  474.575066][T12996]  ? __fdget+0x17c/0x200
[  474.579347][T12996]  __x64_sys_recvmsg+0x1eb/0x2b0
[  474.584321][T12996]  ? ___sys_recvmsg+0x510/0x510
[  474.589214][T12996]  ? lockdep_hardirqs_on+0x94/0x140
[  474.594462][T12996]  do_syscall_64+0x4c/0xa0
[  474.598925][T12996]  ? clear_bhb_loop+0x45/0xa0
[  474.603637][T12996]  ? clear_bhb_loop+0x45/0xa0
[  474.608339][T12996]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  474.614269][T12996] RIP: 0033:0x7fa0d298e969
[  474.618705][T12996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  474.638343][T12996] RSP: 002b:00007fa0d3829038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  474.646782][T12996] RAX: ffffffffffffffda RBX: 00007fa0d2bb5fa0 RCX: 00007fa0d298e969
[  474.654778][T12996] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[  474.662763][T12996] RBP: 00007fa0d3829090 R08: 0000000000000000 R09: 0000000000000000
[  474.670736][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.678709][T12996] R13: 0000000000000000 R14: 00007fa0d2bb5fa0 R15: 00007ffe72ae71a8
[  474.686702][T12996]  </TASK>
[  474.703452][   T47] Bluetooth: hci0: command 0x040f tx timeout
[  475.265727][T13001] netlink: 'syz.2.2677': attribute type 12 has an invalid length.
[  475.293757][T13001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2677'.
[  475.671770][T13025] netlink: 'syz.2.2682': attribute type 21 has an invalid length.
[  475.743809][T13025] netlink: 'syz.2.2682': attribute type 6 has an invalid length.
[  475.751681][T13025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2682'.
[  476.189554][T12831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  476.300977][T12831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  476.345329][T12831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  476.370635][T12831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  476.454885][T13047] FAULT_INJECTION: forcing a failure.
[  476.454885][T13047] name failslab, interval 1, probability 0, space 0, times 0
[  476.535088][T13047] CPU: 1 PID: 13047 Comm: syz.1.2689 Not tainted 6.1.135-syzkaller #0
[  476.543331][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  476.553412][T13047] Call Trace:
[  476.556714][T13047]  <TASK>
[  476.559666][T13047]  dump_stack_lvl+0x168/0x22e
[  476.564382][T13047]  ? show_regs_print_info+0x12/0x12
[  476.569616][T13047]  ? load_image+0x3b0/0x3b0
[  476.574239][T13047]  ? __might_sleep+0xd0/0xd0
[  476.578869][T13047]  ? __lock_acquire+0x7c50/0x7c50
[  476.583921][T13047]  should_fail_ex+0x399/0x4d0
[  476.588623][T13047]  should_failslab+0x5/0x20
[  476.593152][T13047]  slab_pre_alloc_hook+0x59/0x310
[  476.598208][T13047]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  476.603972][T13047]  __kmem_cache_alloc_node+0x4f/0x260
[  476.609351][T13047]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  476.615077][T13047]  __kmalloc+0xa0/0x240
[  476.619233][T13047]  tomoyo_realpath_from_path+0xdf/0x5d0
[  476.624799][T13047]  tomoyo_path_number_perm+0x1e3/0x600
[  476.630297][T13047]  ? tomoyo_path_number_perm+0x1b6/0x600
[  476.635990][T13047]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  476.641467][T13047]  ? ksys_write+0x1bd/0x240
[  476.645973][T13047]  ? common_file_perm+0x171/0x1c0
[  476.651051][T13047]  ? __fget_files+0x28/0x4d0
[  476.655661][T13047]  security_file_ioctl+0x6c/0xa0
[  476.660634][T13047]  __se_sys_ioctl+0x48/0x170
[  476.665235][T13047]  do_syscall_64+0x4c/0xa0
[  476.669654][T13047]  ? clear_bhb_loop+0x45/0xa0
[  476.674325][T13047]  ? clear_bhb_loop+0x45/0xa0
[  476.679016][T13047]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  476.684938][T13047] RIP: 0033:0x7f57ff98e969
[  476.689355][T13047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.708980][T13047] RSP: 002b:00007f5800763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  476.717398][T13047] RAX: ffffffffffffffda RBX: 00007f57ffbb6080 RCX: 00007f57ff98e969
[  476.725372][T13047] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 000000000000000b
[  476.733363][T13047] RBP: 00007f5800763090 R08: 0000000000000000 R09: 0000000000000000
[  476.741331][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.749320][T13047] R13: 0000000000000000 R14: 00007f57ffbb6080 R15: 00007fff350a3598
[  476.757309][T13047]  </TASK>
[  476.783330][   T47] Bluetooth: hci0: command 0x0419 tx timeout
[  476.810987][T13047] ERROR: Out of memory at tomoyo_realpath_from_path.
[  476.907376][T13055] netlink: 'syz.0.2693': attribute type 12 has an invalid length.
[  476.931198][T13055] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2693'.
[  476.980570][T12831] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.014425][T13047] device veth1_macvtap entered promiscuous mode
[  477.050668][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  477.100119][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  477.115180][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  477.164667][T12831] 8021q: adding VLAN 0 to HW filter on device team0
[  477.189741][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  477.224828][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  477.258782][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.266139][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.318557][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  477.375721][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  477.415269][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  477.467731][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.475048][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.529454][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  477.577619][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  477.650637][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  477.699208][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  477.756499][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  477.794728][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  477.831892][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  477.855523][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  477.886517][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  477.909210][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  477.962947][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  477.992913][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  478.127514][T13089] FAULT_INJECTION: forcing a failure.
[  478.127514][T13089] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.172039][T13089] CPU: 1 PID: 13089 Comm: syz.2.2702 Not tainted 6.1.135-syzkaller #0
[  478.180255][T13089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  478.190334][T13089] Call Trace:
[  478.193630][T13089]  <TASK>
[  478.196576][T13089]  dump_stack_lvl+0x168/0x22e
[  478.201292][T13089]  ? show_regs_print_info+0x12/0x12
[  478.206526][T13089]  ? load_image+0x3b0/0x3b0
[  478.211061][T13089]  ? __lock_acquire+0x7c50/0x7c50
[  478.216112][T13089]  ? apparmor_capable+0xcf/0x190
[  478.221091][T13089]  should_fail_ex+0x399/0x4d0
[  478.225802][T13089]  _copy_from_user+0x2c/0x170
[  478.230485][T13089]  __sys_bpf+0x265/0x6d0
[  478.234734][T13089]  ? bpf_link_show_fdinfo+0x310/0x310
[  478.240124][T13089]  ? lock_chain_count+0x20/0x20
[  478.244986][T13089]  __x64_sys_bpf+0x78/0x90
[  478.249408][T13089]  do_syscall_64+0x4c/0xa0
[  478.253828][T13089]  ? clear_bhb_loop+0x45/0xa0
[  478.258516][T13089]  ? clear_bhb_loop+0x45/0xa0
[  478.263197][T13089]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  478.269106][T13089] RIP: 0033:0x7f30e098e969
[  478.273524][T13089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.293156][T13089] RSP: 002b:00007f30e18a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  478.301575][T13089] RAX: ffffffffffffffda RBX: 00007f30e0bb5fa0 RCX: 00007f30e098e969
[  478.309546][T13089] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005
[  478.317519][T13089] RBP: 00007f30e18a7090 R08: 0000000000000000 R09: 0000000000000000
[  478.325490][T13089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.333457][T13089] R13: 0000000000000000 R14: 00007f30e0bb5fa0 R15: 00007ffeda2b0678
[  478.341446][T13089]  </TASK>
[  478.510012][T13100] netlink: 'syz.3.2706': attribute type 21 has an invalid length.
[  478.533736][T13100] netlink: 'syz.3.2706': attribute type 6 has an invalid length.
[  478.560114][T13100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2706'.
[  478.730964][T13110] FAULT_INJECTION: forcing a failure.
[  478.730964][T13110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.804063][T13110] CPU: 0 PID: 13110 Comm: syz.2.2708 Not tainted 6.1.135-syzkaller #0
[  478.812281][T13110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  478.822372][T13110] Call Trace:
[  478.825657][T13110]  <TASK>
[  478.828599][T13110]  dump_stack_lvl+0x168/0x22e
[  478.833287][T13110]  ? show_regs_print_info+0x12/0x12
[  478.838498][T13110]  ? load_image+0x3b0/0x3b0
[  478.843004][T13110]  ? __lock_acquire+0x7c50/0x7c50
[  478.848039][T13110]  ? snprintf+0xd7/0x120
[  478.852312][T13110]  should_fail_ex+0x399/0x4d0
[  478.856997][T13110]  _copy_to_user+0x2c/0x130
[  478.861505][T13110]  simple_read_from_buffer+0xe3/0x150
[  478.866883][T13110]  proc_fail_nth_read+0x19a/0x210
[  478.871913][T13110]  ? proc_fault_inject_write+0x2f0/0x2f0
[  478.877548][T13110]  ? fsnotify_perm+0x248/0x550
[  478.882316][T13110]  ? proc_fault_inject_write+0x2f0/0x2f0
[  478.887952][T13110]  vfs_read+0x2c0/0x920
[  478.892120][T13110]  ? kernel_read+0x1e0/0x1e0
[  478.896720][T13110]  ? __fget_files+0x28/0x4d0
[  478.901326][T13110]  ? __fget_files+0x44a/0x4d0
[  478.906040][T13110]  ? __fdget_pos+0x2ae/0x360
[  478.910636][T13110]  ? ksys_read+0x71/0x240
[  478.914978][T13110]  ksys_read+0x143/0x240
[  478.919228][T13110]  ? vfs_write+0x960/0x960
[  478.923688][T13110]  ? lockdep_hardirqs_on+0x94/0x140
[  478.928897][T13110]  do_syscall_64+0x4c/0xa0
[  478.933338][T13110]  ? clear_bhb_loop+0x45/0xa0
[  478.938032][T13110]  ? clear_bhb_loop+0x45/0xa0
[  478.942729][T13110]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  478.948638][T13110] RIP: 0033:0x7f30e098d37c
[  478.953058][T13110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  478.972682][T13110] RSP: 002b:00007f30e1886030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  478.981110][T13110] RAX: ffffffffffffffda RBX: 00007f30e0bb6080 RCX: 00007f30e098d37c
[  478.989085][T13110] RDX: 000000000000000f RSI: 00007f30e18860a0 RDI: 0000000000000003
[  478.997056][T13110] RBP: 00007f30e1886090 R08: 0000000000000000 R09: 0000000000000000
[  479.005043][T13110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.013016][T13110] R13: 0000000000000001 R14: 00007f30e0bb6080 R15: 00007ffeda2b0678
[  479.021004][T13110]  </TASK>
[  479.068314][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  479.080180][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  479.129066][T12831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.564525][T13133] bond_slave_1: mtu less than device minimum
[  479.813952][T13142] FAULT_INJECTION: forcing a failure.
[  479.813952][T13142] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.843319][T13142] CPU: 1 PID: 13142 Comm: syz.1.2719 Not tainted 6.1.135-syzkaller #0
[  479.851527][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  479.861586][T13142] Call Trace:
[  479.864869][T13142]  <TASK>
[  479.867807][T13142]  dump_stack_lvl+0x168/0x22e
[  479.872500][T13142]  ? show_regs_print_info+0x12/0x12
[  479.877706][T13142]  ? load_image+0x3b0/0x3b0
[  479.882213][T13142]  ? __lock_acquire+0x7c50/0x7c50
[  479.887251][T13142]  should_fail_ex+0x399/0x4d0
[  479.891933][T13142]  _copy_from_user+0x2c/0x170
[  479.896636][T13142]  __sys_bpf+0x265/0x6d0
[  479.900987][T13142]  ? bpf_link_show_fdinfo+0x310/0x310
[  479.906652][T13142]  ? lock_chain_count+0x20/0x20
[  479.911532][T13142]  __x64_sys_bpf+0x78/0x90
[  479.915963][T13142]  do_syscall_64+0x4c/0xa0
[  479.920390][T13142]  ? clear_bhb_loop+0x45/0xa0
[  479.925069][T13142]  ? clear_bhb_loop+0x45/0xa0
[  479.929751][T13142]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  479.935655][T13142] RIP: 0033:0x7f57ff98e969
[  479.940085][T13142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.959783][T13142] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  479.968201][T13142] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  479.976176][T13142] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  479.984150][T13142] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  479.992120][T13142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.000091][T13142] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  480.008089][T13142]  </TASK>
[  480.157402][T13149] FAULT_INJECTION: forcing a failure.
[  480.157402][T13149] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.183481][T13149] CPU: 1 PID: 13149 Comm: syz.3.2720 Not tainted 6.1.135-syzkaller #0
[  480.191705][T13149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  480.201779][T13149] Call Trace:
[  480.205081][T13149]  <TASK>
[  480.208034][T13149]  dump_stack_lvl+0x168/0x22e
[  480.212766][T13149]  ? show_regs_print_info+0x12/0x12
[  480.218000][T13149]  ? load_image+0x3b0/0x3b0
[  480.222520][T13149]  ? __lock_acquire+0x7c50/0x7c50
[  480.227585][T13149]  ? verify_lock_unused+0x140/0x140
[  480.232911][T13149]  should_fail_ex+0x399/0x4d0
[  480.237636][T13149]  _copy_from_user+0x2c/0x170
[  480.242342][T13149]  ___sys_sendmsg+0x155/0x290
[  480.247055][T13149]  ? __sys_sendmsg+0x270/0x270
[  480.251871][T13149]  ? __lock_acquire+0x7c50/0x7c50
[  480.256958][T13149]  ? __fdget+0x17c/0x200
[  480.261237][T13149]  __se_sys_sendmsg+0x19e/0x270
[  480.266125][T13149]  ? __x64_sys_sendmsg+0x80/0x80
[  480.271116][T13149]  ? lockdep_hardirqs_on+0x94/0x140
[  480.276356][T13149]  do_syscall_64+0x4c/0xa0
[  480.280804][T13149]  ? clear_bhb_loop+0x45/0xa0
[  480.285503][T13149]  ? clear_bhb_loop+0x45/0xa0
[  480.290204][T13149]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  480.296122][T13149] RIP: 0033:0x7fadc078e969
[  480.300560][T13149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.311179][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  480.320173][T13149] RSP: 002b:00007fadc1670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  480.320199][T13149] RAX: ffffffffffffffda RBX: 00007fadc09b5fa0 RCX: 00007fadc078e969
[  480.320215][T13149] RDX: 0000000020000040 RSI: 0000200000000600 RDI: 0000000000000003
[  480.352664][T13149] RBP: 00007fadc1670090 R08: 0000000000000000 R09: 0000000000000000
[  480.360661][T13149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.361177][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  480.368637][T13149] R13: 0000000000000000 R14: 00007fadc09b5fa0 R15: 00007ffe7287fd88
[  480.368671][T13149]  </TASK>
[  480.611796][T12831] device veth0_vlan entered promiscuous mode
[  480.659299][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  480.679352][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  480.699363][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  480.744740][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  480.770384][T13162] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2723'.
[  480.920782][T12831] device veth1_vlan entered promiscuous mode
[  481.052973][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  481.083911][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  481.104272][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  481.131030][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  481.165196][T12831] device veth0_macvtap entered promiscuous mode
[  481.186895][T12831] device veth1_macvtap entered promiscuous mode
[  481.264896][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.315861][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.352425][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.383440][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.421354][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.467325][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.488057][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.509069][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.541204][T12831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.581616][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.715496][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.733028][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.750143][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.785310][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.819627][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.835132][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.846137][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.859631][T12831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  481.874642][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  481.889184][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  481.914270][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  481.956673][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  481.983621][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  482.002517][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  482.025623][T13185] bond_slave_1: mtu less than device minimum
[  482.035956][T12831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.052664][T12831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.074031][T12831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.082974][T12831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.295994][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.334038][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.394220][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  482.404282][T13210] FAULT_INJECTION: forcing a failure.
[  482.404282][T13210] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.438655][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.461990][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.462799][T13210] CPU: 0 PID: 13210 Comm: syz.3.2735 Not tainted 6.1.135-syzkaller #0
[  482.477490][T13210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  482.487572][T13210] Call Trace:
[  482.490874][T13210]  <TASK>
[  482.493830][T13210]  dump_stack_lvl+0x168/0x22e
[  482.498550][T13210]  ? show_regs_print_info+0x12/0x12
[  482.503789][T13210]  ? load_image+0x3b0/0x3b0
[  482.508330][T13210]  ? __lock_acquire+0x7c50/0x7c50
[  482.513387][T13210]  ? verify_lock_unused+0x140/0x140
[  482.518618][T13210]  should_fail_ex+0x399/0x4d0
[  482.523320][T13210]  _copy_from_user+0x2c/0x170
[  482.528027][T13210]  ___sys_sendmsg+0x155/0x290
[  482.532726][T13210]  ? __sys_sendmsg+0x270/0x270
[  482.537541][T13210]  ? __lock_acquire+0x7c50/0x7c50
[  482.542606][T13210]  ? __fdget+0x17c/0x200
[  482.546878][T13210]  __se_sys_sendmsg+0x19e/0x270
[  482.551747][T13210]  ? __x64_sys_sendmsg+0x80/0x80
[  482.556711][T13210]  ? lockdep_hardirqs_on+0x94/0x140
[  482.561927][T13210]  do_syscall_64+0x4c/0xa0
[  482.566356][T13210]  ? clear_bhb_loop+0x45/0xa0
[  482.571034][T13210]  ? clear_bhb_loop+0x45/0xa0
[  482.575716][T13210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  482.581619][T13210] RIP: 0033:0x7fadc078e969
[  482.586038][T13210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  482.605648][T13210] RSP: 002b:00007fadc164f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  482.614069][T13210] RAX: ffffffffffffffda RBX: 00007fadc09b6080 RCX: 00007fadc078e969
[  482.622038][T13210] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000004
[  482.630010][T13210] RBP: 00007fadc164f090 R08: 0000000000000000 R09: 0000000000000000
[  482.637980][T13210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.645951][T13210] R13: 0000000000000000 R14: 00007fadc09b6080 R15: 00007ffe7287fd88
[  482.653937][T13210]  </TASK>
[  482.678145][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  483.304988][   T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.938380][   T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.232850][   T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.336207][   T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.044635][T13288] bond_slave_1: mtu less than device minimum
[  485.650114][T13303] netlink: 'syz.1.2751': attribute type 10 has an invalid length.
[  485.658764][T13303] device macvlan0 entered promiscuous mode
[  485.709375][T13303] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  485.809571][ T4263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  485.819591][ T4263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  485.850529][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  485.879376][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  485.889132][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  485.897689][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  486.418832][   T32] device hsr_slave_0 left promiscuous mode
[  486.552809][   T32] device hsr_slave_1 left promiscuous mode
[  486.566693][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.599713][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.662087][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  486.675062][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.688134][   T32] device bridge_slave_1 left promiscuous mode
[  486.711704][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.746211][   T32] device bridge_slave_0 left promiscuous mode
[  486.761507][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.832096][   T32] device veth1_macvtap left promiscuous mode
[  486.848286][   T32] device veth0_macvtap left promiscuous mode
[  486.856339][   T32] device veth1_vlan left promiscuous mode
[  486.867563][   T32] device veth0_vlan left promiscuous mode
[  487.636715][   T32] team0 (unregistering): Port device team_slave_1 removed
[  487.682776][   T32] team0 (unregistering): Port device team_slave_0 removed
[  487.722399][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.766705][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.989356][ T4263] Bluetooth: hci0: command 0x0409 tx timeout
[  488.165609][   T32] bond0 (unregistering): Released all slaves
[  488.246711][T13337] bond_slave_1: mtu less than device minimum
[  488.773705][T13307] chnl_net:caif_netlink_parms(): no params data found
[  488.973055][T13373] FAULT_INJECTION: forcing a failure.
[  488.973055][T13373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  488.997941][T13373] CPU: 0 PID: 13373 Comm: syz.0.2767 Not tainted 6.1.135-syzkaller #0
[  489.006150][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  489.016242][T13373] Call Trace:
[  489.019542][T13373]  <TASK>
[  489.022489][T13373]  dump_stack_lvl+0x168/0x22e
[  489.027205][T13373]  ? show_regs_print_info+0x12/0x12
[  489.032441][T13373]  ? load_image+0x3b0/0x3b0
[  489.036991][T13373]  ? __lock_acquire+0x7c50/0x7c50
[  489.042056][T13373]  should_fail_ex+0x399/0x4d0
[  489.046780][T13373]  _copy_from_user+0x2c/0x170
[  489.051496][T13373]  __sys_bpf+0x265/0x6d0
[  489.055805][T13373]  ? bpf_link_show_fdinfo+0x310/0x310
[  489.061226][T13373]  ? lock_chain_count+0x20/0x20
[  489.066123][T13373]  __x64_sys_bpf+0x78/0x90
[  489.070579][T13373]  do_syscall_64+0x4c/0xa0
[  489.075029][T13373]  ? clear_bhb_loop+0x45/0xa0
[  489.079727][T13373]  ? clear_bhb_loop+0x45/0xa0
[  489.084437][T13373]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  489.090375][T13373] RIP: 0033:0x7fa0d298e969
[  489.094815][T13373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  489.114449][T13373] RSP: 002b:00007fa0d3829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  489.122890][T13373] RAX: ffffffffffffffda RBX: 00007fa0d2bb5fa0 RCX: 00007fa0d298e969
[  489.130889][T13373] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005
[  489.138884][T13373] RBP: 00007fa0d3829090 R08: 0000000000000000 R09: 0000000000000000
[  489.146876][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.154869][T13373] R13: 0000000000000001 R14: 00007fa0d2bb5fa0 R15: 00007ffe72ae71a8
[  489.162888][T13373]  </TASK>
[  490.023277][T13307] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.030425][T13307] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.075961][ T4263] Bluetooth: hci0: command 0x041b tx timeout
[  490.083876][T13307] device bridge_slave_0 entered promiscuous mode
[  490.114960][T13307] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.174057][T13307] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.182332][T13307] device bridge_slave_1 entered promiscuous mode
[  490.277525][T13307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.317818][T13307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.344186][T13407] bond_slave_1: mtu less than device minimum
[  490.436310][T13307] team0: Port device team_slave_0 added
[  490.467720][T13307] team0: Port device team_slave_1 added
[  490.598128][T13307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  490.619798][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.694527][T13307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.742752][T13307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.777084][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  490.880831][T13307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.064711][T13307] device hsr_slave_0 entered promiscuous mode
[  492.143376][ T4263] Bluetooth: hci0: command 0x040f tx timeout
[  492.293033][T13307] device hsr_slave_1 entered promiscuous mode
[  492.349720][T13458] bond_slave_1: mtu less than device minimum
[  494.225063][   T47] Bluetooth: hci0: command 0x0419 tx timeout
[  494.995359][T13504] bond_slave_1: mtu less than device minimum
[  495.047471][T13307] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  495.120661][T13307] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  495.166558][T13307] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  495.220020][T13307] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  495.564197][T13307] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.605987][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  495.614718][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  495.641959][T13307] 8021q: adding VLAN 0 to HW filter on device team0
[  495.682851][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  495.712968][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  495.768177][T10152] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.775430][T10152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.840152][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  495.875951][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  495.918306][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  495.952032][T10152] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.959297][T10152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.031729][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  496.054389][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  496.473550][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  496.504627][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  496.538423][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  496.571342][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  496.597077][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  496.786213][T13307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  496.877011][T13307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  496.929262][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  496.984140][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  497.052506][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  497.121864][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  497.453773][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  498.024726][T13570] bridge0: port 3(dummy0) entered disabled state
[  498.031317][T13570] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.038644][T13570] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.301307][T13568] bridge0: port 3(dummy0) entered blocking state
[  498.307863][T13568] bridge0: port 3(dummy0) entered forwarding state
[  498.314701][T13568] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.321861][T13568] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.329367][T13568] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.336594][T13568] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.356719][T13568] device bridge0 entered promiscuous mode
[  498.400369][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  498.424976][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  498.460102][T13307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.343475][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  499.913969][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  499.940480][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  500.078253][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  500.105619][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  500.196108][T13307] device veth0_vlan entered promiscuous mode
[  500.226079][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  500.305528][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  500.371598][T13307] device veth1_vlan entered promiscuous mode
[  500.415969][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  500.670383][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  500.702108][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  500.748459][T13307] device veth0_macvtap entered promiscuous mode
[  500.796631][T13307] device veth1_macvtap entered promiscuous mode
[  501.015082][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.052550][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.083250][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.123218][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.153239][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.173247][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.235641][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.273228][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.334727][T13307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  501.388617][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  501.417485][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  501.428485][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  501.434987][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  501.467377][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  501.486471][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  501.497138][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.508126][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.521600][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.533039][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.549350][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.576509][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.599189][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.630448][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.659225][T13307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.676554][T13307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.696232][T13307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.713168][T13307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.732084][T13307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.754854][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  501.771627][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  501.930637][ T9671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.964394][ T9671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.004279][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  502.012652][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  502.058524][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  502.130928][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  503.068568][ T4305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.385348][ T4305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.535937][ T4305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.731764][ T4305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.911803][ T4263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  503.920718][ T4263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  503.928498][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  503.938369][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  503.946892][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  503.959093][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  504.383015][T13693] chnl_net:caif_netlink_parms(): no params data found
[  504.510181][T13693] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.518169][T13693] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.526529][T13693] device bridge_slave_0 entered promiscuous mode
[  504.551368][T13693] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.559081][T13693] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.567506][T13693] device bridge_slave_1 entered promiscuous mode
[  504.624194][T13693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.637198][T13693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.688054][T13693] team0: Port device team_slave_0 added
[  504.696473][T13693] team0: Port device team_slave_1 added
[  504.739737][T13693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.747235][T13693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.777645][T13693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.818138][T13693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.831848][T13693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.858139][T13693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.509814][T13693] device hsr_slave_0 entered promiscuous mode
[  505.537416][T13693] device hsr_slave_1 entered promiscuous mode
[  505.561482][T13693] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  505.593308][T13693] Cannot create hsr debugfs directory
[  505.850180][T13730] FAULT_INJECTION: forcing a failure.
[  505.850180][T13730] name failslab, interval 1, probability 0, space 0, times 0
[  505.899961][T13730] CPU: 1 PID: 13730 Comm: syz.1.2851 Not tainted 6.1.135-syzkaller #0
[  505.908264][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  505.918347][T13730] Call Trace:
[  505.921655][T13730]  <TASK>
[  505.924603][T13730]  dump_stack_lvl+0x168/0x22e
[  505.929321][T13730]  ? show_regs_print_info+0x12/0x12
[  505.934548][T13730]  ? load_image+0x3b0/0x3b0
[  505.939072][T13730]  ? __might_sleep+0xd0/0xd0
[  505.943694][T13730]  ? __lock_acquire+0x7c50/0x7c50
[  505.948752][T13730]  ? verify_lock_unused+0x140/0x140
[  505.953982][T13730]  should_fail_ex+0x399/0x4d0
[  505.958695][T13730]  should_failslab+0x5/0x20
[  505.963218][T13730]  slab_pre_alloc_hook+0x59/0x310
[  505.968256][T13730]  ? __get_vm_area_node+0x122/0x330
[  505.973472][T13730]  __kmem_cache_alloc_node+0x4f/0x260
[  505.978843][T13730]  ? __get_vm_area_node+0x122/0x330
[  505.984048][T13730]  kmalloc_node_trace+0x22/0xe0
[  505.988900][T13730]  __get_vm_area_node+0x122/0x330
[  505.993926][T13730]  ? __local_bh_enable_ip+0x12a/0x1b0
[  505.999307][T13730]  __vmalloc_node_range+0x357/0x1390
[  506.004606][T13730]  ? netlink_sendmsg+0x5dd/0xbc0
[  506.009559][T13730]  ? release_sock+0x2b/0x1b0
[  506.014159][T13730]  ? netlink_insert+0x101f/0x13b0
[  506.019200][T13730]  ? netlink_insert+0x274/0x13b0
[  506.024154][T13730]  ? free_vm_area+0x50/0x50
[  506.028673][T13730]  ? netlink_sendmsg+0x5dd/0xbc0
[  506.033614][T13730]  vmalloc+0x75/0x80
[  506.037512][T13730]  ? netlink_sendmsg+0x5dd/0xbc0
[  506.042451][T13730]  netlink_sendmsg+0x5dd/0xbc0
[  506.047237][T13730]  ? netlink_getsockopt+0x540/0x540
[  506.052440][T13730]  ? aa_file_perm+0x3ef/0xec0
[  506.057122][T13730]  ? aa_file_perm+0x117/0xec0
[  506.061840][T13730]  ? aa_sock_msg_perm+0x94/0x150
[  506.066783][T13730]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  506.072089][T13730]  ? security_socket_sendmsg+0x7c/0xa0
[  506.077572][T13730]  sock_write_iter+0x2b5/0x3a0
[  506.082351][T13730]  ? sock_read_iter+0x370/0x370
[  506.087218][T13730]  ? common_file_perm+0x171/0x1c0
[  506.092280][T13730]  ? fsnotify_perm+0x5a/0x550
[  506.096973][T13730]  vfs_write+0x44c/0x960
[  506.101260][T13730]  ? file_end_write+0x250/0x250
[  506.106120][T13730]  ? __fget_files+0x44a/0x4d0
[  506.110811][T13730]  ? __fdget_pos+0x1d4/0x360
[  506.115402][T13730]  ? ksys_write+0x71/0x240
[  506.119826][T13730]  ksys_write+0x143/0x240
[  506.124161][T13730]  ? __ia32_sys_read+0x80/0x80
[  506.128941][T13730]  ? lockdep_hardirqs_on+0x94/0x140
[  506.134165][T13730]  do_syscall_64+0x4c/0xa0
[  506.138580][T13730]  ? clear_bhb_loop+0x45/0xa0
[  506.143259][T13730]  ? clear_bhb_loop+0x45/0xa0
[  506.147942][T13730]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  506.153893][T13730] RIP: 0033:0x7f57ff98e969
[  506.158309][T13730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  506.178005][T13730] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  506.186422][T13730] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  506.194402][T13730] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003
[  506.202401][T13730] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  506.210378][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.218344][T13730] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  506.226328][T13730]  </TASK>
[  506.231120][   T47] Bluetooth: hci0: command 0x0409 tx timeout
[  506.264157][T13730] syz.1.2851: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  506.293253][T13730] CPU: 1 PID: 13730 Comm: syz.1.2851 Not tainted 6.1.135-syzkaller #0
[  506.301492][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  506.311571][T13730] Call Trace:
[  506.314866][T13730]  <TASK>
[  506.317808][T13730]  dump_stack_lvl+0x168/0x22e
[  506.322518][T13730]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  506.328983][T13730]  ? show_regs_print_info+0x12/0x12
[  506.334316][T13730]  ? load_image+0x3b0/0x3b0
[  506.338843][T13730]  ? __rcu_read_unlock+0x78/0xd0
[  506.343815][T13730]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  506.350271][T13730]  ? cpuset_print_current_mems_allowed+0x2df/0x360
[  506.356818][T13730]  warn_alloc+0x20c/0x300
[  506.361190][T13730]  ? zone_watermark_ok_safe+0x270/0x270
[  506.366783][T13730]  ? __get_vm_area_node+0x318/0x330
[  506.372020][T13730]  ? __local_bh_enable_ip+0x12a/0x1b0
[  506.377439][T13730]  __vmalloc_node_range+0x37c/0x1390
[  506.382762][T13730]  ? release_sock+0x2b/0x1b0
[  506.387390][T13730]  ? netlink_insert+0x101f/0x13b0
[  506.392477][T13730]  ? netlink_insert+0x274/0x13b0
[  506.397456][T13730]  ? free_vm_area+0x50/0x50
[  506.402009][T13730]  ? netlink_sendmsg+0x5dd/0xbc0
[  506.407014][T13730]  vmalloc+0x75/0x80
[  506.410940][T13730]  ? netlink_sendmsg+0x5dd/0xbc0
[  506.415934][T13730]  netlink_sendmsg+0x5dd/0xbc0
[  506.420744][T13730]  ? netlink_getsockopt+0x540/0x540
[  506.425985][T13730]  ? aa_file_perm+0x3ef/0xec0
[  506.430695][T13730]  ? aa_file_perm+0x117/0xec0
[  506.435394][T13730]  ? aa_sock_msg_perm+0x94/0x150
[  506.440359][T13730]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  506.445667][T13730]  ? security_socket_sendmsg+0x7c/0xa0
[  506.451163][T13730]  sock_write_iter+0x2b5/0x3a0
[  506.455967][T13730]  ? sock_read_iter+0x370/0x370
[  506.460861][T13730]  ? common_file_perm+0x171/0x1c0
[  506.465911][T13730]  ? fsnotify_perm+0x5a/0x550
[  506.470627][T13730]  vfs_write+0x44c/0x960
[  506.474908][T13730]  ? file_end_write+0x250/0x250
[  506.479795][T13730]  ? __fget_files+0x44a/0x4d0
[  506.484515][T13730]  ? __fdget_pos+0x1d4/0x360
[  506.489131][T13730]  ? ksys_write+0x71/0x240
[  506.493567][T13730]  ksys_write+0x143/0x240
[  506.497924][T13730]  ? __ia32_sys_read+0x80/0x80
[  506.502719][T13730]  ? lockdep_hardirqs_on+0x94/0x140
[  506.506426][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  506.507936][T13730]  do_syscall_64+0x4c/0xa0
[  506.519345][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  506.519418][T13730]  ? clear_bhb_loop+0x45/0xa0
[  506.528763][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  506.530999][T13730]  ? clear_bhb_loop+0x45/0xa0
[  506.531025][T13730]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  506.539672][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  506.542612][T13730] RIP: 0033:0x7f57ff98e969
[  506.542634][T13730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  506.549420][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  506.555427][T13730] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  506.555452][T13730] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  506.555466][T13730] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003
[  506.555478][T13730] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  506.555490][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.555502][T13730] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  506.555530][T13730]  </TASK>
[  506.639647][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  506.639746][T13730] Mem-Info:
[  506.721611][T13730] active_anon:6016 inactive_anon:0 isolated_anon:0
[  506.721611][T13730]  active_file:17866 inactive_file:38495 isolated_file:0
[  506.721611][T13730]  unevictable:768 dirty:172 writeback:0
[  506.721611][T13730]  slab_reclaimable:20940 slab_unreclaimable:96921
[  506.721611][T13730]  mapped:29435 shmem:1402 pagetables:541
[  506.721611][T13730]  sec_pagetables:0 bounce:0
[  506.721611][T13730]  kernel_misc_reclaimable:0
[  506.721611][T13730]  free:1326808 free_pcp:8047 free_cma:0
[  506.772478][T13730] Node 0 active_anon:24064kB inactive_anon:0kB active_file:71464kB inactive_file:153904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117740kB dirty:684kB writeback:0kB shmem:4072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10064kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no
[  506.863734][ T4305] device hsr_slave_0 left promiscuous mode
[  506.909112][ T4305] device hsr_slave_1 left promiscuous mode
[  506.919736][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.935021][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  506.952552][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.960581][T13730] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  506.982358][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  507.040294][T13730] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  507.068340][ T4305] device bridge_slave_1 left promiscuous mode
[  507.085049][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.103385][T13730] lowmem_reserve[]: 0 2529 2531 2531 2531
[  507.109897][ T4305] device bridge_slave_0 left promiscuous mode
[  507.120354][T13730] Node 0 DMA32 free:1382004kB boost:0kB min:34708kB low:43384kB high:52060kB reserved_highatomic:0KB active_anon:24372kB inactive_anon:0kB active_file:71464kB inactive_file:153904kB unevictable:1536kB writepending:696kB present:3129332kB managed:2595472kB mlocked:0kB bounce:0kB free_pcp:19548kB local_pcp:18160kB free_cma:0kB
[  507.123400][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.207855][T13730] lowmem_reserve[]: 0 0 1 1 1
[  507.223420][T13730] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  507.255529][T13730] lowmem_reserve[]: 0 0 0 0 0
[  507.260295][T13730] Node 1 Normal free:3909344kB boost:0kB min:55172kB low:68964kB high:82756kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:11392kB local_pcp:7104kB free_cma:0kB
[  507.295952][T13755] netlink: 'syz.2.2855': attribute type 27 has an invalid length.
[  507.298160][T13730] lowmem_reserve[]: 0
[  507.306749][ T4305] device veth1_macvtap left promiscuous mode
[  507.312863][T13755] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2855'.
[  507.328635][ T4305] device veth0_macvtap left promiscuous mode
[  507.334959][T13730]  0 0 0 0
[  507.344039][T13730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  507.363351][ T4305] device veth1_vlan left promiscuous mode
[  507.369340][ T4305] device veth0_vlan left promiscuous mode
[  507.381319][T13730] Node 0 DMA32: 922*4kB (UM) 758*8kB (ME) 475*16kB (ME) 229*32kB (ME) 591*64kB (UME) 253*128kB (UM) 70*256kB (UM) 39*512kB (UME) 13*1024kB (UME) 1*2048kB (M) 301*4096kB (M) = 1381032kB
[  507.463287][T13730] Node 0 Normal: 2*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  507.505001][T13730] Node 1 Normal: 224*4kB (U) 58*8kB (UE) 31*16kB (UME) 99*32kB (UME) 35*64kB (UME) 13*128kB (U) 10*256kB (UE) 1*512kB (U) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3909344kB
[  507.553974][T13730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  507.600089][T13730] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  507.627149][T13730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  507.662970][T13730] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  507.700223][T13730] 57767 total pagecache pages
[  507.705062][T13730] 0 pages in swap cache
[  507.709239][T13730] Free swap  = 124996kB
[  507.743418][T13730] Total swap = 124996kB
[  507.753490][T13730] 2097051 pages RAM
[  507.757439][T13730] 0 pages HighMem/MovableOnly
[  507.762143][T13730] 414518 pages reserved
[  507.769199][T13730] 0 pages cma reserved
[  508.303579][ T4252] Bluetooth: hci0: command 0x041b tx timeout
[  508.604674][ T4305] team0 (unregistering): Port device team_slave_1 removed
[  508.617687][T13779] FAULT_INJECTION: forcing a failure.
[  508.617687][T13779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  508.635977][T13779] CPU: 0 PID: 13779 Comm: syz.1.2864 Not tainted 6.1.135-syzkaller #0
[  508.644190][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  508.654286][T13779] Call Trace:
[  508.657612][T13779]  <TASK>
[  508.660580][T13779]  dump_stack_lvl+0x168/0x22e
[  508.665337][T13779]  ? show_regs_print_info+0x12/0x12
[  508.670584][T13779]  ? load_image+0x3b0/0x3b0
[  508.675149][T13779]  ? __lock_acquire+0x7c50/0x7c50
[  508.680251][T13779]  should_fail_ex+0x399/0x4d0
[  508.684988][T13779]  _copy_from_user+0x2c/0x170
[  508.689707][T13779]  ___sys_sendmsg+0x155/0x290
[  508.694431][T13779]  ? __sys_sendmsg+0x270/0x270
[  508.699316][T13779]  ? __lock_acquire+0x7c50/0x7c50
[  508.704448][T13779]  ? __fdget+0x17c/0x200
[  508.708749][T13779]  __se_sys_sendmsg+0x19e/0x270
[  508.713665][T13779]  ? __x64_sys_sendmsg+0x80/0x80
[  508.718697][T13779]  ? lockdep_hardirqs_on+0x94/0x140
[  508.723923][T13779]  do_syscall_64+0x4c/0xa0
[  508.728371][T13779]  ? clear_bhb_loop+0x45/0xa0
[  508.733049][T13779]  ? clear_bhb_loop+0x45/0xa0
[  508.737732][T13779]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  508.743659][T13779] RIP: 0033:0x7f57ff98e969
[  508.744126][ T4252] Bluetooth: hci3: command 0x0409 tx timeout
[  508.748102][T13779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.748126][T13779] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.748158][T13779] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  508.748177][T13779] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  508.748194][T13779] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  508.748210][T13779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.814400][T13779] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  508.822452][T13779]  </TASK>
[  508.914241][ T4305] team0 (unregistering): Port device team_slave_0 removed
[  508.970522][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.020621][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.551409][ T4305] bond0 (unregistering): Released all slaves
[  509.991871][T13693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.215591][T13693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.376237][T13693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.393266][ T4252] Bluetooth: hci0: command 0x040f tx timeout
[  510.466816][T13735] chnl_net:caif_netlink_parms(): no params data found
[  510.578588][T13693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.783310][ T4252] Bluetooth: hci3: command 0x041b tx timeout
[  511.333091][T13735] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.341331][T13735] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.350348][T13735] device bridge_slave_0 entered promiscuous mode
[  511.490097][T13735] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.514501][T13735] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.537672][T13735] device bridge_slave_1 entered promiscuous mode
[  511.675900][T13693] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  511.758257][T13693] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  511.819135][T13838] FAULT_INJECTION: forcing a failure.
[  511.819135][T13838] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  511.838518][T13838] CPU: 0 PID: 13838 Comm: syz.1.2879 Not tainted 6.1.135-syzkaller #0
[  511.846722][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  511.856800][T13838] Call Trace:
[  511.860080][T13838]  <TASK>
[  511.863011][T13838]  dump_stack_lvl+0x168/0x22e
[  511.867704][T13838]  ? show_regs_print_info+0x12/0x12
[  511.872906][T13838]  ? load_image+0x3b0/0x3b0
[  511.877423][T13838]  ? __lock_acquire+0x7c50/0x7c50
[  511.882464][T13838]  ? verify_lock_unused+0x140/0x140
[  511.887682][T13838]  should_fail_ex+0x399/0x4d0
[  511.892362][T13838]  _copy_from_user+0x2c/0x170
[  511.897052][T13838]  ___sys_sendmsg+0x155/0x290
[  511.901742][T13838]  ? __sys_sendmsg+0x270/0x270
[  511.906531][T13838]  ? __lock_acquire+0x7c50/0x7c50
[  511.911576][T13838]  ? __fdget+0x17c/0x200
[  511.915830][T13838]  __se_sys_sendmsg+0x19e/0x270
[  511.920696][T13838]  ? __x64_sys_sendmsg+0x80/0x80
[  511.925670][T13838]  ? lockdep_hardirqs_on+0x94/0x140
[  511.930883][T13838]  do_syscall_64+0x4c/0xa0
[  511.935297][T13838]  ? clear_bhb_loop+0x45/0xa0
[  511.939967][T13838]  ? clear_bhb_loop+0x45/0xa0
[  511.944658][T13838]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  511.950552][T13838] RIP: 0033:0x7f57ff98e969
[  511.954982][T13838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.974604][T13838] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  511.983025][T13838] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  511.990998][T13838] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000003
[  511.998966][T13838] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  512.006947][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.014917][T13838] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  512.022902][T13838]  </TASK>
[  512.039086][T13735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.174000][T13693] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  512.211948][T13735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.391291][T13693] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  512.463390][ T4252] Bluetooth: hci0: command 0x0419 tx timeout
[  512.603859][T13855] FAULT_INJECTION: forcing a failure.
[  512.603859][T13855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.679315][T13735] team0: Port device team_slave_0 added
[  512.693578][T13855] CPU: 1 PID: 13855 Comm: syz.2.2884 Not tainted 6.1.135-syzkaller #0
[  512.701786][T13855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  512.711869][T13855] Call Trace:
[  512.715180][T13855]  <TASK>
[  512.718129][T13855]  dump_stack_lvl+0x168/0x22e
[  512.722841][T13855]  ? show_regs_print_info+0x12/0x12
[  512.728081][T13855]  ? load_image+0x3b0/0x3b0
[  512.732622][T13855]  ? __lock_acquire+0x7c50/0x7c50
[  512.737688][T13855]  should_fail_ex+0x399/0x4d0
[  512.742396][T13855]  _copy_from_user+0x2c/0x170
[  512.747111][T13855]  __sys_bpf+0x265/0x6d0
[  512.751384][T13855]  ? bpf_link_show_fdinfo+0x310/0x310
[  512.756791][T13855]  ? lock_chain_count+0x20/0x20
[  512.761663][T13855]  __x64_sys_bpf+0x78/0x90
[  512.766088][T13855]  do_syscall_64+0x4c/0xa0
[  512.770512][T13855]  ? clear_bhb_loop+0x45/0xa0
[  512.775198][T13855]  ? clear_bhb_loop+0x45/0xa0
[  512.779895][T13855]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  512.785806][T13855] RIP: 0033:0x7f30e098e969
[  512.790222][T13855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.809846][T13855] RSP: 002b:00007f30e18a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.818260][T13855] RAX: ffffffffffffffda RBX: 00007f30e0bb5fa0 RCX: 00007f30e098e969
[  512.826234][T13855] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005
[  512.834202][T13855] RBP: 00007f30e18a7090 R08: 0000000000000000 R09: 0000000000000000
[  512.842166][T13855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.850134][T13855] R13: 0000000000000001 R14: 00007f30e0bb5fa0 R15: 00007ffeda2b0678
[  512.858136][T13855]  </TASK>
[  512.863362][ T4252] Bluetooth: hci3: command 0x040f tx timeout
[  513.051295][T13735] team0: Port device team_slave_1 added
[  513.323750][T13735] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.330836][T13735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.359067][T13735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.432270][T13735] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.460825][T13735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.509201][T13735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.653458][ T4252] Bluetooth: hci2: ISO packet for unknown connection handle 255
[  513.681861][T13878] FAULT_INJECTION: forcing a failure.
[  513.681861][T13878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  513.695372][T13878] CPU: 0 PID: 13878 Comm: syz.1.2892 Not tainted 6.1.135-syzkaller #0
[  513.703560][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  513.713639][T13878] Call Trace:
[  513.716946][T13878]  <TASK>
[  513.719905][T13878]  dump_stack_lvl+0x168/0x22e
[  513.724690][T13878]  ? show_regs_print_info+0x12/0x12
[  513.729939][T13878]  ? load_image+0x3b0/0x3b0
[  513.734452][T13878]  ? __lock_acquire+0x7c50/0x7c50
[  513.739492][T13878]  should_fail_ex+0x399/0x4d0
[  513.744178][T13878]  _copy_from_user+0x2c/0x170
[  513.748893][T13878]  ___sys_recvmsg+0x12b/0x510
[  513.753592][T13878]  ? __sys_recvmsg+0x270/0x270
[  513.758377][T13878]  ? common_file_perm+0x171/0x1c0
[  513.763413][T13878]  ? __fget_files+0x44a/0x4d0
[  513.768110][T13878]  ? __fdget+0x17c/0x200
[  513.772368][T13878]  __x64_sys_recvmsg+0x1eb/0x2b0
[  513.777321][T13878]  ? ___sys_recvmsg+0x510/0x510
[  513.782193][T13878]  ? lockdep_hardirqs_on+0x94/0x140
[  513.787426][T13878]  do_syscall_64+0x4c/0xa0
[  513.791885][T13878]  ? clear_bhb_loop+0x45/0xa0
[  513.796582][T13878]  ? clear_bhb_loop+0x45/0xa0
[  513.801274][T13878]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  513.807179][T13878] RIP: 0033:0x7f57ff98e969
[  513.811615][T13878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.831238][T13878] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  513.839676][T13878] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  513.847655][T13878] RDX: 0000000000000020 RSI: 0000200000001280 RDI: 0000000000000003
[  513.855652][T13878] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  513.863624][T13878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.871599][T13878] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  513.879587][T13878]  </TASK>
[  514.014564][T13735] device hsr_slave_0 entered promiscuous mode
[  514.030607][T13735] device hsr_slave_1 entered promiscuous mode
[  514.260804][T13693] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.336237][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  514.355461][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  514.519150][T13693] 8021q: adding VLAN 0 to HW filter on device team0
[  514.612770][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  514.632211][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  514.645641][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.652870][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.667357][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  514.694226][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  514.711025][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.718239][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.749346][ T4305] device hsr_slave_0 left promiscuous mode
[  514.775674][ T4305] device hsr_slave_1 left promiscuous mode
[  514.792389][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  514.816105][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.830964][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  514.849869][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.867021][ T4305] bridge0: port 3(dummy0) entered disabled state
[  514.889303][ T4305] device bridge_slave_1 left promiscuous mode
[  514.899358][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.918628][ T4305] device bridge_slave_0 left promiscuous mode
[  514.931742][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.943242][ T4252] Bluetooth: hci3: command 0x0419 tx timeout
[  514.986325][ T4305] device veth1_macvtap left promiscuous mode
[  514.992524][ T4305] device veth0_macvtap left promiscuous mode
[  514.999565][ T4305] device veth1_vlan left promiscuous mode
[  515.005697][ T4305] device veth0_vlan left promiscuous mode
[  515.448071][T13923] FAULT_INJECTION: forcing a failure.
[  515.448071][T13923] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  515.475002][T13923] CPU: 0 PID: 13923 Comm: syz.1.2904 Not tainted 6.1.135-syzkaller #0
[  515.483232][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  515.493312][T13923] Call Trace:
[  515.496613][T13923]  <TASK>
[  515.499565][T13923]  dump_stack_lvl+0x168/0x22e
[  515.504282][T13923]  ? show_regs_print_info+0x12/0x12
[  515.509506][T13923]  ? load_image+0x3b0/0x3b0
[  515.514018][T13923]  ? __lock_acquire+0x7c50/0x7c50
[  515.519055][T13923]  should_fail_ex+0x399/0x4d0
[  515.523737][T13923]  _copy_from_user+0x2c/0x170
[  515.528424][T13923]  ___sys_recvmsg+0x12b/0x510
[  515.533122][T13923]  ? __sys_recvmsg+0x270/0x270
[  515.537904][T13923]  ? common_file_perm+0x171/0x1c0
[  515.542943][T13923]  ? __fget_files+0x44a/0x4d0
[  515.547639][T13923]  ? __fdget+0x17c/0x200
[  515.551892][T13923]  __x64_sys_recvmsg+0x1eb/0x2b0
[  515.556842][T13923]  ? ___sys_recvmsg+0x510/0x510
[  515.561713][T13923]  ? lockdep_hardirqs_on+0x94/0x140
[  515.566924][T13923]  do_syscall_64+0x4c/0xa0
[  515.571356][T13923]  ? clear_bhb_loop+0x45/0xa0
[  515.576040][T13923]  ? clear_bhb_loop+0x45/0xa0
[  515.580718][T13923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  515.586620][T13923] RIP: 0033:0x7f57ff98e969
[  515.591039][T13923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  515.610647][T13923] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  515.619064][T13923] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  515.627036][T13923] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  515.635007][T13923] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  515.642979][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.650949][T13923] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  515.658934][T13923]  </TASK>
[  515.780247][ T4305] team0 (unregistering): Port device virt_wifi0 removed
[  515.860114][T13928] FAULT_INJECTION: forcing a failure.
[  515.860114][T13928] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  515.873582][T13928] CPU: 1 PID: 13928 Comm: syz.2.2908 Not tainted 6.1.135-syzkaller #0
[  515.881770][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  515.891849][T13928] Call Trace:
[  515.895139][T13928]  <TASK>
[  515.898063][T13928]  dump_stack_lvl+0x168/0x22e
[  515.902742][T13928]  ? show_regs_print_info+0x12/0x12
[  515.907944][T13928]  ? load_image+0x3b0/0x3b0
[  515.912441][T13928]  ? __lock_acquire+0x7c50/0x7c50
[  515.917467][T13928]  ? verify_lock_unused+0x140/0x140
[  515.922676][T13928]  should_fail_ex+0x399/0x4d0
[  515.927357][T13928]  _copy_from_user+0x2c/0x170
[  515.932033][T13928]  ___sys_sendmsg+0x155/0x290
[  515.936723][T13928]  ? __sys_sendmsg+0x270/0x270
[  515.941519][T13928]  ? __lock_acquire+0x7c50/0x7c50
[  515.946565][T13928]  ? __fdget+0x17c/0x200
[  515.950827][T13928]  __se_sys_sendmsg+0x19e/0x270
[  515.955689][T13928]  ? __x64_sys_sendmsg+0x80/0x80
[  515.960662][T13928]  ? lockdep_hardirqs_on+0x94/0x140
[  515.965872][T13928]  do_syscall_64+0x4c/0xa0
[  515.970324][T13928]  ? clear_bhb_loop+0x45/0xa0
[  515.975026][T13928]  ? clear_bhb_loop+0x45/0xa0
[  515.979700][T13928]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  515.985610][T13928] RIP: 0033:0x7f30e098e969
[  515.990028][T13928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  516.009635][T13928] RSP: 002b:00007f30e18a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  516.018047][T13928] RAX: ffffffffffffffda RBX: 00007f30e0bb5fa0 RCX: 00007f30e098e969
[  516.026020][T13928] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003
[  516.034017][T13928] RBP: 00007f30e18a7090 R08: 0000000000000000 R09: 0000000000000000
[  516.041984][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.049952][T13928] R13: 0000000000000000 R14: 00007f30e0bb5fa0 R15: 00007ffeda2b0678
[  516.057955][T13928]  </TASK>
[  516.305446][ T4305] team0 (unregistering): Port device team_slave_1 removed
[  516.409899][ T4305] team0 (unregistering): Port device team_slave_0 removed
[  516.472837][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.519623][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  517.387904][ T4305] bond0 (unregistering): Released all slaves
[  517.458086][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  517.466314][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  517.509087][T13933] netlink: 'syz.1.2907': attribute type 21 has an invalid length.
[  517.517815][T13933] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2907'.
[  517.527413][T13933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2907'.
[  517.552104][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  517.576514][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  517.594037][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  517.627934][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  517.717249][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  517.752322][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  517.789309][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  517.798998][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  517.804047][T13955] FAULT_INJECTION: forcing a failure.
[  517.804047][T13955] name failslab, interval 1, probability 0, space 0, times 0
[  517.812983][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  517.820230][T13955] CPU: 0 PID: 13955 Comm: syz.2.2913 Not tainted 6.1.135-syzkaller #0
[  517.835422][T13955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  517.837832][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  517.845481][T13955] Call Trace:
[  517.845494][T13955]  <TASK>
[  517.845505][T13955]  dump_stack_lvl+0x168/0x22e
[  517.845541][T13955]  ? show_regs_print_info+0x12/0x12
[  517.845568][T13955]  ? load_image+0x3b0/0x3b0
[  517.845592][T13955]  ? __might_sleep+0xd0/0xd0
[  517.845624][T13955]  ? __lock_acquire+0x7c50/0x7c50
[  517.845674][T13955]  should_fail_ex+0x399/0x4d0
[  517.845700][T13955]  should_failslab+0x5/0x20
[  517.845720][T13955]  slab_pre_alloc_hook+0x59/0x310
[  517.897831][T13955]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  517.903593][T13955]  __kmem_cache_alloc_node+0x4f/0x260
[  517.909001][T13955]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[  517.914768][T13955]  __kmalloc+0xa0/0x240
[  517.918949][T13955]  tomoyo_realpath_from_path+0xdf/0x5d0
[  517.924542][T13955]  tomoyo_path_number_perm+0x1e3/0x600
[  517.930032][T13955]  ? tomoyo_path_number_perm+0x1b6/0x600
[  517.935697][T13955]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  517.941185][T13955]  ? ksys_write+0x1bd/0x240
[  517.945722][T13955]  ? common_file_perm+0x171/0x1c0
[  517.950812][T13955]  ? __fget_files+0x28/0x4d0
[  517.955463][T13955]  security_file_ioctl+0x6c/0xa0
[  517.960429][T13955]  __se_sys_ioctl+0x48/0x170
[  517.965050][T13955]  do_syscall_64+0x4c/0xa0
[  517.969548][T13955]  ? clear_bhb_loop+0x45/0xa0
[  517.974252][T13955]  ? clear_bhb_loop+0x45/0xa0
[  517.978945][T13955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  517.984885][T13955] RIP: 0033:0x7f30e098e969
[  517.989324][T13955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  518.008960][T13955] RSP: 002b:00007f30e18a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  518.017413][T13955] RAX: ffffffffffffffda RBX: 00007f30e0bb5fa0 RCX: 00007f30e098e969
[  518.025408][T13955] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003
[  518.033404][T13955] RBP: 00007f30e18a7090 R08: 0000000000000000 R09: 0000000000000000
[  518.041397][T13955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.049389][T13955] R13: 0000000000000000 R14: 00007f30e0bb5fa0 R15: 00007ffeda2b0678
[  518.057403][T13955]  </TASK>
[  518.066923][T13693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  518.100253][T13955] ERROR: Out of memory at tomoyo_realpath_from_path.
[  518.675151][T13979] netlink: 'syz.2.2915': attribute type 1 has an invalid length.
[  518.682935][T13979] netlink: 15522 bytes leftover after parsing attributes in process `syz.2.2915'.
[  518.930711][T13693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.938747][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  518.966274][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  519.223907][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  519.234965][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  519.245062][T13998] FAULT_INJECTION: forcing a failure.
[  519.245062][T13998] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  519.278976][T13998] CPU: 0 PID: 13998 Comm: syz.3.2923 Not tainted 6.1.135-syzkaller #0
[  519.284449][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  519.287168][T13998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  519.297372][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  519.304829][T13998] Call Trace:
[  519.304840][T13998]  <TASK>
[  519.304849][T13998]  dump_stack_lvl+0x168/0x22e
[  519.304881][T13998]  ? show_regs_print_info+0x12/0x12
[  519.304906][T13998]  ? load_image+0x3b0/0x3b0
[  519.304928][T13998]  ? __lock_acquire+0x7c50/0x7c50
[  519.304958][T13998]  should_fail_ex+0x399/0x4d0
[  519.304982][T13998]  _copy_from_user+0x2c/0x170
[  519.305009][T13998]  __sys_bpf+0x265/0x6d0
[  519.305036][T13998]  ? bpf_link_show_fdinfo+0x310/0x310
[  519.305075][T13998]  ? lock_chain_count+0x20/0x20
[  519.305107][T13998]  __x64_sys_bpf+0x78/0x90
[  519.324244][T13693] device veth0_vlan entered promiscuous mode
[  519.328807][T13998]  do_syscall_64+0x4c/0xa0
[  519.343665][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  519.347647][T13998]  ? clear_bhb_loop+0x45/0xa0
[  519.352630][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  519.357227][T13998]  ? clear_bhb_loop+0x45/0xa0
[  519.357254][T13998]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  519.357285][T13998] RIP: 0033:0x7fadc078e969
[  519.357305][T13998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.357323][T13998] RSP: 002b:00007fadc1670038 EFLAGS: 00000246
[  519.377737][T13693] device veth1_vlan entered promiscuous mode
[  519.384244][T13998]  ORIG_RAX: 0000000000000141
[  519.384258][T13998] RAX: ffffffffffffffda RBX: 00007fadc09b5fa0 RCX: 00007fadc078e969
[  519.384273][T13998] RDX: 0000000000000057 RSI: 0000200000000240 RDI: 000000000000000a
[  519.384286][T13998] RBP: 00007fadc1670090 R08: 0000000000000000 R09: 0000000000000000
[  519.384298][T13998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.384310][T13998] R13: 0000000000000000 R14: 00007fadc09b5fa0 R15: 00007ffe7287fd88
[  519.384339][T13998]  </TASK>
[  519.414285][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  519.687670][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  519.706325][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  519.720638][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  519.736720][T13693] device veth0_macvtap entered promiscuous mode
[  519.761913][T14001] netlink: 'syz.1.2924': attribute type 29 has an invalid length.
[  519.781605][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  519.804765][T13693] device veth1_macvtap entered promiscuous mode
[  519.872684][T13693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.936573][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.980549][T13693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.036345][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.076040][T13693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  520.112937][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.152587][T13693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.200058][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  520.221204][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  520.273817][T13693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.299037][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.355288][T13693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.389682][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.428146][T13693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.458623][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.490591][T14021] FAULT_INJECTION: forcing a failure.
[  520.490591][T14021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  520.511988][T13693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.520606][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  520.535887][T14021] CPU: 0 PID: 14021 Comm: syz.3.2930 Not tainted 6.1.135-syzkaller #0
[  520.544092][T14021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  520.554172][T14021] Call Trace:
[  520.557468][T14021]  <TASK>
[  520.560428][T14021]  dump_stack_lvl+0x168/0x22e
[  520.565140][T14021]  ? show_regs_print_info+0x12/0x12
[  520.570366][T14021]  ? load_image+0x3b0/0x3b0
[  520.574902][T14021]  ? __lock_acquire+0x7c50/0x7c50
[  520.579960][T14021]  ? verify_lock_unused+0x140/0x140
[  520.585192][T14021]  should_fail_ex+0x399/0x4d0
[  520.589900][T14021]  _copy_from_user+0x2c/0x170
[  520.594614][T14021]  ___sys_sendmsg+0x155/0x290
[  520.599330][T14021]  ? __sys_sendmsg+0x270/0x270
[  520.604146][T14021]  ? __lock_acquire+0x7c50/0x7c50
[  520.609221][T14021]  ? __fdget+0x17c/0x200
[  520.613500][T14021]  __se_sys_sendmsg+0x19e/0x270
[  520.618386][T14021]  ? __x64_sys_sendmsg+0x80/0x80
[  520.623392][T14021]  ? lockdep_hardirqs_on+0x94/0x140
[  520.628645][T14021]  do_syscall_64+0x4c/0xa0
[  520.633127][T14021]  ? clear_bhb_loop+0x45/0xa0
[  520.637831][T14021]  ? clear_bhb_loop+0x45/0xa0
[  520.640156][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  520.642538][T14021]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.656511][T14021] RIP: 0033:0x7fadc078e969
[  520.660956][T14021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  520.669739][T13693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.680656][T14021] RSP: 002b:00007fadc1670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  520.680681][T14021] RAX: ffffffffffffffda RBX: 00007fadc09b5fa0 RCX: 00007fadc078e969
[  520.680696][T14021] RDX: 000000002000c080 RSI: 0000200000001b80 RDI: 0000000000000003
[  520.680710][T14021] RBP: 00007fadc1670090 R08: 0000000000000000 R09: 0000000000000000
[  520.680723][T14021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.680735][T14021] R13: 0000000000000000 R14: 00007fadc09b5fa0 R15: 00007ffe7287fd88
[  520.680765][T14021]  </TASK>
[  520.751377][T13693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.760285][T13693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.769110][T13693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.017488][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.061988][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.088361][T13735] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  521.100344][T10152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.119326][T10152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.141155][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  521.163422][T13735] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  521.188834][T13735] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  521.247364][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  521.271920][T13735] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  521.415334][T14041] FAULT_INJECTION: forcing a failure.
[  521.415334][T14041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.469886][T14041] CPU: 1 PID: 14041 Comm: syz.2.2936 Not tainted 6.1.135-syzkaller #0
[  521.478104][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  521.488187][T14041] Call Trace:
[  521.491478][T14041]  <TASK>
[  521.494421][T14041]  dump_stack_lvl+0x168/0x22e
[  521.499263][T14041]  ? show_regs_print_info+0x12/0x12
[  521.504543][T14041]  ? load_image+0x3b0/0x3b0
[  521.509075][T14041]  ? __lock_acquire+0x7c50/0x7c50
[  521.514148][T14041]  ? verify_lock_unused+0x140/0x140
[  521.519386][T14041]  should_fail_ex+0x399/0x4d0
[  521.524099][T14041]  _copy_from_user+0x2c/0x170
[  521.528885][T14041]  ___sys_sendmsg+0x155/0x290
[  521.533593][T14041]  ? __sys_sendmsg+0x270/0x270
[  521.538404][T14041]  ? __lock_acquire+0x7c50/0x7c50
[  521.543509][T14041]  ? __fdget+0x17c/0x200
[  521.547777][T14041]  __se_sys_sendmsg+0x19e/0x270
[  521.552648][T14041]  ? __x64_sys_sendmsg+0x80/0x80
[  521.556088][T13735] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.557610][T14041]  ? lockdep_hardirqs_on+0x94/0x140
[  521.569400][T14041]  do_syscall_64+0x4c/0xa0
[  521.573844][T14041]  ? clear_bhb_loop+0x45/0xa0
[  521.578541][T14041]  ? clear_bhb_loop+0x45/0xa0
[  521.583242][T14041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  521.589186][T14041] RIP: 0033:0x7f30e098e969
[  521.593623][T14041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.613261][T14041] RSP: 002b:00007f30e18a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.621702][T14041] RAX: ffffffffffffffda RBX: 00007f30e0bb5fa0 RCX: 00007f30e098e969
[  521.629695][T14041] RDX: 0000000000008000 RSI: 0000200000001840 RDI: 0000000000000003
[  521.634453][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  521.637662][T14041] RBP: 00007f30e18a7090 R08: 0000000000000000 R09: 0000000000000000
[  521.650442][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  521.652803][T14041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.668036][T14041] R13: 0000000000000000 R14: 00007f30e0bb5fa0 R15: 00007ffeda2b0678
[  521.676052][T14041]  </TASK>
[  521.676392][T13735] 8021q: adding VLAN 0 to HW filter on device team0
[  521.704730][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  521.727151][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  521.753789][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.760945][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.788416][T14049] delete_channel: no stack
[  521.812566][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  521.853965][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  521.869756][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  521.890363][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.897554][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.922126][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  521.959508][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  521.986013][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  522.037254][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  522.070753][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  522.097392][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  522.118737][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  522.145410][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  522.183077][T13735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  522.214467][T13735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  522.225351][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  522.240042][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  522.254032][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  523.128395][T14087] netlink: 'syz.3.2946': attribute type 10 has an invalid length.
[  523.145651][T14087] device geneve0 entered promiscuous mode
[  523.209985][T14087] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  523.334885][T14091] FAULT_INJECTION: forcing a failure.
[  523.334885][T14091] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  523.398018][T14091] CPU: 1 PID: 14091 Comm: syz.1.2947 Not tainted 6.1.135-syzkaller #0
[  523.398691][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  523.406219][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  523.406239][T14091] Call Trace:
[  523.406251][T14091]  <TASK>
[  523.406267][T14091]  dump_stack_lvl+0x168/0x22e
[  523.406319][T14091]  ? show_regs_print_info+0x12/0x12
[  523.406357][T14091]  ? load_image+0x3b0/0x3b0
[  523.406400][T14091]  ? __lock_acquire+0x7c50/0x7c50
[  523.406462][T14091]  should_fail_ex+0x399/0x4d0
[  523.406511][T14091]  _copy_from_user+0x2c/0x170
[  523.406554][T14091]  ___sys_sendmsg+0x155/0x290
[  523.453538][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  523.454371][T14091]  ? __sys_sendmsg+0x270/0x270
[  523.475942][T14091]  ? __lock_acquire+0x7c50/0x7c50
[  523.481103][T14091]  ? __fdget+0x17c/0x200
[  523.485430][T14091]  __se_sys_sendmsg+0x19e/0x270
[  523.490350][T14091]  ? __x64_sys_sendmsg+0x80/0x80
[  523.495408][T14091]  ? lockdep_hardirqs_on+0x94/0x140
[  523.500696][T14091]  do_syscall_64+0x4c/0xa0
[  523.505169][T14091]  ? clear_bhb_loop+0x45/0xa0
[  523.509885][T14091]  ? clear_bhb_loop+0x45/0xa0
[  523.512103][T13735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  523.514585][T14091]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  523.514625][T14091] RIP: 0033:0x7f57ff98e969
[  523.531740][T14091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  523.551385][T14091] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  523.559833][T14091] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  523.567819][T14091] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  523.575811][T14091] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  523.583798][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.591781][T14091] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  523.599812][T14091]  </TASK>
[  524.218968][T14105] netlink: 'syz.3.2948': attribute type 10 has an invalid length.
[  524.441332][T14111] netlink: 'syz.3.2948': attribute type 8 has an invalid length.
[  524.462838][T14116] netlink: 'syz.1.2952': attribute type 27 has an invalid length.
[  524.525368][T14116] netlink: 'syz.1.2952': attribute type 3 has an invalid length.
[  524.533957][T14111] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2948'.
[  524.628157][T14116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2952'.
[  524.651719][T14122] FAULT_INJECTION: forcing a failure.
[  524.651719][T14122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  524.743524][T14122] CPU: 0 PID: 14122 Comm: syz.2.2953 Not tainted 6.1.135-syzkaller #0
[  524.751744][T14122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  524.761851][T14122] Call Trace:
[  524.765159][T14122]  <TASK>
[  524.768118][T14122]  dump_stack_lvl+0x168/0x22e
[  524.772829][T14122]  ? show_regs_print_info+0x12/0x12
[  524.778082][T14122]  ? load_image+0x3b0/0x3b0
[  524.782616][T14122]  ? __lock_acquire+0x7c50/0x7c50
[  524.787677][T14122]  ? verify_lock_unused+0x140/0x140
[  524.792915][T14122]  should_fail_ex+0x399/0x4d0
[  524.797624][T14122]  _copy_from_user+0x2c/0x170
[  524.802370][T14122]  ___sys_sendmsg+0x155/0x290
[  524.807088][T14122]  ? __sys_sendmsg+0x270/0x270
[  524.811917][T14122]  ? __lock_acquire+0x7c50/0x7c50
[  524.817008][T14122]  ? __fdget+0x17c/0x200
[  524.821294][T14122]  __se_sys_sendmsg+0x19e/0x270
[  524.826197][T14122]  ? __x64_sys_sendmsg+0x80/0x80
[  524.831187][T14122]  ? lockdep_hardirqs_on+0x94/0x140
[  524.836424][T14122]  do_syscall_64+0x4c/0xa0
[  524.840873][T14122]  ? clear_bhb_loop+0x45/0xa0
[  524.845577][T14122]  ? clear_bhb_loop+0x45/0xa0
[  524.850276][T14122]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  524.856206][T14122] RIP: 0033:0x7f30e098e969
[  524.860643][T14122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.880275][T14122] RSP: 002b:00007f30e18a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  524.888723][T14122] RAX: ffffffffffffffda RBX: 00007f30e0bb5fa0 RCX: 00007f30e098e969
[  524.896719][T14122] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  524.904715][T14122] RBP: 00007f30e18a7090 R08: 0000000000000000 R09: 0000000000000000
[  524.912705][T14122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  524.920692][T14122] R13: 0000000000000000 R14: 00007f30e0bb5fa0 R15: 00007ffeda2b0678
[  524.928702][T14122]  </TASK>
[  525.491915][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  525.517583][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  525.596060][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  525.625331][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  525.634739][T14146] netlink: 'syz.1.2958': attribute type 29 has an invalid length.
[  525.646316][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  525.669635][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  525.705415][T14145] device syzkaller0 entered promiscuous mode
[  525.989886][T14146] netlink: 'syz.1.2958': attribute type 29 has an invalid length.
[  526.038543][T13735] device veth0_vlan entered promiscuous mode
[  526.078235][T13735] device veth1_vlan entered promiscuous mode
[  526.768297][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  526.787913][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  526.880677][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  526.904525][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  526.931357][T13735] device veth0_macvtap entered promiscuous mode
[  526.961429][T13735] device veth1_macvtap entered promiscuous mode
[  527.021432][T14179] FAULT_INJECTION: forcing a failure.
[  527.021432][T14179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  527.038069][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.063235][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.086460][T14179] CPU: 0 PID: 14179 Comm: syz.1.2967 Not tainted 6.1.135-syzkaller #0
[  527.092654][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.094666][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  527.094680][T14179] Call Trace:
[  527.094690][T14179]  <TASK>
[  527.094699][T14179]  dump_stack_lvl+0x168/0x22e
[  527.094737][T14179]  ? show_regs_print_info+0x12/0x12
[  527.094765][T14179]  ? load_image+0x3b0/0x3b0
[  527.094788][T14179]  ? __lock_acquire+0x7c50/0x7c50
[  527.140921][T14179]  should_fail_ex+0x399/0x4d0
[  527.145623][T14179]  _copy_from_user+0x2c/0x170
[  527.150323][T14179]  __sys_bpf+0x265/0x6d0
[  527.154582][T14179]  ? bpf_link_show_fdinfo+0x310/0x310
[  527.159984][T14179]  ? lock_chain_count+0x20/0x20
[  527.164855][T14179]  __x64_sys_bpf+0x78/0x90
[  527.169282][T14179]  do_syscall_64+0x4c/0xa0
[  527.173704][T14179]  ? clear_bhb_loop+0x45/0xa0
[  527.178384][T14179]  ? clear_bhb_loop+0x45/0xa0
[  527.183061][T14179]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  527.188971][T14179] RIP: 0033:0x7f57ff98e969
[  527.193393][T14179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.213020][T14179] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  527.221435][T14179] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  527.229413][T14179] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a
[  527.237383][T14179] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  527.245357][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  527.253328][T14179] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  527.261310][T14179]  </TASK>
[  527.333143][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.358821][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.382022][T14193] netlink: 'syz.3.2968': attribute type 27 has an invalid length.
[  527.406793][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.418358][T14193] netlink: 'syz.3.2968': attribute type 3 has an invalid length.
[  527.431524][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.477781][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.503526][T14193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2968'.
[  527.520990][T13735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.546245][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.578407][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.620819][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.652036][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.682613][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.733349][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.759377][T13735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.802270][T13735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.860296][T13735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.893248][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  527.962240][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  527.994376][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  528.007190][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  528.060153][T14214] netlink: 'syz.0.2972': attribute type 9 has an invalid length.
[  528.075261][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  528.094491][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  528.120036][T14214] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2972'.
[  528.412061][T13735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.492075][T13735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.523236][T13735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.531997][T13735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.848936][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.923488][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.990788][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  529.037127][ T9671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.055126][ T9671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.137716][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  529.187184][T14240] FAULT_INJECTION: forcing a failure.
[  529.187184][T14240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  529.246944][T14240] CPU: 1 PID: 14240 Comm: syz.3.2978 Not tainted 6.1.135-syzkaller #0
[  529.255193][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  529.265366][T14240] Call Trace:
[  529.268666][T14240]  <TASK>
[  529.271613][T14240]  dump_stack_lvl+0x168/0x22e
[  529.276330][T14240]  ? show_regs_print_info+0x12/0x12
[  529.281654][T14240]  ? load_image+0x3b0/0x3b0
[  529.286183][T14240]  ? __lock_acquire+0x7c50/0x7c50
[  529.291246][T14240]  should_fail_ex+0x399/0x4d0
[  529.295948][T14240]  _copy_from_user+0x2c/0x170
[  529.300665][T14240]  __sys_bpf+0x265/0x6d0
[  529.304942][T14240]  ? bpf_link_show_fdinfo+0x310/0x310
[  529.310363][T14240]  ? lock_chain_count+0x20/0x20
[  529.315246][T14240]  __x64_sys_bpf+0x78/0x90
[  529.319690][T14240]  do_syscall_64+0x4c/0xa0
[  529.324135][T14240]  ? clear_bhb_loop+0x45/0xa0
[  529.328884][T14240]  ? clear_bhb_loop+0x45/0xa0
[  529.333605][T14240]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.339542][T14240] RIP: 0033:0x7fadc078e969
[  529.343986][T14240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.363622][T14240] RSP: 002b:00007fadc1670038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  529.372149][T14240] RAX: ffffffffffffffda RBX: 00007fadc09b5fa0 RCX: 00007fadc078e969
[  529.380157][T14240] RDX: 0000000000000010 RSI: 00002000000006c0 RDI: 000000000000000f
[  529.388128][T14240] RBP: 00007fadc1670090 R08: 0000000000000000 R09: 0000000000000000
[  529.396095][T14240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  529.404072][T14240] R13: 0000000000000000 R14: 00007fadc09b5fa0 R15: 00007ffe7287fd88
[  529.412084][T14240]  </TASK>
[  529.836301][ T4305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.077306][ T4305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.367246][ T4305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.550397][ T4305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.686380][   T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  530.698863][   T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  530.707607][   T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  530.717079][   T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  530.725046][   T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  530.732321][   T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  531.205509][T14273] chnl_net:caif_netlink_parms(): no params data found
[  531.329785][T14273] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.338121][T14273] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.346520][T14273] device bridge_slave_0 entered promiscuous mode
[  531.377794][T14273] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.385871][T14273] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.394188][T14273] device bridge_slave_1 entered promiscuous mode
[  531.439553][T14273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  531.451494][T14273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  531.484802][T14273] team0: Port device team_slave_0 added
[  531.510650][T14273] team0: Port device team_slave_1 added
[  531.552957][T14273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  531.560604][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.586842][T14273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  531.624350][T14273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  531.631344][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  531.712627][T14273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.398998][T14273] device hsr_slave_0 entered promiscuous mode
[  532.424476][T14273] device hsr_slave_1 entered promiscuous mode
[  532.454467][T14273] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  532.473480][T14273] Cannot create hsr debugfs directory
[  532.554021][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  532.569033][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  532.576903][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  532.600873][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  532.609388][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  532.618638][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  532.783619][   T47] Bluetooth: hci3: command 0x0409 tx timeout
[  533.357237][ T4305] device hsr_slave_0 left promiscuous mode
[  533.364695][ T4305] device hsr_slave_1 left promiscuous mode
[  533.371370][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.385837][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.397092][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.405641][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.443631][ T4305] device bridge_slave_1 left promiscuous mode
[  533.449949][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.470173][ T4305] device bridge_slave_0 left promiscuous mode
[  533.483330][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.536249][ T4305] device veth1_macvtap left promiscuous mode
[  533.542771][ T4305] device veth0_macvtap left promiscuous mode
[  533.549793][ T4305] device veth1_vlan left promiscuous mode
[  533.556048][ T4305] device veth0_vlan left promiscuous mode
[  534.007751][ T4305] team0 (unregistering): Port device team_slave_1 removed
[  534.048993][ T4305] team0 (unregistering): Port device team_slave_0 removed
[  534.096221][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  534.137527][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  534.609990][ T4305] bond0 (unregistering): Released all slaves
[  534.714061][   T47] Bluetooth: hci4: command 0x0409 tx timeout
[  534.746351][T14343] netlink: 'syz.0.2995': attribute type 10 has an invalid length.
[  534.795368][T14343] team0: Port device wlan1 added
[  534.873710][   T47] Bluetooth: hci3: command 0x041b tx timeout
[  535.069351][T14361] FAULT_INJECTION: forcing a failure.
[  535.069351][T14361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.094311][T14361] CPU: 1 PID: 14361 Comm: syz.3.3002 Not tainted 6.1.135-syzkaller #0
[  535.102525][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  535.112599][T14361] Call Trace:
[  535.115883][T14361]  <TASK>
[  535.118817][T14361]  dump_stack_lvl+0x168/0x22e
[  535.123518][T14361]  ? show_regs_print_info+0x12/0x12
[  535.128725][T14361]  ? load_image+0x3b0/0x3b0
[  535.133235][T14361]  ? __lock_acquire+0x7c50/0x7c50
[  535.138267][T14361]  ? verify_lock_unused+0x140/0x140
[  535.143484][T14361]  should_fail_ex+0x399/0x4d0
[  535.148174][T14361]  _copy_from_user+0x2c/0x170
[  535.152859][T14361]  ___sys_sendmsg+0x155/0x290
[  535.157564][T14361]  ? __sys_sendmsg+0x270/0x270
[  535.162394][T14361]  ? __lock_acquire+0x7c50/0x7c50
[  535.167437][T14361]  ? __fdget+0x17c/0x200
[  535.171690][T14361]  __se_sys_sendmsg+0x19e/0x270
[  535.176551][T14361]  ? __x64_sys_sendmsg+0x80/0x80
[  535.181512][T14361]  ? lockdep_hardirqs_on+0x94/0x140
[  535.186722][T14361]  do_syscall_64+0x4c/0xa0
[  535.191142][T14361]  ? clear_bhb_loop+0x45/0xa0
[  535.195820][T14361]  ? clear_bhb_loop+0x45/0xa0
[  535.200499][T14361]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.206405][T14361] RIP: 0033:0x7fadc078e969
[  535.210822][T14361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  535.230426][T14361] RSP: 002b:00007fadc1670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.238864][T14361] RAX: ffffffffffffffda RBX: 00007fadc09b5fa0 RCX: 00007fadc078e969
[  535.246841][T14361] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  535.254816][T14361] RBP: 00007fadc1670090 R08: 0000000000000000 R09: 0000000000000000
[  535.262796][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.270763][T14361] R13: 0000000000000000 R14: 00007fadc09b5fa0 R15: 00007ffe7287fd88
[  535.278757][T14361]  </TASK>
[  535.404885][T14366] netlink: 'syz.0.3004': attribute type 12 has an invalid length.
[  535.423044][T14366] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3004'.
[  535.492819][T14273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.671657][T14273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.822353][T14273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.922952][T14376] device syzkaller0 entered promiscuous mode
[  535.976653][T14273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.141376][T14330] chnl_net:caif_netlink_parms(): no params data found
[  536.367884][T14399] FAULT_INJECTION: forcing a failure.
[  536.367884][T14399] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.381641][T14399] CPU: 1 PID: 14399 Comm: syz.1.3010 Not tainted 6.1.135-syzkaller #0
[  536.389837][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  536.399918][T14399] Call Trace:
[  536.403211][T14399]  <TASK>
[  536.406152][T14399]  dump_stack_lvl+0x168/0x22e
[  536.410836][T14399]  ? show_regs_print_info+0x12/0x12
[  536.416033][T14399]  ? load_image+0x3b0/0x3b0
[  536.420560][T14399]  ? __lock_acquire+0x7c50/0x7c50
[  536.425589][T14399]  should_fail_ex+0x399/0x4d0
[  536.430285][T14399]  _copy_from_user+0x2c/0x170
[  536.434979][T14399]  __sys_bpf+0x265/0x6d0
[  536.439262][T14399]  ? bpf_link_show_fdinfo+0x310/0x310
[  536.444659][T14399]  ? lock_chain_count+0x20/0x20
[  536.449518][T14399]  __x64_sys_bpf+0x78/0x90
[  536.453959][T14399]  do_syscall_64+0x4c/0xa0
[  536.458377][T14399]  ? clear_bhb_loop+0x45/0xa0
[  536.463045][T14399]  ? clear_bhb_loop+0x45/0xa0
[  536.467725][T14399]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.473645][T14399] RIP: 0033:0x7f57ff98e969
[  536.478065][T14399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  536.497677][T14399] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  536.506099][T14399] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  536.514071][T14399] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003
[  536.522059][T14399] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  536.530071][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.538081][T14399] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  536.546098][T14399]  </TASK>
[  536.785679][   T47] Bluetooth: hci4: command 0x041b tx timeout
[  536.943530][   T47] Bluetooth: hci3: command 0x040f tx timeout
[  538.478842][T14330] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.514421][T14330] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.522426][T14330] device bridge_slave_0 entered promiscuous mode
[  538.578839][T14330] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.597274][T14330] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.632366][T14330] device bridge_slave_1 entered promiscuous mode
[  538.816410][T14330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  538.872576][   T47] Bluetooth: hci4: command 0x040f tx timeout
[  538.894261][T14330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.023403][   T47] Bluetooth: hci3: command 0x0419 tx timeout
[  539.044208][T14273] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  539.455068][T14273] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  539.521310][T14273] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  539.536397][T14330] team0: Port device team_slave_0 added
[  539.553909][T14330] team0: Port device team_slave_1 added
[  539.629006][T14273] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  539.727892][T14330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.735531][T14330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.761985][T14330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.806812][T14330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.814271][T14330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  539.844308][T14330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.926490][T14453] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0
[  540.148013][T14330] device hsr_slave_0 entered promiscuous mode
[  540.166982][T14330] device hsr_slave_1 entered promiscuous mode
[  540.259882][T14273] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.411028][T14273] 8021q: adding VLAN 0 to HW filter on device team0
[  540.544082][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  540.552005][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  540.707415][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  540.744877][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  540.765232][T10152] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.772367][T10152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  540.807600][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  540.943600][ T4252] Bluetooth: hci4: command 0x0419 tx timeout
[  541.141841][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  541.155286][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  541.164725][T10152] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.171888][T10152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.181605][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  541.191272][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  541.361049][T14497] FAULT_INJECTION: forcing a failure.
[  541.361049][T14497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  541.378009][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  541.388656][T14497] CPU: 0 PID: 14497 Comm: syz.3.3034 Not tainted 6.1.135-syzkaller #0
[  541.391012][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  541.396850][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  541.396866][T14497] Call Trace:
[  541.396875][T14497]  <TASK>
[  541.396885][T14497]  dump_stack_lvl+0x168/0x22e
[  541.396921][T14497]  ? show_regs_print_info+0x12/0x12
[  541.396949][T14497]  ? load_image+0x3b0/0x3b0
[  541.396973][T14497]  ? __lock_acquire+0x7c50/0x7c50
[  541.397013][T14497]  ? verify_lock_unused+0x140/0x140
[  541.406152][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  541.414857][T14497]  should_fail_ex+0x399/0x4d0
[  541.414889][T14497]  _copy_from_user+0x2c/0x170
[  541.414918][T14497]  ___sys_sendmsg+0x155/0x290
[  541.414949][T14497]  ? __sys_sendmsg+0x270/0x270
[  541.414998][T14497]  ? __lock_acquire+0x7c50/0x7c50
[  541.415049][T14497]  ? __fdget+0x17c/0x200
[  541.420069][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  541.421263][T14497]  __se_sys_sendmsg+0x19e/0x270
[  541.438426][T14273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  541.440664][T14497]  ? __x64_sys_sendmsg+0x80/0x80
[  541.440711][T14497]  ? lockdep_hardirqs_on+0x94/0x140
[  541.446204][T14273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  541.453752][T14497]  do_syscall_64+0x4c/0xa0
[  541.453782][T14497]  ? clear_bhb_loop+0x45/0xa0
[  541.453802][T14497]  ? clear_bhb_loop+0x45/0xa0
[  541.453823][T14497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  541.453852][T14497] RIP: 0033:0x7fadc078e969
[  541.453871][T14497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  541.453889][T14497] RSP: 002b:00007fadc1670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  541.453912][T14497] RAX: ffffffffffffffda RBX: 00007fadc09b5fa0 RCX: 00007fadc078e969
[  541.585586][T14497] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  541.593591][T14497] RBP: 00007fadc1670090 R08: 0000000000000000 R09: 0000000000000000
[  541.601594][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.609592][T14497] R13: 0000000000000000 R14: 00007fadc09b5fa0 R15: 00007ffe7287fd88
[  541.617609][T14497]  </TASK>
[  541.637109][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  541.661265][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  541.670525][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  541.704208][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  541.721358][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  541.928200][T10152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  541.984887][ T4305] device hsr_slave_0 left promiscuous mode
[  542.033617][ T4305] device hsr_slave_1 left promiscuous mode
[  542.048056][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.073372][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.081746][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.159721][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.209338][ T4305] bridge0: port 3(dummy0) entered disabled state
[  542.234979][ T4305] device bridge_slave_1 left promiscuous mode
[  542.308883][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.368017][ T4305] device veth1_macvtap left promiscuous mode
[  542.375680][ T4305] device veth1_vlan left promiscuous mode
[  542.755013][T14518] FAULT_INJECTION: forcing a failure.
[  542.755013][T14518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.756152][T14518] 
[  542.756160][T14518] ======================================================
[  542.756167][T14518] WARNING: possible circular locking dependency detected
[  542.756190][T14518] 6.1.135-syzkaller #0 Not tainted
[  542.756200][T14518] ------------------------------------------------------
[  542.756206][T14518] syz.1.3041/14518 is trying to acquire lock:
[  542.756216][T14518] ffffffff8c91eb80 (console_owner){-...}-{0:0}, at: console_emit_next_record+0x82d/0xc90
[  542.756274][T14518] 
[  542.756274][T14518] but task is already holding lock:
[  542.756279][T14518] ffff8880b8f3aa58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  542.756320][T14518] 
[  542.756320][T14518] which lock already depends on the new lock.
[  542.756320][T14518] 
[  542.756325][T14518] 
[  542.756325][T14518] the existing dependency chain (in reverse order) is:
[  542.756331][T14518] 
[  542.756331][T14518] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  542.756353][T14518]        _raw_spin_lock_nested+0x2e/0x40
[  542.756381][T14518]        raw_spin_rq_lock_nested+0x26/0x140
[  542.756400][T14518]        task_fork_fair+0x5c/0x350
[  542.756421][T14518]        sched_cgroup_fork+0x32c/0x3c0
[  542.756443][T14518]        copy_process+0x248b/0x4060
[  542.756459][T14518]        kernel_clone+0x225/0x8b0
[  542.756475][T14518]        user_mode_thread+0xda/0x130
[  542.756490][T14518]        rest_init+0x23/0x300
[  542.756505][T14518]        start_kernel+0x0/0x539
[  542.756528][T14518]        start_kernel+0x490/0x539
[  542.756550][T14518]        secondary_startup_64_no_verify+0xcf/0xdb
[  542.756574][T14518] 
[  542.756574][T14518] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  542.756595][T14518]        _raw_spin_lock_irqsave+0xa4/0xf0
[  542.756617][T14518]        try_to_wake_up+0x5c/0x1080
[  542.756636][T14518]        __wake_up_common+0x2a4/0x4e0
[  542.756658][T14518]        __wake_up+0x10e/0x190
[  542.756678][T14518]        tty_port_default_wakeup+0x9e/0xf0
[  542.756696][T14518]        serial8250_tx_chars+0x629/0x830
[  542.756717][T14518]        serial8250_handle_irq+0x516/0x6d0
[  542.756738][T14518]        serial8250_default_handle_irq+0xb4/0x1a0
[  542.756761][T14518]        serial8250_interrupt+0x9b/0x1c0
[  542.756780][T14518]        __handle_irq_event_percpu+0x298/0xa30
[  542.756797][T14518]        handle_irq_event+0x87/0x1e0
[  542.756813][T14518]        handle_edge_irq+0x243/0xb20
[  542.756833][T14518]        __common_interrupt+0xd7/0x1e0
[  542.756859][T14518]        common_interrupt+0xb0/0xd0
[  542.756883][T14518]        asm_common_interrupt+0x22/0x40
[  542.756911][T14518]        __sanitizer_cov_trace_const_cmp8+0x32/0x80
[  542.756930][T14518]        vfs_write+0x478/0x960
[  542.756981][T14518]        ksys_write+0x143/0x240
[  542.756995][T14518]        do_syscall_64+0x4c/0xa0
[  542.757015][T14518]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.757042][T14518] 
[  542.757042][T14518] -> #2 (&tty->write_wait){-.-.}-{2:2}:
[  542.757063][T14518]        _raw_spin_lock_irqsave+0xa4/0xf0
[  542.757086][T14518]        __wake_up+0xf4/0x190
[  542.757106][T14518]        tty_port_default_wakeup+0x9e/0xf0
[  542.757122][T14518]        serial8250_tx_chars+0x629/0x830
[  542.757141][T14518]        serial8250_handle_irq+0x516/0x6d0
[  542.757160][T14518]        serial8250_default_handle_irq+0xb4/0x1a0
[  542.757182][T14518]        serial8250_interrupt+0x9b/0x1c0
[  542.757200][T14518]        __handle_irq_event_percpu+0x298/0xa30
[  542.757215][T14518]        handle_irq_event+0x87/0x1e0
[  542.757230][T14518]        handle_edge_irq+0x243/0xb20
[  542.757250][T14518]        __common_interrupt+0xd7/0x1e0
[  542.757272][T14518]        common_interrupt+0xb0/0xd0
[  542.757294][T14518]        asm_common_interrupt+0x22/0x40
[  542.757319][T14518]        _raw_spin_unlock_irqrestore+0xa5/0x100
[  542.757342][T14518]        uart_write+0x68a/0x910
[  542.757356][T14518]        n_tty_write+0xd1a/0x11c0
[  542.757378][T14518]        file_tty_write+0x4dd/0x860
[  542.757398][T14518]        vfs_write+0x44c/0x960
[  542.757421][T14518]        ksys_write+0x143/0x240
[  542.757435][T14518]        do_syscall_64+0x4c/0xa0
[  542.757455][T14518]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.757480][T14518] 
[  542.757480][T14518] -> #1 (&port_lock_key){-.-.}-{2:2}:
[  542.757502][T14518]        _raw_spin_lock_irqsave+0xa4/0xf0
[  542.757524][T14518]        serial8250_console_write+0x169/0x17a0
[  542.757544][T14518]        console_emit_next_record+0x947/0xc90
[  542.757568][T14518]        console_unlock+0x223/0x630
[  542.757590][T14518]        vprintk_emit+0x489/0x680
[  542.757611][T14518]        _printk+0xcc/0x110
[  542.757626][T14518]        register_console+0x6c6/0x9c0
[  542.757649][T14518]        univ8250_console_init+0x41/0x43
[  542.757666][T14518]        console_init+0x1bc/0x78e
[  542.757685][T14518]        start_kernel+0x303/0x539
[  542.757709][T14518]        secondary_startup_64_no_verify+0xcf/0xdb
[  542.757732][T14518] 
[  542.757732][T14518] -> #0 (console_owner){-...}-{0:0}:
[  542.757753][T14518]        __lock_acquire+0x2cf8/0x7c50
[  542.757774][T14518]        lock_acquire+0x1b4/0x490
[  542.757795][T14518]        console_emit_next_record+0x84c/0xc90
[  542.757819][T14518]        console_unlock+0x223/0x630
[  542.757841][T14518]        vprintk_emit+0x489/0x680
[  542.757862][T14518]        _printk+0xcc/0x110
[  542.757876][T14518]        should_fail_ex+0x37a/0x4d0
[  542.757891][T14518]        strncpy_from_user+0x32/0x350
[  542.757915][T14518]        strncpy_from_user_nofault+0x6d/0x140
[  542.757934][T14518]        bpf_probe_read_compat_str+0xdd/0x170
[  542.757964][T14518]        bpf_prog_c1796171ffc7efef+0x35/0x37
[  542.757981][T14518]        bpf_trace_run4+0x1f5/0x420
[  542.758006][T14518]        __traceiter_sched_switch+0x8f/0xc0
[  542.758031][T14518]        __schedule+0x1d32/0x40d0
[  542.758047][T14518]        preempt_schedule_irq+0xb1/0x150
[  542.758064][T14518]        irqentry_exit+0x63/0x70
[  542.758077][T14518]        asm_sysvec_apic_timer_interrupt+0x16/0x20
[  542.758105][T14518]        syscall_enter_from_user_mode+0x2a/0x80
[  542.758131][T14518]        do_syscall_64+0x24/0xa0
[  542.758153][T14518]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.758180][T14518] 
[  542.758180][T14518] other info that might help us debug this:
[  542.758180][T14518] 
[  542.758185][T14518] Chain exists of:
[  542.758185][T14518]   console_owner --> &p->pi_lock --> &rq->__lock
[  542.758185][T14518] 
[  542.758210][T14518]  Possible unsafe locking scenario:
[  542.758210][T14518] 
[  542.758215][T14518]        CPU0                    CPU1
[  542.758220][T14518]        ----                    ----
[  542.758225][T14518]   lock(&rq->__lock);
[  542.758235][T14518]                                lock(&p->pi_lock);
[  542.758247][T14518]                                lock(&rq->__lock);
[  542.758258][T14518]   lock(console_owner);
[  542.758269][T14518] 
[  542.758269][T14518]  *** DEADLOCK ***
[  542.758269][T14518] 
[  542.758273][T14518] 3 locks held by syz.1.3041/14518:
[  542.758283][T14518]  #0: ffff8880b8f3aa58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  542.758325][T14518]  #1: ffffffff8c92a9e0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xf9/0x420
[  542.758372][T14518]  #2: ffffffff8c91ec60 (console_lock){+.+.}-{0:0}, at: _printk+0xcc/0x110
[  542.758410][T14518] 
[  542.758410][T14518] stack backtrace:
[  542.758415][T14518] CPU: 1 PID: 14518 Comm: syz.1.3041 Not tainted 6.1.135-syzkaller #0
[  542.758434][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  542.758444][T14518] Call Trace:
[  542.758449][T14518]  <TASK>
[  542.758457][T14518]  dump_stack_lvl+0x168/0x22e
[  542.758482][T14518]  ? load_image+0x3b0/0x3b0
[  542.758500][T14518]  ? show_regs_print_info+0x12/0x12
[  542.758529][T14518]  ? print_circular_bug+0x12b/0x1a0
[  542.758558][T14518]  check_noncircular+0x274/0x310
[  542.758586][T14518]  ? add_chain_block+0x940/0x940
[  542.758611][T14518]  ? lockdep_lock+0xdc/0x1e0
[  542.758636][T14518]  ? add_lock_to_list+0x191/0x280
[  542.758663][T14518]  ? _find_first_zero_bit+0xcf/0x100
[  542.758686][T14518]  __lock_acquire+0x2cf8/0x7c50
[  542.758725][T14518]  ? verify_lock_unused+0x140/0x140
[  542.758764][T14518]  lock_acquire+0x1b4/0x490
[  542.758787][T14518]  ? console_emit_next_record+0x82d/0xc90
[  542.758819][T14518]  ? __lock_acquire+0x7c50/0x7c50
[  542.758842][T14518]  ? do_raw_spin_lock+0x11d/0x280
[  542.758870][T14518]  ? read_lock_is_recursive+0x10/0x10
[  542.758895][T14518]  ? __rwlock_init+0x140/0x140
[  542.758922][T14518]  ? memcpy+0x3c/0x60
[  542.758947][T14518]  ? do_raw_spin_unlock+0x11d/0x230
[  542.758975][T14518]  ? console_emit_next_record+0x82d/0xc90
[  542.759004][T14518]  console_emit_next_record+0x84c/0xc90
[  542.759031][T14518]  ? console_emit_next_record+0x82d/0xc90
[  542.759062][T14518]  ? __lock_acquire+0x7c50/0x7c50
[  542.759087][T14518]  ? info_print_prefix+0x300/0x300
[  542.759115][T14518]  ? do_raw_spin_unlock+0x11d/0x230
[  542.759145][T14518]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  542.759171][T14518]  ? _raw_spin_unlock+0x40/0x40
[  542.759204][T14518]  ? __down_trylock_console_sem+0x184/0x1e0
[  542.759230][T14518]  ? _printk+0xcc/0x110
[  542.759246][T14518]  ? _printk+0xcc/0x110
[  542.759263][T14518]  ? console_trylock+0x160/0x160
[  542.759289][T14518]  console_unlock+0x223/0x630
[  542.759316][T14518]  ? _printk+0xcc/0x110
[  542.759333][T14518]  vprintk_emit+0x489/0x680
[  542.759359][T14518]  ? printk_sprint+0x460/0x460
[  542.759389][T14518]  ? verify_lock_unused+0x140/0x140
[  542.759416][T14518]  _printk+0xcc/0x110
[  542.759436][T14518]  ? load_image+0x3b0/0x3b0
[  542.759453][T14518]  ? __lock_acquire+0x13c0/0x7c50
[  542.759483][T14518]  should_fail_ex+0x37a/0x4d0
[  542.759503][T14518]  strncpy_from_user+0x32/0x350
[  542.759529][T14518]  ? __sched_clock_gtod_offset+0xe0/0xe0
[  542.759553][T14518]  strncpy_from_user_nofault+0x6d/0x140
[  542.759577][T14518]  bpf_probe_read_compat_str+0xdd/0x170
[  542.759605][T14518]  bpf_prog_c1796171ffc7efef+0x35/0x37
[  542.759623][T14518]  bpf_trace_run4+0x1f5/0x420
[  542.759650][T14518]  ? bpf_trace_run4+0xf9/0x420
[  542.759677][T14518]  ? bpf_trace_run3+0x400/0x400
[  542.759708][T14518]  ? tracing_record_taskinfo_sched_switch+0x79/0x360
[  542.759732][T14518]  ? __bpf_trace_sched_wakeup_template+0x10/0x10
[  542.759753][T14518]  __traceiter_sched_switch+0x8f/0xc0
[  542.759782][T14518]  __schedule+0x1d32/0x40d0
[  542.759807][T14518]  ? ktime_get+0x7b/0x270
[  542.759825][T14518]  ? ktime_get+0x7b/0x270
[  542.759848][T14518]  ? release_firmware_map_entry+0x18a/0x18a
[  542.759868][T14518]  ? lock_chain_count+0x20/0x20
[  542.759894][T14518]  ? preempt_schedule_irq+0xa6/0x150
[  542.759916][T14518]  preempt_schedule_irq+0xb1/0x150
[  542.759935][T14518]  ? preempt_schedule_notrace+0x110/0x110
[  542.759962][T14518]  ? rcu_is_watching+0x11/0xa0
[  542.759990][T14518]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  542.760018][T14518]  irqentry_exit+0x63/0x70
[  542.760033][T14518]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  542.760063][T14518] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x80
[  542.760094][T14518] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 ed fa ff ff 66 90 66 90 e8 24 29 78 f7 e8 9f 27 78 f7 fb 65 48 8b 05 a6 77 f3 75 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 71 c0 5e f7 48
[  542.760111][T14518] RSP: 0018:ffffc90003667f08 EFLAGS: 00000286
[  542.760127][T14518] RAX: ffff888030718000 RBX: 0000000000000001 RCX: 9b34cb49ef77cb00
[  542.760141][T14518] RDX: dffffc0000000000 RSI: ffffffff8a6bff00 RDI: ffffffff8abf0ea0
[  542.760155][T14518] RBP: ffffc90003667f48 R08: dffffc0000000000 R09: fffffbfff1bfcf4e
[  542.760169][T14518] R10: fffffbfff1bfcf4e R11: 1ffffffff1bfcf4d R12: 0000000000000000
[  542.760182][T14518] R13: 0000000000000000 R14: ffffc90003667f58 R15: 0000000000000000
[  542.760201][T14518]  ? syscall_enter_from_user_mode+0x21/0x80
[  542.760230][T14518]  do_syscall_64+0x24/0xa0
[  542.760252][T14518]  ? clear_bhb_loop+0x45/0xa0
[  542.760279][T14518]  ? clear_bhb_loop+0x45/0xa0
[  542.760295][T14518]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.760339][T14518] RIP: 0033:0x7f57ff98e969
[  542.760352][T14518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.760366][T14518] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  542.760383][T14518] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  542.760396][T14518] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000006
[  542.760408][T14518] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  542.760419][T14518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.760442][T14518] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  542.760461][T14518]  </TASK>
[  543.966764][T14518] CPU: 1 PID: 14518 Comm: syz.1.3041 Not tainted 6.1.135-syzkaller #0
[  543.974904][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  543.984955][T14518] Call Trace:
[  543.988223][T14518]  <TASK>
[  543.991144][T14518]  dump_stack_lvl+0x168/0x22e
[  543.995836][T14518]  ? show_regs_print_info+0x12/0x12
[  544.001029][T14518]  ? load_image+0x3b0/0x3b0
[  544.005518][T14518]  ? __lock_acquire+0x13c0/0x7c50
[  544.010535][T14518]  should_fail_ex+0x399/0x4d0
[  544.015199][T14518]  strncpy_from_user+0x32/0x350
[  544.020063][T14518]  ? __sched_clock_gtod_offset+0xe0/0xe0
[  544.025706][T14518]  strncpy_from_user_nofault+0x6d/0x140
[  544.031252][T14518]  bpf_probe_read_compat_str+0xdd/0x170
[  544.036805][T14518]  bpf_prog_c1796171ffc7efef+0x35/0x37
[  544.042261][T14518]  bpf_trace_run4+0x1f5/0x420
[  544.046955][T14518]  ? bpf_trace_run4+0xf9/0x420
[  544.051733][T14518]  ? bpf_trace_run3+0x400/0x400
[  544.056586][T14518]  ? tracing_record_taskinfo_sched_switch+0x79/0x360
[  544.063255][T14518]  ? __bpf_trace_sched_wakeup_template+0x10/0x10
[  544.069586][T14518]  __traceiter_sched_switch+0x8f/0xc0
[  544.074970][T14518]  __schedule+0x1d32/0x40d0
[  544.079482][T14518]  ? ktime_get+0x7b/0x270
[  544.083799][T14518]  ? ktime_get+0x7b/0x270
[  544.088120][T14518]  ? release_firmware_map_entry+0x18a/0x18a
[  544.093999][T14518]  ? lock_chain_count+0x20/0x20
[  544.098856][T14518]  ? preempt_schedule_irq+0xa6/0x150
[  544.104128][T14518]  preempt_schedule_irq+0xb1/0x150
[  544.109229][T14518]  ? preempt_schedule_notrace+0x110/0x110
[  544.115025][T14518]  ? rcu_is_watching+0x11/0xa0
[  544.119783][T14518]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  544.125580][T14518]  irqentry_exit+0x63/0x70
[  544.129996][T14518]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  544.135974][T14518] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x80
[  544.142472][T14518] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 ed fa ff ff 66 90 66 90 e8 24 29 78 f7 e8 9f 27 78 f7 fb 65 48 8b 05 a6 77 f3 75 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 71 c0 5e f7 48
[  544.162063][T14518] RSP: 0018:ffffc90003667f08 EFLAGS: 00000286
[  544.168116][T14518] RAX: ffff888030718000 RBX: 0000000000000001 RCX: 9b34cb49ef77cb00
[  544.176084][T14518] RDX: dffffc0000000000 RSI: ffffffff8a6bff00 RDI: ffffffff8abf0ea0
[  544.184059][T14518] RBP: ffffc90003667f48 R08: dffffc0000000000 R09: fffffbfff1bfcf4e
[  544.192017][T14518] R10: fffffbfff1bfcf4e R11: 1ffffffff1bfcf4d R12: 0000000000000000
[  544.199975][T14518] R13: 0000000000000000 R14: ffffc90003667f58 R15: 0000000000000000
[  544.207943][T14518]  ? syscall_enter_from_user_mode+0x21/0x80
[  544.213846][T14518]  do_syscall_64+0x24/0xa0
[  544.218252][T14518]  ? clear_bhb_loop+0x45/0xa0
[  544.222913][T14518]  ? clear_bhb_loop+0x45/0xa0
[  544.227577][T14518]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  544.233475][T14518] RIP: 0033:0x7f57ff98e969
[  544.237876][T14518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  544.257566][T14518] RSP: 002b:00007f5800784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  544.265966][T14518] RAX: ffffffffffffffda RBX: 00007f57ffbb5fa0 RCX: 00007f57ff98e969
[  544.274014][T14518] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000006
[  544.281973][T14518] RBP: 00007f5800784090 R08: 0000000000000000 R09: 0000000000000000
[  544.289953][T14518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.298009][T14518] R13: 0000000000000000 R14: 00007f57ffbb5fa0 R15: 00007fff350a3598
[  544.305975][T14518]  </TASK>
[  544.673942][ T4305] team0 (unregistering): Port device team_slave_1 removed
[  544.709196][ T4305] team0 (unregistering): Port device team_slave_0 removed
[  544.744969][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  544.780674][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  545.139217][ T4305] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  545.147836][ T4305] bond0 (unregistering): Released all slaves
[  545.271102][T14273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.279222][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  545.290845][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.313859][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  545.322649][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  545.384734][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  545.396584][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  545.406024][T14273] device veth0_vlan entered promiscuous mode
[  545.412698][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  545.427727][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  545.453089][T14273] device veth1_vlan entered promiscuous mode
[  545.507964][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  545.516529][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  545.528259][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  545.536895][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  545.551630][T14273] device veth0_macvtap entered promiscuous mode
[  545.577071][T14273] device veth1_macvtap entered promiscuous mode
[  545.611307][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.623892][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.634075][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.644613][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.655574][T14273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.663962][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  545.672071][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  545.680611][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  545.691116][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  545.706706][T14330] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  545.725405][T14330] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  545.740586][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.763377][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.782276][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.795077][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.805192][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  545.817822][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  545.830046][T14273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.840999][T14273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.850032][T14273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.859696][T14273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.868693][T14273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.878506][T14330] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  545.887551][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  545.896137][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  545.914203][T14330] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  545.962120][T14273] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht'
[  545.994270][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.999276][T14273] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht'
[  546.010691][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.028002][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  546.056936][ T9671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.077512][ T9671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.098915][T14330] 8021q: adding VLAN 0 to HW filter on device bond0
[  546.106521][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  546.124050][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  546.132239][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  546.145027][T14330] 8021q: adding VLAN 0 to HW filter on device team0
[  546.158406][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  546.167567][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  546.180705][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.187864][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  546.208275][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  546.218263][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  546.229450][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  546.241096][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.248249][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.257092][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  546.266819][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  546.289003][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  546.298681][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  546.311040][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  546.321408][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  546.332010][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  546.340883][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  546.350976][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  546.359985][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  546.376893][T14330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  546.389839][   T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  546.536932][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  546.546773][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  546.560105][T14330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.771082][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  546.781118][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  546.801684][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  546.810406][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  546.822831][T14330] device veth0_vlan entered promiscuous mode
[  546.830416][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  546.841030][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  546.854936][T14330] device veth1_vlan entered promiscuous mode
[  546.879909][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  546.891031][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  546.900082][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  546.911969][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  546.922851][T14330] device veth0_macvtap entered promiscuous mode
[  546.934140][T14330] device veth1_macvtap entered promiscuous mode
[  546.950380][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.962031][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.972169][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.982895][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.993071][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.003963][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.015221][T14330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.022920][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  547.043879][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  547.052463][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  547.063774][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  547.074151][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.085573][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.097791][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.108545][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.120507][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.132221][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.143445][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.154602][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.165808][T14330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.179165][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  547.188068][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  547.198979][T14330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.208686][T14330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.221576][T14330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.230542][T14330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.272802][T14330] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht'
[  547.301454][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.308186][T14330] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht'
[  547.319152][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.341908][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  547.356749][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.365415][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.374625][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  549.748388][   T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.926239][   T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.996094][   T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.037231][   T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.709918][   T68] device hsr_slave_0 left promiscuous mode
[  552.719030][   T68] device hsr_slave_1 left promiscuous mode
[  552.725417][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  552.732832][   T68] batman_adv: batadv0: Removing interface: batadv_slave_0
[  552.741149][   T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  552.748886][   T68] batman_adv: batadv0: Removing interface: batadv_slave_1
[  552.756687][   T68] device bridge_slave_1 left promiscuous mode
[  552.762908][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.771034][   T68] device bridge_slave_0 left promiscuous mode
[  552.777348][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.787568][   T68] device veth1_macvtap left promiscuous mode
[  552.793644][   T68] device veth0_macvtap left promiscuous mode
[  552.799685][   T68] device veth1_vlan left promiscuous mode