last executing test programs: 1.857349336s ago: executing program 1 (id=147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000006600000001000006070000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 1.633061178s ago: executing program 1 (id=151): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 1.576997954s ago: executing program 2 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc"], 0xffdd) 1.497147142s ago: executing program 3 (id=154): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 1.475901414s ago: executing program 1 (id=155): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRESDEC=r0], 0x12) 1.341129487s ago: executing program 3 (id=156): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000600091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000003c40)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x6, 0x3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)="817f0000", 0x4}], 0x1}, 0x0) 1.293128552s ago: executing program 1 (id=157): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)="4c265df55e48177fc8e875d76646ec1ffece133e8e0f8942db2fa68577ad1300570b7c1b9bffbece3ec861dd6fa82d303dddce8ed5b42f14", 0x38}, {&(0x7f00000001c0)="b3572a14b1b34354", 0x8}, {&(0x7f0000000540)}, {&(0x7f0000000840)="8a772b6d3f47abc6e957f1e6bb8bb219a0a2005eadeeafaa3272b5833da755f94ce063c1ae30299d6e13ade32d261fba15c71a34ffea5bb0633d5f9d8493a301dccf98f45d3afb6da4db9c56c6d4563596c4ff73308cbaa3b847a8a168275f8bfcdf25a591988e8d84e43b113e7dabf192ae1eba0a08f298d33f63b86e89f39c6e11a20718eca103b25880541d9fd55bd9f7bb96f45b43f0cdcad94144c625452cd964563b8264badbb986091c1a6a69e4bf757fad845ecdeb5579d1184a181ddedcc87a31f96e49564bbb4a092a7e70da9bb01db05788833b04c4d2e7ad788c4f62a2af127f0c342a23e42031a7139a0fef", 0xf2}, {&(0x7f0000000940)="c9c0fda87491cb864038b917620428ea65c861caf0ea77173c77962a3c52853ad6739acc1662112ac7b3a3586929094ba9f141f34b9f85c4a17911a19e7dbefe529e2804d8ecf4c38c0fcd2b375afebccc04bd77f04502d12bb2431626645291d42a3baff82fb52ac53f41c7a7", 0x6d}], 0x5, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x30}, 0xc081) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 1.292917682s ago: executing program 2 (id=158): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1.290883822s ago: executing program 0 (id=159): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x8010743f, 0xf0ff1f00000000) 1.076710654s ago: executing program 3 (id=160): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf05", 0x29}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.0050752s ago: executing program 0 (id=161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1d, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 917.23666ms ago: executing program 2 (id=162): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000000) 917.105539ms ago: executing program 3 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b26900007b8af8ff00000000bfa2000000000000070200006effffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4008000, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 821.475719ms ago: executing program 0 (id=164): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x495a, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 810.61409ms ago: executing program 3 (id=165): perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000005b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 749.029526ms ago: executing program 2 (id=166): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 661.489845ms ago: executing program 2 (id=167): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfebd}, 0x104441, 0x0, 0x0, 0x8, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) 583.527993ms ago: executing program 0 (id=168): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) 521.094969ms ago: executing program 3 (id=169): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 402.04448ms ago: executing program 0 (id=170): socket$kcm(0x2, 0xa, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 343.689016ms ago: executing program 1 (id=171): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 193.096461ms ago: executing program 1 (id=172): socket$kcm(0x2, 0x922000000001, 0x106) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0x2, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9c5, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1966}, 0x105048, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 15.262079ms ago: executing program 2 (id=173): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080005000500010004a10600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0c4) 0s ago: executing program 0 (id=174): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 79.639560][ T5773] cgroup: Unknown subsys name 'net' [ 79.785922][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.491463][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.144583][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.155686][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.164312][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.177589][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.186002][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.194119][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.202442][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.210202][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.217569][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.226196][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.234180][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.243140][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.251659][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.256823][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.260416][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.266380][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.274346][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.280423][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.287389][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.294672][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.313936][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.321679][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.329809][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.340943][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.841853][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 83.934388][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 83.989607][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 84.000361][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 84.121076][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.128437][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.135765][ T5787] bridge_slave_0: entered allmulticast mode [ 84.143749][ T5787] bridge_slave_0: entered promiscuous mode [ 84.154034][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.161229][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.168559][ T5787] bridge_slave_1: entered allmulticast mode [ 84.175939][ T5787] bridge_slave_1: entered promiscuous mode [ 84.259838][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.267334][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.274693][ T5794] bridge_slave_0: entered allmulticast mode [ 84.282674][ T5794] bridge_slave_0: entered promiscuous mode [ 84.300914][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.308266][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.315377][ T5783] bridge_slave_0: entered allmulticast mode [ 84.322720][ T5783] bridge_slave_0: entered promiscuous mode [ 84.347642][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.354887][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.362145][ T5794] bridge_slave_1: entered allmulticast mode [ 84.369517][ T5794] bridge_slave_1: entered promiscuous mode [ 84.378942][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.392077][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.401813][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.409961][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.417217][ T5783] bridge_slave_1: entered allmulticast mode [ 84.424211][ T5783] bridge_slave_1: entered promiscuous mode [ 84.491230][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.498594][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.505794][ T5784] bridge_slave_0: entered allmulticast mode [ 84.514022][ T5784] bridge_slave_0: entered promiscuous mode [ 84.547950][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.560993][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.582760][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.590131][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.599348][ T5784] bridge_slave_1: entered allmulticast mode [ 84.606609][ T5784] bridge_slave_1: entered promiscuous mode [ 84.615399][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.631255][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.645137][ T5787] team0: Port device team_slave_0 added [ 84.654454][ T5787] team0: Port device team_slave_1 added [ 84.725700][ T5783] team0: Port device team_slave_0 added [ 84.753400][ T5794] team0: Port device team_slave_0 added [ 84.762211][ T5794] team0: Port device team_slave_1 added [ 84.781540][ T5783] team0: Port device team_slave_1 added [ 84.789908][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.804183][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.827465][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.834444][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.860620][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.910969][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.918654][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.945170][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.990298][ T5784] team0: Port device team_slave_0 added [ 84.997091][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.004134][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.033873][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.048423][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.055449][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.081648][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.099983][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.107211][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.133297][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.146155][ T5784] team0: Port device team_slave_1 added [ 85.179064][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.186066][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.212847][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.225166][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.232262][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.247758][ T5101] Bluetooth: hci1: command tx timeout [ 85.258390][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.301000][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.308270][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.334351][ T5101] Bluetooth: hci2: command tx timeout [ 85.340743][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.408603][ T5794] hsr_slave_0: entered promiscuous mode [ 85.415118][ T5794] hsr_slave_1: entered promiscuous mode [ 85.420837][ T5101] Bluetooth: hci3: command tx timeout [ 85.420858][ T50] Bluetooth: hci0: command tx timeout [ 85.449920][ T5784] hsr_slave_0: entered promiscuous mode [ 85.456561][ T5784] hsr_slave_1: entered promiscuous mode [ 85.462909][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.470857][ T5784] Cannot create hsr debugfs directory [ 85.482193][ T5787] hsr_slave_0: entered promiscuous mode [ 85.488871][ T5787] hsr_slave_1: entered promiscuous mode [ 85.495021][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.503354][ T5787] Cannot create hsr debugfs directory [ 85.595152][ T5783] hsr_slave_0: entered promiscuous mode [ 85.602004][ T5783] hsr_slave_1: entered promiscuous mode [ 85.608615][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.616199][ T5783] Cannot create hsr debugfs directory [ 86.023124][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.035114][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.047843][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.068866][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.138461][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.154275][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.165194][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.186863][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.269125][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.280379][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.294213][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.306304][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.398893][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.414357][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.425057][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.456144][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.472385][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.538177][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.578577][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.585958][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.595997][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.603149][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.722568][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.737677][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.802134][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.826418][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.859009][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.866196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.880594][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.887824][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.904284][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.916325][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.954142][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.961387][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.986148][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.993362][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.010406][ T23] cfg80211: failed to load regulatory.db [ 87.015148][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.023320][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.034711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.041857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.214689][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.326946][ T5101] Bluetooth: hci1: command tx timeout [ 87.370950][ T5787] veth0_vlan: entered promiscuous mode [ 87.405858][ T5787] veth1_vlan: entered promiscuous mode [ 87.408324][ T5101] Bluetooth: hci2: command tx timeout [ 87.486722][ T5101] Bluetooth: hci3: command tx timeout [ 87.487422][ T50] Bluetooth: hci0: command tx timeout [ 87.502081][ T5787] veth0_macvtap: entered promiscuous mode [ 87.526248][ T5787] veth1_macvtap: entered promiscuous mode [ 87.599830][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.619519][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.654232][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.667025][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.675970][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.685022][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.695198][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.723595][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.813303][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.888010][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.905750][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.926100][ T5784] veth0_vlan: entered promiscuous mode [ 87.951841][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.951864][ T5783] veth0_vlan: entered promiscuous mode [ 87.973325][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.988649][ T5784] veth1_vlan: entered promiscuous mode [ 88.030342][ T5783] veth1_vlan: entered promiscuous mode [ 88.045186][ T5794] veth0_vlan: entered promiscuous mode [ 88.102169][ T5794] veth1_vlan: entered promiscuous mode [ 88.188930][ T5875] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.243223][ T5784] veth0_macvtap: entered promiscuous mode [ 88.270541][ T5784] veth1_macvtap: entered promiscuous mode [ 88.288754][ T5794] veth0_macvtap: entered promiscuous mode [ 88.302624][ T5783] veth0_macvtap: entered promiscuous mode [ 88.350858][ T5794] veth1_macvtap: entered promiscuous mode [ 88.372890][ T5783] veth1_macvtap: entered promiscuous mode [ 88.418357][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.430973][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.444024][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.470265][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.484762][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.499172][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.514586][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.530184][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.540389][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.551119][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.563849][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.574664][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.585554][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.595882][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.608882][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.620553][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.645847][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.655883][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.671639][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.681384][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.693675][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.705402][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.716380][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.728330][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.742687][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.753495][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.765995][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.792372][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.802910][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.813034][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822308][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.836509][ C0] hrtimer: interrupt took 72254 ns [ 88.875936][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.888593][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.899365][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.910233][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.921817][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.933818][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.947597][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.960221][ T5881] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.6'. [ 89.015883][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.032198][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.042234][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.056821][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.225814][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.239942][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.345052][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.376500][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.395094][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.407596][ T50] Bluetooth: hci1: command tx timeout [ 89.418040][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.486987][ T50] Bluetooth: hci2: command tx timeout [ 89.529798][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.545448][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.571380][ T50] Bluetooth: hci3: command tx timeout [ 89.577056][ T50] Bluetooth: hci0: command tx timeout [ 89.752429][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.793062][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.902756][ T5884] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7'. [ 90.468684][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.497061][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.816987][ T5895] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 90.824660][ T5895] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.968887][ T5898] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 91.007686][ T5884] syz.0.7 (5884) used greatest stack depth: 20392 bytes left [ 91.080276][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.121865][ T5898] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.180807][ T5902] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 91.195777][ T5901] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 91.489843][ T50] Bluetooth: hci1: command tx timeout [ 91.514773][ T5903] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 91.526120][ T5903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.537566][ T5903] batadv0: entered promiscuous mode [ 91.542828][ T5903] batadv0: entered allmulticast mode [ 91.576773][ T5903] bond0: (slave batadv0): Releasing backup interface [ 91.584906][ T50] Bluetooth: hci2: command tx timeout [ 91.631137][ T5903] bridge0: port 3(batadv0) entered blocking state [ 91.645492][ T5903] bridge0: port 3(batadv0) entered disabled state [ 91.654211][ T50] Bluetooth: hci3: command tx timeout [ 91.655964][ T5101] Bluetooth: hci0: command tx timeout [ 91.710384][ T5909] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 91.757431][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 91.767128][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 91.882336][ T5909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.904459][ T5909] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 91.931428][ T5901] bond0: entered promiscuous mode [ 91.944524][ T5901] bond_slave_0: entered promiscuous mode [ 91.951546][ T5901] bond_slave_1: entered promiscuous mode [ 91.964350][ T5901] batadv0: entered promiscuous mode [ 92.718224][ T5933] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 92.790077][ T5921] syz.3.10 (5921) used greatest stack depth: 20136 bytes left [ 92.828654][ T5941] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 92.992381][ T5941] team0: Port device wlan1 added [ 93.292573][ T5952] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 93.423839][ T5958] FAULT_INJECTION: forcing a failure. [ 93.423839][ T5958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.437941][ T5958] CPU: 1 PID: 5958 Comm: syz.2.18 Not tainted syzkaller #0 [ 93.445186][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.455292][ T5958] Call Trace: [ 93.458607][ T5958] [ 93.461582][ T5958] dump_stack_lvl+0x16c/0x230 [ 93.466310][ T5958] ? show_regs_print_info+0x20/0x20 [ 93.471559][ T5958] ? load_image+0x3b0/0x3b0 [ 93.476110][ T5958] ? __lock_acquire+0x7c80/0x7c80 [ 93.481179][ T5958] ? snprintf+0xdb/0x120 [ 93.485465][ T5958] should_fail_ex+0x39d/0x4d0 [ 93.490194][ T5958] _copy_to_user+0x2f/0xa0 [ 93.494668][ T5958] simple_read_from_buffer+0xe7/0x150 [ 93.500075][ T5958] proc_fail_nth_read+0x1e3/0x250 [ 93.505122][ T5958] ? proc_fault_inject_write+0x340/0x340 [ 93.510775][ T5958] ? fsnotify_perm+0x271/0x5e0 [ 93.515553][ T5958] ? proc_fault_inject_write+0x340/0x340 [ 93.521214][ T5958] vfs_read+0x27e/0x920 [ 93.525417][ T5958] ? kernel_read+0x1e0/0x1e0 [ 93.530049][ T5958] ? __fget_files+0x28/0x4d0 [ 93.534665][ T5958] ? __fget_files+0x44a/0x4d0 [ 93.539371][ T5958] ? __fdget_pos+0x2a3/0x330 [ 93.543977][ T5958] ? ksys_read+0x75/0x250 [ 93.548334][ T5958] ksys_read+0x147/0x250 [ 93.552600][ T5958] ? vfs_write+0x940/0x940 [ 93.557052][ T5958] ? lockdep_hardirqs_on+0x98/0x150 [ 93.562280][ T5958] do_syscall_64+0x55/0xb0 [ 93.566710][ T5958] ? clear_bhb_loop+0x40/0x90 [ 93.571400][ T5958] ? clear_bhb_loop+0x40/0x90 [ 93.576088][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.581987][ T5958] RIP: 0033:0x7f9a8e78d8dc [ 93.586423][ T5958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.606057][ T5958] RSP: 002b:00007f9a8f5d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.614491][ T5958] RAX: ffffffffffffffda RBX: 00007f9a8e9e5fa0 RCX: 00007f9a8e78d8dc [ 93.622471][ T5958] RDX: 000000000000000f RSI: 00007f9a8f5d60a0 RDI: 0000000000000004 [ 93.630456][ T5958] RBP: 00007f9a8f5d6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.638433][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.646412][ T5958] R13: 00007f9a8e9e6038 R14: 00007f9a8e9e5fa0 R15: 00007ffc0e8296f8 [ 93.654413][ T5958] [ 93.772899][ T5956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.783630][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.897309][ T5962] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.946362][ T5960] Zero length message leads to an empty skb [ 94.084711][ T5968] netlink: 'syz.0.23': attribute type 39 has an invalid length. [ 94.317938][ T5975] netlink: 16142 bytes leftover after parsing attributes in process `syz.2.24'. [ 94.370691][ T5975] netlink: 'syz.2.24': attribute type 29 has an invalid length. [ 94.405914][ T5975] netlink: 'syz.2.24': attribute type 29 has an invalid length. [ 95.001244][ T5986] syzkaller0: entered promiscuous mode [ 95.035915][ T5986] syzkaller0: entered allmulticast mode [ 95.091601][ T5984] team0: Port device vlan0 added [ 95.121061][ T5984] syz.1.28 (5984) used greatest stack depth: 17864 bytes left [ 96.511157][ T5989] validate_nla: 1 callbacks suppressed [ 96.511169][ T5989] netlink: 'syz.1.30': attribute type 2 has an invalid length. [ 96.782910][ T6002] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET) [ 96.985608][ T6012] ªªªªªª—ùËtuvÒ«: renamed from lo (while UP) [ 97.593876][ T6035] netlink: 'syz.0.50': attribute type 3 has an invalid length. [ 97.641938][ T6035] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 97.672367][ T6035] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.50'. [ 98.220104][ T6056] IPv6: Can't replace route, no match found [ 98.453308][ T6067] Illegal XDP return value 120 on prog (id 31) dev N/A, expect packet loss! [ 98.996894][ T6085] tap0: tun_chr_ioctl cmd 1074025677 [ 99.002421][ T6085] tap0: linktype set to 780 [ 99.056799][ T6083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.73'. [ 99.066393][ T6083] netlink: 'syz.3.73': attribute type 4 has an invalid length. [ 99.080085][ T6083] netlink: 1 bytes leftover after parsing attributes in process `syz.3.73'. [ 100.630854][ T6143] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 100.656273][ T6143] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.103'. [ 103.217632][ T6235] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.149'. [ 103.437182][ T6245] syz_tun: refused to change device tx_queue_len [ 103.461958][ T5101] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 103.859743][ T6260] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.160'. [ 104.361094][ T6278] TCP: TCP_TX_DELAY enabled [ 105.087763][ T134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Connection to 10.128.0.40 closed by remote host. [ 107.002053][ T134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.152966][ T134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.305902][ T134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.394559][ T134] hsr_slave_0: left promiscuous mode [ 108.403415][ T134] hsr_slave_1: left promiscuous mode [ 108.413662][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.422367][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.434725][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.446867][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.454978][ T134] bridge_slave_1: left allmulticast mode [ 108.466324][ T134] bridge_slave_1: left promiscuous mode [ 108.473545][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.491410][ T134] bridge_slave_0: left allmulticast mode [ 108.498499][ T134] bridge_slave_0: left promiscuous mode [ 108.504237][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.531682][ T134] veth1_macvtap: left promiscuous mode [ 108.537856][ T134] veth0_macvtap: left promiscuous mode [ 108.543822][ T134] veth1_vlan: left promiscuous mode [ 108.549623][ T134] veth0_vlan: left promiscuous mode [ 109.005307][ T134] team0 (unregistering): Port device team_slave_1 removed [ 109.041604][ T134] team0 (unregistering): Port device team_slave_0 removed [ 109.079308][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.122059][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.458204][ T134] bond0 (unregistering): Released all slaves [ 109.977536][ T134] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.070386][ T134] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.137636][ T134] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.211709][ T134] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.419776][ T134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.489460][ T134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.548359][ T134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.616062][ T134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.764423][ T134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.840986][ T134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.923140][ T134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.989737][ T134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.470372][ T134] [ 112.472773][ T134] ====================================================== [ 112.479912][ T134] WARNING: possible circular locking dependency detected [ 112.486982][ T134] syzkaller #0 Not tainted [ 112.491427][ T134] ------------------------------------------------------ [ 112.498470][ T134] kworker/u4:5/134 is trying to acquire lock: [ 112.504565][ T134] ffff88802f508d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 112.514072][ T134] [ 112.514072][ T134] but task is already holding lock: [ 112.521437][ T134] ffff888019ea0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 112.531816][ T134] [ 112.531816][ T134] which lock already depends on the new lock. [ 112.531816][ T134] [ 112.542220][ T134] [ 112.542220][ T134] the existing dependency chain (in reverse order) is: [ 112.551324][ T134] [ 112.551324][ T134] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 112.559064][ T134] __mutex_lock+0x129/0xcc0 [ 112.564102][ T134] ieee80211_open+0x144/0x200 [ 112.569312][ T134] __dev_open+0x2bc/0x430 [ 112.574167][ T134] dev_open+0xab/0x170 [ 112.578761][ T134] team_add_slave+0xae7/0x2660 [ 112.584052][ T134] do_setlink+0xe14/0x3fb0 [ 112.589005][ T134] rtnl_newlink+0x175b/0x2020 [ 112.594225][ T134] rtnetlink_rcv_msg+0x7c7/0xf10 [ 112.599803][ T134] netlink_rcv_skb+0x216/0x480 [ 112.605096][ T134] netlink_unicast+0x751/0x8d0 [ 112.610403][ T134] netlink_sendmsg+0x8c1/0xbe0 [ 112.615716][ T134] ____sys_sendmsg+0x5bf/0x950 [ 112.621017][ T134] ___sys_sendmsg+0x220/0x290 [ 112.626253][ T134] __se_sys_sendmsg+0x1a5/0x270 [ 112.631640][ T134] do_syscall_64+0x55/0xb0 [ 112.636586][ T134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.643005][ T134] [ 112.643005][ T134] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 112.651009][ T134] __lock_acquire+0x2ddb/0x7c80 [ 112.656385][ T134] lock_acquire+0x197/0x410 [ 112.661427][ T134] __mutex_lock+0x129/0xcc0 [ 112.666477][ T134] team_del_slave+0x32/0x1c0 [ 112.671603][ T134] team_device_event+0x28d/0xa20 [ 112.677070][ T134] notifier_call_chain+0x197/0x390 [ 112.682710][ T134] unregister_netdevice_many_notify+0xf36/0x1810 [ 112.689569][ T134] unregister_netdevice_queue+0x324/0x360 [ 112.695819][ T134] _cfg80211_unregister_wdev+0x16b/0x580 [ 112.701986][ T134] ieee80211_remove_interfaces+0x496/0x680 [ 112.708324][ T134] ieee80211_unregister_hw+0x5d/0x2a0 [ 112.714227][ T134] mac80211_hwsim_del_radio+0x274/0x450 [ 112.720299][ T134] hwsim_exit_net+0x585/0x640 [ 112.725510][ T134] cleanup_net+0x6f4/0xb90 [ 112.730459][ T134] process_scheduled_works+0xa45/0x15b0 [ 112.736541][ T134] worker_thread+0xa55/0xfc0 [ 112.741660][ T134] kthread+0x2fa/0x390 [ 112.746257][ T134] ret_from_fork+0x48/0x80 [ 112.751207][ T134] ret_from_fork_asm+0x11/0x20 [ 112.756529][ T134] [ 112.756529][ T134] other info that might help us debug this: [ 112.756529][ T134] [ 112.766762][ T134] Possible unsafe locking scenario: [ 112.766762][ T134] [ 112.774214][ T134] CPU0 CPU1 [ 112.779583][ T134] ---- ---- [ 112.784951][ T134] lock(&rdev->wiphy.mtx); [ 112.789462][ T134] lock(team->team_lock_key); [ 112.796754][ T134] lock(&rdev->wiphy.mtx); [ 112.803783][ T134] lock(team->team_lock_key); [ 112.808551][ T134] [ 112.808551][ T134] *** DEADLOCK *** [ 112.808551][ T134] [ 112.816693][ T134] 5 locks held by kworker/u4:5/134: [ 112.821892][ T134] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 112.832810][ T134] #1: ffffc90002d37d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 112.843368][ T134] #2: ffffffff8dfae710 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 112.852831][ T134] #3: ffffffff8dfbb548 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 112.862688][ T134] #4: ffff888019ea0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 112.873516][ T134] [ 112.873516][ T134] stack backtrace: [ 112.879426][ T134] CPU: 0 PID: 134 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 112.886893][ T134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.897054][ T134] Workqueue: netns cleanup_net [ 112.901834][ T134] Call Trace: [ 112.905114][ T134] [ 112.908056][ T134] dump_stack_lvl+0x16c/0x230 [ 112.912745][ T134] ? load_image+0x3b0/0x3b0 [ 112.917253][ T134] ? show_regs_print_info+0x20/0x20 [ 112.922470][ T134] ? print_circular_bug+0x12b/0x1a0 [ 112.927680][ T134] check_noncircular+0x2bd/0x3c0 [ 112.932627][ T134] ? print_deadlock_bug+0x5d0/0x5d0 [ 112.937833][ T134] ? lockdep_lock+0xe0/0x220 [ 112.942433][ T134] ? __lock_acquire+0x1334/0x7c80 [ 112.947560][ T134] ? _find_first_zero_bit+0xd3/0x100 [ 112.952879][ T134] __lock_acquire+0x2ddb/0x7c80 [ 112.957750][ T134] ? verify_lock_unused+0x140/0x140 [ 112.962956][ T134] ? verify_lock_unused+0x140/0x140 [ 112.968182][ T134] lock_acquire+0x197/0x410 [ 112.972773][ T134] ? team_del_slave+0x32/0x1c0 [ 112.977546][ T134] ? __might_sleep+0xe0/0xe0 [ 112.982143][ T134] ? read_lock_is_recursive+0x20/0x20 [ 112.987532][ T134] __mutex_lock+0x129/0xcc0 [ 112.992052][ T134] ? team_del_slave+0x32/0x1c0 [ 112.996819][ T134] ? __lock_acquire+0x7c80/0x7c80 [ 113.001871][ T134] ? rcu_is_watching+0x15/0xb0 [ 113.006644][ T134] ? trace_contention_end+0x39/0xe0 [ 113.011940][ T134] ? __mutex_lock+0x304/0xcc0 [ 113.016720][ T134] ? team_del_slave+0x32/0x1c0 [ 113.021491][ T134] ? mutex_lock_nested+0x20/0x20 [ 113.026464][ T134] ? bond_netdev_event+0xe1/0xef0 [ 113.031537][ T134] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 113.037199][ T134] ? bond_ipsec_offload_ok+0x410/0x410 [ 113.042685][ T134] team_del_slave+0x32/0x1c0 [ 113.047293][ T134] team_device_event+0x28d/0xa20 [ 113.052244][ T134] notifier_call_chain+0x197/0x390 [ 113.057369][ T134] unregister_netdevice_many_notify+0xf36/0x1810 [ 113.063797][ T134] ? lock_chain_count+0x20/0x20 [ 113.068659][ T134] ? unregister_netdevice_many+0x20/0x20 [ 113.074303][ T134] ? kernfs_remove_by_name_ns+0x117/0x150 [ 113.080036][ T134] ? __lock_acquire+0x7c80/0x7c80 [ 113.085072][ T134] unregister_netdevice_queue+0x324/0x360 [ 113.090805][ T134] ? list_netdevice+0x730/0x730 [ 113.095666][ T134] ? kernfs_remove_by_name_ns+0x117/0x150 [ 113.101399][ T134] _cfg80211_unregister_wdev+0x16b/0x580 [ 113.107052][ T134] ieee80211_remove_interfaces+0x496/0x680 [ 113.112872][ T134] ? ieee80211_do_stop+0x1db0/0x1db0 [ 113.118167][ T134] ? rcu_is_watching+0x15/0xb0 [ 113.122939][ T134] ieee80211_unregister_hw+0x5d/0x2a0 [ 113.128359][ T134] mac80211_hwsim_del_radio+0x274/0x450 [ 113.133915][ T134] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 113.139470][ T134] hwsim_exit_net+0x585/0x640 [ 113.144156][ T134] ? hwsim_init_net+0x90/0x90 [ 113.148847][ T134] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 113.154659][ T134] cleanup_net+0x6f4/0xb90 [ 113.159088][ T134] ? ops_free_list+0x3b0/0x3b0 [ 113.163864][ T134] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.169068][ T134] ? process_scheduled_works+0x957/0x15b0 [ 113.174793][ T134] ? process_scheduled_works+0x957/0x15b0 [ 113.180541][ T134] process_scheduled_works+0xa45/0x15b0 [ 113.186108][ T134] ? assign_work+0x400/0x400 [ 113.190707][ T134] ? assign_work+0x39e/0x400 [ 113.195303][ T134] worker_thread+0xa55/0xfc0 [ 113.199912][ T134] kthread+0x2fa/0x390 [ 113.203985][ T134] ? pr_cont_work+0x560/0x560 [ 113.208669][ T134] ? kthread_blkcg+0xd0/0xd0 [ 113.213260][ T134] ret_from_fork+0x48/0x80 [ 113.217689][ T134] ? kthread_blkcg+0xd0/0xd0 [ 113.222280][ T134] ret_from_fork_asm+0x11/0x20 [ 113.227059][ T134] [ 113.233634][ T134] team0: Port device wlan1 removed [ 113.580439][ T134] hsr_slave_0: left promiscuous mode [ 113.588880][ T134] hsr_slave_1: left promiscuous mode [ 113.595030][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.604541][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.613985][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.623466][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.631666][ T134] bridge0: port 3(batadv0) entered disabled state [ 113.639270][ T134] bridge_slave_1: left allmulticast mode [ 113.644910][ T134] bridge_slave_1: left promiscuous mode [ 113.650678][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.659452][ T134] bridge_slave_0: left promiscuous mode [ 113.665145][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.678595][ T134] hsr_slave_0: left promiscuous mode [ 113.684382][ T134] hsr_slave_1: left promiscuous mode [ 113.690965][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.699651][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.707418][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.714801][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.722518][ T134] bridge_slave_1: left allmulticast mode [ 113.728176][ T134] bridge_slave_1: left promiscuous mode [ 113.733823][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.742455][ T134] bridge_slave_0: left allmulticast mode [ 113.748235][ T134] bridge_slave_0: left promiscuous mode [ 113.753908][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.766287][ T134] hsr_slave_0: left promiscuous mode [ 113.772122][ T134] hsr_slave_1: left promiscuous mode [ 113.778021][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.785418][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.794344][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.801853][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.809725][ T134] bridge_slave_1: left allmulticast mode [ 113.815385][ T134] bridge_slave_1: left promiscuous mode [ 113.821153][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.829624][ T134] bridge_slave_0: left allmulticast mode [ 113.835281][ T134] bridge_slave_0: left promiscuous mode [ 113.841189][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.854028][ T134] veth1_macvtap: left promiscuous mode [ 113.859602][ T134] veth0_macvtap: left promiscuous mode [ 113.865186][ T134] veth1_vlan: left promiscuous mode [ 113.870982][ T134] veth0_vlan: left promiscuous mode [ 113.877723][ T134] veth1_macvtap: left promiscuous mode [ 113.883235][ T134] veth0_macvtap: left promiscuous mode [ 113.889134][ T134] veth1_vlan: left promiscuous mode [ 113.894432][ T134] veth0_vlan: left promiscuous mode [ 113.902029][ T134] veth1_macvtap: left promiscuous mode [ 113.907999][ T134] veth0_macvtap: left promiscuous mode [ 113.913588][ T134] veth1_vlan: left promiscuous mode [ 113.919879][ T134] veth0_vlan: left promiscuous mode [ 114.233526][ T134] team0 (unregistering): Port device team_slave_1 removed [ 114.258345][ T134] team0 (unregistering): Port device team_slave_0 removed [ 114.281359][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.306868][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.400629][ T134] bond0 (unregistering): Released all slaves [ 114.612931][ T134] team0 (unregistering): Port device team_slave_1 removed [ 114.637182][ T134] team0 (unregistering): Port device team_slave_0 removed [ 114.659857][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.685059][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.758580][ T134] bond0 (unregistering): Released all slaves [ 114.848273][ T134] team0 (unregistering): Port device vlan0 removed [ 114.928484][ T134] team0 (unregistering): Port device team_slave_1 removed [ 114.950519][ T134] team0 (unregistering): Port device team_slave_0 removed [ 114.962767][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.972121][ T134] bond_slave_1 (unregistering): left promiscuous mode [ 114.986313][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.996418][ T134] bond_slave_0 (unregistering): left promiscuous mode [ 115.054245][ T134] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 115.068136][ T134] batadv0 (unregistering): left promiscuous mode [ 115.168847][ T134] bond0 (unregistering): Released all slaves