ve_1
[ 2175.772966][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2175.779611][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2175.791314][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2175.803261][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2175.812379][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2175.830610][T11549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2175.845081][T11549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2175.858554][T11549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2175.869130][T11549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2175.955727][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2175.968793][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2175.997061][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2176.011802][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2176.027243][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2176.038054][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2176.693012][T11647] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2176.706215][T11647] CPU: 1 PID: 11647 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2176.714767][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2176.724857][T11647] Call Trace:
[ 2176.728170][T11647]  <TASK>
[ 2176.731133][T11647]  dump_stack_lvl+0x1e3/0x2cb
[ 2176.735954][T11647]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2176.741464][T11647]  ? panic+0x75d/0x75d
[ 2176.745704][T11647]  dump_header+0xdf/0x9c0
[ 2176.750078][T11647]  oom_kill_process+0xf8/0x520
[ 2176.754933][T11647]  out_of_memory+0xf30/0x12f0
[ 2176.759666][T11647]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2176.765966][T11647]  ? lockdep_hardirqs_on+0x94/0x130
[ 2176.771257][T11647]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2176.777457][T11647]  ? unregister_oom_notifier+0x20/0x20
[ 2176.783000][T11647]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2176.788596][T11647]  ? preempt_schedule_thunk+0x16/0x18
[ 2176.794025][T11647]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2176.799651][T11647]  ? cgroup_file_notify+0x123/0x190
[ 2176.804912][T11647]  memory_max_write+0x34d/0x470
[ 2176.809816][T11647]  ? memory_max_show+0xa0/0xa0
[ 2176.814648][T11647]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2176.820651][T11647]  ? print_irqtrace_events+0x210/0x210
[ 2176.826124][T11647]  ? memory_max_show+0xa0/0xa0
[ 2176.830901][T11647]  cgroup_file_write+0x2c6/0x690
[ 2176.835854][T11647]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2176.842026][T11647]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2176.847148][T11647]  ? kernfs_fop_write_iter+0x306/0x4f0
[ 2176.852627][T11647]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2176.857746][T11647]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2176.863082][T11647]  vfs_write+0x7ae/0xba0
[ 2176.867370][T11647]  ? file_end_write+0x250/0x250
[ 2176.872277][T11647]  ? mutex_lock_nested+0x17/0x20
[ 2176.877239][T11647]  ? __fdget_pos+0x250/0x2f0
[ 2176.881840][T11647]  ? ksys_write+0x77/0x2c0
[ 2176.886270][T11647]  ksys_write+0x19c/0x2c0
[ 2176.890607][T11647]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2176.896775][T11647]  ? __ia32_sys_read+0x80/0x80
[ 2176.901549][T11647]  ? syscall_enter_from_user_mode+0x37/0x220
[ 2176.907572][T11647]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2176.913574][T11647]  do_syscall_64+0x3d/0xb0
[ 2176.918118][T11647]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2176.924025][T11647] RIP: 0033:0x7f29b228c169
[ 2176.928468][T11647] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2176.948089][T11647] RSP: 002b:00007f29b0dfe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2176.956516][T11647] RAX: ffffffffffffffda RBX: 00007f29b23ac050 RCX: 00007f29b228c169
[ 2176.964497][T11647] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2176.972482][T11647] RBP: 00007f29b22e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2176.980476][T11647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2176.988456][T11647] R13: 00007ffc2ab1c96f R14: 00007f29b0dfe300 R15: 0000000000022000
[ 2176.996547][T11647]  </TASK>
[ 2177.021480][T11647] memory: usage 10688kB, limit 0kB, failcnt 585
[ 2177.029489][T11647] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2177.043849][T11647] Memory cgroup stats for /syz5:
[ 2177.044151][T11647] anon 118784
[ 2177.044151][T11647] file 10461184
[ 2177.044151][T11647] kernel 282624
[ 2177.044151][T11647] kernel_stack 32768
[ 2177.044151][T11647] pagetables 81920
[ 2177.044151][T11647] sec_pagetables 0
[ 2177.044151][T11647] percpu 0
[ 2177.044151][T11647] sock 0
[ 2177.044151][T11647] vmalloc 0
[ 2177.044151][T11647] shmem 10461184
[ 2177.044151][T11647] zswap 0
[ 2177.044151][T11647] zswapped 0
[ 2177.044151][T11647] file_mapped 163840
[ 2177.044151][T11647] file_dirty 0
[ 2177.044151][T11647] file_writeback 0
[ 2177.044151][T11647] swapcached 0
[ 2177.044151][T11647] anon_thp 0
[ 2177.044151][T11647] file_thp 0
[ 2177.044151][T11647] shmem_thp 0
[ 2177.044151][T11647] inactive_anon 0
[ 2177.044151][T11647] active_anon 10579968
[ 2177.044151][T11647] inactive_file 0
[ 2177.044151][T11647] active_file 0
[ 2177.044151][T11647] unevictable 0
[ 2177.044151][T11647] slab_reclaimable 53448
[ 2177.044151][T11647] slab_unreclaimable 84248
[ 2177.044151][T11647] slab 137696
[ 2177.158294][T11647] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11549,uid=0
[ 2177.181508][T11647] Memory cgroup out of memory: Killed process 11549 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
18:08:28 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:08:28 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xe00}, 0x48)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0x7f, 0x81, 0xcd, 0x1f, 0x0, 0x4, 0x1822, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffcc, 0x2, @perf_config_ext={0xffffffff, 0x9}, 0x8324, 0x1, 0xf0, 0x6, 0x6, 0x3f, 0x78, 0x0, 0x3, 0x0, 0x7})

18:08:28 executing program 3:
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x700)

18:08:28 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:08:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:08:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:08:30 executing program 3:
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x10)

18:08:30 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x62)

18:08:30 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:08:30 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:08:30 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f00000004c0)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000580)='GPL\x00', 0x4, 0x1000, &(0x7f00000005c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:08:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
close(r0)

[ 2181.543919][ T3705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2181.600283][ T3705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2181.682063][ T3705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2181.749169][ T3705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2182.653780][ T3705] device hsr_slave_0 left promiscuous mode
[ 2182.660833][ T3705] device hsr_slave_1 left promiscuous mode
[ 2182.676904][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2182.689718][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2182.707473][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2182.717315][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2182.731573][ T3705] device bridge_slave_1 left promiscuous mode
[ 2182.740719][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2182.754073][ T3705] device bridge_slave_0 left promiscuous mode
[ 2182.760317][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2182.774453][ T3705] device veth1_macvtap left promiscuous mode
[ 2182.781146][ T3705] device veth0_macvtap left promiscuous mode
[ 2182.787435][ T3705] device veth1_vlan left promiscuous mode
[ 2182.799052][ T3705] device veth0_vlan left promiscuous mode
[ 2182.971792][ T3705] team0 (unregistering): Port device team_slave_1 removed
[ 2182.989366][ T3705] team0 (unregistering): Port device team_slave_0 removed
[ 2183.002157][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2183.022097][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2183.089685][ T3705] bond0 (unregistering): Released all slaves
18:08:44 executing program 3:
bpf$OBJ_GET_MAP(0x22, &(0x7f00000012c0)={0x0, 0x0, 0x18}, 0x10)

18:08:44 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440), 0x4)

18:08:44 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:08:44 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:08:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:08:44 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:08:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000061)

18:08:44 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)={&(0x7f0000001140)='./file0\x00'}, 0x10)
mkdir(&(0x7f0000001500)='./file0\x00', 0x0)

18:08:44 executing program 2:
perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x1f, 0x2, 0x81, 0x0, 0x8, 0x1050, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0xa8, 0x3d7e421b}, 0x10053, 0x40, 0x0, 0x3, 0x4, 0x8, 0x7a, 0x0, 0x401, 0x0, 0x4c56}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x7)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x478001, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6_vti0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180))
openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8)
r4 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000280)=r4)
ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000300))
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000340))
syz_clone(0x28500, &(0x7f0000000600)="5870c853f673b54f7ba30b46b6f8bc002d453eaea69850709d1189b2c82a040900cdf497f97194a89996dda2e86effd842fbc6ba0939c6edf4f92232912998e9a08afdee4066adc1236cb1df71276a9a9fc0a46f48464969", 0x58, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="1a4767da45116bd0fed4409a9573197614b6c9b467101913fd263799c7848f2610088974003a6de98ccfb3948aa1671d4cff0d1ac854bdd120800a02a65da3af76f1963ada38ba1afb5f7bcb923fc3956daa4056c73a5465d7eab0a653528ae6975de39e2d4b7d6754d86370943360ae961c320a9f5538dc867e2ba10c")

18:08:44 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x840, 0x0)

18:08:44 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000380)=""/165, 0x26, 0xa5, 0x1}, 0x20)

18:08:44 executing program 2:
perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x1f, 0x2, 0x81, 0x0, 0x8, 0x1050, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0xa8, 0x3d7e421b}, 0x10053, 0x40, 0x0, 0x3, 0x4, 0x8, 0x7a, 0x0, 0x401, 0x0, 0x4c56}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x7)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x478001, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6_vti0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180))
openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8)
r4 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000280)=r4)
ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000300))
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000340))
syz_clone(0x28500, &(0x7f0000000600)="5870c853f673b54f7ba30b46b6f8bc002d453eaea69850709d1189b2c82a040900cdf497f97194a89996dda2e86effd842fbc6ba0939c6edf4f92232912998e9a08afdee4066adc1236cb1df71276a9a9fc0a46f48464969", 0x58, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="1a4767da45116bd0fed4409a9573197614b6c9b467101913fd263799c7848f2610088974003a6de98ccfb3948aa1671d4cff0d1ac854bdd120800a02a65da3af76f1963ada38ba1afb5f7bcb923fc3956daa4056c73a5465d7eab0a653528ae6975de39e2d4b7d6754d86370943360ae961c320a9f5538dc867e2ba10c")

18:08:44 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:08:44 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
close(r1)

[ 2196.114040][T22623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2196.122199][T22623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2196.131284][T22623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2196.138881][T22623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2196.146289][T22623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2196.335600][T11961] chnl_net:caif_netlink_parms(): no params data found
[ 2196.411544][T11961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2196.418885][T11961] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2196.428892][T11961] device bridge_slave_0 entered promiscuous mode
[ 2196.438071][T11961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2196.446477][T11961] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2196.455140][T11961] device bridge_slave_1 entered promiscuous mode
[ 2196.484234][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2196.497565][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2196.535545][T11961] team0: Port device team_slave_0 added
[ 2196.553058][T11961] team0: Port device team_slave_1 added
[ 2196.602331][T11961] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2196.617013][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2196.651442][T11961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2196.664814][T11961] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2196.671844][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2196.698745][T11961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2196.769131][T11961] device hsr_slave_0 entered promiscuous mode
[ 2196.783811][T11961] device hsr_slave_1 entered promiscuous mode
[ 2196.812105][T11961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2196.828152][T11961] Cannot create hsr debugfs directory
[ 2197.658077][T11961] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2197.668061][T11961] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2197.679029][T11961] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2197.690061][T11961] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2197.795993][T11961] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2197.818355][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2197.835386][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2197.854499][T11961] 8021q: adding VLAN 0 to HW filter on device team0
[ 2197.874730][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2197.890652][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2197.899900][T31280] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2197.907107][T31280] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2197.944132][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2197.954127][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2197.968774][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2197.979392][T31280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2197.986594][T31280] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2198.001716][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2198.010901][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2198.055132][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2198.071825][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2198.082058][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2198.091553][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2198.100734][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2198.109618][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2198.124484][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2198.133705][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2198.144884][T11961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2198.156156][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2198.190124][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2198.392385][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2198.400812][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2198.420329][T11961] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2198.866029][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2198.882173][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2198.915011][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2198.931550][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2198.943565][T11961] device veth0_vlan entered promiscuous mode
[ 2198.960881][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2198.969294][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2198.991235][T11961] device veth1_vlan entered promiscuous mode
[ 2199.035293][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2199.050502][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2199.062109][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2199.077721][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2199.090218][T11961] device veth0_macvtap entered promiscuous mode
[ 2199.109551][T11961] device veth1_macvtap entered promiscuous mode
[ 2199.150108][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.169696][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.180397][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.198195][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.208429][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.228534][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.240088][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.257401][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.269599][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2199.280502][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.292652][T11961] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2199.305505][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2199.314861][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2199.323363][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2199.332230][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2199.344671][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.358983][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.369721][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.380933][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.392039][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.402700][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.412605][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.423127][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.433480][T11961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2199.448699][T11961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2199.463130][T11961] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2199.474232][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2199.484042][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2199.495886][T11961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2199.507321][T11961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2199.523293][T11961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2199.532061][T11961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2199.646351][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2199.663180][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2199.677118][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2199.711238][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2199.727590][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2199.748891][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2200.252815][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2200.302293][T12060] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2200.322216][T12060] CPU: 0 PID: 12060 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2200.330713][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2200.340814][T12060] Call Trace:
[ 2200.344133][T12060]  <TASK>
[ 2200.347104][T12060]  dump_stack_lvl+0x1e3/0x2cb
[ 2200.351836][T12060]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2200.357322][T12060]  ? panic+0x75d/0x75d
[ 2200.361497][T12060]  ? ___ratelimit+0x4c0/0x670
[ 2200.366238][T12060]  ? local_lock_release+0x170/0x170
[ 2200.371489][T12060]  dump_header+0xdf/0x9c0
[ 2200.375853][T12060]  oom_kill_process+0xf8/0x520
[ 2200.380641][T12060]  out_of_memory+0xf30/0x12f0
[ 2200.385357][T12060]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2200.391535][T12060]  ? lockdep_hardirqs_on+0x94/0x130
[ 2200.396762][T12060]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2200.402933][T12060]  ? unregister_oom_notifier+0x20/0x20
[ 2200.408408][T12060]  ? mem_cgroup_out_of_memory+0x112/0x3b0
[ 2200.414151][T12060]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2200.419718][T12060]  ? preempt_schedule_thunk+0x16/0x18
[ 2200.425115][T12060]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2200.430690][T12060]  ? cgroup_file_notify+0x123/0x190
[ 2200.435909][T12060]  memory_max_write+0x34d/0x470
[ 2200.440781][T12060]  ? memory_max_show+0xa0/0xa0
[ 2200.445590][T12060]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2200.451641][T12060]  ? print_irqtrace_events+0x210/0x210
[ 2200.457188][T12060]  ? memory_max_show+0xa0/0xa0
[ 2200.462019][T12060]  cgroup_file_write+0x2c6/0x690
[ 2200.467035][T12060]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2200.472207][T12060]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2200.477528][T12060]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2200.482843][T12060]  vfs_write+0x7ae/0xba0
[ 2200.487108][T12060]  ? file_end_write+0x250/0x250
[ 2200.491991][T12060]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2200.498375][T12060]  ? ksys_write+0xfd/0x2c0
[ 2200.502814][T12060]  ? ksys_write+0x118/0x2c0
[ 2200.507343][T12060]  ksys_write+0x19c/0x2c0
[ 2200.511687][T12060]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2200.517864][T12060]  ? __ia32_sys_read+0x80/0x80
[ 2200.522731][T12060]  ? syscall_enter_from_user_mode+0x37/0x220
[ 2200.528736][T12060]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2200.534741][T12060]  do_syscall_64+0x3d/0xb0
[ 2200.539174][T12060]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2200.545077][T12060] RIP: 0033:0x7f97b788c169
[ 2200.549592][T12060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2200.569580][T12060] RSP: 002b:00007f97b8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2200.578013][T12060] RAX: ffffffffffffffda RBX: 00007f97b79ac050 RCX: 00007f97b788c169
[ 2200.586083][T12060] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2200.594063][T12060] RBP: 00007f97b78e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2200.602048][T12060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2200.610030][T12060] R13: 00007ffe94a52e7f R14: 00007f97b8639300 R15: 0000000000022000
[ 2200.618041][T12060]  </TASK>
[ 2200.639567][T12060] memory: usage 10688kB, limit 0kB, failcnt 585
[ 2200.647391][T12060] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2200.655597][T12060] Memory cgroup stats for /syz5:
[ 2200.658039][T12060] anon 118784
[ 2200.658039][T12060] file 10461184
[ 2200.658039][T12060] kernel 352256
[ 2200.658039][T12060] kernel_stack 98304
[ 2200.658039][T12060] pagetables 81920
[ 2200.658039][T12060] sec_pagetables 0
[ 2200.658039][T12060] percpu 0
[ 2200.658039][T12060] sock 0
[ 2200.658039][T12060] vmalloc 0
[ 2200.658039][T12060] shmem 10461184
[ 2200.658039][T12060] zswap 0
[ 2200.658039][T12060] zswapped 0
[ 2200.658039][T12060] file_mapped 163840
[ 2200.658039][T12060] file_dirty 0
[ 2200.658039][T12060] file_writeback 0
[ 2200.658039][T12060] swapcached 0
[ 2200.658039][T12060] anon_thp 0
[ 2200.658039][T12060] file_thp 0
[ 2200.658039][T12060] shmem_thp 0
[ 2200.658039][T12060] inactive_anon 0
[ 2200.658039][T12060] active_anon 10579968
[ 2200.658039][T12060] inactive_file 0
[ 2200.658039][T12060] active_file 0
[ 2200.658039][T12060] unevictable 0
[ 2200.658039][T12060] slab_reclaimable 58984
[ 2200.658039][T12060] slab_unreclaimable 89008
[ 2200.658039][T12060] slab 147992
[ 2200.781236][T12060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11961,uid=0
[ 2200.805799][T12060] Memory cgroup out of memory: Killed process 11961 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
18:08:53 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

[ 2203.739341][T31174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2203.916097][T31174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2204.016504][T31174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2204.070779][T31174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2204.979008][T31174] device hsr_slave_0 left promiscuous mode
[ 2204.985600][T31174] device hsr_slave_1 left promiscuous mode
[ 2204.992131][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2205.002867][T31174] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2205.012114][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2205.020427][T31174] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2205.029998][T31174] device bridge_slave_1 left promiscuous mode
[ 2205.036654][T31174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2205.045834][T31174] device bridge_slave_0 left promiscuous mode
[ 2205.052113][T31174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2205.067720][T31174] device veth1_macvtap left promiscuous mode
[ 2205.080449][T31174] device veth0_macvtap left promiscuous mode
[ 2205.088571][T31174] device veth1_vlan left promiscuous mode
[ 2205.101821][T31174] device veth0_vlan left promiscuous mode
[ 2205.356070][T31174] team0 (unregistering): Port device team_slave_1 removed
[ 2205.369073][T31174] team0 (unregistering): Port device team_slave_0 removed
[ 2205.383410][T31174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2205.399593][T31174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2205.467543][T31174] bond0 (unregistering): Released all slaves
18:08:59 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:08:59 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:08:59 executing program 2:
perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x1f, 0x2, 0x81, 0x0, 0x8, 0x1050, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0xa8, 0x3d7e421b}, 0x10053, 0x40, 0x0, 0x3, 0x4, 0x8, 0x7a, 0x0, 0x401, 0x0, 0x4c56}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x7)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x478001, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6_vti0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180))
openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8)
r4 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000280)=r4)
ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000300))
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000340))
syz_clone(0x28500, &(0x7f0000000600)="5870c853f673b54f7ba30b46b6f8bc002d453eaea69850709d1189b2c82a040900cdf497f97194a89996dda2e86effd842fbc6ba0939c6edf4f92232912998e9a08afdee4066adc1236cb1df71276a9a9fc0a46f48464969", 0x58, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="1a4767da45116bd0fed4409a9573197614b6c9b467101913fd263799c7848f2610088974003a6de98ccfb3948aa1671d4cff0d1ac854bdd120800a02a65da3af76f1963ada38ba1afb5f7bcb923fc3956daa4056c73a5465d7eab0a653528ae6975de39e2d4b7d6754d86370943360ae961c320a9f5538dc867e2ba10c")

18:08:59 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter, 0x48)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000380)="d148e53de76e5f73a4b4740c4d462296718f099688a01d8e9b9e59512777789895df8672ce02518dd6a191c3a81a2f073789d9231689f0915896e8c4cded2374644c196ec617dc7e6bfd82f0f892b5a652a500f304ec3b49c1b99f8fdfeb500c0e4402e30c11696401", &(0x7f0000000040)=""/8, &(0x7f0000000400)="b74b34f635e6ad000f57ef68fb181c17d17eb9a5ffb2a2323a532a7c1c366109813b674d8a8d88d4ef1bc1c5e034daf8c2de01296b870da0c14d96073e47ed56cca0b2b3508d3d6c8b83bae6c78822428511f15ef9d56e1f83d1fe85625e854a", &(0x7f0000000480)="bf6133d622802ef17e6464a9b20a67ea143ff4e82dc458242fdae459cfeb651f07c6314e7ba3bfe18a7dfce3a7d6dc80ef8f750bbb1143770e85b19ab0da8d1003cb00275c119ba8a10d1e12efd3d9ae9c839ad37fa3d95fd132db4544b08cda7a762dc1d1f6f1e2b6bbe16e09dd0b69c238e2af14f17ff7e946beada624777e27385701e4321aa3609dbbebff95c8b74f39bf1b", 0x5, r0, 0x4}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r1, 0x25, 0xc}, 0x10)

18:08:59 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:08:59 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:08:59 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x20, 0x3c52}, 0x48)

18:09:00 executing program 2:
perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x1f, 0x2, 0x81, 0x0, 0x8, 0x1050, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0xa8, 0x3d7e421b}, 0x10053, 0x40, 0x0, 0x3, 0x4, 0x8, 0x7a, 0x0, 0x401, 0x0, 0x4c56}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x7)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x478001, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6_vti0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180))
openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8)
r4 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000280)=r4)
ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000300))
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000340))
syz_clone(0x28500, &(0x7f0000000600)="5870c853f673b54f7ba30b46b6f8bc002d453eaea69850709d1189b2c82a040900cdf497f97194a89996dda2e86effd842fbc6ba0939c6edf4f92232912998e9a08afdee4066adc1236cb1df71276a9a9fc0a46f48464969", 0x58, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="1a4767da45116bd0fed4409a9573197614b6c9b467101913fd263799c7848f2610088974003a6de98ccfb3948aa1671d4cff0d1ac854bdd120800a02a65da3af76f1963ada38ba1afb5f7bcb923fc3956daa4056c73a5465d7eab0a653528ae6975de39e2d4b7d6754d86370943360ae961c320a9f5538dc867e2ba10c")

18:09:00 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xea, &(0x7f0000000080)=""/234, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:09:00 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:09:00 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)

18:09:00 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

[ 2211.557090][T22623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2211.566093][T22623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2211.574274][T22623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2211.581852][T22623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2211.590766][T22623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2211.810161][T12396] chnl_net:caif_netlink_parms(): no params data found
[ 2211.879400][T12396] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2211.893520][T12396] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2211.902078][T12396] device bridge_slave_0 entered promiscuous mode
[ 2211.917760][T12396] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2211.928736][T12396] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2211.942019][T12396] device bridge_slave_1 entered promiscuous mode
[ 2211.991894][T12396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2212.005398][T12396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2212.064181][T12396] team0: Port device team_slave_0 added
[ 2212.082309][T12396] team0: Port device team_slave_1 added
[ 2212.126459][T12396] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2212.139205][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2212.166210][T12396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2212.178894][T12396] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2212.188708][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2212.214714][T12396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2212.253352][T12396] device hsr_slave_0 entered promiscuous mode
[ 2212.260189][T12396] device hsr_slave_1 entered promiscuous mode
[ 2212.269017][T12396] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2212.276914][T12396] Cannot create hsr debugfs directory
[ 2213.019924][T12396] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2213.029883][T12396] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2213.041874][T12396] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2213.051855][T12396] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2213.160233][T12396] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2213.190869][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2213.201968][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2213.218784][T12396] 8021q: adding VLAN 0 to HW filter on device team0
[ 2213.238444][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2213.252242][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2213.263600][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2213.270752][ T7927] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2213.299536][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2213.310795][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2213.320062][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2213.329038][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2213.336219][ T7927] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2213.344546][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2213.364589][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2213.381385][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2213.391184][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2213.409070][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2213.419468][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2213.450472][T12396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2213.464500][T12396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2213.486964][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2213.501353][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2213.512432][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2213.521546][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2213.530410][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2213.550150][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2213.621986][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2213.796414][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2213.804859][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2213.817493][T12396] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2214.189619][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2214.203820][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2214.237919][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2214.250441][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2214.266502][T12396] device veth0_vlan entered promiscuous mode
[ 2214.281846][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2214.290579][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2214.311339][T12396] device veth1_vlan entered promiscuous mode
[ 2214.340251][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2214.349096][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2214.358128][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2214.368048][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2214.382284][T12396] device veth0_macvtap entered promiscuous mode
[ 2214.400840][T12396] device veth1_macvtap entered promiscuous mode
[ 2214.433989][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2214.445037][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.455403][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2214.466148][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.476431][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2214.487310][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.499243][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2214.510525][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.529649][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2214.540260][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.558772][T12396] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2214.567126][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2214.580875][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2214.599583][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2214.608504][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2214.623671][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2214.636179][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.649661][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2214.663437][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.673701][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2214.684534][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.694742][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2214.705568][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.715728][T12396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2214.728269][T12396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2214.740860][T12396] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2214.751397][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2214.761218][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2214.772761][T12396] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2214.781496][T12396] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2214.790714][T12396] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2214.801090][T12396] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2214.914152][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2214.922239][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2214.975746][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2214.990930][ T3705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2215.006320][ T3705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2215.019864][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2215.561515][T12483] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2215.573889][T12483] CPU: 0 PID: 12483 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2215.582354][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2215.592423][T12483] Call Trace:
[ 2215.595710][T12483]  <TASK>
[ 2215.598645][T12483]  dump_stack_lvl+0x1e3/0x2cb
[ 2215.603346][T12483]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2215.608820][T12483]  ? panic+0x75d/0x75d
[ 2215.612898][T12483]  ? ___ratelimit+0x4c0/0x670
[ 2215.617602][T12483]  ? local_lock_release+0x170/0x170
[ 2215.622813][T12483]  dump_header+0xdf/0x9c0
[ 2215.627156][T12483]  oom_kill_process+0xf8/0x520
[ 2215.631933][T12483]  out_of_memory+0xf30/0x12f0
[ 2215.636628][T12483]  ? mutex_lock_io_nested+0x60/0x60
[ 2215.641843][T12483]  ? preempt_schedule+0xd9/0xe0
[ 2215.646708][T12483]  ? unregister_oom_notifier+0x20/0x20
[ 2215.652417][T12483]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2215.658779][T12483]  ? lockdep_hardirqs_on+0x94/0x130
[ 2215.664117][T12483]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2215.670497][T12483]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2215.676173][T12483]  ? preempt_schedule_thunk+0x16/0x18
[ 2215.681594][T12483]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2215.687189][T12483]  ? cgroup_file_notify+0x123/0x190
[ 2215.692414][T12483]  memory_max_write+0x34d/0x470
[ 2215.697293][T12483]  ? memory_max_show+0xa0/0xa0
[ 2215.702075][T12483]  ? rcu_is_watching+0x11/0xb0
[ 2215.706877][T12483]  ? memory_max_show+0xa0/0xa0
[ 2215.711663][T12483]  cgroup_file_write+0x2c6/0x690
[ 2215.716613][T12483]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2215.722786][T12483]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2215.727916][T12483]  ? lock_is_held_type+0x137/0x180
[ 2215.733050][T12483]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2215.738260][T12483]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2215.743578][T12483]  vfs_write+0x7ae/0xba0
[ 2215.747840][T12483]  ? file_end_write+0x250/0x250
[ 2215.752740][T12483]  ? mutex_lock_nested+0x17/0x20
[ 2215.757691][T12483]  ? __fdget_pos+0x250/0x2f0
[ 2215.762290][T12483]  ? ksys_write+0x77/0x2c0
[ 2215.766714][T12483]  ksys_write+0x19c/0x2c0
[ 2215.771050][T12483]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2215.777219][T12483]  ? __ia32_sys_read+0x80/0x80
[ 2215.782018][T12483]  ? syscall_enter_from_user_mode+0x37/0x220
[ 2215.788018][T12483]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2215.794018][T12483]  do_syscall_64+0x3d/0xb0
[ 2215.798441][T12483]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2215.804344][T12483] RIP: 0033:0x7f775a28c169
[ 2215.808769][T12483] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2215.828379][T12483] RSP: 002b:00007f775b05f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2215.836801][T12483] RAX: ffffffffffffffda RBX: 00007f775a3ac050 RCX: 00007f775a28c169
[ 2215.844777][T12483] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2215.852748][T12483] RBP: 00007f775a2e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2215.860719][T12483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2215.868695][T12483] R13: 00007ffe8cc2381f R14: 00007f775b05f300 R15: 0000000000022000
[ 2215.876689][T12483]  </TASK>
[ 2215.881556][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2215.902648][T12483] memory: usage 10688kB, limit 0kB, failcnt 585
[ 2215.909790][T12483] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2215.920903][T12483] Memory cgroup stats for /syz5:
[ 2215.924815][T12483] anon 118784
[ 2215.924815][T12483] file 10461184
[ 2215.924815][T12483] kernel 356352
[ 2215.924815][T12483] kernel_stack 98304
[ 2215.924815][T12483] pagetables 81920
[ 2215.924815][T12483] sec_pagetables 0
[ 2215.924815][T12483] percpu 0
[ 2215.924815][T12483] sock 0
[ 2215.924815][T12483] vmalloc 0
[ 2215.924815][T12483] shmem 10461184
[ 2215.924815][T12483] zswap 0
[ 2215.924815][T12483] zswapped 0
[ 2215.924815][T12483] file_mapped 163840
[ 2215.924815][T12483] file_dirty 0
[ 2215.924815][T12483] file_writeback 0
[ 2215.924815][T12483] swapcached 0
[ 2215.924815][T12483] anon_thp 0
[ 2215.924815][T12483] file_thp 0
[ 2215.924815][T12483] shmem_thp 0
[ 2215.924815][T12483] inactive_anon 0
[ 2215.924815][T12483] active_anon 10579968
[ 2215.924815][T12483] inactive_file 0
[ 2215.924815][T12483] active_file 0
[ 2215.924815][T12483] unevictable 0
[ 2215.924815][T12483] slab_reclaimable 58984
[ 2215.924815][T12483] slab_unreclaimable 89008
[ 2215.924815][T12483] slab 147992
[ 2216.025788][T12483] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12396,uid=0
[ 2216.049480][T12483] Memory cgroup out of memory: Killed process 12396 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2218.819183][T31174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2219.393966][T31174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2219.520607][T31174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2219.644786][T31174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2220.482618][T31174] device hsr_slave_0 left promiscuous mode
[ 2220.499294][T31174] device hsr_slave_1 left promiscuous mode
[ 2220.508378][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2220.520537][T31174] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2220.532386][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2220.544719][T31174] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2220.558683][T31174] device bridge_slave_1 left promiscuous mode
[ 2220.567959][T31174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2220.577520][T31174] device bridge_slave_0 left promiscuous mode
[ 2220.584307][T31174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2220.598466][T31174] device veth1_macvtap left promiscuous mode
[ 2220.605354][T31174] device veth0_macvtap left promiscuous mode
[ 2220.611498][T31174] device veth1_vlan left promiscuous mode
[ 2220.617468][T31174] device veth0_vlan left promiscuous mode
[ 2220.805110][T31174] team0 (unregistering): Port device team_slave_1 removed
[ 2220.820495][T31174] team0 (unregistering): Port device team_slave_0 removed
[ 2220.834485][T31174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2220.848485][T31174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2220.919932][T31174] bond0 (unregistering): Released all slaves
18:09:11 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:09:11 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001100)='K', 0x1}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0xd7d27}], 0x1}, 0x2b62)

18:09:11 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001100)='K', 0x1}], 0x1}, 0x4c045)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0xd7d27}], 0x1}, 0x2b62)

18:09:11 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:09:11 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:09:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x0, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:09:11 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001100)='K', 0x1}], 0x1}, 0x4c045)
sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="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", 0xd7d27}], 0x1}, 0x2b62)

[ 2221.477516][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.483932][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
18:09:11 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x40086602, &(0x7f0000000000))

18:09:11 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e40)={0x6, 0x7, &(0x7f0000002880)=@framed={{}, [@func, @call, @initr0]}, &(0x7f0000002900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:09:11 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001fc0)={&(0x7f0000001e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x12, 0x0, [{}]}]}}, &(0x7f0000001f00)=""/188, 0x2e, 0xbc, 0x1}, 0x20)

18:09:11 executing program 2:
bpf$OBJ_GET_MAP(0x4, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/101, 0x65}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/152, 0x98}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002400edc6fe994feacdf00000010000008579d4f2d49b1f1f4bc36a7edb5cb89f00003bf89c48e2daa4dca72af64b972a1093714a08", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x98}, 0x10102)

18:09:11 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

[ 2223.139517][T22623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2223.148527][T22623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2223.157313][T22623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2223.166660][T22623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2223.175165][T22623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2223.182552][T22623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2223.521243][T12724] chnl_net:caif_netlink_parms(): no params data found
[ 2223.650875][T12724] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2223.658215][T12724] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2223.666519][T12724] device bridge_slave_0 entered promiscuous mode
[ 2223.676985][T12724] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2223.684475][T12724] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2223.693743][T12724] device bridge_slave_1 entered promiscuous mode
[ 2223.726629][T12724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2223.767180][T12724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2223.808034][T12724] team0: Port device team_slave_0 added
[ 2223.818841][T12724] team0: Port device team_slave_1 added
[ 2223.859501][T12724] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2223.867315][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2223.894122][T12724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2223.907104][T12724] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2223.915092][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2223.947677][T12724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2224.020884][T12724] device hsr_slave_0 entered promiscuous mode
[ 2224.035970][T12724] device hsr_slave_1 entered promiscuous mode
[ 2224.049094][T12724] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2224.059450][T12724] Cannot create hsr debugfs directory
[ 2225.124936][T12724] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2225.135015][T12724] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2225.154345][T12724] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2225.175404][T12724] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2225.214797][T22623] Bluetooth: hci0: command 0x0409 tx timeout
[ 2225.359564][T12724] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2225.413875][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2225.421782][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2225.450485][T12724] 8021q: adding VLAN 0 to HW filter on device team0
[ 2225.463014][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2225.471810][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2225.482394][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2225.489556][ T7929] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2225.520784][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2225.531774][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2225.559360][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2225.571636][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2225.578815][ T7927] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2225.595106][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2225.608865][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2225.640983][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2225.650640][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2225.666979][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2225.677501][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2225.691409][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2225.706942][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2225.727037][T12724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2225.747812][T12724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2225.761218][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2225.773534][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2225.782089][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2226.172855][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2226.180417][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2226.204916][T12724] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2226.718055][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2226.727929][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2226.754694][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2226.784918][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2226.804337][T12724] device veth0_vlan entered promiscuous mode
[ 2226.822996][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2226.830921][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2226.856619][T12724] device veth1_vlan entered promiscuous mode
[ 2226.906389][T12724] device veth0_macvtap entered promiscuous mode
[ 2226.934164][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2226.943604][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2226.951934][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2226.961460][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2226.972860][T12724] device veth1_macvtap entered promiscuous mode
[ 2227.002746][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2227.011039][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2227.021317][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2227.052592][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.072508][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2227.092506][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.102378][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2227.132497][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.142371][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2227.157953][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.170844][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2227.188425][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.200469][T12724] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2227.216610][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2227.227454][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2227.240840][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2227.259827][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.282560][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2227.293561][T22623] Bluetooth: hci0: command 0x041b tx timeout
[ 2227.301272][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.311612][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2227.322750][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.332987][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2227.343813][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.354928][T12724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2227.367737][T12724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2227.388920][T12724] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2227.398178][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2227.407859][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2227.419725][T12724] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2227.433030][T12724] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2227.441791][T12724] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2227.450979][T12724] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2227.607663][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2227.637615][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2227.644555][ T3906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2227.659015][ T3906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2227.670436][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2227.687611][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2227.944332][T12828] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2227.961936][T12828] CPU: 1 PID: 12828 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2227.970434][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2227.980533][T12828] Call Trace:
[ 2227.983848][T12828]  <TASK>
[ 2227.986824][T12828]  dump_stack_lvl+0x1e3/0x2cb
[ 2227.991556][T12828]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2227.997078][T12828]  ? panic+0x75d/0x75d
[ 2228.001195][T12828]  ? ___ratelimit+0x4c0/0x670
[ 2228.006018][T12828]  ? local_lock_release+0x170/0x170
[ 2228.011276][T12828]  dump_header+0xdf/0x9c0
[ 2228.015664][T12828]  oom_kill_process+0xf8/0x520
[ 2228.020481][T12828]  out_of_memory+0xf30/0x12f0
[ 2228.025472][T12828]  ? mutex_lock_io_nested+0x60/0x60
[ 2228.030728][T12828]  ? preempt_schedule+0xd9/0xe0
[ 2228.035622][T12828]  ? unregister_oom_notifier+0x20/0x20
[ 2228.041130][T12828]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2228.047258][T12828]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2228.052950][T12828]  ? preempt_schedule_thunk+0x16/0x18
[ 2228.058381][T12828]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2228.063988][T12828]  ? cgroup_file_notify+0x123/0x190
[ 2228.069241][T12828]  memory_max_write+0x34d/0x470
[ 2228.074155][T12828]  ? memory_max_show+0xa0/0xa0
[ 2228.078966][T12828]  ? read_lock_is_recursive+0x10/0x10
[ 2228.084381][T12828]  ? memory_max_show+0xa0/0xa0
[ 2228.089188][T12828]  cgroup_file_write+0x2c6/0x690
[ 2228.094171][T12828]  ? mutex_lock_io_nested+0x60/0x60
[ 2228.099424][T12828]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2228.104585][T12828]  ? __virt_addr_valid+0x22b/0x2e0
[ 2228.109760][T12828]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2228.114913][T12828]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2228.120250][T12828]  vfs_write+0x7ae/0xba0
[ 2228.124556][T12828]  ? file_end_write+0x250/0x250
[ 2228.129473][T12828]  ? mutex_lock_nested+0x17/0x20
[ 2228.134459][T12828]  ? __fdget_pos+0x250/0x2f0
[ 2228.139090][T12828]  ? ksys_write+0x77/0x2c0
[ 2228.143565][T12828]  ksys_write+0x19c/0x2c0
[ 2228.147943][T12828]  ? print_irqtrace_events+0x210/0x210
[ 2228.153452][T12828]  ? __ia32_sys_read+0x80/0x80
[ 2228.158263][T12828]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2228.164308][T12828]  ? lockdep_hardirqs_on+0x94/0x130
[ 2228.169560][T12828]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2228.175603][T12828]  do_syscall_64+0x3d/0xb0
[ 2228.180215][T12828]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2228.186157][T12828] RIP: 0033:0x7f87ac28c169
[ 2228.190731][T12828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2228.210473][T12828] RSP: 002b:00007f87acffd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2228.218940][T12828] RAX: ffffffffffffffda RBX: 00007f87ac3abf80 RCX: 00007f87ac28c169
[ 2228.226966][T12828] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2228.235194][T12828] RBP: 00007f87ac2e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2228.243225][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2228.251246][T12828] R13: 00007ffefacbbbcf R14: 00007f87acffd300 R15: 0000000000022000
[ 2228.259289][T12828]  </TASK>
[ 2228.273004][T12828] memory: usage 10672kB, limit 0kB, failcnt 585
[ 2228.279725][T12828] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2228.286868][T12828] Memory cgroup stats for /syz5:
[ 2228.287244][T12828] anon 114688
[ 2228.287244][T12828] file 10461184
[ 2228.287244][T12828] kernel 339968
[ 2228.287244][T12828] kernel_stack 98304
[ 2228.287244][T12828] pagetables 77824
[ 2228.287244][T12828] sec_pagetables 0
[ 2228.287244][T12828] percpu 0
[ 2228.287244][T12828] sock 0
[ 2228.287244][T12828] vmalloc 0
[ 2228.287244][T12828] shmem 10461184
[ 2228.287244][T12828] zswap 0
[ 2228.287244][T12828] zswapped 0
[ 2228.287244][T12828] file_mapped 163840
[ 2228.287244][T12828] file_dirty 0
[ 2228.287244][T12828] file_writeback 0
[ 2228.287244][T12828] swapcached 0
[ 2228.287244][T12828] anon_thp 0
[ 2228.287244][T12828] file_thp 0
[ 2228.287244][T12828] shmem_thp 0
[ 2228.287244][T12828] inactive_anon 0
[ 2228.287244][T12828] active_anon 10575872
[ 2228.287244][T12828] inactive_file 0
[ 2228.287244][T12828] active_file 0
[ 2228.287244][T12828] unevictable 0
[ 2228.287244][T12828] slab_reclaimable 56672
[ 2228.287244][T12828] slab_unreclaimable 84896
[ 2228.287244][T12828] slab 141568
[ 2228.388663][T12828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12724,uid=0
[ 2228.411547][T12828] Memory cgroup out of memory: Killed process 12724 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2228.452430][T12828] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2228.463888][T12828] CPU: 1 PID: 12828 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2228.472444][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2228.482862][T12828] Call Trace:
[ 2228.486139][T12828]  <TASK>
[ 2228.489067][T12828]  dump_stack_lvl+0x1e3/0x2cb
[ 2228.493767][T12828]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2228.499230][T12828]  ? panic+0x75d/0x75d
[ 2228.503303][T12828]  ? ___ratelimit+0x4c0/0x670
[ 2228.507989][T12828]  ? local_lock_release+0x170/0x170
[ 2228.513195][T12828]  dump_header+0xdf/0x9c0
[ 2228.517542][T12828]  oom_kill_process+0xf8/0x520
[ 2228.522389][T12828]  out_of_memory+0xf30/0x12f0
[ 2228.527107][T12828]  ? mutex_lock_io_nested+0x60/0x60
[ 2228.532339][T12828]  ? mark_lock+0x9a/0x340
[ 2228.536692][T12828]  ? unregister_oom_notifier+0x20/0x20
[ 2228.542192][T12828]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2228.548235][T12828]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2228.553829][T12828]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2228.559408][T12828]  ? cgroup_file_notify+0x106/0x190
[ 2228.564653][T12828]  memory_max_write+0x34d/0x470
[ 2228.569522][T12828]  ? memory_max_show+0xa0/0xa0
[ 2228.574300][T12828]  ? read_lock_is_recursive+0x10/0x10
[ 2228.579683][T12828]  ? memory_max_show+0xa0/0xa0
[ 2228.584457][T12828]  cgroup_file_write+0x2c6/0x690
[ 2228.589405][T12828]  ? mutex_lock_io_nested+0x60/0x60
[ 2228.594619][T12828]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2228.599743][T12828]  ? __virt_addr_valid+0x22b/0x2e0
[ 2228.604880][T12828]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2228.610014][T12828]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2228.615313][T12828]  vfs_write+0x7ae/0xba0
[ 2228.619597][T12828]  ? file_end_write+0x250/0x250
[ 2228.624495][T12828]  ? mutex_lock_nested+0x17/0x20
[ 2228.629456][T12828]  ? __fdget_pos+0x250/0x2f0
[ 2228.634058][T12828]  ? ksys_write+0x77/0x2c0
[ 2228.638488][T12828]  ksys_write+0x19c/0x2c0
[ 2228.642825][T12828]  ? print_irqtrace_events+0x210/0x210
[ 2228.648316][T12828]  ? __ia32_sys_read+0x80/0x80
[ 2228.653117][T12828]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2228.659228][T12828]  ? lockdep_hardirqs_on+0x94/0x130
[ 2228.664451][T12828]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2228.670553][T12828]  do_syscall_64+0x3d/0xb0
[ 2228.674991][T12828]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2228.680893][T12828] RIP: 0033:0x7f87ac28c169
[ 2228.685319][T12828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2228.704932][T12828] RSP: 002b:00007f87acffd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2228.713453][T12828] RAX: ffffffffffffffda RBX: 00007f87ac3abf80 RCX: 00007f87ac28c169
[ 2228.721434][T12828] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2228.729416][T12828] RBP: 00007f87ac2e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2228.737394][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2228.745374][T12828] R13: 00007ffefacbbbcf R14: 00007f87acffd300 R15: 0000000000022000
[ 2228.753373][T12828]  </TASK>
[ 2228.774079][T12828] memory: usage 10640kB, limit 0kB, failcnt 585
[ 2228.780990][T12828] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2228.788878][T12828] Memory cgroup stats for /syz5:
[ 2228.789303][T12828] anon 94208
[ 2228.789303][T12828] file 10461184
[ 2228.789303][T12828] kernel 262144
[ 2228.789303][T12828] kernel_stack 32768
[ 2228.789303][T12828] pagetables 69632
[ 2228.789303][T12828] sec_pagetables 0
[ 2228.789303][T12828] percpu 0
[ 2228.789303][T12828] sock 0
[ 2228.789303][T12828] vmalloc 0
[ 2228.789303][T12828] shmem 10461184
[ 2228.789303][T12828] zswap 0
[ 2228.789303][T12828] zswapped 0
[ 2228.789303][T12828] file_mapped 163840
[ 2228.789303][T12828] file_dirty 0
[ 2228.789303][T12828] file_writeback 0
[ 2228.789303][T12828] swapcached 0
[ 2228.789303][T12828] anon_thp 0
[ 2228.789303][T12828] file_thp 0
[ 2228.789303][T12828] shmem_thp 0
[ 2228.789303][T12828] inactive_anon 0
[ 2228.789303][T12828] active_anon 10555392
[ 2228.789303][T12828] inactive_file 0
[ 2228.789303][T12828] active_file 0
[ 2228.789303][T12828] unevictable 0
[ 2228.789303][T12828] slab_reclaimable 56672
[ 2228.789303][T12828] slab_unreclaimable 84896
[ 2228.789303][T12828] slab 141568
[ 2228.888383][T12828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12826,uid=0
[ 2228.911936][T12828] Memory cgroup out of memory: Killed process 12828 (syz-executor.5) total-vm:54680kB, anon-rss:508kB, file-rss:8988kB, shmem-rss:76kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2231.594335][   T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2231.871624][   T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2231.940702][   T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2232.016181][   T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2232.856667][   T56] device hsr_slave_0 left promiscuous mode
[ 2232.869925][   T56] device hsr_slave_1 left promiscuous mode
[ 2232.877192][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2232.891347][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2232.901880][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2232.917830][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2232.929452][   T56] device bridge_slave_1 left promiscuous mode
[ 2232.940211][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2232.953360][   T56] device bridge_slave_0 left promiscuous mode
[ 2232.959642][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2232.996901][   T56] device veth1_macvtap left promiscuous mode
[ 2233.004922][   T56] device veth0_macvtap left promiscuous mode
[ 2233.011068][   T56] device veth1_vlan left promiscuous mode
[ 2233.018998][   T56] device veth0_vlan left promiscuous mode
[ 2233.200438][   T56] team0 (unregistering): Port device team_slave_1 removed
[ 2233.215554][   T56] team0 (unregistering): Port device team_slave_0 removed
[ 2233.227952][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2233.246365][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2233.317898][   T56] bond0 (unregistering): Released all slaves
18:09:30 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:09:30 executing program 3:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc008240a, 0x0)

18:09:30 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002f00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000019c0)={&(0x7f0000000540)=@name, 0x10, 0x0}, 0x0)

18:09:30 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x0, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="0dac395a9f41238ba03838164b048311e3d72eafa3ff097b107eccec87cc2e5129216e305e14f3764730ff391532bbea1094a00cdad9e8ecd7b961ea1ba7826c718457379a932f6d4985bdb207ccd12d793fe20995095bdc1ca959f43bcd1d1fd39077b7e45f92de72c8d5f207e37453bb40fe0adb294b06d4e4add65233990d45ca32c28c497aca73ab09e581e76d37e855657868390027ee38e7bb2da7db918b6fd0d9167425081d9d791454dd3976bb8d30ef59c134b99984daf6686df50eb395d45c5eb8dd5c3d20e68104edebbc69ee01b09d163b365828371643c0a56c6f34aba8d1cb82778013017a07395c33d03ffb85e359756be9a2a6f96bf20733d27dcb5acc070facfcea308a6e751602ef8bc76255df9a7eaf2e3e6dbd56174c4fd659c28496be5a3a13aa15a5c75c1d", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:09:30 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:09:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x0, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:09:30 executing program 3:
bpf$BPF_PROG_ATTACH(0x10, &(0x7f0000002400)={@map}, 0x14)

18:09:30 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

18:09:31 executing program 3:
bpf$BPF_PROG_ATTACH(0x1d, &(0x7f0000002400)={@map}, 0x14)

18:09:31 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

18:09:31 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:09:31 executing program 2:
socketpair(0x11, 0x3, 0x0, &(0x7f0000000580))

[ 2242.598574][T31261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2242.609932][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2242.618364][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2242.627479][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2242.636879][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2242.647087][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2242.866100][T13016] chnl_net:caif_netlink_parms(): no params data found
[ 2242.939783][T13016] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2242.948189][T13016] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2242.965172][T13016] device bridge_slave_0 entered promiscuous mode
[ 2242.979567][T13016] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2242.989704][T13016] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2243.005537][T13016] device bridge_slave_1 entered promiscuous mode
[ 2243.049427][T13016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2243.078671][T13016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2243.116116][T13016] team0: Port device team_slave_0 added
[ 2243.126102][T13016] team0: Port device team_slave_1 added
[ 2243.150840][T13016] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2243.157906][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2243.189104][T13016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2243.203660][T13016] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2243.210628][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2243.248317][T13016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2243.300865][T13016] device hsr_slave_0 entered promiscuous mode
[ 2243.315356][T13016] device hsr_slave_1 entered promiscuous mode
[ 2243.322098][T13016] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2243.337115][T13016] Cannot create hsr debugfs directory
[ 2244.101874][T13016] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2244.111856][T13016] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2244.123018][T13016] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2244.133626][T13016] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2244.260901][T13016] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2244.289491][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2244.302396][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2244.323201][T13016] 8021q: adding VLAN 0 to HW filter on device team0
[ 2244.335080][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2244.344355][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2244.353288][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2244.360413][ T7929] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2244.382691][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2244.390977][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2244.400695][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2244.423984][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2244.431120][ T7929] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2244.445788][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2244.458079][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2244.471870][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2244.488193][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2244.519238][T13016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2244.541721][T13016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2244.562192][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2244.571647][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2244.588937][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2244.598127][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2244.612381][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2244.621768][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2244.639674][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2244.660617][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2244.732833][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2244.853031][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2244.860582][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2244.879983][T13016] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2245.299498][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2245.316809][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2245.350287][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2245.366235][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2245.380988][T13016] device veth0_vlan entered promiscuous mode
[ 2245.397058][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2245.408923][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2245.426349][T13016] device veth1_vlan entered promiscuous mode
[ 2245.467531][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2245.477400][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2245.486450][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2245.495910][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2245.507356][T13016] device veth0_macvtap entered promiscuous mode
[ 2245.519438][T13016] device veth1_macvtap entered promiscuous mode
[ 2245.539153][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2245.552177][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.564270][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2245.575076][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.585273][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2245.596148][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.606672][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2245.622031][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.634122][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2245.644619][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.656434][T13016] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2245.666156][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2245.675270][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2245.685029][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2245.694359][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2245.704781][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2245.715941][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.725830][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2245.736628][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.746624][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2245.759007][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.769166][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2245.781467][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.798665][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2245.810029][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2245.831737][T13016] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2245.841293][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2245.858960][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2245.881361][T13016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2245.890310][T13016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2245.899689][T13016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2245.910353][T13016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2246.008339][T31174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2246.037629][T31174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2246.072046][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2246.098274][ T3906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2246.113882][ T3906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2246.141174][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2246.813257][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2246.826021][T13107] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2246.837582][T13107] CPU: 1 PID: 13107 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2246.846053][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2246.856159][T13107] Call Trace:
[ 2246.859471][T13107]  <TASK>
[ 2246.862439][T13107]  dump_stack_lvl+0x1e3/0x2cb
[ 2246.867183][T13107]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2246.872711][T13107]  ? panic+0x75d/0x75d
[ 2246.876833][T13107]  ? ___ratelimit+0x4c0/0x670
[ 2246.881577][T13107]  ? local_lock_release+0x170/0x170
[ 2246.886895][T13107]  dump_header+0xdf/0x9c0
[ 2246.891265][T13107]  oom_kill_process+0xf8/0x520
[ 2246.896055][T13107]  out_of_memory+0xf30/0x12f0
[ 2246.900784][T13107]  ? mutex_lock_io_nested+0x60/0x60
[ 2246.906022][T13107]  ? preempt_schedule+0xd9/0xe0
[ 2246.910901][T13107]  ? unregister_oom_notifier+0x20/0x20
[ 2246.916369][T13107]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2246.922539][T13107]  ? lockdep_hardirqs_on+0x94/0x130
[ 2246.927757][T13107]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2246.933926][T13107]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2246.939497][T13107]  ? preempt_schedule_thunk+0x16/0x18
[ 2246.944907][T13107]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2246.950494][T13107]  ? cgroup_file_notify+0x123/0x190
[ 2246.955713][T13107]  memory_max_write+0x34d/0x470
[ 2246.960583][T13107]  ? memory_max_show+0xa0/0xa0
[ 2246.965359][T13107]  ? cgroup_file_write+0x1a1/0x690
[ 2246.970479][T13107]  ? cgroup_file_write+0x2b2/0x690
[ 2246.975599][T13107]  ? memory_max_show+0xa0/0xa0
[ 2246.980374][T13107]  cgroup_file_write+0x2c6/0x690
[ 2246.985327][T13107]  ? mutex_lock_io_nested+0x60/0x60
[ 2246.990562][T13107]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2246.995686][T13107]  ? __virt_addr_valid+0x22b/0x2e0
[ 2247.000826][T13107]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2247.005949][T13107]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2247.011254][T13107]  vfs_write+0x7ae/0xba0
[ 2247.015517][T13107]  ? file_end_write+0x250/0x250
[ 2247.020420][T13107]  ? mutex_lock_nested+0x17/0x20
[ 2247.025370][T13107]  ? __fdget_pos+0x250/0x2f0
[ 2247.029972][T13107]  ? ksys_write+0x77/0x2c0
[ 2247.034402][T13107]  ksys_write+0x19c/0x2c0
[ 2247.038739][T13107]  ? print_irqtrace_events+0x210/0x210
[ 2247.044212][T13107]  ? __ia32_sys_read+0x80/0x80
[ 2247.048992][T13107]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2247.055079][T13107]  ? lockdep_hardirqs_on+0x94/0x130
[ 2247.060298][T13107]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2247.066305][T13107]  do_syscall_64+0x3d/0xb0
[ 2247.070739][T13107]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2247.076641][T13107] RIP: 0033:0x7fe2b228c169
[ 2247.081066][T13107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2247.100680][T13107] RSP: 002b:00007fe2b2f27168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2247.109105][T13107] RAX: ffffffffffffffda RBX: 00007fe2b23ac050 RCX: 00007fe2b228c169
[ 2247.117088][T13107] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2247.125067][T13107] RBP: 00007fe2b22e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2247.133044][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2247.141019][T13107] R13: 00007ffe4f47b0bf R14: 00007fe2b2f27300 R15: 0000000000022000
[ 2247.149015][T13107]  </TASK>
[ 2247.191025][T13107] memory: usage 10676kB, limit 0kB, failcnt 585
[ 2247.211054][T13107] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2247.224399][T13107] Memory cgroup stats for /syz5:
[ 2247.224595][T13107] anon 118784
[ 2247.224595][T13107] file 10461184
[ 2247.224595][T13107] kernel 270336
[ 2247.224595][T13107] kernel_stack 32768
[ 2247.224595][T13107] pagetables 77824
[ 2247.224595][T13107] sec_pagetables 0
[ 2247.224595][T13107] percpu 0
[ 2247.224595][T13107] sock 0
[ 2247.224595][T13107] vmalloc 0
[ 2247.224595][T13107] shmem 10461184
[ 2247.224595][T13107] zswap 0
[ 2247.224595][T13107] zswapped 0
[ 2247.224595][T13107] file_mapped 163840
[ 2247.224595][T13107] file_dirty 0
[ 2247.224595][T13107] file_writeback 0
[ 2247.224595][T13107] swapcached 0
[ 2247.224595][T13107] anon_thp 0
[ 2247.224595][T13107] file_thp 0
[ 2247.224595][T13107] shmem_thp 0
[ 2247.224595][T13107] inactive_anon 0
[ 2247.224595][T13107] active_anon 10579968
[ 2247.224595][T13107] inactive_file 0
[ 2247.224595][T13107] active_file 0
[ 2247.224595][T13107] unevictable 0
[ 2247.224595][T13107] slab_reclaimable 51400
[ 2247.224595][T13107] slab_unreclaimable 82304
[ 2247.224595][T13107] slab 133704
[ 2247.332892][T13107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13016,uid=0
[ 2247.356212][T13107] Memory cgroup out of memory: Killed process 13016 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2250.824904][   T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2251.023295][   T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2251.114478][   T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2251.210286][   T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2252.072120][   T51] device hsr_slave_0 left promiscuous mode
[ 2252.081512][   T51] device hsr_slave_1 left promiscuous mode
[ 2252.092004][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2252.107951][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2252.120575][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2252.128818][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2252.139964][   T51] device bridge_slave_1 left promiscuous mode
[ 2252.146678][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2252.156007][   T51] device bridge_slave_0 left promiscuous mode
[ 2252.162361][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2252.179038][   T51] device veth1_macvtap left promiscuous mode
[ 2252.185364][   T51] device veth0_macvtap left promiscuous mode
[ 2252.191671][   T51] device veth1_vlan left promiscuous mode
[ 2252.198175][   T51] device veth0_vlan left promiscuous mode
[ 2252.430470][   T51] team0 (unregistering): Port device team_slave_1 removed
[ 2252.447804][   T51] team0 (unregistering): Port device team_slave_0 removed
[ 2252.461338][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2252.477201][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2252.552014][   T51] bond0 (unregistering): Released all slaves
18:09:44 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:09:44 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r0, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:09:44 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x5, 0x0, 0x7}, 0x48)

18:09:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x0, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:09:44 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:09:44 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x0, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:09:45 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xdc, &(0x7f0000000180)=""/220, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:09:45 executing program 2:
recvmsg(0xffffffffffffffff, 0x0, 0x80000140)

18:09:45 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r0, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:09:45 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)='-', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000780)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}, 0x0)

18:09:45 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

18:09:45 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x0, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

[ 2256.799457][T22623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2256.808790][T22623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2256.819205][T22623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2256.828111][T22623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2256.836390][T22623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2256.843846][T22623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2257.111637][T13425] chnl_net:caif_netlink_parms(): no params data found
[ 2257.306946][T13425] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2257.340352][T13425] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2257.359448][T13425] device bridge_slave_0 entered promiscuous mode
[ 2257.381931][T13425] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2257.409391][T13425] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2257.419888][T13425] device bridge_slave_1 entered promiscuous mode
[ 2257.493261][T13425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2257.526193][T13425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2257.583191][T13425] team0: Port device team_slave_0 added
[ 2257.591757][T13425] team0: Port device team_slave_1 added
[ 2257.658812][T13425] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2257.681655][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2257.715137][T13425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2257.738473][T13425] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2257.749212][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2257.782066][T13425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2257.845395][T13425] device hsr_slave_0 entered promiscuous mode
[ 2257.871033][T13425] device hsr_slave_1 entered promiscuous mode
[ 2257.878127][T13425] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2257.909566][T13425] Cannot create hsr debugfs directory
[ 2258.892808][T22623] Bluetooth: hci0: command 0x0409 tx timeout
[ 2258.977582][T13425] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2258.998665][T13425] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2259.012161][T13425] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2259.035550][T13425] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2259.190273][T13425] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2259.217514][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2259.230483][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2259.244725][T13425] 8021q: adding VLAN 0 to HW filter on device team0
[ 2259.281719][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2259.291240][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2259.311900][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2259.319098][ T7929] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2259.352359][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2259.362254][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2259.380606][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2259.389596][T31280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2259.396784][T31280] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2259.416549][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2259.432285][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2259.460051][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2259.469628][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2259.480092][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2259.489551][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2259.499028][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2259.508621][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2259.520341][T13425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2259.546819][T13425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2259.560255][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2259.577587][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2259.603447][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2259.935478][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2259.950793][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2259.966255][T13425] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2260.481655][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2260.491240][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2260.533546][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2260.553816][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2260.571106][T13425] device veth0_vlan entered promiscuous mode
[ 2260.579501][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2260.588486][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2260.618744][T13425] device veth1_vlan entered promiscuous mode
[ 2260.669611][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2260.678580][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2260.700270][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2260.711054][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2260.728053][T13425] device veth0_macvtap entered promiscuous mode
[ 2260.741542][T13425] device veth1_macvtap entered promiscuous mode
[ 2260.784938][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2260.798877][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2260.810182][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2260.820849][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2260.831069][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2260.841904][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2260.852353][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2260.863693][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2260.874046][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2260.887614][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2260.899661][T13425] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2260.912618][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2260.920921][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2260.943794][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2260.953249][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2260.964270][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2260.977436][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2260.982775][T22623] Bluetooth: hci0: command 0x041b tx timeout
[ 2260.987921][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2261.009604][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2261.020167][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2261.031127][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2261.041234][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2261.051972][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2261.062490][T13425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2261.074154][T13425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2261.086201][T13425] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2261.097901][T13425] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2261.108613][T13425] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2261.117935][T13425] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2261.127382][T13425] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2261.144909][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2261.154104][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2261.259530][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2261.273155][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2261.300499][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2261.329855][ T3906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2261.340284][ T3906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2261.363362][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2261.824528][T13518] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2261.844205][T13518] CPU: 1 PID: 13518 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2261.852790][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2261.862894][T13518] Call Trace:
[ 2261.866192][T13518]  <TASK>
[ 2261.869137][T13518]  dump_stack_lvl+0x1e3/0x2cb
[ 2261.873841][T13518]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2261.879315][T13518]  ? panic+0x75d/0x75d
[ 2261.883402][T13518]  ? ___ratelimit+0x4c0/0x670
[ 2261.888150][T13518]  ? local_lock_release+0x170/0x170
[ 2261.893402][T13518]  dump_header+0xdf/0x9c0
[ 2261.897770][T13518]  oom_kill_process+0xf8/0x520
[ 2261.902563][T13518]  out_of_memory+0xf30/0x12f0
[ 2261.907263][T13518]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2261.913453][T13518]  ? lockdep_hardirqs_on+0x94/0x130
[ 2261.918699][T13518]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2261.924885][T13518]  ? unregister_oom_notifier+0x20/0x20
[ 2261.930469][T13518]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2261.936043][T13518]  ? preempt_schedule_thunk+0x16/0x18
[ 2261.941446][T13518]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2261.947024][T13518]  ? cgroup_file_notify+0x123/0x190
[ 2261.952250][T13518]  memory_max_write+0x34d/0x470
[ 2261.957126][T13518]  ? memory_max_show+0xa0/0xa0
[ 2261.961908][T13518]  ? read_lock_is_recursive+0x10/0x10
[ 2261.967295][T13518]  ? memory_max_show+0xa0/0xa0
[ 2261.972074][T13518]  cgroup_file_write+0x2c6/0x690
[ 2261.977036][T13518]  ? mutex_lock_io_nested+0x60/0x60
[ 2261.982262][T13518]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2261.987390][T13518]  ? __virt_addr_valid+0x22b/0x2e0
[ 2261.992533][T13518]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2261.997658][T13518]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2262.002968][T13518]  vfs_write+0x7ae/0xba0
[ 2262.007233][T13518]  ? file_end_write+0x250/0x250
[ 2262.012115][T13518]  ? mutex_lock_nested+0x17/0x20
[ 2262.017158][T13518]  ? __fdget_pos+0x250/0x2f0
[ 2262.021867][T13518]  ? ksys_write+0x77/0x2c0
[ 2262.026298][T13518]  ksys_write+0x19c/0x2c0
[ 2262.030637][T13518]  ? print_irqtrace_events+0x210/0x210
[ 2262.036129][T13518]  ? __ia32_sys_read+0x80/0x80
[ 2262.040910][T13518]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2262.046914][T13518]  ? lockdep_hardirqs_on+0x94/0x130
[ 2262.052131][T13518]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2262.058134][T13518]  do_syscall_64+0x3d/0xb0
[ 2262.062743][T13518]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2262.068823][T13518] RIP: 0033:0x7f8452a8c169
[ 2262.073341][T13518] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2262.092960][T13518] RSP: 002b:00007f84515dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2262.101393][T13518] RAX: ffffffffffffffda RBX: 00007f8452bac050 RCX: 00007f8452a8c169
[ 2262.109475][T13518] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2262.117545][T13518] RBP: 00007f8452ae7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2262.125549][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2262.133825][T13518] R13: 00007ffce38b4f5f R14: 00007f84515dd300 R15: 0000000000022000
[ 2262.141926][T13518]  </TASK>
[ 2262.165886][T13518] memory: usage 10676kB, limit 0kB, failcnt 585
[ 2262.182697][T13518] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2262.196936][T13518] Memory cgroup stats for /syz5:
[ 2262.200888][T13518] anon 118784
[ 2262.200888][T13518] file 10461184
[ 2262.200888][T13518] kernel 344064
[ 2262.200888][T13518] kernel_stack 98304
[ 2262.200888][T13518] pagetables 81920
[ 2262.200888][T13518] sec_pagetables 0
[ 2262.200888][T13518] percpu 0
[ 2262.200888][T13518] sock 0
[ 2262.200888][T13518] vmalloc 0
[ 2262.200888][T13518] shmem 10461184
[ 2262.200888][T13518] zswap 0
[ 2262.200888][T13518] zswapped 0
[ 2262.200888][T13518] file_mapped 163840
[ 2262.200888][T13518] file_dirty 0
[ 2262.200888][T13518] file_writeback 0
[ 2262.200888][T13518] swapcached 0
[ 2262.200888][T13518] anon_thp 0
[ 2262.200888][T13518] file_thp 0
[ 2262.200888][T13518] shmem_thp 0
[ 2262.200888][T13518] inactive_anon 0
[ 2262.200888][T13518] active_anon 10579968
[ 2262.200888][T13518] inactive_file 0
[ 2262.200888][T13518] active_file 0
[ 2262.200888][T13518] unevictable 0
[ 2262.200888][T13518] slab_reclaimable 55128
[ 2262.200888][T13518] slab_unreclaimable 84896
[ 2262.200888][T13518] slab 140024
[ 2262.308366][T13518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13425,uid=0
[ 2262.326195][T13518] Memory cgroup out of memory: Killed process 13425 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2264.976962][T31174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2265.868888][T31174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2265.904653][T31174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2266.001399][T31174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2266.883156][T31174] device hsr_slave_0 left promiscuous mode
[ 2266.890547][T31174] device hsr_slave_1 left promiscuous mode
[ 2266.904846][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2266.912332][T31174] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2266.928166][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2266.935921][T31174] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2266.945479][T31174] device bridge_slave_1 left promiscuous mode
[ 2266.952332][T31174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2266.968466][T31174] device bridge_slave_0 left promiscuous mode
[ 2266.977507][T31174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2266.998361][T31174] device veth1_macvtap left promiscuous mode
[ 2267.010534][T31174] device veth0_macvtap left promiscuous mode
[ 2267.019507][T31174] device veth1_vlan left promiscuous mode
[ 2267.031788][T31174] device veth0_vlan left promiscuous mode
[ 2267.314508][T31174] team0 (unregistering): Port device team_slave_1 removed
[ 2267.331069][T31174] team0 (unregistering): Port device team_slave_0 removed
[ 2267.344479][T31174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2267.359592][T31174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2267.429745][T31174] bond0 (unregistering): Released all slaves
18:10:00 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:10:00 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xfa, &(0x7f0000000180)=""/250, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:00 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r0, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:10:00 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:10:00 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0x0, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:10:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:10:00 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x15, 0x1, &(0x7f0000000480)=@raw=[@jmp], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:00 executing program 2:
perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)

18:10:00 executing program 2:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002940)={0x6, 0x8, &(0x7f0000001780)=@framed={{}, [@initr0, @cb_func, @call]}, &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:01 executing program 2:
bpf$BPF_PROG_ATTACH(0x22, 0x0, 0x0)

18:10:01 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x0, 0x3}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="be", 0x1}, {&(0x7f0000000200)="14", 0x1}], 0x2}, 0x4008844)

18:10:01 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r0, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

[ 2272.349391][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2272.358120][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2272.367287][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2272.380181][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2272.388392][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2272.575219][T13839] chnl_net:caif_netlink_parms(): no params data found
[ 2272.674192][T13839] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2272.681459][T13839] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2272.690329][T13839] device bridge_slave_0 entered promiscuous mode
[ 2272.699105][T13839] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2272.706346][T13839] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2272.714796][T13839] device bridge_slave_1 entered promiscuous mode
[ 2272.756534][T13839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2272.776869][T13839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2272.820054][T13839] team0: Port device team_slave_0 added
[ 2272.829753][T13839] team0: Port device team_slave_1 added
[ 2272.861177][T13839] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2272.874678][T13839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2272.902360][T13839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2272.915250][T13839] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2272.922244][T13839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2272.948306][T13839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2272.995884][T13839] device hsr_slave_0 entered promiscuous mode
[ 2273.003706][T13839] device hsr_slave_1 entered promiscuous mode
[ 2273.010675][T13839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2273.023657][T13839] Cannot create hsr debugfs directory
[ 2273.896708][T13839] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2273.910201][T13839] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2273.929169][T13839] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2273.939685][T13839] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2274.029156][T13839] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2274.048176][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2274.056771][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2274.068588][T13839] 8021q: adding VLAN 0 to HW filter on device team0
[ 2274.081599][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2274.098228][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2274.107489][T23871] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2274.114676][T23871] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2274.141583][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2274.156520][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2274.169563][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2274.183502][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2274.190646][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2274.199233][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2274.227536][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2274.237169][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2274.247429][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2274.257048][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2274.266790][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2274.275859][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2274.284876][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2274.299032][T13839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2274.323897][T13839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2274.342090][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2274.358525][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2274.369834][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2274.424931][T22623] Bluetooth: hci0: command 0x0409 tx timeout
[ 2274.646628][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2274.663750][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2274.674167][T13839] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2275.086629][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2275.103808][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2275.137825][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2275.155706][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2275.171072][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2275.181889][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2275.196150][T13839] device veth0_vlan entered promiscuous mode
[ 2275.209137][T13839] device veth1_vlan entered promiscuous mode
[ 2275.234094][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2275.251129][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2275.260656][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2275.276806][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2275.291898][T13839] device veth0_macvtap entered promiscuous mode
[ 2275.313759][T13839] device veth1_macvtap entered promiscuous mode
[ 2275.332282][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2275.343522][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.357384][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2275.371425][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.388132][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2275.399037][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.409213][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2275.420156][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.432663][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2275.443530][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.456411][T13839] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2275.467626][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2275.476325][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2275.484863][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2275.494092][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2275.506594][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2275.523098][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.539492][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2275.551914][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.562176][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2275.574220][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.586547][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2275.597487][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.607689][T13839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2275.618663][T13839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2275.635991][T13839] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2275.649977][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2275.660478][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2275.678939][T13839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2275.689305][T13839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2275.700422][T13839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2275.709399][T13839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2275.801418][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2275.820955][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2275.845318][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2275.870390][T31174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2275.880070][T31174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2275.890805][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2276.057255][T13922] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2276.074590][T13922] CPU: 0 PID: 13922 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2276.083081][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2276.093183][T13922] Call Trace:
[ 2276.096505][T13922]  <TASK>
[ 2276.099473][T13922]  dump_stack_lvl+0x1e3/0x2cb
[ 2276.104206][T13922]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2276.109715][T13922]  ? panic+0x75d/0x75d
[ 2276.113839][T13922]  ? ___ratelimit+0x4c0/0x670
[ 2276.118581][T13922]  ? local_lock_release+0x170/0x170
[ 2276.123846][T13922]  dump_header+0xdf/0x9c0
[ 2276.128227][T13922]  oom_kill_process+0xf8/0x520
[ 2276.133039][T13922]  out_of_memory+0xf30/0x12f0
[ 2276.137764][T13922]  ? mutex_lock_io_nested+0x60/0x60
[ 2276.143013][T13922]  ? preempt_schedule+0xd9/0xe0
[ 2276.147906][T13922]  ? unregister_oom_notifier+0x20/0x20
[ 2276.153417][T13922]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2276.159469][T13922]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2276.165088][T13922]  ? preempt_schedule_thunk+0x16/0x18
[ 2276.170516][T13922]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2276.176138][T13922]  ? cgroup_file_notify+0x123/0x190
[ 2276.181786][T13922]  memory_max_write+0x34d/0x470
[ 2276.186779][T13922]  ? memory_max_show+0xa0/0xa0
[ 2276.191570][T13922]  ? read_lock_is_recursive+0x10/0x10
[ 2276.197237][T13922]  ? memory_max_show+0xa0/0xa0
[ 2276.202033][T13922]  cgroup_file_write+0x2c6/0x690
[ 2276.207001][T13922]  ? mutex_lock_io_nested+0x60/0x60
[ 2276.212225][T13922]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2276.217348][T13922]  ? __virt_addr_valid+0x22b/0x2e0
[ 2276.222484][T13922]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2276.227712][T13922]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2276.233104][T13922]  vfs_write+0x7ae/0xba0
[ 2276.237363][T13922]  ? file_end_write+0x250/0x250
[ 2276.242236][T13922]  ? mutex_lock_nested+0x17/0x20
[ 2276.247225][T13922]  ? __fdget_pos+0x250/0x2f0
[ 2276.251872][T13922]  ? ksys_write+0x77/0x2c0
[ 2276.256351][T13922]  ksys_write+0x19c/0x2c0
[ 2276.260694][T13922]  ? print_irqtrace_events+0x210/0x210
[ 2276.266169][T13922]  ? __ia32_sys_read+0x80/0x80
[ 2276.270948][T13922]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2276.276952][T13922]  ? lockdep_hardirqs_on+0x94/0x130
[ 2276.282180][T13922]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2276.288186][T13922]  do_syscall_64+0x3d/0xb0
[ 2276.292633][T13922]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2276.298553][T13922] RIP: 0033:0x7fcba7e8c169
[ 2276.302991][T13922] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2276.322702][T13922] RSP: 002b:00007fcba8c55168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2276.331138][T13922] RAX: ffffffffffffffda RBX: 00007fcba7fabf80 RCX: 00007fcba7e8c169
[ 2276.339130][T13922] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2276.347120][T13922] RBP: 00007fcba7ee7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2276.355106][T13922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2276.363081][T13922] R13: 00007ffcb340487f R14: 00007fcba8c55300 R15: 0000000000022000
[ 2276.371079][T13922]  </TASK>
[ 2276.380587][T13922] memory: usage 10632kB, limit 0kB, failcnt 585
[ 2276.394135][T13922] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2276.401355][T13922] Memory cgroup stats for /syz5:
[ 2276.401967][T13922] anon 114688
[ 2276.401967][T13922] file 10461184
[ 2276.401967][T13922] kernel 299008
[ 2276.401967][T13922] kernel_stack 65536
[ 2276.401967][T13922] pagetables 81920
[ 2276.401967][T13922] sec_pagetables 0
[ 2276.401967][T13922] percpu 0
[ 2276.401967][T13922] sock 0
[ 2276.401967][T13922] vmalloc 0
[ 2276.401967][T13922] shmem 10461184
[ 2276.401967][T13922] zswap 0
[ 2276.401967][T13922] zswapped 0
[ 2276.401967][T13922] file_mapped 163840
[ 2276.401967][T13922] file_dirty 0
[ 2276.401967][T13922] file_writeback 0
[ 2276.401967][T13922] swapcached 0
[ 2276.401967][T13922] anon_thp 0
[ 2276.401967][T13922] file_thp 0
[ 2276.401967][T13922] shmem_thp 0
[ 2276.401967][T13922] inactive_anon 0
[ 2276.401967][T13922] active_anon 10575872
[ 2276.401967][T13922] inactive_file 0
[ 2276.401967][T13922] active_file 0
[ 2276.401967][T13922] unevictable 0
[ 2276.401967][T13922] slab_reclaimable 55128
[ 2276.401967][T13922] slab_unreclaimable 76744
[ 2276.401967][T13922] slab 131872
[ 2276.499665][T22623] Bluetooth: hci0: command 0x041b tx timeout
[ 2276.515038][T13922] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13839,uid=0
[ 2276.538797][T13922] Memory cgroup out of memory: Killed process 13839 (syz-executor.5) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
18:10:07 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:10:07 executing program 2:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={0x0, 0x0, 0x18}, 0x10)

18:10:07 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0x0, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:10:07 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:10:07 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r0, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:10:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:10:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x0, 0x0, 0x4, 0x1}, 0x48)

18:10:09 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter, 0x48)

18:10:09 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r0, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:10:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0x0, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:10:09 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:10:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x0, 0x0, 0x4, 0x1}, 0x48)

[ 2281.228948][ T3906] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2281.373311][ T3906] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2281.466944][ T3906] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2281.535136][ T3906] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2282.221631][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2282.231725][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2282.242985][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2282.251307][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2282.260408][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2282.587292][T14094] chnl_net:caif_netlink_parms(): no params data found
[ 2282.642037][ T3906] device hsr_slave_0 left promiscuous mode
[ 2282.650212][ T3906] device hsr_slave_1 left promiscuous mode
[ 2282.660011][ T3906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2282.668768][ T3906] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2282.679338][ T3906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2282.688493][ T3906] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2282.702676][ T3906] device bridge_slave_1 left promiscuous mode
[ 2282.708976][ T3906] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2282.722028][ T3906] device bridge_slave_0 left promiscuous mode
[ 2282.728466][ T3906] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2282.762112][ T3906] device veth1_macvtap left promiscuous mode
[ 2282.771539][ T3906] device veth0_macvtap left promiscuous mode
[ 2282.783267][ T3906] device veth1_vlan left promiscuous mode
[ 2282.789131][ T3906] device veth0_vlan left promiscuous mode
[ 2282.894894][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[ 2282.901462][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.086573][ T3906] team0 (unregistering): Port device team_slave_1 removed
[ 2283.101950][ T3906] team0 (unregistering): Port device team_slave_0 removed
[ 2283.121199][ T3906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2283.136817][ T3906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2283.203998][ T3906] bond0 (unregistering): Released all slaves
[ 2283.331668][T14094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2283.351544][T14094] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2283.359955][T14094] device bridge_slave_0 entered promiscuous mode
[ 2283.368765][T14094] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2283.379281][T14094] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2283.387856][T14094] device bridge_slave_1 entered promiscuous mode
[ 2283.430736][T14094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2283.443969][T14094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2283.495248][T14094] team0: Port device team_slave_0 added
[ 2283.508901][T14094] team0: Port device team_slave_1 added
[ 2283.558779][T14094] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2283.566340][T14094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2283.600917][T14094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2283.631018][T14094] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2283.646401][T14094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2283.679478][T14094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2283.816428][T14094] device hsr_slave_0 entered promiscuous mode
[ 2283.830802][T14094] device hsr_slave_1 entered promiscuous mode
[ 2283.853321][T14094] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2283.861044][T14094] Cannot create hsr debugfs directory
[ 2284.332774][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2284.747459][T14094] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2284.766011][T14094] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2284.785709][T14094] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2284.805738][T14094] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2284.956537][T14094] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2284.986255][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2284.998337][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2285.014655][T14094] 8021q: adding VLAN 0 to HW filter on device team0
[ 2285.033832][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2285.050196][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2285.059081][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2285.066275][ T7929] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2285.106492][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2285.118558][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2285.131424][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2285.152388][T31280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2285.159600][T31280] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2285.177264][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2285.208451][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2285.223924][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2285.236578][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2285.257874][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2285.266785][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2285.276700][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2285.291346][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2285.301964][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2285.317987][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2285.328105][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2285.350597][T14094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2285.660459][T14094] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2285.669466][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2285.684650][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2286.015261][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2286.024759][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2286.046847][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2286.056057][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2286.067252][T14094] device veth0_vlan entered promiscuous mode
[ 2286.075863][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2286.084709][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2286.099097][T14094] device veth1_vlan entered promiscuous mode
[ 2286.127968][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2286.137119][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2286.146882][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2286.156105][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2286.167581][T14094] device veth0_macvtap entered promiscuous mode
[ 2286.190083][T14094] device veth1_macvtap entered promiscuous mode
[ 2286.211128][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2286.222198][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.236222][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2286.247730][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.261004][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2286.271772][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.281931][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2286.292887][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.303111][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2286.313680][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.325352][T14094] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2286.335998][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2286.347378][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2286.355719][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2286.364620][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2286.374843][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2286.388793][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.399074][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2286.411646][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.421959][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2286.422949][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2286.442579][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.452494][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2286.463548][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.473925][T14094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2286.485032][T14094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2286.496488][T14094] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2286.511851][T14094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2286.522065][T14094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2286.531079][T14094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2286.540233][T14094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2286.554447][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2286.565008][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2286.631365][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2286.639904][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2286.650829][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2286.673123][ T3906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2286.686432][ T3906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2286.699151][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2286.827762][T14186] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2286.838793][T14186] CPU: 0 PID: 14186 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2286.847254][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2286.857406][T14186] Call Trace:
[ 2286.860694][T14186]  <TASK>
[ 2286.863631][T14186]  dump_stack_lvl+0x1e3/0x2cb
[ 2286.868412][T14186]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2286.873912][T14186]  ? panic+0x75d/0x75d
[ 2286.878007][T14186]  ? ___ratelimit+0x4c0/0x670
[ 2286.882713][T14186]  ? local_lock_release+0x170/0x170
[ 2286.887938][T14186]  dump_header+0xdf/0x9c0
[ 2286.892288][T14186]  oom_kill_process+0xf8/0x520
[ 2286.897063][T14186]  out_of_memory+0xf30/0x12f0
[ 2286.901757][T14186]  ? mutex_lock_io_nested+0x60/0x60
[ 2286.906980][T14186]  ? preempt_schedule+0xd9/0xe0
[ 2286.911870][T14186]  ? unregister_oom_notifier+0x20/0x20
[ 2286.917361][T14186]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2286.923369][T14186]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2286.928941][T14186]  ? preempt_schedule_thunk+0x16/0x18
[ 2286.934345][T14186]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2286.939934][T14186]  ? cgroup_file_notify+0x123/0x190
[ 2286.945156][T14186]  memory_max_write+0x34d/0x470
[ 2286.950023][T14186]  ? memory_max_show+0xa0/0xa0
[ 2286.954836][T14186]  ? read_lock_is_recursive+0x10/0x10
[ 2286.960218][T14186]  ? memory_max_show+0xa0/0xa0
[ 2286.965003][T14186]  cgroup_file_write+0x2c6/0x690
[ 2286.970048][T14186]  ? mutex_lock_io_nested+0x60/0x60
[ 2286.975284][T14186]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2286.980426][T14186]  ? __virt_addr_valid+0x22b/0x2e0
[ 2286.985576][T14186]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2286.990703][T14186]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2286.996218][T14186]  vfs_write+0x7ae/0xba0
[ 2287.000681][T14186]  ? file_end_write+0x250/0x250
[ 2287.005597][T14186]  ? mutex_lock_nested+0x17/0x20
[ 2287.010567][T14186]  ? __fdget_pos+0x250/0x2f0
[ 2287.015184][T14186]  ? ksys_write+0x77/0x2c0
[ 2287.019622][T14186]  ksys_write+0x19c/0x2c0
[ 2287.023967][T14186]  ? print_irqtrace_events+0x210/0x210
[ 2287.029436][T14186]  ? __ia32_sys_read+0x80/0x80
[ 2287.034209][T14186]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2287.040221][T14186]  ? lockdep_hardirqs_on+0x94/0x130
[ 2287.045447][T14186]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2287.051545][T14186]  do_syscall_64+0x3d/0xb0
[ 2287.055973][T14186]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2287.061875][T14186] RIP: 0033:0x7f35d448c169
[ 2287.066316][T14186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2287.085931][T14186] RSP: 002b:00007f35d52bb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2287.094353][T14186] RAX: ffffffffffffffda RBX: 00007f35d45abf80 RCX: 00007f35d448c169
[ 2287.102349][T14186] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2287.110326][T14186] RBP: 00007f35d44e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2287.118302][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2287.126289][T14186] R13: 00007ffea606c61f R14: 00007f35d52bb300 R15: 0000000000022000
[ 2287.134287][T14186]  </TASK>
[ 2287.150324][T14186] memory: usage 10640kB, limit 0kB, failcnt 585
[ 2287.156983][T14186] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2287.164569][T14186] Memory cgroup stats for /syz5:
[ 2287.165212][T14186] anon 114688
[ 2287.165212][T14186] file 10461184
[ 2287.165212][T14186] kernel 303104
[ 2287.165212][T14186] kernel_stack 65536
[ 2287.165212][T14186] pagetables 81920
[ 2287.165212][T14186] sec_pagetables 0
[ 2287.165212][T14186] percpu 0
[ 2287.165212][T14186] sock 0
[ 2287.165212][T14186] vmalloc 0
[ 2287.165212][T14186] shmem 10461184
[ 2287.165212][T14186] zswap 0
[ 2287.165212][T14186] zswapped 0
[ 2287.165212][T14186] file_mapped 163840
[ 2287.165212][T14186] file_dirty 0
[ 2287.165212][T14186] file_writeback 0
[ 2287.165212][T14186] swapcached 0
[ 2287.165212][T14186] anon_thp 0
[ 2287.165212][T14186] file_thp 0
[ 2287.165212][T14186] shmem_thp 0
[ 2287.165212][T14186] inactive_anon 0
[ 2287.165212][T14186] active_anon 10575872
[ 2287.165212][T14186] inactive_file 0
[ 2287.165212][T14186] active_file 0
[ 2287.165212][T14186] unevictable 0
[ 2287.165212][T14186] slab_reclaimable 49592
[ 2287.165212][T14186] slab_unreclaimable 77392
[ 2287.165212][T14186] slab 126984
[ 2287.269634][T14186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14094,uid=0
[ 2287.285918][T14186] Memory cgroup out of memory: Killed process 14094 (syz-executor.5) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2287.321763][T14186] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2287.336486][T14186] CPU: 0 PID: 14186 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2287.344955][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2287.355031][T14186] Call Trace:
[ 2287.358312][T14186]  <TASK>
[ 2287.361243][T14186]  dump_stack_lvl+0x1e3/0x2cb
[ 2287.365932][T14186]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2287.371397][T14186]  ? panic+0x75d/0x75d
[ 2287.375482][T14186]  ? ___ratelimit+0x4c0/0x670
[ 2287.380171][T14186]  ? local_lock_release+0x170/0x170
[ 2287.385393][T14186]  dump_header+0xdf/0x9c0
[ 2287.389727][T14186]  oom_kill_process+0xf8/0x520
[ 2287.394516][T14186]  out_of_memory+0xf30/0x12f0
[ 2287.399241][T14186]  ? mutex_lock_io_nested+0x60/0x60
[ 2287.404497][T14186]  ? mark_lock+0x9a/0x340
[ 2287.408847][T14186]  ? unregister_oom_notifier+0x20/0x20
[ 2287.414321][T14186]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2287.420305][T14186]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2287.425862][T14186]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2287.431435][T14186]  ? cgroup_file_notify+0x106/0x190
[ 2287.436657][T14186]  memory_max_write+0x34d/0x470
[ 2287.441531][T14186]  ? memory_max_show+0xa0/0xa0
[ 2287.446316][T14186]  ? read_lock_is_recursive+0x10/0x10
[ 2287.451702][T14186]  ? memory_max_show+0xa0/0xa0
[ 2287.456475][T14186]  cgroup_file_write+0x2c6/0x690
[ 2287.461423][T14186]  ? mutex_lock_io_nested+0x60/0x60
[ 2287.466644][T14186]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2287.471765][T14186]  ? __virt_addr_valid+0x22b/0x2e0
[ 2287.476903][T14186]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2287.482022][T14186]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2287.487323][T14186]  vfs_write+0x7ae/0xba0
[ 2287.491607][T14186]  ? file_end_write+0x250/0x250
[ 2287.496480][T14186]  ? mutex_lock_nested+0x17/0x20
[ 2287.501434][T14186]  ? __fdget_pos+0x250/0x2f0
[ 2287.506034][T14186]  ? ksys_write+0x77/0x2c0
[ 2287.510479][T14186]  ksys_write+0x19c/0x2c0
[ 2287.514815][T14186]  ? print_irqtrace_events+0x210/0x210
[ 2287.520315][T14186]  ? __ia32_sys_read+0x80/0x80
[ 2287.525117][T14186]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2287.531128][T14186]  ? lockdep_hardirqs_on+0x94/0x130
[ 2287.536397][T14186]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2287.542401][T14186]  do_syscall_64+0x3d/0xb0
[ 2287.546842][T14186]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2287.552748][T14186] RIP: 0033:0x7f35d448c169
[ 2287.557182][T14186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2287.576800][T14186] RSP: 002b:00007f35d52bb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2287.585257][T14186] RAX: ffffffffffffffda RBX: 00007f35d45abf80 RCX: 00007f35d448c169
[ 2287.593241][T14186] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2287.601240][T14186] RBP: 00007f35d44e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2287.609219][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2287.617196][T14186] R13: 00007ffea606c61f R14: 00007f35d52bb300 R15: 0000000000022000
[ 2287.625191][T14186]  </TASK>
[ 2287.634150][T14186] memory: usage 10612kB, limit 0kB, failcnt 585
[ 2287.646867][T14186] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2287.660561][T14186] Memory cgroup stats for /syz5:
[ 2287.661151][T14186] anon 114688
[ 2287.661151][T14186] file 10461184
[ 2287.661151][T14186] kernel 303104
[ 2287.661151][T14186] kernel_stack 65536
[ 2287.661151][T14186] pagetables 81920
[ 2287.661151][T14186] sec_pagetables 0
[ 2287.661151][T14186] percpu 0
[ 2287.661151][T14186] sock 0
[ 2287.661151][T14186] vmalloc 0
[ 2287.661151][T14186] shmem 10461184
[ 2287.661151][T14186] zswap 0
[ 2287.661151][T14186] zswapped 0
[ 2287.661151][T14186] file_mapped 163840
[ 2287.661151][T14186] file_dirty 0
[ 2287.661151][T14186] file_writeback 0
[ 2287.661151][T14186] swapcached 0
[ 2287.661151][T14186] anon_thp 0
[ 2287.661151][T14186] file_thp 0
[ 2287.661151][T14186] shmem_thp 0
[ 2287.661151][T14186] inactive_anon 0
[ 2287.661151][T14186] active_anon 10575872
[ 2287.661151][T14186] inactive_file 0
[ 2287.661151][T14186] active_file 0
[ 2287.661151][T14186] unevictable 0
[ 2287.661151][T14186] slab_reclaimable 49592
[ 2287.661151][T14186] slab_unreclaimable 77392
[ 2287.661151][T14186] slab 126984
[ 2287.762767][T14186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14185,uid=0
[ 2287.780988][T14186] Memory cgroup out of memory: Killed process 14186 (syz-executor.5) total-vm:54548kB, anon-rss:508kB, file-rss:8988kB, shmem-rss:76kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2291.235340][T30270] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2291.540576][T30270] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2291.603216][T30270] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2291.683279][T30270] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2292.479695][T30270] device hsr_slave_0 left promiscuous mode
[ 2292.487907][T30270] device hsr_slave_1 left promiscuous mode
[ 2292.516558][T30270] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2292.526459][T30270] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2292.540227][T30270] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2292.550317][T30270] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2292.563899][T30270] device bridge_slave_1 left promiscuous mode
[ 2292.570175][T30270] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2292.582143][T30270] device bridge_slave_0 left promiscuous mode
[ 2292.588815][T30270] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2292.602320][T30270] device veth1_macvtap left promiscuous mode
[ 2292.608492][T30270] device veth0_macvtap left promiscuous mode
[ 2292.615178][T30270] device veth1_vlan left promiscuous mode
[ 2292.621035][T30270] device veth0_vlan left promiscuous mode
[ 2292.856908][T30270] team0 (unregistering): Port device team_slave_1 removed
[ 2292.869997][T30270] team0 (unregistering): Port device team_slave_0 removed
[ 2292.884700][T30270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2292.898435][T30270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2292.966538][T30270] bond0 (unregistering): Released all slaves
18:10:29 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:10:29 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='+\x00')

18:10:29 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x0, 0x0, 0x4, 0x1}, 0x48)

18:10:29 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:10:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000200000000000000000000002c2908000000000018410000000000000000005d000000009500000000000000f50677036999832e7ec1ae8a420a04c800e682d95a0e803331e973c589cd46871c8126411b449947b25090af1001000100000000004555a315911d54e9d1b004902176930a83b851af27dfa43b06e775884ca893b4d7caa5d3559723ad1c16268a59f7279a27588d66a235c8a6e8b62b7e5750784f72593486373c98f70d29732077b7ffb34140514653dd2c23cf8051f14b01ff1456990200000038625b0264b69fe02ae079a35c0c4db5791a614f237c73b59123300601ae348ef3bd8ca40ce005a96dcd00ec6cf2e965b60e048757554f4bf70992661dcdfd3d24cc7330508dd4bf3d8df3dcdf0b1c90b2d873cf4a5113f893c7de5900"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:10:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:10:29 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x0, 0x0, 0x4, 0x1}, 0x48)

18:10:29 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000180)=@framed={{}, [@cb_func, @cb_func]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f00000032c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:29 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001fc0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@func_proto, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2}, {0xc}, {0xc}, {0x0, 0x5}]}, @func_proto, @ptr={0x6}]}}, &(0x7f0000001f00)=""/182, 0x6a, 0xb6, 0x1}, 0x20)

18:10:29 executing program 2:
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)={&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10)

18:10:29 executing program 3:
bpf$PROG_LOAD(0x15, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

18:10:30 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xa1)

[ 2301.341861][T22623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2301.350790][T22623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2301.359981][T22623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2301.367953][T22623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2301.379478][T22623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2301.386845][T22623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2301.634545][T14356] chnl_net:caif_netlink_parms(): no params data found
[ 2301.726015][T14356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2301.733313][T14356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2301.741471][T14356] device bridge_slave_0 entered promiscuous mode
[ 2301.750806][T14356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2301.758333][T14356] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2301.767694][T14356] device bridge_slave_1 entered promiscuous mode
[ 2301.809324][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2301.828128][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2301.858747][T14356] team0: Port device team_slave_0 added
[ 2301.868708][T14356] team0: Port device team_slave_1 added
[ 2301.889968][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2301.897041][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2301.923808][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2301.936652][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2301.944915][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2301.971730][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2302.008120][T14356] device hsr_slave_0 entered promiscuous mode
[ 2302.015302][T14356] device hsr_slave_1 entered promiscuous mode
[ 2302.021957][T14356] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2302.029678][T14356] Cannot create hsr debugfs directory
[ 2302.831362][T14356] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2302.841557][T14356] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2302.851925][T14356] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2302.862213][T14356] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2302.951947][T14356] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2302.980647][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2302.999319][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2303.014313][T14356] 8021q: adding VLAN 0 to HW filter on device team0
[ 2303.029203][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2303.039197][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2303.055357][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2303.062564][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2303.102004][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2303.110803][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2303.120530][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2303.129507][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2303.136702][ T7929] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2303.145522][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2303.155750][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2303.164917][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2303.174542][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2303.183534][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2303.192574][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2303.211161][T14356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2303.227700][T14356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2303.240796][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2303.249939][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2303.258819][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2303.268214][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2303.276873][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2303.289714][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2303.452809][T22623] Bluetooth: hci0: command 0x0409 tx timeout
[ 2303.573091][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2303.580668][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2303.599286][T14356] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2303.943074][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2303.952025][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2303.996002][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2304.012102][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2304.033741][T14356] device veth0_vlan entered promiscuous mode
[ 2304.051436][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2304.059958][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2304.078520][T14356] device veth1_vlan entered promiscuous mode
[ 2304.130371][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2304.142108][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2304.157413][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2304.169059][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2304.187336][T14356] device veth0_macvtap entered promiscuous mode
[ 2304.209554][T14356] device veth1_macvtap entered promiscuous mode
[ 2304.236754][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2304.248004][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.258540][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2304.269161][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.279286][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2304.290054][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.300200][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2304.312174][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.325231][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2304.336568][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.347747][T14356] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2304.360729][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2304.370089][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2304.380848][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2304.396606][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2304.411668][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2304.427823][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.439082][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2304.450102][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.460702][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2304.471528][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.482774][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2304.493870][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.504117][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2304.514985][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2304.526688][T14356] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2304.541989][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2304.559009][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2304.571773][T14356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2304.583886][T14356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2304.593429][T14356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2304.602158][T14356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2304.717210][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2304.741609][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2304.768050][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2304.784027][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2304.792113][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2304.805741][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2304.966277][T14445] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2304.979287][T14445] CPU: 0 PID: 14445 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2304.987767][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2304.997849][T14445] Call Trace:
[ 2305.001140][T14445]  <TASK>
[ 2305.004092][T14445]  dump_stack_lvl+0x1e3/0x2cb
[ 2305.008790][T14445]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2305.014521][T14445]  ? panic+0x75d/0x75d
[ 2305.018602][T14445]  ? ___ratelimit+0x4c0/0x670
[ 2305.023308][T14445]  ? local_lock_release+0x170/0x170
[ 2305.028525][T14445]  dump_header+0xdf/0x9c0
[ 2305.032877][T14445]  oom_kill_process+0xf8/0x520
[ 2305.037657][T14445]  out_of_memory+0xf30/0x12f0
[ 2305.042372][T14445]  ? mutex_lock_io_nested+0x60/0x60
[ 2305.047610][T14445]  ? preempt_schedule+0xd9/0xe0
[ 2305.052492][T14445]  ? unregister_oom_notifier+0x20/0x20
[ 2305.057975][T14445]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2305.064146][T14445]  ? lockdep_hardirqs_on+0x94/0x130
[ 2305.069389][T14445]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2305.075585][T14445]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2305.081165][T14445]  ? preempt_schedule_thunk+0x16/0x18
[ 2305.086563][T14445]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2305.092136][T14445]  ? cgroup_file_notify+0x123/0x190
[ 2305.097377][T14445]  memory_max_write+0x34d/0x470
[ 2305.102278][T14445]  ? memory_max_show+0xa0/0xa0
[ 2305.107078][T14445]  ? read_lock_is_recursive+0x10/0x10
[ 2305.112469][T14445]  ? memory_max_show+0xa0/0xa0
[ 2305.117246][T14445]  cgroup_file_write+0x2c6/0x690
[ 2305.122195][T14445]  ? mutex_lock_io_nested+0x60/0x60
[ 2305.127410][T14445]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2305.132548][T14445]  ? __virt_addr_valid+0x22b/0x2e0
[ 2305.137743][T14445]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2305.143064][T14445]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2305.148381][T14445]  vfs_write+0x7ae/0xba0
[ 2305.152643][T14445]  ? file_end_write+0x250/0x250
[ 2305.157518][T14445]  ? mutex_lock_nested+0x17/0x20
[ 2305.162468][T14445]  ? __fdget_pos+0x250/0x2f0
[ 2305.167064][T14445]  ? ksys_write+0x77/0x2c0
[ 2305.171490][T14445]  ksys_write+0x19c/0x2c0
[ 2305.175919][T14445]  ? print_irqtrace_events+0x210/0x210
[ 2305.181389][T14445]  ? __ia32_sys_read+0x80/0x80
[ 2305.186178][T14445]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2305.192174][T14445]  ? lockdep_hardirqs_on+0x94/0x130
[ 2305.197386][T14445]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2305.203381][T14445]  do_syscall_64+0x3d/0xb0
[ 2305.207812][T14445]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2305.213715][T14445] RIP: 0033:0x7fe26788c169
[ 2305.218136][T14445] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2305.237754][T14445] RSP: 002b:00007fe2685a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2305.246176][T14445] RAX: ffffffffffffffda RBX: 00007fe2679abf80 RCX: 00007fe26788c169
[ 2305.254161][T14445] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2305.262136][T14445] RBP: 00007fe2678e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2305.270112][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2305.278087][T14445] R13: 00007ffc488a5a7f R14: 00007fe2685a4300 R15: 0000000000022000
[ 2305.286095][T14445]  </TASK>
[ 2305.310792][T14445] memory: usage 10624kB, limit 0kB, failcnt 585
[ 2305.317554][T14445] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2305.326048][T14445] Memory cgroup stats for /syz5:
[ 2305.326561][T14445] anon 110592
[ 2305.326561][T14445] file 10461184
[ 2305.326561][T14445] kernel 294912
[ 2305.326561][T14445] kernel_stack 65536
[ 2305.326561][T14445] pagetables 77824
[ 2305.326561][T14445] sec_pagetables 0
[ 2305.326561][T14445] percpu 0
[ 2305.326561][T14445] sock 0
[ 2305.326561][T14445] vmalloc 0
[ 2305.326561][T14445] shmem 10461184
[ 2305.326561][T14445] zswap 0
[ 2305.326561][T14445] zswapped 0
[ 2305.326561][T14445] file_mapped 163840
[ 2305.326561][T14445] file_dirty 0
[ 2305.326561][T14445] file_writeback 0
[ 2305.326561][T14445] swapcached 0
[ 2305.326561][T14445] anon_thp 0
[ 2305.326561][T14445] file_thp 0
[ 2305.326561][T14445] shmem_thp 0
[ 2305.326561][T14445] inactive_anon 0
[ 2305.326561][T14445] active_anon 10571776
[ 2305.326561][T14445] inactive_file 0
[ 2305.326561][T14445] active_file 0
[ 2305.326561][T14445] unevictable 0
[ 2305.326561][T14445] slab_reclaimable 55128
[ 2305.326561][T14445] slab_unreclaimable 76744
[ 2305.326561][T14445] slab 131872
[ 2305.438942][T14445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14356,uid=0
[ 2305.462918][T14445] Memory cgroup out of memory: Killed process 14356 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2305.495777][T14445] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2305.506633][T14445] CPU: 1 PID: 14445 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2305.515103][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2305.525299][T14445] Call Trace:
[ 2305.528612][T14445]  <TASK>
[ 2305.531573][T14445]  dump_stack_lvl+0x1e3/0x2cb
[ 2305.535550][T22623] Bluetooth: hci0: command 0x041b tx timeout
[ 2305.536278][T14445]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2305.547744][T14445]  ? panic+0x75d/0x75d
[ 2305.551863][T14445]  ? ___ratelimit+0x4c0/0x670
[ 2305.556592][T14445]  ? local_lock_release+0x170/0x170
[ 2305.561849][T14445]  dump_header+0xdf/0x9c0
[ 2305.566224][T14445]  oom_kill_process+0xf8/0x520
[ 2305.571029][T14445]  out_of_memory+0xf30/0x12f0
[ 2305.575756][T14445]  ? mutex_lock_io_nested+0x60/0x60
[ 2305.581009][T14445]  ? mark_lock+0x9a/0x340
[ 2305.585379][T14445]  ? unregister_oom_notifier+0x20/0x20
[ 2305.590880][T14445]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2305.596901][T14445]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2305.602498][T14445]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2305.608186][T14445]  ? cgroup_file_notify+0x106/0x190
[ 2305.613433][T14445]  memory_max_write+0x34d/0x470
[ 2305.618336][T14445]  ? memory_max_show+0xa0/0xa0
[ 2305.623141][T14445]  ? read_lock_is_recursive+0x10/0x10
[ 2305.628548][T14445]  ? memory_max_show+0xa0/0xa0
[ 2305.633351][T14445]  cgroup_file_write+0x2c6/0x690
[ 2305.638329][T14445]  ? mutex_lock_io_nested+0x60/0x60
[ 2305.643577][T14445]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2305.648725][T14445]  ? __virt_addr_valid+0x22b/0x2e0
[ 2305.653899][T14445]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2305.659396][T14445]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2305.664732][T14445]  vfs_write+0x7ae/0xba0
[ 2305.669018][T14445]  ? file_end_write+0x250/0x250
[ 2305.674005][T14445]  ? mutex_lock_nested+0x17/0x20
[ 2305.678992][T14445]  ? __fdget_pos+0x250/0x2f0
[ 2305.683627][T14445]  ? ksys_write+0x77/0x2c0
[ 2305.688079][T14445]  ksys_write+0x19c/0x2c0
[ 2305.692444][T14445]  ? print_irqtrace_events+0x210/0x210
[ 2305.697944][T14445]  ? __ia32_sys_read+0x80/0x80
[ 2305.702746][T14445]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2305.708771][T14445]  ? lockdep_hardirqs_on+0x94/0x130
[ 2305.714020][T14445]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2305.720051][T14445]  do_syscall_64+0x3d/0xb0
[ 2305.724518][T14445]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2305.730452][T14445] RIP: 0033:0x7fe26788c169
[ 2305.734902][T14445] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2305.754547][T14445] RSP: 002b:00007fe2685a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2305.763010][T14445] RAX: ffffffffffffffda RBX: 00007fe2679abf80 RCX: 00007fe26788c169
[ 2305.771020][T14445] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2305.779029][T14445] RBP: 00007fe2678e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2305.787034][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2305.795043][T14445] R13: 00007ffc488a5a7f R14: 00007fe2685a4300 R15: 0000000000022000
[ 2305.803079][T14445]  </TASK>
[ 2305.812870][T14445] memory: usage 10592kB, limit 0kB, failcnt 585
[ 2305.819318][T14445] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2305.827476][T14445] Memory cgroup stats for /syz5:
[ 2305.827969][T14445] anon 90112
[ 2305.827969][T14445] file 10461184
[ 2305.827969][T14445] kernel 249856
[ 2305.827969][T14445] kernel_stack 32768
[ 2305.827969][T14445] pagetables 69632
[ 2305.827969][T14445] sec_pagetables 0
[ 2305.827969][T14445] percpu 0
[ 2305.827969][T14445] sock 0
[ 2305.827969][T14445] vmalloc 0
[ 2305.827969][T14445] shmem 10461184
[ 2305.827969][T14445] zswap 0
[ 2305.827969][T14445] zswapped 0
[ 2305.827969][T14445] file_mapped 163840
[ 2305.827969][T14445] file_dirty 0
[ 2305.827969][T14445] file_writeback 0
[ 2305.827969][T14445] swapcached 0
[ 2305.827969][T14445] anon_thp 0
[ 2305.827969][T14445] file_thp 0
[ 2305.827969][T14445] shmem_thp 0
[ 2305.827969][T14445] inactive_anon 0
[ 2305.827969][T14445] active_anon 10551296
[ 2305.827969][T14445] inactive_file 0
[ 2305.827969][T14445] active_file 0
[ 2305.827969][T14445] unevictable 0
[ 2305.827969][T14445] slab_reclaimable 55128
[ 2305.827969][T14445] slab_unreclaimable 76744
[ 2305.827969][T14445] slab 131872
[ 2305.940367][T14445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14444,uid=0
[ 2305.963063][T14445] Memory cgroup out of memory: Killed process 14445 (syz-executor.5) total-vm:54548kB, anon-rss:504kB, file-rss:8988kB, shmem-rss:76kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2309.026052][T31174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2309.169232][T31174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2309.300516][T31174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2309.451848][T31174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2310.262673][T31174] device hsr_slave_0 left promiscuous mode
[ 2310.271165][T31174] device hsr_slave_1 left promiscuous mode
[ 2310.285443][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2310.297660][T31174] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2310.310410][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2310.321427][T31174] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2310.337616][T31174] device bridge_slave_1 left promiscuous mode
[ 2310.347313][T31174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2310.359920][T31174] device bridge_slave_0 left promiscuous mode
[ 2310.372934][T31174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2310.393704][T31174] device veth1_macvtap left promiscuous mode
[ 2310.399784][T31174] device veth0_macvtap left promiscuous mode
[ 2310.414069][T31174] device veth1_vlan left promiscuous mode
[ 2310.420014][T31174] device veth0_vlan left promiscuous mode
[ 2310.642775][T31174] team0 (unregistering): Port device team_slave_1 removed
[ 2310.659071][T31174] team0 (unregistering): Port device team_slave_0 removed
[ 2310.671469][T31174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2310.688613][T31174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2310.752608][T31174] bond0 (unregistering): Released all slaves
18:10:45 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:10:45 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x401, 0x0)

18:10:45 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:10:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xa1)

18:10:45 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:10:45 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299806a8ca4c46d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf7ade2394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f086fbb3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036e39d5ee41b43cb37becfc5c36d8127ca878c4a65b2f2089ed5593689cded5d46e6695609955c7477fad72b4a5f2a10345eaf56cb05bfcd6e38d6bb962fba3c8b87e057d882d8842ae7b9cffebb03c4d30ddde9bdf743"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r4, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r4, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:10:45 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x9}, {}, {}, {}]}, @volatile={0x9}]}}, &(0x7f0000000300)=""/180, 0x52, 0xb4, 0x1}, 0x20)

18:10:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xa1)

18:10:45 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x1b, 0x1, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f00000004c0)='GPL\x00', 0x2, 0xb5, &(0x7f0000000500)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xa1)

18:10:45 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x1b, 0x1, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f00000004c0)='GPL\x00', 0x2, 0xb5, &(0x7f0000000500)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:45 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001fc0)={&(0x7f0000001e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4}]}]}}, &(0x7f0000001f00)=""/188, 0x2e, 0xbc, 0x1}, 0x20)

[ 2316.967534][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2316.976143][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2316.984987][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2316.993042][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2317.001926][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2317.256431][T14777] chnl_net:caif_netlink_parms(): no params data found
[ 2317.358301][T14777] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2317.366122][T14777] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2317.374924][T14777] device bridge_slave_0 entered promiscuous mode
[ 2317.383720][T14777] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2317.390894][T14777] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2317.399306][T14777] device bridge_slave_1 entered promiscuous mode
[ 2317.423435][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2317.436517][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2317.469406][T14777] team0: Port device team_slave_0 added
[ 2317.478141][T14777] team0: Port device team_slave_1 added
[ 2317.499222][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2317.506302][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2317.532267][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2317.545944][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2317.554422][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2317.581230][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2317.616263][T14777] device hsr_slave_0 entered promiscuous mode
[ 2317.623192][T14777] device hsr_slave_1 entered promiscuous mode
[ 2317.629824][T14777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2317.637906][T14777] Cannot create hsr debugfs directory
[ 2318.641426][T14777] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2318.651514][T14777] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2318.670981][T14777] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2318.690548][T14777] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2318.821364][T14777] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2318.848156][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2318.860298][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2318.880492][T14777] 8021q: adding VLAN 0 to HW filter on device team0
[ 2318.898945][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2318.915312][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2318.928940][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2318.936122][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2318.953663][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2318.993637][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2319.009675][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2319.018440][T31280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2319.025614][T31280] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2319.041377][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2319.050563][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2319.058788][T22623] Bluetooth: hci0: command 0x0409 tx timeout
[ 2319.074276][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2319.089406][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2319.111303][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2319.119568][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2319.128729][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2319.137669][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2319.147157][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2319.159494][T14777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2319.181157][T14777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2319.191706][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2319.201243][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2319.430810][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2319.441494][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2319.450257][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2319.822827][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2319.831740][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2319.871479][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2319.882017][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2319.901635][T14777] device veth0_vlan entered promiscuous mode
[ 2319.912177][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2319.921621][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2319.935939][T14777] device veth1_vlan entered promiscuous mode
[ 2319.963380][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2319.971635][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2319.980457][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2319.990546][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2320.003050][T14777] device veth0_macvtap entered promiscuous mode
[ 2320.017408][T14777] device veth1_macvtap entered promiscuous mode
[ 2320.046642][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2320.059484][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.078327][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2320.091324][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.103572][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2320.114851][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.127747][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2320.138727][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.149042][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2320.159971][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.178829][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2320.191010][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2320.208724][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2320.218888][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2320.235278][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2320.251073][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.274370][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.285581][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.300161][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.310329][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.321699][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.331866][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.343269][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.353550][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2320.364031][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2320.387337][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2320.401914][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2320.422735][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2320.434630][T14777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.452545][T14777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.461397][T14777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.477297][T14777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2320.613874][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2320.622007][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2320.639216][T31174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2320.649661][T31174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2320.650719][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2320.680223][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2320.848762][T14876] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2320.865632][T14876] CPU: 0 PID: 14876 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2320.874129][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2320.884227][T14876] Call Trace:
[ 2320.887541][T14876]  <TASK>
[ 2320.890506][T14876]  dump_stack_lvl+0x1e3/0x2cb
[ 2320.895237][T14876]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2320.900761][T14876]  ? panic+0x75d/0x75d
[ 2320.904880][T14876]  ? ___ratelimit+0x4c0/0x670
[ 2320.909697][T14876]  ? local_lock_release+0x170/0x170
[ 2320.914961][T14876]  dump_header+0xdf/0x9c0
[ 2320.919349][T14876]  oom_kill_process+0xf8/0x520
[ 2320.924166][T14876]  out_of_memory+0xf30/0x12f0
[ 2320.928893][T14876]  ? mutex_lock_io_nested+0x60/0x60
[ 2320.934146][T14876]  ? preempt_schedule+0xd9/0xe0
[ 2320.939044][T14876]  ? unregister_oom_notifier+0x20/0x20
[ 2320.944563][T14876]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2320.950605][T14876]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2320.956208][T14876]  ? preempt_schedule_thunk+0x16/0x18
[ 2320.961645][T14876]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2320.967260][T14876]  ? cgroup_file_notify+0x123/0x190
[ 2320.972524][T14876]  memory_max_write+0x34d/0x470
[ 2320.977428][T14876]  ? memory_max_show+0xa0/0xa0
[ 2320.982273][T14876]  ? read_lock_is_recursive+0x10/0x10
[ 2320.987699][T14876]  ? memory_max_show+0xa0/0xa0
[ 2320.992517][T14876]  cgroup_file_write+0x2c6/0x690
[ 2320.997505][T14876]  ? mutex_lock_io_nested+0x60/0x60
[ 2321.002858][T14876]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2321.008029][T14876]  ? __virt_addr_valid+0x22b/0x2e0
[ 2321.013301][T14876]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2321.018453][T14876]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2321.023798][T14876]  vfs_write+0x7ae/0xba0
[ 2321.028097][T14876]  ? file_end_write+0x250/0x250
[ 2321.033008][T14876]  ? mutex_lock_nested+0x17/0x20
[ 2321.037991][T14876]  ? __fdget_pos+0x250/0x2f0
[ 2321.042626][T14876]  ? ksys_write+0x77/0x2c0
[ 2321.047090][T14876]  ksys_write+0x19c/0x2c0
[ 2321.051549][T14876]  ? print_irqtrace_events+0x210/0x210
[ 2321.057054][T14876]  ? __ia32_sys_read+0x80/0x80
[ 2321.061935][T14876]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2321.067962][T14876]  ? lockdep_hardirqs_on+0x94/0x130
[ 2321.073209][T14876]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2321.079244][T14876]  do_syscall_64+0x3d/0xb0
[ 2321.083702][T14876]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2321.089643][T14876] RIP: 0033:0x7f5d8748c169
[ 2321.094102][T14876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2321.113764][T14876] RSP: 002b:00007f5d85ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2321.122227][T14876] RAX: ffffffffffffffda RBX: 00007f5d875abf80 RCX: 00007f5d8748c169
[ 2321.130246][T14876] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2321.138259][T14876] RBP: 00007f5d874e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2321.146272][T14876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2321.154279][T14876] R13: 00007ffdecb14c6f R14: 00007f5d85ffe300 R15: 0000000000022000
[ 2321.157450][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2321.162285][T14876]  </TASK>
[ 2321.207492][T14876] memory: usage 10632kB, limit 0kB, failcnt 585
[ 2321.215745][T14876] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2321.229686][T14876] Memory cgroup stats for /syz5:
[ 2321.230279][T14876] anon 110592
[ 2321.230279][T14876] file 10461184
[ 2321.230279][T14876] kernel 303104
[ 2321.230279][T14876] kernel_stack 65536
[ 2321.230279][T14876] pagetables 81920
[ 2321.230279][T14876] sec_pagetables 0
[ 2321.230279][T14876] percpu 0
[ 2321.230279][T14876] sock 0
[ 2321.230279][T14876] vmalloc 0
[ 2321.230279][T14876] shmem 10461184
[ 2321.230279][T14876] zswap 0
[ 2321.230279][T14876] zswapped 0
[ 2321.230279][T14876] file_mapped 163840
[ 2321.230279][T14876] file_dirty 0
[ 2321.230279][T14876] file_writeback 0
[ 2321.230279][T14876] swapcached 0
[ 2321.230279][T14876] anon_thp 0
[ 2321.230279][T14876] file_thp 0
[ 2321.230279][T14876] shmem_thp 0
[ 2321.230279][T14876] inactive_anon 0
[ 2321.230279][T14876] active_anon 10571776
[ 2321.230279][T14876] inactive_file 0
[ 2321.230279][T14876] active_file 0
[ 2321.230279][T14876] unevictable 0
[ 2321.230279][T14876] slab_reclaimable 55128
[ 2321.230279][T14876] slab_unreclaimable 76744
[ 2321.230279][T14876] slab 131872
[ 2321.329361][T14876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14777,uid=0
[ 2321.345558][T14876] Memory cgroup out of memory: Killed process 14777 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2321.406447][T14876] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2321.416937][T14876] CPU: 1 PID: 14876 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2321.425403][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2321.435511][T14876] Call Trace:
[ 2321.438831][T14876]  <TASK>
[ 2321.441797][T14876]  dump_stack_lvl+0x1e3/0x2cb
[ 2321.446541][T14876]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2321.452143][T14876]  ? panic+0x75d/0x75d
[ 2321.456351][T14876]  ? ___ratelimit+0x4c0/0x670
[ 2321.461086][T14876]  ? local_lock_release+0x170/0x170
[ 2321.466433][T14876]  dump_header+0xdf/0x9c0
[ 2321.470816][T14876]  oom_kill_process+0xf8/0x520
[ 2321.475632][T14876]  out_of_memory+0xf30/0x12f0
[ 2321.480332][T14876]  ? mutex_lock_io_nested+0x60/0x60
[ 2321.485558][T14876]  ? unregister_oom_notifier+0x20/0x20
[ 2321.491034][T14876]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2321.497199][T14876]  ? lockdep_hardirqs_on+0x94/0x130
[ 2321.502438][T14876]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2321.508608][T14876]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2321.514172][T14876]  ? mark_lock+0x9a/0x340
[ 2321.518511][T14876]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2321.524070][T14876]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 2321.529989][T14876]  ? cgroup_file_notify+0x106/0x190
[ 2321.535208][T14876]  memory_max_write+0x34d/0x470
[ 2321.540077][T14876]  ? memory_max_show+0xa0/0xa0
[ 2321.544856][T14876]  ? read_lock_is_recursive+0x10/0x10
[ 2321.550351][T14876]  ? memory_max_show+0xa0/0xa0
[ 2321.555213][T14876]  cgroup_file_write+0x2c6/0x690
[ 2321.560164][T14876]  ? mutex_lock_io_nested+0x60/0x60
[ 2321.565381][T14876]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2321.570522][T14876]  ? __virt_addr_valid+0x22b/0x2e0
[ 2321.575676][T14876]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2321.580827][T14876]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2321.586132][T14876]  vfs_write+0x7ae/0xba0
[ 2321.590478][T14876]  ? file_end_write+0x250/0x250
[ 2321.595362][T14876]  ? mutex_lock_nested+0x17/0x20
[ 2321.600313][T14876]  ? __fdget_pos+0x250/0x2f0
[ 2321.604916][T14876]  ? ksys_write+0x77/0x2c0
[ 2321.609430][T14876]  ksys_write+0x19c/0x2c0
[ 2321.613768][T14876]  ? print_irqtrace_events+0x210/0x210
[ 2321.619344][T14876]  ? __ia32_sys_read+0x80/0x80
[ 2321.624118][T14876]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2321.630118][T14876]  ? lockdep_hardirqs_on+0x94/0x130
[ 2321.635335][T14876]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2321.641339][T14876]  do_syscall_64+0x3d/0xb0
[ 2321.645774][T14876]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2321.651676][T14876] RIP: 0033:0x7f5d8748c169
[ 2321.656101][T14876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2321.675725][T14876] RSP: 002b:00007f5d85ffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2321.684166][T14876] RAX: ffffffffffffffda RBX: 00007f5d875abf80 RCX: 00007f5d8748c169
[ 2321.692178][T14876] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2321.700172][T14876] RBP: 00007f5d874e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2321.708164][T14876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2321.716145][T14876] R13: 00007ffdecb14c6f R14: 00007f5d85ffe300 R15: 0000000000022000
[ 2321.724165][T14876]  </TASK>
[ 2321.748692][T14876] memory: usage 10568kB, limit 0kB, failcnt 585
[ 2321.767381][T14876] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2321.782705][T14876] Memory cgroup stats for /syz5:
[ 2321.783159][T14876] anon 90112
[ 2321.783159][T14876] file 10461184
[ 2321.783159][T14876] kernel 258048
[ 2321.783159][T14876] kernel_stack 32768
[ 2321.783159][T14876] pagetables 73728
[ 2321.783159][T14876] sec_pagetables 0
[ 2321.783159][T14876] percpu 0
[ 2321.783159][T14876] sock 0
[ 2321.783159][T14876] vmalloc 0
[ 2321.783159][T14876] shmem 10461184
[ 2321.783159][T14876] zswap 0
[ 2321.783159][T14876] zswapped 0
[ 2321.783159][T14876] file_mapped 163840
[ 2321.783159][T14876] file_dirty 0
[ 2321.783159][T14876] file_writeback 0
[ 2321.783159][T14876] swapcached 0
[ 2321.783159][T14876] anon_thp 0
[ 2321.783159][T14876] file_thp 0
[ 2321.783159][T14876] shmem_thp 0
[ 2321.783159][T14876] inactive_anon 0
[ 2321.783159][T14876] active_anon 10551296
[ 2321.783159][T14876] inactive_file 0
[ 2321.783159][T14876] active_file 0
[ 2321.783159][T14876] unevictable 0
[ 2321.783159][T14876] slab_reclaimable 55128
[ 2321.783159][T14876] slab_unreclaimable 76744
[ 2321.783159][T14876] slab 131872
[ 2321.884603][T14876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14874,uid=0
[ 2321.901253][T14876] Memory cgroup out of memory: Killed process 14876 (syz-executor.5) total-vm:54548kB, anon-rss:508kB, file-rss:8988kB, shmem-rss:76kB, UID:0 pgtables:88kB oom_score_adj:1000
18:10:52 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:10:52 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000800)='syzkaller\x00', 0x1, 0xac, &(0x7f0000000080)=""/172, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:52 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:10:52 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x1b, 0x1, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f00000004c0)='GPL\x00', 0x2, 0xb5, &(0x7f0000000500)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:10:55 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r4, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r4, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:10:55 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x1b, 0x1, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f00000004c0)='GPL\x00', 0x2, 0xb5, &(0x7f0000000500)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:55 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000800)='syzkaller\x00', 0x1, 0xac, &(0x7f0000000080)=""/172, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:55 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:10:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:10:55 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000640)=@raw=[@call={0x85, 0x0, 0x0, 0x51}, @btf_id={0x18, 0x3}], &(0x7f0000000680)='GPL\x00', 0x6, 0x2c, &(0x7f00000006c0)=""/44, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:10:55 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000800)='syzkaller\x00', 0x1, 0xac, &(0x7f0000000080)=""/172, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 2325.641595][ T1187] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2325.852243][ T1187] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2325.954636][ T1187] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2326.073428][ T1187] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2327.002289][ T1187] device hsr_slave_0 left promiscuous mode
[ 2327.009339][ T1187] device hsr_slave_1 left promiscuous mode
[ 2327.016030][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2327.024776][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2327.034207][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2327.041916][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2327.051336][ T1187] device bridge_slave_1 left promiscuous mode
[ 2327.058348][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2327.069617][ T1187] device bridge_slave_0 left promiscuous mode
[ 2327.076276][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2327.090145][ T1187] device veth1_macvtap left promiscuous mode
[ 2327.096449][ T1187] device veth0_macvtap left promiscuous mode
[ 2327.106953][ T1187] device veth1_vlan left promiscuous mode
[ 2327.113087][ T1187] device veth0_vlan left promiscuous mode
[ 2327.420097][ T1187] team0 (unregistering): Port device team_slave_1 removed
[ 2327.434933][ T1187] team0 (unregistering): Port device team_slave_0 removed
[ 2327.455359][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2327.471905][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2327.538003][ T1187] bond0 (unregistering): Released all slaves
18:11:12 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:11:12 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000800)='syzkaller\x00', 0x1, 0xac, &(0x7f0000000080)=""/172, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:11:12 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c00, 0x0)

18:11:12 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:11:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r4, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r4, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:11:12 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000200000000000000000000002c2908000000000018410000000000000000005d000000009500000000000000f50677036999832e7ec1ae8a420a04c800e682d95a0e803331e973c589cd46871c8126411b449947b25090af1001000100000000004555a315911d54e9d1b004902176930a83b851af27dfa43b06e775884ca893b4d7caa5d3559723ad1c16268a59f7279a27588d66a235c8a6e8b62b7e5750784f72593486373c98f70d29732077b7ffb34140514653dd2c23cf8051f14b01ff1456990200000038625b0264b69fe02ae079a35c0c4db5791a614f237c73b59123300601ae348ef3bd8ca40ce005a96dcd00ec6cf2e965b60e048757554f4bf70992661dcdfd3d24cc7330508dd4bf3d8df3dcdf0b1c90b2d873cf4a5113f893c7de5900"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:11:12 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xf, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:11:12 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x8000})

18:11:12 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

18:11:12 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001fc0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5}, {0x9}, {0x10}, {}, {0xb, 0x5}]}]}}, &(0x7f00000000c0)=""/197, 0x4e, 0xc5, 0x1}, 0x20)

18:11:12 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f00000007c0), 0x10, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)

18:11:12 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

[ 2343.961307][T22623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2343.969818][T22623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2343.978909][T22623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2343.995371][T22623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2344.004291][T22622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2344.316519][T15315] chnl_net:caif_netlink_parms(): no params data found
[ 2344.335510][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.341848][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
[ 2344.502820][T15315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2344.510042][T15315] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2344.536126][T15315] device bridge_slave_0 entered promiscuous mode
[ 2344.555096][T15315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2344.562306][T15315] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2344.585210][T15315] device bridge_slave_1 entered promiscuous mode
[ 2344.688050][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2344.725408][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2344.814666][T15315] team0: Port device team_slave_0 added
[ 2344.862936][T15315] team0: Port device team_slave_1 added
[ 2344.921101][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2344.939890][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2344.986527][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2345.010276][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2345.020212][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2345.055052][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2345.130795][T15315] device hsr_slave_0 entered promiscuous mode
[ 2345.141130][T15315] device hsr_slave_1 entered promiscuous mode
[ 2345.155908][T15315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2345.168537][T15315] Cannot create hsr debugfs directory
[ 2346.061321][T15315] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2346.080300][T15315] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2346.092855][T22622] Bluetooth: hci0: command 0x0409 tx timeout
[ 2346.111078][T15315] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2346.122098][T15315] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2346.241341][T15315] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2346.268923][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2346.281186][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2346.300259][T15315] 8021q: adding VLAN 0 to HW filter on device team0
[ 2346.321581][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2346.338097][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2346.348346][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2346.355526][ T7927] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2346.386954][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2346.395907][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2346.405464][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2346.416167][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2346.423353][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2346.431892][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2346.441028][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2346.457168][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2346.470214][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2346.495304][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2346.503691][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2346.516640][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2346.525840][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2346.540963][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2346.555899][T15315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2346.574999][T15315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2346.590255][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2346.600572][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2346.863283][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2346.870882][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2346.884870][T15315] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2347.185896][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2347.201371][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2347.225565][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2347.235945][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2347.248099][T15315] device veth0_vlan entered promiscuous mode
[ 2347.262197][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2347.270886][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2347.291161][T15315] device veth1_vlan entered promiscuous mode
[ 2347.320869][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2347.337359][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2347.351260][T15315] device veth0_macvtap entered promiscuous mode
[ 2347.363365][T15315] device veth1_macvtap entered promiscuous mode
[ 2347.381760][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2347.393455][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.405499][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2347.416586][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.433375][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2347.450939][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.464308][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2347.481932][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.498933][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2347.509818][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.521733][T15315] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2347.535718][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2347.544816][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2347.553605][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2347.568278][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2347.580194][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2347.590917][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.601883][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2347.619261][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.631997][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2347.645125][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.655308][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2347.666395][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.676657][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2347.687643][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.707683][T15315] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2347.716736][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2347.726316][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2347.738959][T15315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2347.751472][T15315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2347.767673][T15315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2347.788096][T15315] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2347.903384][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2347.911465][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2347.937658][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2347.978579][T30270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2347.990544][T30270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2348.011917][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2348.176238][T22622] Bluetooth: hci0: command 0x041b tx timeout
[ 2348.200369][T15435] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2348.211520][T15435] CPU: 0 PID: 15435 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2348.220000][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2348.230099][T15435] Call Trace:
[ 2348.233410][T15435]  <TASK>
[ 2348.236406][T15435]  dump_stack_lvl+0x1e3/0x2cb
[ 2348.241139][T15435]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2348.246651][T15435]  ? panic+0x75d/0x75d
[ 2348.250855][T15435]  ? ___ratelimit+0x4c0/0x670
[ 2348.255595][T15435]  ? local_lock_release+0x170/0x170
[ 2348.260849][T15435]  dump_header+0xdf/0x9c0
[ 2348.265238][T15435]  oom_kill_process+0xf8/0x520
[ 2348.270041][T15435]  out_of_memory+0xf30/0x12f0
[ 2348.274764][T15435]  ? mutex_lock_io_nested+0x60/0x60
[ 2348.280020][T15435]  ? preempt_schedule+0xd9/0xe0
[ 2348.284920][T15435]  ? unregister_oom_notifier+0x20/0x20
[ 2348.290421][T15435]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2348.296453][T15435]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2348.302054][T15435]  ? preempt_schedule_thunk+0x16/0x18
[ 2348.307479][T15435]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2348.313090][T15435]  ? cgroup_file_notify+0x123/0x190
[ 2348.318334][T15435]  memory_max_write+0x34d/0x470
[ 2348.323241][T15435]  ? memory_max_show+0xa0/0xa0
[ 2348.328048][T15435]  ? read_lock_is_recursive+0x10/0x10
[ 2348.333468][T15435]  ? memory_max_show+0xa0/0xa0
[ 2348.338292][T15435]  cgroup_file_write+0x2c6/0x690
[ 2348.343276][T15435]  ? mutex_lock_io_nested+0x60/0x60
[ 2348.348524][T15435]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2348.353770][T15435]  ? __virt_addr_valid+0x22b/0x2e0
[ 2348.358942][T15435]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2348.364131][T15435]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2348.369464][T15435]  vfs_write+0x7ae/0xba0
[ 2348.373749][T15435]  ? file_end_write+0x250/0x250
[ 2348.378664][T15435]  ? mutex_lock_nested+0x17/0x20
[ 2348.383651][T15435]  ? __fdget_pos+0x250/0x2f0
[ 2348.388277][T15435]  ? ksys_write+0x77/0x2c0
[ 2348.392737][T15435]  ksys_write+0x19c/0x2c0
[ 2348.397108][T15435]  ? print_irqtrace_events+0x210/0x210
[ 2348.402615][T15435]  ? __ia32_sys_read+0x80/0x80
[ 2348.407417][T15435]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2348.413466][T15435]  ? lockdep_hardirqs_on+0x94/0x130
[ 2348.418815][T15435]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2348.424861][T15435]  do_syscall_64+0x3d/0xb0
[ 2348.429325][T15435]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2348.435261][T15435] RIP: 0033:0x7f48cc88c169
[ 2348.439714][T15435] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2348.459367][T15435] RSP: 002b:00007f48cd602168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2348.467837][T15435] RAX: ffffffffffffffda RBX: 00007f48cc9abf80 RCX: 00007f48cc88c169
[ 2348.475940][T15435] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2348.483950][T15435] RBP: 00007f48cc8e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2348.491957][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2348.499961][T15435] R13: 00007ffeb337d0df R14: 00007f48cd602300 R15: 0000000000022000
[ 2348.507994][T15435]  </TASK>
[ 2348.529112][T15435] memory: usage 10636kB, limit 0kB, failcnt 585
[ 2348.536208][T15435] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2348.543911][T15435] Memory cgroup stats for /syz5:
[ 2348.544487][T15435] anon 114688
[ 2348.544487][T15435] file 10461184
[ 2348.544487][T15435] kernel 303104
[ 2348.544487][T15435] kernel_stack 65536
[ 2348.544487][T15435] pagetables 81920
[ 2348.544487][T15435] sec_pagetables 0
[ 2348.544487][T15435] percpu 0
[ 2348.544487][T15435] sock 0
[ 2348.544487][T15435] vmalloc 0
[ 2348.544487][T15435] shmem 10461184
[ 2348.544487][T15435] zswap 0
[ 2348.544487][T15435] zswapped 0
[ 2348.544487][T15435] file_mapped 163840
[ 2348.544487][T15435] file_dirty 0
[ 2348.544487][T15435] file_writeback 0
[ 2348.544487][T15435] swapcached 0
[ 2348.544487][T15435] anon_thp 0
[ 2348.544487][T15435] file_thp 0
[ 2348.544487][T15435] shmem_thp 0
[ 2348.544487][T15435] inactive_anon 0
[ 2348.544487][T15435] active_anon 10575872
[ 2348.544487][T15435] inactive_file 0
[ 2348.544487][T15435] active_file 0
[ 2348.544487][T15435] unevictable 0
[ 2348.544487][T15435] slab_reclaimable 55128
[ 2348.544487][T15435] slab_unreclaimable 76744
[ 2348.544487][T15435] slab 131872
[ 2348.650748][T15435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15315,uid=0
[ 2348.674079][T15435] Memory cgroup out of memory: Killed process 15315 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2351.697129][ T1187] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2352.357238][ T1187] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2352.425984][ T1187] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2352.470549][ T1187] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2353.366191][ T1187] device hsr_slave_0 left promiscuous mode
[ 2353.384188][ T1187] device hsr_slave_1 left promiscuous mode
[ 2353.390727][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2353.399300][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2353.408439][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2353.416935][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2353.425841][ T1187] device bridge_slave_1 left promiscuous mode
[ 2353.432126][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2353.442047][ T1187] device bridge_slave_0 left promiscuous mode
[ 2353.448718][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2353.460723][ T1187] device veth1_macvtap left promiscuous mode
[ 2353.469768][ T1187] device veth0_macvtap left promiscuous mode
[ 2353.477173][ T1187] device veth1_vlan left promiscuous mode
[ 2353.483285][ T1187] device veth0_vlan left promiscuous mode
18:11:23 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:11:23 executing program 3:
bpf$MAP_CREATE(0x5, &(0x7f0000000000), 0x48)

18:11:23 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x20, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)

18:11:23 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:11:23 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:11:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:11:23 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0xac}, 0x48)

18:11:23 executing program 2:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0/file0\x00'}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002a40)={&(0x7f0000002a00)='./file0/file0\x00'}, 0x10)

18:11:23 executing program 3:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)={0x0, 0x0, 0x20}, 0x10)

18:11:23 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x40086602, &(0x7f0000000000))

18:11:23 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x1, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f00000004c0)='GPL\x00', 0x6, 0xb5, &(0x7f0000000500)=""/181, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:11:23 executing program 3:
r0 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

[ 2354.036000][ T1187] team0 (unregistering): Port device team_slave_1 removed
[ 2354.095330][ T1187] team0 (unregistering): Port device team_slave_0 removed
[ 2354.110953][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2354.141664][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2354.261216][ T1187] bond0 (unregistering): Released all slaves
[ 2355.503674][T31261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2355.513136][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2355.521171][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2355.530626][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2355.541461][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2355.548853][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2355.839766][T15664] chnl_net:caif_netlink_parms(): no params data found
[ 2355.998531][T15664] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2356.029206][T15664] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2356.054010][T15664] device bridge_slave_0 entered promiscuous mode
[ 2356.065649][T15664] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2356.087216][T15664] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2356.118908][T15664] device bridge_slave_1 entered promiscuous mode
[ 2356.188703][T15664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2356.219055][T15664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2356.291105][T15664] team0: Port device team_slave_0 added
[ 2356.314764][T15664] team0: Port device team_slave_1 added
[ 2356.364128][T15664] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2356.371147][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2356.434686][T15664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2356.473397][T15664] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2356.480491][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2356.508899][T15664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2356.570749][T15664] device hsr_slave_0 entered promiscuous mode
[ 2356.578236][T15664] device hsr_slave_1 entered promiscuous mode
[ 2356.585257][T15664] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2356.593161][T15664] Cannot create hsr debugfs directory
[ 2357.226075][T15664] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2357.246262][T15664] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2357.263207][T15664] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2357.285266][T15664] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2357.453618][T15664] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2357.469023][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2357.486844][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2357.501701][T15664] 8021q: adding VLAN 0 to HW filter on device team0
[ 2357.522253][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2357.540480][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2357.550365][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2357.557597][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2357.594989][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2357.605573][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2357.613927][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2357.628003][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2357.636659][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2357.643820][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2357.651830][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2357.661003][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2357.675493][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2357.691446][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2357.720945][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2357.806057][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2357.826710][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2357.846721][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2357.873430][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2357.893058][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2357.901850][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2357.925246][T15664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2358.283484][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2358.293479][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2358.306267][T15664] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2358.693078][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2358.703484][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2358.740110][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2358.748918][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2358.766297][T15664] device veth0_vlan entered promiscuous mode
[ 2358.775301][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2358.783852][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2358.797698][T15664] device veth1_vlan entered promiscuous mode
[ 2358.827053][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2358.835736][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2358.844500][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2358.853734][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2358.865348][T15664] device veth0_macvtap entered promiscuous mode
[ 2358.877523][T15664] device veth1_macvtap entered promiscuous mode
[ 2358.896300][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2358.907792][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.918989][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2358.929482][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.939412][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2358.949991][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.959920][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2358.970403][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2358.980710][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2358.993307][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2359.004612][T15664] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2359.016667][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2359.025298][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2359.033909][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2359.043035][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2359.057313][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2359.068485][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2359.078597][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2359.089623][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2359.103761][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2359.114791][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2359.124761][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2359.135741][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2359.146085][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2359.156781][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2359.167985][T15664] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2359.180296][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2359.189245][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2359.201129][T15664] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2359.211214][T15664] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2359.221565][T15664] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2359.231363][T15664] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2359.295309][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2359.306102][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2359.327889][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2359.347013][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2359.355096][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2359.366615][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2359.531908][T15736] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2359.545998][T15736] CPU: 1 PID: 15736 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2359.554455][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2359.564524][T15736] Call Trace:
[ 2359.567821][T15736]  <TASK>
[ 2359.570762][T15736]  dump_stack_lvl+0x1e3/0x2cb
[ 2359.575450][T15736]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2359.580911][T15736]  ? panic+0x75d/0x75d
[ 2359.585005][T15736]  ? ___ratelimit+0x4c0/0x670
[ 2359.589703][T15736]  ? local_lock_release+0x170/0x170
[ 2359.594919][T15736]  dump_header+0xdf/0x9c0
[ 2359.599266][T15736]  oom_kill_process+0xf8/0x520
[ 2359.604044][T15736]  out_of_memory+0xf30/0x12f0
[ 2359.608747][T15736]  ? mutex_lock_io_nested+0x60/0x60
[ 2359.614056][T15736]  ? mark_lock+0x9a/0x340
[ 2359.618395][T15736]  ? unregister_oom_notifier+0x20/0x20
[ 2359.623892][T15736]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2359.629918][T15736]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2359.635484][T15736]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2359.641072][T15736]  ? cgroup_file_notify+0x123/0x190
[ 2359.646289][T15736]  memory_max_write+0x34d/0x470
[ 2359.651160][T15736]  ? memory_max_show+0xa0/0xa0
[ 2359.655948][T15736]  ? cgroup_file_write+0x8b/0x690
[ 2359.660978][T15736]  ? memory_max_show+0xa0/0xa0
[ 2359.665753][T15736]  cgroup_file_write+0x2c6/0x690
[ 2359.670696][T15736]  ? mutex_lock_io_nested+0x60/0x60
[ 2359.675910][T15736]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2359.681027][T15736]  ? __virt_addr_valid+0x22b/0x2e0
[ 2359.686165][T15736]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2359.691281][T15736]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2359.696602][T15736]  vfs_write+0x7ae/0xba0
[ 2359.700877][T15736]  ? file_end_write+0x250/0x250
[ 2359.705753][T15736]  ? mutex_lock_nested+0x17/0x20
[ 2359.710712][T15736]  ? __fdget_pos+0x250/0x2f0
[ 2359.715329][T15736]  ? ksys_write+0x77/0x2c0
[ 2359.719770][T15736]  ksys_write+0x19c/0x2c0
[ 2359.724121][T15736]  ? print_irqtrace_events+0x210/0x210
[ 2359.729598][T15736]  ? __ia32_sys_read+0x80/0x80
[ 2359.734379][T15736]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2359.740407][T15736]  ? lockdep_hardirqs_on+0x94/0x130
[ 2359.745620][T15736]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2359.751622][T15736]  do_syscall_64+0x3d/0xb0
[ 2359.756077][T15736]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2359.761996][T15736] RIP: 0033:0x7fc12fa8c169
[ 2359.766432][T15736] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2359.786046][T15736] RSP: 002b:00007fc13073a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2359.794466][T15736] RAX: ffffffffffffffda RBX: 00007fc12fbabf80 RCX: 00007fc12fa8c169
[ 2359.802447][T15736] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2359.810519][T15736] RBP: 00007fc12fae7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2359.818518][T15736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2359.826495][T15736] R13: 00007ffcaf40504f R14: 00007fc13073a300 R15: 0000000000022000
[ 2359.834503][T15736]  </TASK>
[ 2359.841489][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2359.851172][T15736] memory: usage 10636kB, limit 0kB, failcnt 585
[ 2359.859562][T15736] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2359.867206][T15736] Memory cgroup stats for /syz5:
[ 2359.867596][T15736] anon 114688
[ 2359.867596][T15736] file 10461184
[ 2359.867596][T15736] kernel 307200
[ 2359.867596][T15736] kernel_stack 65536
[ 2359.867596][T15736] pagetables 77824
[ 2359.867596][T15736] sec_pagetables 0
[ 2359.867596][T15736] percpu 0
[ 2359.867596][T15736] sock 0
[ 2359.867596][T15736] vmalloc 0
[ 2359.867596][T15736] shmem 10461184
[ 2359.867596][T15736] zswap 0
[ 2359.867596][T15736] zswapped 0
[ 2359.867596][T15736] file_mapped 163840
[ 2359.867596][T15736] file_dirty 0
[ 2359.867596][T15736] file_writeback 0
[ 2359.867596][T15736] swapcached 0
[ 2359.867596][T15736] anon_thp 0
[ 2359.867596][T15736] file_thp 0
[ 2359.867596][T15736] shmem_thp 0
[ 2359.867596][T15736] inactive_anon 0
[ 2359.867596][T15736] active_anon 10575872
[ 2359.867596][T15736] inactive_file 0
[ 2359.867596][T15736] active_file 0
[ 2359.867596][T15736] unevictable 0
[ 2359.867596][T15736] slab_reclaimable 58600
[ 2359.867596][T15736] slab_unreclaimable 78912
[ 2359.867596][T15736] slab 137512
[ 2359.971816][T15736] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15664,uid=0
[ 2359.988156][T15736] Memory cgroup out of memory: Killed process 15664 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2360.021978][T15736] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2360.036137][T15736] CPU: 0 PID: 15736 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2360.044801][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2360.054882][T15736] Call Trace:
[ 2360.058202][T15736]  <TASK>
[ 2360.061248][T15736]  dump_stack_lvl+0x1e3/0x2cb
[ 2360.065969][T15736]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2360.071449][T15736]  ? panic+0x75d/0x75d
[ 2360.075538][T15736]  ? ___ratelimit+0x4c0/0x670
[ 2360.080254][T15736]  ? local_lock_release+0x170/0x170
[ 2360.085485][T15736]  dump_header+0xdf/0x9c0
[ 2360.089868][T15736]  oom_kill_process+0xf8/0x520
[ 2360.094662][T15736]  out_of_memory+0xf30/0x12f0
[ 2360.099438][T15736]  ? mutex_lock_io_nested+0x60/0x60
[ 2360.104659][T15736]  ? unregister_oom_notifier+0x20/0x20
[ 2360.110120][T15736]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2360.116286][T15736]  ? lockdep_hardirqs_on+0x94/0x130
[ 2360.121618][T15736]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2360.127828][T15736]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2360.133410][T15736]  ? mark_lock+0x9a/0x340
[ 2360.137786][T15736]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2360.143379][T15736]  ? _raw_spin_unlock_irqrestore+0xd4/0x130
[ 2360.149327][T15736]  ? cgroup_file_notify+0x106/0x190
[ 2360.154552][T15736]  memory_max_write+0x34d/0x470
[ 2360.159425][T15736]  ? memory_max_show+0xa0/0xa0
[ 2360.164197][T15736]  ? cgroup_file_write+0x8b/0x690
[ 2360.169835][T15736]  ? memory_max_show+0xa0/0xa0
[ 2360.174630][T15736]  cgroup_file_write+0x2c6/0x690
[ 2360.179739][T15736]  ? mutex_lock_io_nested+0x60/0x60
[ 2360.184984][T15736]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2360.190129][T15736]  ? __virt_addr_valid+0x22b/0x2e0
[ 2360.195285][T15736]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2360.200406][T15736]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2360.205710][T15736]  vfs_write+0x7ae/0xba0
[ 2360.209996][T15736]  ? file_end_write+0x250/0x250
[ 2360.214893][T15736]  ? mutex_lock_nested+0x17/0x20
[ 2360.219862][T15736]  ? __fdget_pos+0x250/0x2f0
[ 2360.224595][T15736]  ? ksys_write+0x77/0x2c0
[ 2360.229073][T15736]  ksys_write+0x19c/0x2c0
[ 2360.233440][T15736]  ? print_irqtrace_events+0x210/0x210
[ 2360.238961][T15736]  ? __ia32_sys_read+0x80/0x80
[ 2360.243789][T15736]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2360.249796][T15736]  ? lockdep_hardirqs_on+0x94/0x130
[ 2360.255024][T15736]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2360.261032][T15736]  do_syscall_64+0x3d/0xb0
[ 2360.265464][T15736]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2360.271366][T15736] RIP: 0033:0x7fc12fa8c169
[ 2360.275798][T15736] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2360.295434][T15736] RSP: 002b:00007fc13073a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2360.303880][T15736] RAX: ffffffffffffffda RBX: 00007fc12fbabf80 RCX: 00007fc12fa8c169
[ 2360.311853][T15736] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2360.319827][T15736] RBP: 00007fc12fae7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2360.327798][T15736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2360.335786][T15736] R13: 00007ffcaf40504f R14: 00007fc13073a300 R15: 0000000000022000
[ 2360.343817][T15736]  </TASK>
[ 2360.351201][T15736] memory: usage 10608kB, limit 0kB, failcnt 585
[ 2360.360080][T15736] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2360.369161][T15736] Memory cgroup stats for /syz5:
[ 2360.369671][T15736] anon 114688
[ 2360.369671][T15736] file 10461184
[ 2360.369671][T15736] kernel 307200
[ 2360.369671][T15736] kernel_stack 65536
[ 2360.369671][T15736] pagetables 77824
[ 2360.369671][T15736] sec_pagetables 0
[ 2360.369671][T15736] percpu 0
[ 2360.369671][T15736] sock 0
[ 2360.369671][T15736] vmalloc 0
[ 2360.369671][T15736] shmem 10461184
[ 2360.369671][T15736] zswap 0
[ 2360.369671][T15736] zswapped 0
[ 2360.369671][T15736] file_mapped 163840
[ 2360.369671][T15736] file_dirty 0
[ 2360.369671][T15736] file_writeback 0
[ 2360.369671][T15736] swapcached 0
[ 2360.369671][T15736] anon_thp 0
[ 2360.369671][T15736] file_thp 0
[ 2360.369671][T15736] shmem_thp 0
[ 2360.369671][T15736] inactive_anon 0
[ 2360.369671][T15736] active_anon 10575872
[ 2360.369671][T15736] inactive_file 0
[ 2360.369671][T15736] active_file 0
[ 2360.369671][T15736] unevictable 0
[ 2360.369671][T15736] slab_reclaimable 58600
[ 2360.369671][T15736] slab_unreclaimable 78912
[ 2360.369671][T15736] slab 137512
[ 2360.479790][T15736] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15735,uid=0
[ 2360.496245][T15736] Memory cgroup out of memory: Killed process 15736 (syz-executor.5) total-vm:54548kB, anon-rss:504kB, file-rss:8988kB, shmem-rss:84kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2363.682364][   T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2364.115000][   T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2364.184343][   T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2364.283161][   T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2365.159835][   T56] device hsr_slave_0 left promiscuous mode
[ 2365.166808][   T56] device hsr_slave_1 left promiscuous mode
[ 2365.178827][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2365.188793][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2365.204523][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2365.211977][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2365.235348][   T56] device bridge_slave_1 left promiscuous mode
[ 2365.241640][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2365.258960][   T56] device bridge_slave_0 left promiscuous mode
[ 2365.266799][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2365.286598][   T56] device veth1_macvtap left promiscuous mode
[ 2365.292897][   T56] device veth0_macvtap left promiscuous mode
[ 2365.299033][   T56] device veth1_vlan left promiscuous mode
[ 2365.305276][   T56] device veth0_vlan left promiscuous mode
[ 2365.488850][   T56] team0 (unregistering): Port device team_slave_1 removed
[ 2365.504565][   T56] team0 (unregistering): Port device team_slave_0 removed
[ 2365.518507][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2365.536685][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2365.602904][   T56] bond0 (unregistering): Released all slaves
18:11:41 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:11:41 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x40086602, &(0x7f0000000000))

18:11:41 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:11:41 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="0dac395a9f41238ba03838164b048311e3d72eafa3ff097b107eccec87cc2e5129216e305e14f3764730ff391532bbea1094a00cdad9e8ecd7b961ea1ba7826c718457379a932f6d4985bdb207ccd12d793fe20995095bdc1ca959f43bcd1d1fd39077b7e45f92de72c8d5f207e37453bb40fe0adb294b06d4e4add65233990d45ca32c28c497aca73ab09e581e76d37e855657868390027ee38e7bb2da7db918b6fd0d9167425081d9d791454dd3976bb8d30ef59c134b99984daf6686df50eb395d45c5eb8dd5c3d20e68104edebbc69ee01b09d163b365828371643c0a56c6f34aba8d1cb82778013017a07395c33d03ffb85e359756be9a2a6f96bf20733d27dcb5acc070facfcea308a6e751602ef8bc76255df9a7eaf2e3e6dbd56174c4fd659c28496be5a3a13aa15a5c75c1d", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:11:41 executing program 3:
r0 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:11:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:11:41 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x40086602, &(0x7f0000000000))

18:11:41 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x40086602, &(0x7f0000000000))

18:11:41 executing program 2:
socketpair(0x11, 0x3, 0x5, &(0x7f0000000580))

18:11:41 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:11:41 executing program 2:
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={0xffffffffffffffff, 0x1d, 0x0, 0x0, 0x0}, 0x20)

18:11:41 executing program 2:
bpf$BPF_PROG_ATTACH(0x4, &(0x7f0000002400)={@map}, 0x14)

[ 2372.908270][T22622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2372.916884][T22622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2372.932292][T22622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2372.941022][T22622] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2372.948828][T22622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2373.188806][T15900] chnl_net:caif_netlink_parms(): no params data found
[ 2373.281205][T15900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2373.289036][T15900] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2373.306037][T15900] device bridge_slave_0 entered promiscuous mode
[ 2373.320648][T15900] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2373.328118][T15900] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2373.337349][T15900] device bridge_slave_1 entered promiscuous mode
[ 2373.372038][T15900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2373.396029][T15900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2373.455524][T15900] team0: Port device team_slave_0 added
[ 2373.471321][T15900] team0: Port device team_slave_1 added
[ 2373.510409][T15900] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2373.518709][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2373.547726][T15900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2373.562145][T15900] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2373.569823][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2373.596391][T15900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2373.653193][T15900] device hsr_slave_0 entered promiscuous mode
[ 2373.660198][T15900] device hsr_slave_1 entered promiscuous mode
[ 2373.668581][T15900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2373.680490][T15900] Cannot create hsr debugfs directory
[ 2374.674368][T15900] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2374.692133][T15900] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2374.702218][T15900] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2374.721480][T15900] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2374.850500][T15900] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2374.878728][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2374.887255][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2374.900340][T15900] 8021q: adding VLAN 0 to HW filter on device team0
[ 2374.913375][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2374.923075][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2374.931639][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2374.938848][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2374.962788][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2374.970975][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2374.982576][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2374.997414][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2375.008552][T23871] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2375.015756][T23871] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2375.030100][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2375.039260][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2375.068376][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2375.080153][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2375.096663][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2375.115445][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2375.125118][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2375.134495][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2375.143794][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2375.152304][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2375.168515][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2375.181895][T15900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2375.425586][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2375.441183][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2375.462718][T15900] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2375.770447][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2375.786982][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2375.820575][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2375.829310][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2375.848068][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2375.862866][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2375.871411][T15900] device veth0_vlan entered promiscuous mode
[ 2375.893432][T15900] device veth1_vlan entered promiscuous mode
[ 2375.925313][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2375.944288][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2375.959633][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2375.969207][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2375.991617][T15900] device veth0_macvtap entered promiscuous mode
[ 2376.010745][T15900] device veth1_macvtap entered promiscuous mode
[ 2376.038062][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2376.056293][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.069373][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2376.084946][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.108485][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2376.123154][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.139153][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2376.151098][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.166859][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2376.178411][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.190253][T15900] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2376.200399][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2376.217203][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2376.226045][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2376.235471][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2376.247253][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2376.261065][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.278956][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2376.291537][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.307310][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2376.319151][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.329621][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2376.340582][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.351706][T15900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2376.364497][T15900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2376.375647][T15900] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2376.388092][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2376.397746][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2376.410158][T15900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2376.421818][T15900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2376.437161][T15900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2376.447325][T15900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2376.561822][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2376.592711][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2376.610921][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2376.639898][ T3906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2376.648387][ T3906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2376.660818][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2377.057359][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2377.308142][T16003] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2377.319619][T16003] CPU: 0 PID: 16003 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2377.328096][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2377.338188][T16003] Call Trace:
[ 2377.341482][T16003]  <TASK>
[ 2377.344435][T16003]  dump_stack_lvl+0x1e3/0x2cb
[ 2377.349137][T16003]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2377.354609][T16003]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2377.360786][T16003]  dump_header+0xdf/0x9c0
[ 2377.365129][T16003]  oom_kill_process+0xf8/0x520
[ 2377.369940][T16003]  out_of_memory+0xf30/0x12f0
[ 2377.374676][T16003]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2377.380861][T16003]  ? lockdep_hardirqs_on+0x94/0x130
[ 2377.386177][T16003]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2377.392442][T16003]  ? unregister_oom_notifier+0x20/0x20
[ 2377.397921][T16003]  ? mem_cgroup_out_of_memory+0x112/0x3b0
[ 2377.403672][T16003]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2377.409232][T16003]  ? preempt_schedule_thunk+0x16/0x18
[ 2377.414622][T16003]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2377.420189][T16003]  ? cgroup_file_notify+0x123/0x190
[ 2377.425409][T16003]  memory_max_write+0x34d/0x470
[ 2377.430278][T16003]  ? memory_max_show+0xa0/0xa0
[ 2377.435054][T16003]  ? kernfs_fop_write_iter+0x306/0x4f0
[ 2377.440519][T16003]  ? cgroup_file_write+0x8b/0x690
[ 2377.445551][T16003]  ? memory_max_show+0xa0/0xa0
[ 2377.450325][T16003]  cgroup_file_write+0x2c6/0x690
[ 2377.455282][T16003]  ? mutex_lock_io_nested+0x60/0x60
[ 2377.460520][T16003]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2377.465674][T16003]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2377.470796][T16003]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2377.476095][T16003]  vfs_write+0x7ae/0xba0
[ 2377.480355][T16003]  ? file_end_write+0x250/0x250
[ 2377.485233][T16003]  ? mutex_lock_nested+0x17/0x20
[ 2377.490188][T16003]  ? __fdget_pos+0x250/0x2f0
[ 2377.494786][T16003]  ? ksys_write+0x77/0x2c0
[ 2377.499221][T16003]  ksys_write+0x19c/0x2c0
[ 2377.503648][T16003]  ? print_irqtrace_events+0x210/0x210
[ 2377.509131][T16003]  ? __ia32_sys_read+0x80/0x80
[ 2377.513904][T16003]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2377.519901][T16003]  ? lockdep_hardirqs_on+0x94/0x130
[ 2377.525113][T16003]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2377.531111][T16003]  do_syscall_64+0x3d/0xb0
[ 2377.535539][T16003]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2377.541436][T16003] RIP: 0033:0x7f1c4f08c169
[ 2377.545859][T16003] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2377.565482][T16003] RSP: 002b:00007f1c4fcfe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2377.573908][T16003] RAX: ffffffffffffffda RBX: 00007f1c4f1ac050 RCX: 00007f1c4f08c169
[ 2377.581901][T16003] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2377.589984][T16003] RBP: 00007f1c4f0e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2377.597960][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2377.605941][T16003] R13: 00007ffde3922f8f R14: 00007f1c4fcfe300 R15: 0000000000022000
[ 2377.613938][T16003]  </TASK>
[ 2377.652937][T16003] memory: usage 10636kB, limit 0kB, failcnt 585
[ 2377.659775][T16003] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2377.673082][T16003] Memory cgroup stats for /syz5:
[ 2377.673280][T16003] anon 118784
[ 2377.673280][T16003] file 10461184
[ 2377.673280][T16003] kernel 278528
[ 2377.673280][T16003] kernel_stack 32768
[ 2377.673280][T16003] pagetables 77824
[ 2377.673280][T16003] sec_pagetables 0
[ 2377.673280][T16003] percpu 0
[ 2377.673280][T16003] sock 0
[ 2377.673280][T16003] vmalloc 0
[ 2377.673280][T16003] shmem 10461184
[ 2377.673280][T16003] zswap 0
[ 2377.673280][T16003] zswapped 0
[ 2377.673280][T16003] file_mapped 163840
[ 2377.673280][T16003] file_dirty 0
[ 2377.673280][T16003] file_writeback 0
[ 2377.673280][T16003] swapcached 0
[ 2377.673280][T16003] anon_thp 0
[ 2377.673280][T16003] file_thp 0
[ 2377.673280][T16003] shmem_thp 0
[ 2377.673280][T16003] inactive_anon 0
[ 2377.673280][T16003] active_anon 10579968
[ 2377.673280][T16003] inactive_file 0
[ 2377.673280][T16003] active_file 0
[ 2377.673280][T16003] unevictable 0
[ 2377.673280][T16003] slab_reclaimable 54488
[ 2377.673280][T16003] slab_unreclaimable 83600
[ 2377.673280][T16003] slab 138088
[ 2377.774859][T16003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15900,uid=0
[ 2377.792482][T16003] Memory cgroup out of memory: Killed process 15900 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2380.998805][ T3906] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2381.373798][ T3906] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2381.451171][ T3906] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2381.526629][ T3906] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2382.385584][ T3906] device hsr_slave_0 left promiscuous mode
[ 2382.392240][ T3906] device hsr_slave_1 left promiscuous mode
[ 2382.402677][ T3906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2382.410143][ T3906] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2382.419886][ T3906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2382.436196][ T3906] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2382.448140][ T3906] device bridge_slave_1 left promiscuous mode
[ 2382.459873][ T3906] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2382.473885][ T3906] device bridge_slave_0 left promiscuous mode
[ 2382.480226][ T3906] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2382.501164][ T3906] device veth1_macvtap left promiscuous mode
[ 2382.511065][ T3906] device veth0_macvtap left promiscuous mode
[ 2382.522248][ T3906] device veth1_vlan left promiscuous mode
[ 2382.531672][ T3906] device veth0_vlan left promiscuous mode
[ 2382.754786][ T3906] team0 (unregistering): Port device team_slave_1 removed
[ 2382.773214][ T3906] team0 (unregistering): Port device team_slave_0 removed
[ 2382.786628][ T3906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2382.800924][ T3906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2382.866974][ T3906] bond0 (unregistering): Released all slaves
18:11:56 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:11:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:11:56 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='z', 0x1}], 0x1, &(0x7f0000000280)=[@ip_tos_int={{0x14}}], 0x18}, 0x0)

18:11:56 executing program 3:
r0 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:11:56 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:11:56 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:11:56 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)

18:11:56 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:11:57 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:11:57 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2}, 0x48)

18:11:57 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x40087602, 0x0)

18:11:57 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

[ 2388.427248][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2388.439344][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2388.448292][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2388.455895][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2388.464360][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2388.690145][T16323] chnl_net:caif_netlink_parms(): no params data found
[ 2388.769719][T16323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2388.779926][T16323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2388.788258][T16323] device bridge_slave_0 entered promiscuous mode
[ 2388.797167][T16323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2388.804723][T16323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2388.813258][T16323] device bridge_slave_1 entered promiscuous mode
[ 2388.843877][T16323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2388.855782][T16323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2388.899675][T16323] team0: Port device team_slave_0 added
[ 2388.917838][T16323] team0: Port device team_slave_1 added
[ 2388.958379][T16323] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2388.968819][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2389.004633][T16323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2389.019381][T16323] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2389.026883][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2389.053616][T16323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2389.112898][T16323] device hsr_slave_0 entered promiscuous mode
[ 2389.120949][T16323] device hsr_slave_1 entered promiscuous mode
[ 2389.132612][T16323] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2389.140224][T16323] Cannot create hsr debugfs directory
[ 2389.952956][T16323] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2389.963307][T16323] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2389.976051][T16323] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2389.987347][T16323] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2390.070598][T16323] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2390.087414][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2390.096310][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2390.108203][T16323] 8021q: adding VLAN 0 to HW filter on device team0
[ 2390.121718][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2390.131770][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2390.149680][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2390.156985][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2390.185272][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2390.194101][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2390.203090][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2390.211799][T31280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2390.219027][T31280] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2390.227573][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2390.238740][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2390.261580][T16323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2390.275857][T16323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2390.289938][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2390.300290][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2390.316242][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2390.329856][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2390.346660][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2390.355532][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2390.364832][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2390.373859][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2390.387641][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2390.403562][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2390.492858][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2390.593293][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2390.600845][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2390.616232][T16323] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2390.985115][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2390.999811][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2391.024768][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2391.034090][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2391.045294][T16323] device veth0_vlan entered promiscuous mode
[ 2391.053518][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2391.070730][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2391.085517][T16323] device veth1_vlan entered promiscuous mode
[ 2391.127168][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2391.145369][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2391.155149][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2391.167707][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2391.183604][T16323] device veth0_macvtap entered promiscuous mode
[ 2391.206401][T16323] device veth1_macvtap entered promiscuous mode
[ 2391.242077][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2391.259447][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.270632][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2391.288053][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.299209][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2391.318993][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.330375][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2391.346947][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.359355][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2391.370635][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.382468][T16323] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2391.390662][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2391.400217][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2391.416102][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2391.428752][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2391.445564][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2391.480580][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.491106][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2391.508428][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.518846][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2391.529982][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.547296][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2391.559489][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.570004][T16323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2391.581787][T16323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2391.593612][T16323] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2391.603238][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2391.612075][T23871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2391.638973][T16323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2391.649617][T16323] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2391.659583][T16323] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2391.668794][T16323] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2391.803876][T31174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2391.812014][T31174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2391.845534][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2391.866190][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2391.875110][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2391.890796][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2392.546993][T16407] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2392.563850][T16407] CPU: 0 PID: 16407 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2392.572346][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2392.582445][T16407] Call Trace:
[ 2392.585765][T16407]  <TASK>
[ 2392.588727][T16407]  dump_stack_lvl+0x1e3/0x2cb
[ 2392.593465][T16407]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2392.599062][T16407]  ? panic+0x75d/0x75d
[ 2392.603184][T16407]  ? ___ratelimit+0x4c0/0x670
[ 2392.607977][T16407]  ? local_lock_release+0x170/0x170
[ 2392.613237][T16407]  dump_header+0xdf/0x9c0
[ 2392.617623][T16407]  oom_kill_process+0xf8/0x520
[ 2392.622443][T16407]  out_of_memory+0xf30/0x12f0
[ 2392.627185][T16407]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2392.632439][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2392.633367][T16407]  ? lockdep_hardirqs_on+0x94/0x130
[ 2392.644585][T16407]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2392.650913][T16407]  ? unregister_oom_notifier+0x20/0x20
[ 2392.656463][T16407]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2392.662082][T16407]  ? preempt_schedule_thunk+0x16/0x18
[ 2392.667525][T16407]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2392.673150][T16407]  ? cgroup_file_notify+0x123/0x190
[ 2392.678421][T16407]  memory_max_write+0x34d/0x470
[ 2392.683306][T16407]  ? memory_max_show+0xa0/0xa0
[ 2392.688110][T16407]  ? memory_max_show+0xa0/0xa0
[ 2392.692886][T16407]  cgroup_file_write+0x2c6/0x690
[ 2392.697836][T16407]  ? lockdep_hardirqs_on+0x94/0x130
[ 2392.703071][T16407]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2392.708215][T16407]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2392.713340][T16407]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2392.718649][T16407]  vfs_write+0x7ae/0xba0
[ 2392.722917][T16407]  ? file_end_write+0x250/0x250
[ 2392.727816][T16407]  ? mutex_lock_nested+0x17/0x20
[ 2392.732804][T16407]  ? __fdget_pos+0x250/0x2f0
[ 2392.737418][T16407]  ? ksys_write+0x77/0x2c0
[ 2392.741857][T16407]  ksys_write+0x19c/0x2c0
[ 2392.746207][T16407]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2392.752387][T16407]  ? __ia32_sys_read+0x80/0x80
[ 2392.757171][T16407]  ? syscall_enter_from_user_mode+0x37/0x220
[ 2392.763172][T16407]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2392.769171][T16407]  do_syscall_64+0x3d/0xb0
[ 2392.773605][T16407]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2392.779533][T16407] RIP: 0033:0x7fb0f788c169
[ 2392.783991][T16407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2392.803647][T16407] RSP: 002b:00007fb0f85e7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2392.812079][T16407] RAX: ffffffffffffffda RBX: 00007fb0f79ac050 RCX: 00007fb0f788c169
[ 2392.820075][T16407] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2392.828055][T16407] RBP: 00007fb0f78e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2392.836057][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2392.844074][T16407] R13: 00007ffee394edef R14: 00007fb0f85e7300 R15: 0000000000022000
[ 2392.852098][T16407]  </TASK>
[ 2392.879749][T16407] memory: usage 10688kB, limit 0kB, failcnt 585
[ 2392.886243][T16407] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2392.901064][T16407] Memory cgroup stats for /syz5:
[ 2392.901260][T16407] anon 118784
[ 2392.901260][T16407] file 10465280
[ 2392.901260][T16407] kernel 282624
[ 2392.901260][T16407] kernel_stack 32768
[ 2392.901260][T16407] pagetables 81920
[ 2392.901260][T16407] sec_pagetables 0
[ 2392.901260][T16407] percpu 0
[ 2392.901260][T16407] sock 0
[ 2392.901260][T16407] vmalloc 0
[ 2392.901260][T16407] shmem 10461184
[ 2392.901260][T16407] zswap 0
[ 2392.901260][T16407] zswapped 0
[ 2392.901260][T16407] file_mapped 163840
[ 2392.901260][T16407] file_dirty 0
[ 2392.901260][T16407] file_writeback 0
[ 2392.901260][T16407] swapcached 0
[ 2392.901260][T16407] anon_thp 0
[ 2392.901260][T16407] file_thp 0
[ 2392.901260][T16407] shmem_thp 0
[ 2392.901260][T16407] inactive_anon 36864
[ 2392.901260][T16407] active_anon 10543104
[ 2392.901260][T16407] inactive_file 0
[ 2392.901260][T16407] active_file 4096
[ 2392.901260][T16407] unevictable 0
[ 2392.901260][T16407] slab_reclaimable 58840
[ 2392.901260][T16407] slab_unreclaimable 84896
[ 2392.901260][T16407] slab 143736
[ 2393.000222][T16407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16323,uid=0
[ 2393.017419][T16407] Memory cgroup out of memory: Killed process 16323 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2395.974347][   T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2396.272594][   T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2396.365500][   T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2396.430084][   T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2397.277930][   T51] device hsr_slave_0 left promiscuous mode
[ 2397.289077][   T51] device hsr_slave_1 left promiscuous mode
[ 2397.299381][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2397.316579][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2397.330271][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2397.341450][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2397.357747][   T51] device bridge_slave_1 left promiscuous mode
[ 2397.367473][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2397.380801][   T51] device bridge_slave_0 left promiscuous mode
[ 2397.390721][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2397.419023][   T51] device veth1_macvtap left promiscuous mode
[ 2397.426606][   T51] device veth0_macvtap left promiscuous mode
[ 2397.433301][   T51] device veth1_vlan left promiscuous mode
[ 2397.439132][   T51] device veth0_vlan left promiscuous mode
[ 2397.628483][   T51] team0 (unregistering): Port device team_slave_1 removed
[ 2397.646975][   T51] team0 (unregistering): Port device team_slave_0 removed
[ 2397.661157][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2397.677093][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2397.756629][   T51] bond0 (unregistering): Released all slaves
18:12:09 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:12:09 executing program 2:
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))

18:12:09 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:12:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="0dac395a9f41238ba03838164b048311e3d72eafa3ff097b107eccec87cc2e5129216e305e14f3764730ff391532bbea1094a00cdad9e8ecd7b961ea1ba7826c718457379a932f6d4985bdb207ccd12d793fe20995095bdc1ca959f43bcd1d1fd39077b7e45f92de72c8d5f207e37453bb40fe0adb294b06d4e4add65233990d45ca32c28c497aca73ab09e581e76d37e855657868390027ee38e7bb2da7db918b6fd0d9167425081d9d791454dd3976bb8d30ef59c134b99984daf6686df50eb395d45c5eb8dd5c3d20e68104edebbc69ee01b09d163b365828371643c0a56c6f34aba8d1cb82778013017a07395c33d03ffb85e359756be9a2a6f96bf20733d27dcb5acc070facfcea308a6e751602ef8bc76255df9a7eaf2e3e6dbd56174c4fd659c28496be5a3a13aa15a5c75c1d", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:12:09 executing program 3:
r0 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:12:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299806a8ca4c46d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf7ade2394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f086fbb3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036e39d5ee41b43cb37becfc5c36d8127ca878c4a65b2f2089ed5593689cded5d46e6695609955c7477fad72b4a5f2a10345eaf56cb05bfcd6e38d6bb962fba3c8b87e057d882d8842ae7b9cffebb03c4d30ddde9bdf743"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(0x0, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:12:09 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x1})

18:12:09 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x1})

18:12:09 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:12:09 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x1})

18:12:10 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[0xffffffffffffffff]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:12:10 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp0\x00', 0x1})

[ 2401.243337][T31261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2401.253677][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2401.261561][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2401.273294][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2401.280856][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2401.288434][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2401.647244][T16679] chnl_net:caif_netlink_parms(): no params data found
[ 2401.806114][T16679] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2401.832054][T16679] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2401.874061][T16679] device bridge_slave_0 entered promiscuous mode
[ 2401.891632][T16679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2401.900356][T16679] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2401.926140][T16679] device bridge_slave_1 entered promiscuous mode
[ 2401.999764][T16679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2402.025320][T16679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2402.108462][T16679] team0: Port device team_slave_0 added
[ 2402.124743][T16679] team0: Port device team_slave_1 added
[ 2402.186024][T16679] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2402.202432][T16679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2402.230434][T16679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2402.251047][T16679] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2402.258442][T16679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2402.286375][T16679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2402.335640][T16679] device hsr_slave_0 entered promiscuous mode
[ 2402.343005][T16679] device hsr_slave_1 entered promiscuous mode
[ 2402.349677][T16679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2402.357406][T16679] Cannot create hsr debugfs directory
[ 2403.064228][T16679] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2403.074839][T16679] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2403.085500][T16679] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2403.099435][T16679] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2403.209356][T16679] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2403.237692][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2403.250733][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2403.269417][T16679] 8021q: adding VLAN 0 to HW filter on device team0
[ 2403.289472][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2403.310335][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2403.319838][T17829] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2403.327044][T17829] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2403.356162][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2403.372794][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2403.381213][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2403.403348][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2403.411963][T17830] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2403.419170][T17830] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2403.427085][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2403.450917][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2403.460189][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2403.469606][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2403.479118][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2403.488724][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2403.509675][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2403.530941][T16679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2403.577854][T16679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2403.622223][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2403.631827][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2403.663600][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2403.672252][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2403.698095][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2403.990332][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2403.998793][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2404.020128][T16679] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2404.492680][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2404.501503][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2404.538682][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2404.548020][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2404.560649][T16679] device veth0_vlan entered promiscuous mode
[ 2404.569455][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2404.580941][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2404.594993][T16679] device veth1_vlan entered promiscuous mode
[ 2404.624046][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2404.635662][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2404.653523][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2404.662261][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2404.695496][T16679] device veth0_macvtap entered promiscuous mode
[ 2404.708142][T16679] device veth1_macvtap entered promiscuous mode
[ 2404.757575][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2404.782437][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2404.808955][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2404.840169][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2404.869477][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2404.901058][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2404.932435][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2404.952443][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2404.962323][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2405.004688][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2405.024142][T16679] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2405.037317][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2405.069831][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2405.087017][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2405.106223][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2405.120406][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2405.161376][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2405.171664][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2405.189639][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2405.200386][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2405.217701][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2405.229484][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2405.248897][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2405.260430][T16679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2405.276968][T16679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2405.292220][T16679] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2405.313096][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2405.322187][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2405.340674][T16679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2405.352102][T16679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2405.368964][T16679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2405.388080][T16679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2405.453318][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2405.524344][T30270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2405.534235][T30270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2405.544974][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2405.588536][T31174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2405.599145][T31174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2405.613100][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2405.774753][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[ 2405.781103][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
[ 2406.178798][T16778] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2406.191132][T16778] CPU: 1 PID: 16778 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2406.199599][T16778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2406.209763][T16778] Call Trace:
[ 2406.213076][T16778]  <TASK>
[ 2406.216017][T16778]  dump_stack_lvl+0x1e3/0x2cb
[ 2406.220719][T16778]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2406.226191][T16778]  ? panic+0x75d/0x75d
[ 2406.230276][T16778]  ? ___ratelimit+0x4c0/0x670
[ 2406.235005][T16778]  ? local_lock_release+0x170/0x170
[ 2406.240228][T16778]  dump_header+0xdf/0x9c0
[ 2406.244578][T16778]  oom_kill_process+0xf8/0x520
[ 2406.249357][T16778]  out_of_memory+0xf30/0x12f0
[ 2406.254071][T16778]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2406.260260][T16778]  ? lockdep_hardirqs_on+0x94/0x130
[ 2406.265479][T16778]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2406.271646][T16778]  ? unregister_oom_notifier+0x20/0x20
[ 2406.277137][T16778]  ? mem_cgroup_out_of_memory+0x112/0x3b0
[ 2406.282882][T16778]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2406.288441][T16778]  ? preempt_schedule_thunk+0x16/0x18
[ 2406.293849][T16778]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2406.299427][T16778]  ? cgroup_file_notify+0x123/0x190
[ 2406.304647][T16778]  memory_max_write+0x34d/0x470
[ 2406.309514][T16778]  ? memory_max_show+0xa0/0xa0
[ 2406.314294][T16778]  ? cgroup_file_write+0x1a1/0x690
[ 2406.319419][T16778]  ? cgroup_file_write+0x2b2/0x690
[ 2406.324540][T16778]  ? memory_max_show+0xa0/0xa0
[ 2406.329316][T16778]  cgroup_file_write+0x2c6/0x690
[ 2406.334262][T16778]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2406.340441][T16778]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2406.345563][T16778]  ? kernfs_get_active+0x36/0x170
[ 2406.350613][T16778]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2406.355735][T16778]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2406.361035][T16778]  vfs_write+0x7ae/0xba0
[ 2406.365298][T16778]  ? file_end_write+0x250/0x250
[ 2406.370172][T16778]  ? mutex_lock_nested+0x17/0x20
[ 2406.375122][T16778]  ? __fdget_pos+0x250/0x2f0
[ 2406.379717][T16778]  ? ksys_write+0x77/0x2c0
[ 2406.384142][T16778]  ksys_write+0x19c/0x2c0
[ 2406.388486][T16778]  ? print_irqtrace_events+0x210/0x210
[ 2406.394043][T16778]  ? __ia32_sys_read+0x80/0x80
[ 2406.398821][T16778]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2406.404813][T16778]  ? lockdep_hardirqs_on+0x94/0x130
[ 2406.410056][T16778]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2406.416070][T16778]  do_syscall_64+0x3d/0xb0
[ 2406.420510][T16778]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2406.426504][T16778] RIP: 0033:0x7f0df628c169
[ 2406.430930][T16778] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2406.450653][T16778] RSP: 002b:00007f0df701d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2406.459097][T16778] RAX: ffffffffffffffda RBX: 00007f0df63ac050 RCX: 00007f0df628c169
[ 2406.467083][T16778] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2406.475066][T16778] RBP: 00007f0df62e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2406.483043][T16778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2406.491025][T16778] R13: 00007fff0f758ddf R14: 00007f0df701d300 R15: 0000000000022000
[ 2406.499031][T16778]  </TASK>
[ 2406.529624][T16778] memory: usage 10692kB, limit 0kB, failcnt 585
[ 2406.541019][T16778] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2406.557647][T16778] Memory cgroup stats for /syz5:
[ 2406.557852][T16778] anon 118784
[ 2406.557852][T16778] file 10465280
[ 2406.557852][T16778] kernel 286720
[ 2406.557852][T16778] kernel_stack 32768
[ 2406.557852][T16778] pagetables 81920
[ 2406.557852][T16778] sec_pagetables 0
[ 2406.557852][T16778] percpu 0
[ 2406.557852][T16778] sock 0
[ 2406.557852][T16778] vmalloc 0
[ 2406.557852][T16778] shmem 10461184
[ 2406.557852][T16778] zswap 0
[ 2406.557852][T16778] zswapped 0
[ 2406.557852][T16778] file_mapped 163840
[ 2406.557852][T16778] file_dirty 4096
[ 2406.557852][T16778] file_writeback 0
[ 2406.557852][T16778] swapcached 0
[ 2406.557852][T16778] anon_thp 0
[ 2406.557852][T16778] file_thp 0
[ 2406.557852][T16778] shmem_thp 0
[ 2406.557852][T16778] inactive_anon 0
[ 2406.557852][T16778] active_anon 10579968
[ 2406.557852][T16778] inactive_file 0
[ 2406.557852][T16778] active_file 4096
[ 2406.557852][T16778] unevictable 0
[ 2406.557852][T16778] slab_reclaimable 56264
[ 2406.557852][T16778] slab_unreclaimable 83600
[ 2406.557852][T16778] slab 139864
[ 2406.671121][T16778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16679,uid=0
[ 2406.692609][T16778] Memory cgroup out of memory: Killed process 16679 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2409.038852][   T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2409.332261][   T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2409.399200][   T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2409.450141][   T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2410.256364][   T51] device hsr_slave_0 left promiscuous mode
[ 2410.267282][   T51] device hsr_slave_1 left promiscuous mode
[ 2410.277364][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2410.289219][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2410.301011][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2410.315944][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2410.328650][   T51] device bridge_slave_1 left promiscuous mode
[ 2410.348343][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2410.357382][   T51] device bridge_slave_0 left promiscuous mode
[ 2410.370455][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2410.391269][   T51] device veth1_macvtap left promiscuous mode
[ 2410.397725][   T51] device veth0_macvtap left promiscuous mode
[ 2410.412247][   T51] device veth1_vlan left promiscuous mode
[ 2410.418387][   T51] device veth0_vlan left promiscuous mode
[ 2410.595245][   T51] team0 (unregistering): Port device team_slave_1 removed
[ 2410.608566][   T51] team0 (unregistering): Port device team_slave_0 removed
[ 2410.622874][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2410.638705][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2410.705559][   T51] bond0 (unregistering): Released all slaves
18:12:28 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:12:28 executing program 2:
syz_clone(0x84000000, 0x0, 0x0, 0x0, 0x0, 0x0)

18:12:28 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:12:28 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000))

18:12:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[0xffffffffffffffff]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000200000000000000000000002c2908000000000018410000000000000000005d000000009500000000000000f50677036999832e7ec1ae8a420a04c800e682d95a0e803331e973c589cd46871c8126411b449947b25090af1001000100000000004555a315911d54e9d1b004902176930a83b851af27dfa43b06e775884ca893b4d7caa5d3559723ad1c16268a59f7279a27588d66a235c8a6e8b62b7e5750784f72593486373c98f70d29732077b7ffb34140514653dd2c23cf8051f14b01ff1456990200000038625b0264b69fe02ae079a35c0c4db5791a614f237c73b59123300601ae348ef3bd8ca40ce005a96dcd00ec6cf2e965b60e048757554f4bf70992661dcdfd3d24cc7330508dd4bf3d8df3dcdf0b1c90b2d873cf4a5113f893c7de5900"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:12:28 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(0x0, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:12:29 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001fc0)={&(0x7f0000001e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001f00)=""/188, 0x18, 0xbc, 0x1}, 0x20)

18:12:29 executing program 2:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840))
perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xce, 0x4000000000000000}, 0x20, 0x7, 0x8, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x3f}, r0, 0xc, 0xffffffffffffffff, 0x0)

18:12:29 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:12:29 executing program 2:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:12:29 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:12:29 executing program 2:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

[ 2420.915648][T22622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2420.925631][T22622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2420.935825][T22622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2420.949757][T22622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2420.959426][T22622] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2420.971106][T22622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2421.394241][T16979] chnl_net:caif_netlink_parms(): no params data found
[ 2421.556360][T16979] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2421.587490][T16979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2421.598778][T16979] device bridge_slave_0 entered promiscuous mode
[ 2421.628751][T16979] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2421.637604][T16979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2421.651438][T16979] device bridge_slave_1 entered promiscuous mode
[ 2421.698624][T16979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2421.719219][T16979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2421.761465][T16979] team0: Port device team_slave_0 added
[ 2421.775459][T16979] team0: Port device team_slave_1 added
[ 2421.799184][T16979] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2421.806233][T16979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2421.833748][T16979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2421.848850][T16979] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2421.859986][T16979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2421.886522][T16979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2421.923054][T16979] device hsr_slave_0 entered promiscuous mode
[ 2421.930316][T16979] device hsr_slave_1 entered promiscuous mode
[ 2421.938560][T16979] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2421.946447][T16979] Cannot create hsr debugfs directory
[ 2422.734669][T16979] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2422.745260][T16979] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2422.758312][T16979] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2422.768160][T16979] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2422.890099][T16979] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2422.906720][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2422.915159][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2422.933542][T16979] 8021q: adding VLAN 0 to HW filter on device team0
[ 2422.945688][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2422.955038][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2422.964257][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2422.971376][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2423.016748][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2423.031951][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2423.041942][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2423.052746][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2423.057704][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2423.066265][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2423.081219][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2423.090789][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2423.107213][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2423.120841][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2423.135694][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2423.150533][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2423.188946][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2423.212937][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2423.222043][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2423.231598][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2423.240384][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2423.250196][T16979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2423.600491][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2423.613276][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2423.641498][T16979] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2424.172686][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2424.181460][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2424.240457][T16979] device veth0_vlan entered promiscuous mode
[ 2424.263891][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2424.273095][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2424.309853][T16979] device veth1_vlan entered promiscuous mode
[ 2424.319109][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2424.328003][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2424.336151][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2424.363959][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2424.373375][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2424.382243][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2424.394198][T16979] device veth0_macvtap entered promiscuous mode
[ 2424.409912][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2424.421801][T16979] device veth1_macvtap entered promiscuous mode
[ 2424.481099][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2424.492223][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.503244][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2424.513981][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.524129][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2424.534970][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.545820][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2424.574610][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.591219][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2424.601927][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.620266][T16979] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2424.630469][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2424.647529][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2424.668821][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2424.680227][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.690695][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2424.701510][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.711785][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2424.722572][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.736813][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2424.752757][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.770874][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2424.781736][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2424.794321][T16979] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2424.813401][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2424.822223][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2424.865342][T16979] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.881357][T16979] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.890647][T16979] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.911689][T16979] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2424.992253][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2425.008728][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2425.032127][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2425.055017][T31174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2425.068606][T31174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2425.081809][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2425.133699][T22622] Bluetooth: hci0: command 0x041b tx timeout
[ 2425.691421][T17060] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2425.707370][T17060] CPU: 1 PID: 17060 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2425.715946][T17060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2425.726039][T17060] Call Trace:
[ 2425.729347][T17060]  <TASK>
[ 2425.732323][T17060]  dump_stack_lvl+0x1e3/0x2cb
[ 2425.737047][T17060]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2425.742562][T17060]  ? panic+0x75d/0x75d
[ 2425.746709][T17060]  ? ___ratelimit+0x4c0/0x670
[ 2425.751443][T17060]  ? local_lock_release+0x170/0x170
[ 2425.756694][T17060]  dump_header+0xdf/0x9c0
[ 2425.761077][T17060]  oom_kill_process+0xf8/0x520
[ 2425.765886][T17060]  out_of_memory+0xf30/0x12f0
[ 2425.770602][T17060]  ? mutex_lock_io_nested+0x60/0x60
[ 2425.775844][T17060]  ? preempt_schedule+0xd9/0xe0
[ 2425.780745][T17060]  ? unregister_oom_notifier+0x20/0x20
[ 2425.786240][T17060]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2425.792430][T17060]  ? lockdep_hardirqs_on+0x94/0x130
[ 2425.797678][T17060]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2425.803907][T17060]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2425.809506][T17060]  ? preempt_schedule_thunk+0x16/0x18
[ 2425.814933][T17060]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2425.820527][T17060]  ? cgroup_file_notify+0x123/0x190
[ 2425.825796][T17060]  memory_max_write+0x34d/0x470
[ 2425.830683][T17060]  ? memory_max_show+0xa0/0xa0
[ 2425.835460][T17060]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 2425.841556][T17060]  ? print_irqtrace_events+0x210/0x210
[ 2425.847059][T17060]  ? memory_max_show+0xa0/0xa0
[ 2425.851844][T17060]  cgroup_file_write+0x2c6/0x690
[ 2425.856802][T17060]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2425.862984][T17060]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2425.868221][T17060]  ? kernfs_fop_write_iter+0x306/0x4f0
[ 2425.873710][T17060]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2425.878836][T17060]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2425.884152][T17060]  vfs_write+0x7ae/0xba0
[ 2425.888695][T17060]  ? file_end_write+0x250/0x250
[ 2425.893580][T17060]  ? mutex_lock_nested+0x17/0x20
[ 2425.898538][T17060]  ? __fdget_pos+0x250/0x2f0
[ 2425.903314][T17060]  ? ksys_write+0x77/0x2c0
[ 2425.907748][T17060]  ksys_write+0x19c/0x2c0
[ 2425.912091][T17060]  ? print_irqtrace_events+0x210/0x210
[ 2425.917563][T17060]  ? __ia32_sys_read+0x80/0x80
[ 2425.922335][T17060]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2425.928416][T17060]  ? lockdep_hardirqs_on+0x94/0x130
[ 2425.933644][T17060]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2425.939647][T17060]  do_syscall_64+0x3d/0xb0
[ 2425.944077][T17060]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2425.949979][T17060] RIP: 0033:0x7f344188c169
[ 2425.954398][T17060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2425.974102][T17060] RSP: 002b:00007f3442663168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2425.982547][T17060] RAX: ffffffffffffffda RBX: 00007f34419ac050 RCX: 00007f344188c169
[ 2425.990525][T17060] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2425.998507][T17060] RBP: 00007f34418e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2426.006485][T17060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2426.014550][T17060] R13: 00007ffe66a5445f R14: 00007f3442663300 R15: 0000000000022000
[ 2426.022551][T17060]  </TASK>
[ 2426.070196][T17060] memory: usage 10688kB, limit 0kB, failcnt 585
[ 2426.081264][T17060] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2426.098400][T17060] Memory cgroup stats for /syz5:
[ 2426.098602][T17060] anon 118784
[ 2426.098602][T17060] file 10465280
[ 2426.098602][T17060] kernel 282624
[ 2426.098602][T17060] kernel_stack 32768
[ 2426.098602][T17060] pagetables 81920
[ 2426.098602][T17060] sec_pagetables 0
[ 2426.098602][T17060] percpu 0
[ 2426.098602][T17060] sock 0
[ 2426.098602][T17060] vmalloc 0
[ 2426.098602][T17060] shmem 10461184
[ 2426.098602][T17060] zswap 0
[ 2426.098602][T17060] zswapped 0
[ 2426.098602][T17060] file_mapped 163840
[ 2426.098602][T17060] file_dirty 4096
[ 2426.098602][T17060] file_writeback 0
[ 2426.098602][T17060] swapcached 0
[ 2426.098602][T17060] anon_thp 0
[ 2426.098602][T17060] file_thp 0
[ 2426.098602][T17060] shmem_thp 0
[ 2426.098602][T17060] inactive_anon 0
[ 2426.098602][T17060] active_anon 10579968
[ 2426.098602][T17060] inactive_file 0
[ 2426.098602][T17060] active_file 4096
[ 2426.098602][T17060] unevictable 0
[ 2426.098602][T17060] slab_reclaimable 56264
[ 2426.098602][T17060] slab_unreclaimable 83600
[ 2426.098602][T17060] slab 139864
[ 2426.201620][T17060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16979,uid=0
[ 2426.220779][T17060] Memory cgroup out of memory: Killed process 16979 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2429.203698][ T3906] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.424658][ T3906] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.529933][ T3906] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.611034][ T3906] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2430.494033][ T3906] device hsr_slave_0 left promiscuous mode
[ 2430.500860][ T3906] device hsr_slave_1 left promiscuous mode
[ 2430.513845][ T3906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2430.521297][ T3906] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2430.531106][ T3906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2430.539173][ T3906] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2430.548601][ T3906] device bridge_slave_1 left promiscuous mode
[ 2430.555278][ T3906] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2430.569889][ T3906] device bridge_slave_0 left promiscuous mode
[ 2430.581793][ T3906] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2430.598787][ T3906] device veth1_macvtap left promiscuous mode
[ 2430.605110][ T3906] device veth0_macvtap left promiscuous mode
[ 2430.611244][ T3906] device veth1_vlan left promiscuous mode
[ 2430.619687][ T3906] device veth0_vlan left promiscuous mode
[ 2430.831562][ T3906] team0 (unregistering): Port device team_slave_1 removed
[ 2430.850873][ T3906] team0 (unregistering): Port device team_slave_0 removed
[ 2430.866599][ T3906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2430.880290][ T3906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2430.942170][ T3906] bond0 (unregistering): Released all slaves
18:12:46 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:12:46 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@kfunc], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xdb, &(0x7f0000000200)=""/219, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:12:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[0xffffffffffffffff]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:12:46 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:12:46 executing program 2:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:12:46 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(0x0, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:12:46 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:12:47 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:12:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000200000000000000000000002c2908000000000018410000000000000000005d000000009500000000000000f50677036999832e7ec1ae8a420a04c800e682d95a0e803331e973c589cd46871c8126411b449947b25090af1001000100000000004555a315911d54e9d1b004902176930a83b851af27dfa43b06e775884ca893b4d7caa5d3559723ad1c16268a59f7279a27588d66a235c8a6e8b62b7e5750784f72593486373c98f70d29732077b7ffb34140514653dd2c23cf8051f14b01ff1456990200000038625b0264b69fe02ae079a35c0c4db5791a614f237c73b59123300601ae348ef3bd8ca40ce005a96dcd00ec6cf2e965b60e048757554f4bf70992661dcdfd3d24cc7330508dd4bf3d8df3dcdf0b1c90b2d873cf4a5113f893c7de5900"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:12:47 executing program 2:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:12:47 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:12:47 executing program 1:
perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

[ 2438.724448][T31261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2438.739133][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2438.752210][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2438.772762][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2438.784531][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2438.792001][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2439.498551][T17414] chnl_net:caif_netlink_parms(): no params data found
[ 2439.729951][T17414] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2439.786095][T17414] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2439.818733][T17414] device bridge_slave_0 entered promiscuous mode
[ 2439.855173][T17414] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2439.862734][T17414] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2439.879796][T17414] device bridge_slave_1 entered promiscuous mode
[ 2439.999922][T17414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2440.050765][T17414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2440.218237][T17414] team0: Port device team_slave_0 added
[ 2440.235568][T17414] team0: Port device team_slave_1 added
[ 2440.340858][T17414] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2440.359336][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2440.471350][T17414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2440.563000][T17414] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2440.570012][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2440.693728][T17414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2440.812794][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2440.825658][T17414] device hsr_slave_0 entered promiscuous mode
[ 2440.853185][T17414] device hsr_slave_1 entered promiscuous mode
[ 2440.868410][T17414] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2440.902419][T17414] Cannot create hsr debugfs directory
[ 2442.899114][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2443.054862][T17414] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2443.100634][T17414] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2443.110725][T17414] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2443.143296][T17414] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2443.347688][T17414] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2443.370935][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2443.388703][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2443.409292][T17414] 8021q: adding VLAN 0 to HW filter on device team0
[ 2443.449781][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2443.473977][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2443.492835][T31280] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2443.500026][T31280] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2443.532900][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2443.541999][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2443.556530][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2443.567200][T31280] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2443.574412][T31280] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2443.583206][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2443.593830][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2443.631724][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2443.649732][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2443.658735][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2443.679677][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2443.703465][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2443.712019][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2443.721477][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2443.730333][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2443.754731][T17414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2443.794294][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2444.133275][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2444.140986][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2444.170732][T17414] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2444.693427][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2444.702213][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2444.761435][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2444.778606][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2444.790858][T17414] device veth0_vlan entered promiscuous mode
[ 2444.808034][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2444.823630][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2444.835884][T17414] device veth1_vlan entered promiscuous mode
[ 2444.876731][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2444.895385][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2444.916359][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2444.933854][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2444.945147][T17414] device veth0_macvtap entered promiscuous mode
[ 2444.960615][T17414] device veth1_macvtap entered promiscuous mode
[ 2444.972735][T31261] Bluetooth: hci0: command 0x040f tx timeout
[ 2444.988373][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2444.999154][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.009428][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2445.022124][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.032343][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2445.043077][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.053624][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2445.065956][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.076334][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2445.090751][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.107801][T17414] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2445.120022][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2445.131248][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2445.150551][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2445.159764][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2445.178904][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2445.192172][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.203112][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2445.214317][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.231254][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2445.247375][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.262505][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2445.273734][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.283865][T17414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2445.296324][T17414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2445.307930][T17414] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2445.320627][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2445.339510][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2445.358477][T17414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2445.370455][T17414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2445.391164][T17414] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2445.401866][T17414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2445.526399][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2445.545799][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2445.575754][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2445.576540][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2445.591070][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2445.624413][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2446.194500][T17510] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2446.208267][T17510] CPU: 0 PID: 17510 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2446.216752][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2446.226849][T17510] Call Trace:
[ 2446.230166][T17510]  <TASK>
[ 2446.233142][T17510]  dump_stack_lvl+0x1e3/0x2cb
[ 2446.237876][T17510]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2446.243382][T17510]  ? panic+0x75d/0x75d
[ 2446.247515][T17510]  dump_header+0xdf/0x9c0
[ 2446.251897][T17510]  oom_kill_process+0xf8/0x520
[ 2446.256707][T17510]  out_of_memory+0xf30/0x12f0
[ 2446.261432][T17510]  ? mutex_lock_io_nested+0x60/0x60
[ 2446.266679][T17510]  ? preempt_schedule+0xd9/0xe0
[ 2446.271569][T17510]  ? unregister_oom_notifier+0x20/0x20
[ 2446.277066][T17510]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2446.283299][T17510]  ? lockdep_hardirqs_on+0x94/0x130
[ 2446.288554][T17510]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2446.294840][T17510]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2446.300473][T17510]  ? preempt_schedule_thunk+0x16/0x18
[ 2446.305897][T17510]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2446.311508][T17510]  ? cgroup_file_notify+0x123/0x190
[ 2446.316753][T17510]  memory_max_write+0x34d/0x470
[ 2446.321626][T17510]  ? memory_max_show+0xa0/0xa0
[ 2446.326418][T17510]  ? read_lock_is_recursive+0x10/0x10
[ 2446.331801][T17510]  ? memory_max_show+0xa0/0xa0
[ 2446.336576][T17510]  cgroup_file_write+0x2c6/0x690
[ 2446.341524][T17510]  ? mutex_lock_io_nested+0x60/0x60
[ 2446.346750][T17510]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2446.351874][T17510]  ? __virt_addr_valid+0x22b/0x2e0
[ 2446.357019][T17510]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2446.362155][T17510]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2446.367497][T17510]  vfs_write+0x7ae/0xba0
[ 2446.371781][T17510]  ? file_end_write+0x250/0x250
[ 2446.376666][T17510]  ? mutex_lock_nested+0x17/0x20
[ 2446.381630][T17510]  ? __fdget_pos+0x250/0x2f0
[ 2446.386254][T17510]  ? ksys_write+0x77/0x2c0
[ 2446.390709][T17510]  ksys_write+0x19c/0x2c0
[ 2446.395053][T17510]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2446.401251][T17510]  ? __ia32_sys_read+0x80/0x80
[ 2446.406064][T17510]  ? syscall_enter_from_user_mode+0x37/0x220
[ 2446.412114][T17510]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2446.418180][T17510]  do_syscall_64+0x3d/0xb0
[ 2446.422632][T17510]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2446.428587][T17510] RIP: 0033:0x7faa7ce8c169
[ 2446.433037][T17510] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2446.452678][T17510] RSP: 002b:00007faa7dc94168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2446.461131][T17510] RAX: ffffffffffffffda RBX: 00007faa7cfac050 RCX: 00007faa7ce8c169
[ 2446.469148][T17510] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2446.477145][T17510] RBP: 00007faa7cee7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2446.485133][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2446.493115][T17510] R13: 00007ffd477b7d5f R14: 00007faa7dc94300 R15: 0000000000022000
[ 2446.501114][T17510]  </TASK>
[ 2446.540106][T17510] memory: usage 10608kB, limit 0kB, failcnt 585
[ 2446.548425][T17510] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2446.562763][T17510] Memory cgroup stats for /syz5:
[ 2446.562952][T17510] anon 118784
[ 2446.562952][T17510] file 10461184
[ 2446.562952][T17510] kernel 266240
[ 2446.562952][T17510] kernel_stack 32768
[ 2446.562952][T17510] pagetables 81920
[ 2446.562952][T17510] sec_pagetables 0
[ 2446.562952][T17510] percpu 0
[ 2446.562952][T17510] sock 0
[ 2446.562952][T17510] vmalloc 0
[ 2446.562952][T17510] shmem 10461184
[ 2446.562952][T17510] zswap 0
[ 2446.562952][T17510] zswapped 0
[ 2446.562952][T17510] file_mapped 163840
[ 2446.562952][T17510] file_dirty 0
[ 2446.562952][T17510] file_writeback 0
[ 2446.562952][T17510] swapcached 0
[ 2446.562952][T17510] anon_thp 0
[ 2446.562952][T17510] file_thp 0
[ 2446.562952][T17510] shmem_thp 0
[ 2446.562952][T17510] inactive_anon 10579968
[ 2446.562952][T17510] active_anon 0
[ 2446.562952][T17510] inactive_file 0
[ 2446.562952][T17510] active_file 0
[ 2446.562952][T17510] unevictable 0
[ 2446.562952][T17510] slab_reclaimable 54488
[ 2446.562952][T17510] slab_unreclaimable 79384
[ 2446.562952][T17510] slab 133872
[ 2446.662104][T17510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17414,uid=0
[ 2446.681736][T17510] Memory cgroup out of memory: Killed process 17414 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2449.300399][T31174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2449.724956][T31174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2449.804393][T31174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2449.870802][T31174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2450.759648][T31174] device hsr_slave_0 left promiscuous mode
[ 2450.770164][T31174] device hsr_slave_1 left promiscuous mode
[ 2450.777542][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2450.787839][T31174] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2450.801939][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2450.817370][T31174] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2450.830166][T31174] device bridge_slave_1 left promiscuous mode
[ 2450.841511][T31174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2450.860090][T31174] device bridge_slave_0 left promiscuous mode
[ 2450.868852][T31174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2450.891782][T31174] device veth1_macvtap left promiscuous mode
[ 2450.909820][T31174] device veth0_macvtap left promiscuous mode
[ 2450.919844][T31174] device veth1_vlan left promiscuous mode
[ 2450.926514][T31174] device veth0_vlan left promiscuous mode
[ 2451.117545][T31174] team0 (unregistering): Port device team_slave_1 removed
[ 2451.130770][T31174] team0 (unregistering): Port device team_slave_0 removed
[ 2451.145983][T31174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2451.161944][T31174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2451.232007][T31174] bond0 (unregistering): Released all slaves
18:13:02 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:13:02 executing program 1:
perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:13:02 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000200000000000000000000002c2908000000000018410000000000000000005d000000009500000000000000f50677036999832e7ec1ae8a420a04c800e682d95a0e803331e973c589cd46871c8126411b449947b25090af1001000100000000004555a315911d54e9d1b004902176930a83b851af27dfa43b06e775884ca893b4d7caa5d3559723ad1c16268a59f7279a27588d66a235c8a6e8b62b7e5750784f72593486373c98f70d29732077b7ffb34140514653dd2c23cf8051f14b01ff1456990200000038625b0264b69fe02ae079a35c0c4db5791a614f237c73b59123300601ae348ef3bd8ca40ce005a96dcd00ec6cf2e965b60e048757554f4bf70992661dcdfd3d24cc7330508dd4bf3d8df3dcdf0b1c90b2d873cf4a5113f893c7de5900"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:13:02 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:02 executing program 2:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @jmp]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299806a8ca4c46d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf7ade2394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f086fbb3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036e39d5ee41b43cb37becfc5c36d8127ca878c4a65b2f2089ed5593689cded5d46e6695609955c7477fad72b4a5f2a10345eaf56cb05bfcd6e38d6bb962fba3c8b87e057d882d8842ae7b9cffebb03c4d30ddde9bdf743"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:13:02 executing program 1:
perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:13:02 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="0dac395a9f41238ba03838164b048311e3d72eafa3ff097b107eccec87cc2e5129216e305e14f3764730ff391532bbea1094a00cdad9e8ecd7b961ea1ba7826c718457379a932f6d4985bdb207ccd12d793fe20995095bdc1ca959f43bcd1d1fd39077b7e45f92de72c8d5f207e37453bb40fe0adb294b06d4e4add65233990d45ca32c28c497aca73ab09e581e76d37e855657868390027ee38e7bb2da7db918b6fd0d9167425081d9d791454dd3976bb8d30ef59c134b99984daf6686df50eb395d45c5eb8dd5c3d20e68104edebbc69ee01b09d163b365828371643c0a56c6f34aba8d1cb82778013017a07395c33d03ffb85e359756be9a2a6f96bf20733d27dcb5acc070facfcea308a6e751602ef8bc76255df9a7eaf2e3e6dbd56174c4fd659c28496be5a3a13aa15a5c75c1d", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:13:03 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002940)={0x6, 0xd, &(0x7f0000001780)=@framed={{}, [@alu, @exit, @initr0, @exit, @cb_func, @call, @map_fd]}, &(0x7f0000001800)='GPL\x00', 0x0, 0x1000, &(0x7f0000001840)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:13:03 executing program 2:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x5}, 0x10)

18:13:03 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x0, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)="263abd030e98ff4dc870bd6688a86408", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @map_fd={0x18, 0x0, 0x1, 0x24}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_put\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x5, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:03 executing program 2:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
socketpair(0x2b, 0x1, 0x5, &(0x7f0000000300))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='devices.list\x00', 0x0, 0x0)
getpid()
r2 = getpid()
perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x0, 0x1, 0x8, 0x0, 0x38, 0x18, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x3, @perf_config_ext={0x1, 0x80}, 0x8000, 0x0, 0xffffffff, 0x4, 0x0, 0xf2, 0x6, 0x0, 0x2, 0x0, 0x8}, r2, 0x3, 0xffffffffffffffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080))

[ 2454.419140][T22622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2454.429090][T22622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2454.437248][T22622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2454.447419][T22622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2454.455993][T22622] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2454.467300][T22622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2455.022746][T17735] chnl_net:caif_netlink_parms(): no params data found
[ 2455.321310][T17735] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2455.353532][T17735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2455.361837][T17735] device bridge_slave_0 entered promiscuous mode
[ 2455.407913][T17735] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2455.439191][T17735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2455.460706][T17735] device bridge_slave_1 entered promiscuous mode
[ 2455.546730][T17735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2455.579791][T17735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2455.757494][T17735] team0: Port device team_slave_0 added
[ 2455.808330][T17735] team0: Port device team_slave_1 added
[ 2455.865500][T17735] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2455.882494][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2455.942555][T17735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2455.973596][T17735] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2455.981613][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2456.052427][T17735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2456.196852][T17735] device hsr_slave_0 entered promiscuous mode
[ 2456.245257][T17735] device hsr_slave_1 entered promiscuous mode
[ 2456.272590][T17735] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2456.294433][T17735] Cannot create hsr debugfs directory
[ 2456.492675][T22622] Bluetooth: hci0: command 0x0409 tx timeout
[ 2457.742155][T17735] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2457.776056][T17735] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2457.796888][T17735] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2457.833442][T17735] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2458.039125][T17735] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2458.086482][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2458.095284][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2458.121966][T17735] 8021q: adding VLAN 0 to HW filter on device team0
[ 2458.153304][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2458.162130][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2458.183126][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2458.190299][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2458.233120][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2458.241188][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2458.278821][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2458.304135][T17829] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2458.311274][T17829] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2458.334605][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2458.353825][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2458.372921][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2458.382141][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2458.439382][T17735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2458.460532][T17735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2458.473979][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2458.501613][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2458.526996][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2458.553423][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2458.561984][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2458.572696][T22622] Bluetooth: hci0: command 0x041b tx timeout
[ 2458.598832][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2458.609187][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2458.629572][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2459.003617][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2459.012184][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2459.031976][T17735] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2459.428363][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2459.443722][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2459.510818][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2459.520454][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2459.531234][T17735] device veth0_vlan entered promiscuous mode
[ 2459.540207][T17800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2459.548889][T17800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2459.578021][T17735] device veth1_vlan entered promiscuous mode
[ 2459.606162][T17800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2459.616187][T17800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2459.625547][T17800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2459.634658][T17800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2459.659883][T17735] device veth0_macvtap entered promiscuous mode
[ 2459.673464][T17735] device veth1_macvtap entered promiscuous mode
[ 2459.691408][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2459.708378][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.718629][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2459.729373][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.741772][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2459.753208][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.763430][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2459.774878][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.785004][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2459.796096][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.807824][T17735] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2459.827959][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2459.836782][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2459.845411][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2459.855047][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2459.867101][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2459.879452][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.890173][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2459.901633][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.911796][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2459.925651][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.943014][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2459.960276][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2459.970489][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2459.989395][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.001297][T17735] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2460.025571][T17800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2460.041717][T17800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2460.054864][T17735] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2460.072411][T17735] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2460.089475][T17735] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2460.106216][T17735] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2460.267011][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2460.295781][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2460.334086][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2460.354934][T30270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2460.373672][T30270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2460.409134][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2460.652636][T22622] Bluetooth: hci0: command 0x040f tx timeout
[ 2461.024220][T17840] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2461.035271][T17840] CPU: 0 PID: 17840 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2461.043741][T17840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2461.053833][T17840] Call Trace:
[ 2461.057149][T17840]  <TASK>
[ 2461.060110][T17840]  dump_stack_lvl+0x1e3/0x2cb
[ 2461.064836][T17840]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2461.070337][T17840]  ? panic+0x75d/0x75d
[ 2461.074455][T17840]  ? ___ratelimit+0x4c0/0x670
[ 2461.079183][T17840]  ? local_lock_release+0x170/0x170
[ 2461.084430][T17840]  dump_header+0xdf/0x9c0
[ 2461.088892][T17840]  oom_kill_process+0xf8/0x520
[ 2461.093703][T17840]  out_of_memory+0xf30/0x12f0
[ 2461.098454][T17840]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2461.104639][T17840]  ? lockdep_hardirqs_on+0x94/0x130
[ 2461.109859][T17840]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2461.116039][T17840]  ? unregister_oom_notifier+0x20/0x20
[ 2461.121516][T17840]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2461.127102][T17840]  ? preempt_schedule_thunk+0x16/0x18
[ 2461.132495][T17840]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2461.138148][T17840]  ? cgroup_file_notify+0x123/0x190
[ 2461.143366][T17840]  memory_max_write+0x34d/0x470
[ 2461.148234][T17840]  ? memory_max_show+0xa0/0xa0
[ 2461.153012][T17840]  ? memory_max_show+0xa0/0xa0
[ 2461.157782][T17840]  cgroup_file_write+0x2c6/0x690
[ 2461.162731][T17840]  ? mutex_lock_io_nested+0x60/0x60
[ 2461.167948][T17840]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2461.173094][T17840]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2461.178210][T17840]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2461.183546][T17840]  vfs_write+0x7ae/0xba0
[ 2461.187804][T17840]  ? file_end_write+0x250/0x250
[ 2461.192935][T17840]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2461.199107][T17840]  ? ksys_write+0xfd/0x2c0
[ 2461.203531][T17840]  ? ksys_write+0x118/0x2c0
[ 2461.208046][T17840]  ksys_write+0x19c/0x2c0
[ 2461.212401][T17840]  ? print_irqtrace_events+0x210/0x210
[ 2461.217876][T17840]  ? __ia32_sys_read+0x80/0x80
[ 2461.222667][T17840]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2461.228668][T17840]  ? lockdep_hardirqs_on+0x94/0x130
[ 2461.233885][T17840]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2461.239899][T17840]  do_syscall_64+0x3d/0xb0
[ 2461.244329][T17840]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2461.250230][T17840] RIP: 0033:0x7f3843e8c169
[ 2461.254656][T17840] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2461.274268][T17840] RSP: 002b:00007f3844b80168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2461.282688][T17840] RAX: ffffffffffffffda RBX: 00007f3843fac050 RCX: 00007f3843e8c169
[ 2461.290666][T17840] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2461.298644][T17840] RBP: 00007f3843ee7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2461.306619][T17840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2461.314597][T17840] R13: 00007ffcf3722f2f R14: 00007f3844b80300 R15: 0000000000022000
[ 2461.325892][T17840]  </TASK>
[ 2461.359735][T17840] memory: usage 10676kB, limit 0kB, failcnt 585
[ 2461.378113][T17840] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2461.385508][T17840] Memory cgroup stats for /syz5:
[ 2461.385690][T17840] anon 118784
[ 2461.385690][T17840] file 10461184
[ 2461.385690][T17840] kernel 274432
[ 2461.385690][T17840] kernel_stack 32768
[ 2461.385690][T17840] pagetables 77824
[ 2461.385690][T17840] sec_pagetables 0
[ 2461.385690][T17840] percpu 0
[ 2461.385690][T17840] sock 0
[ 2461.385690][T17840] vmalloc 0
[ 2461.385690][T17840] shmem 10461184
[ 2461.385690][T17840] zswap 0
[ 2461.385690][T17840] zswapped 0
[ 2461.385690][T17840] file_mapped 163840
[ 2461.385690][T17840] file_dirty 0
[ 2461.385690][T17840] file_writeback 0
[ 2461.385690][T17840] swapcached 0
[ 2461.385690][T17840] anon_thp 0
[ 2461.385690][T17840] file_thp 0
[ 2461.385690][T17840] shmem_thp 0
[ 2461.385690][T17840] inactive_anon 10461184
[ 2461.385690][T17840] active_anon 118784
[ 2461.385690][T17840] inactive_file 0
[ 2461.385690][T17840] active_file 0
[ 2461.385690][T17840] unevictable 0
[ 2461.385690][T17840] slab_reclaimable 51400
[ 2461.385690][T17840] slab_unreclaimable 83600
[ 2461.385690][T17840] slab 135000
[ 2461.534890][T17840] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17735,uid=0
[ 2461.582772][T17840] Memory cgroup out of memory: Killed process 17735 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2464.269620][ T3705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.381877][ T3705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.471518][ T3705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.546747][ T3705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2465.359468][ T3705] device hsr_slave_0 left promiscuous mode
[ 2465.366207][ T3705] device hsr_slave_1 left promiscuous mode
[ 2465.373109][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2465.380644][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2465.390979][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2465.398668][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2465.409012][ T3705] device bridge_slave_1 left promiscuous mode
[ 2465.422099][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2465.431461][ T3705] device bridge_slave_0 left promiscuous mode
[ 2465.446835][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2465.468378][ T3705] device veth1_macvtap left promiscuous mode
[ 2465.479165][ T3705] device veth0_macvtap left promiscuous mode
[ 2465.488117][ T3705] device veth1_vlan left promiscuous mode
[ 2465.498341][ T3705] device veth0_vlan left promiscuous mode
[ 2465.713679][ T3705] team0 (unregistering): Port device team_slave_1 removed
[ 2465.729293][ T3705] team0 (unregistering): Port device team_slave_0 removed
[ 2465.745252][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2465.758848][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2465.824139][ T3705] bond0 (unregistering): Released all slaves
[ 2467.214671][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.221013][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
18:13:25 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:13:25 executing program 1:
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:13:25 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:13:25 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x0, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)="263abd030e98ff4dc870bd6688a86408", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @map_fd={0x18, 0x0, 0x1, 0x24}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_put\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x5, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:25 executing program 2:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x0, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)="263abd030e98ff4dc870bd6688a86408", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @map_fd={0x18, 0x0, 0x1, 0x24}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_put\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x5, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:25 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0008030000086d6f9f487a74dde5e9fac9f9513154ffb3ff030000f56c8374cbe5d99a130e1f636709e048decbe24bb592299806a8ca4c46d7bbad3fc61f86a3798700eb2129cf607c223e4b8c7f1687f6d8df1da48cd67815f62156cf7ade2394b3d16f825976c0b0c36e2db48ade28fe642efb21f16681cd5aeebd2341f5c6ab1ecf05adb78fff445806189faf2b6dc37f77dbf2b0a1e6d4b89eff16e67ea60b26c312f086fbb3c1d61a0a9c63469ca436d6d2321df23da24e75309e7036e39d5ee41b43cb37becfc5c36d8127ca878c4a65b2f2089ed5593689cded5d46e6695609955c7477fad72b4a5f2a10345eaf56cb05bfcd6e38d6bb962fba3c8b87e057d882d8842ae7b9cffebb03c4d30ddde9bdf743"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:13:26 executing program 1:
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:13:26 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x0, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)="263abd030e98ff4dc870bd6688a86408", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @map_fd={0x18, 0x0, 0x1, 0x24}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_put\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x5, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:26 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:13:26 executing program 2:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x0, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)="263abd030e98ff4dc870bd6688a86408", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @map_fd={0x18, 0x0, 0x1, 0x24}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_put\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x5, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:27 executing program 1:
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:13:27 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

[ 2478.050140][T31261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2478.060171][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2478.073632][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2478.081878][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2478.090016][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2478.103189][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2478.967907][T18033] chnl_net:caif_netlink_parms(): no params data found
[ 2479.184387][T18033] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2479.191622][T18033] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2479.242623][T18033] device bridge_slave_0 entered promiscuous mode
[ 2479.276382][T18033] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2479.312506][T18033] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2479.329253][T18033] device bridge_slave_1 entered promiscuous mode
[ 2479.451191][T18033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2479.496178][T18033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2479.650186][T18033] team0: Port device team_slave_0 added
[ 2479.670229][T18033] team0: Port device team_slave_1 added
[ 2479.764453][T18033] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2479.771476][T18033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2479.874892][T18033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2479.908544][T18033] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2479.929320][T18033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2480.012397][T18033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2480.180169][T31261] Bluetooth: hci0: command 0x0409 tx timeout
[ 2480.225127][T18033] device hsr_slave_0 entered promiscuous mode
[ 2480.243737][T18033] device hsr_slave_1 entered promiscuous mode
[ 2480.278930][T18033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2480.322580][T18033] Cannot create hsr debugfs directory
[ 2482.252595][T31261] Bluetooth: hci0: command 0x041b tx timeout
[ 2483.176521][T18033] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2483.236867][T18033] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2483.250140][T18033] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2483.283432][T18033] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2483.521783][T18033] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2483.587512][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2483.595987][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2483.608272][T18033] 8021q: adding VLAN 0 to HW filter on device team0
[ 2483.628118][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2483.643329][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2483.651941][T15383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2483.659146][T15383] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2483.694297][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2483.713007][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2483.721992][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2483.738786][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2483.745979][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2483.754428][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2483.763470][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2483.787112][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2483.797243][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2483.806450][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2483.818811][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2483.835291][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2483.844608][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2483.858122][T18033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2483.870803][T18033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2483.887281][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2483.900777][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2483.912079][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2484.122787][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2484.130304][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2484.159377][T18033] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2484.332837][T31261] Bluetooth: hci0: command 0x040f tx timeout
[ 2484.634073][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2484.651834][T31280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2484.704115][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2484.720096][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2484.731228][T18033] device veth0_vlan entered promiscuous mode
[ 2484.743400][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2484.752085][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2484.778413][T18033] device veth1_vlan entered promiscuous mode
[ 2484.843415][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2484.851689][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2484.873652][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2484.892963][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2484.904232][T18033] device veth0_macvtap entered promiscuous mode
[ 2484.928505][T18033] device veth1_macvtap entered promiscuous mode
[ 2484.974052][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2484.984671][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2484.994938][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2485.006145][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.016477][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2485.035030][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.052908][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2485.082396][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.092279][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2485.114343][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.127974][T18033] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2485.145447][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2485.164425][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2485.182706][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2485.191914][T17829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2485.216527][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2485.234280][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.245033][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2485.258337][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.268793][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2485.281761][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.298489][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2485.309354][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.319640][T18033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2485.342527][T18033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.366842][T18033] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2485.400319][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2485.409769][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2485.426240][T18033] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2485.439064][T18033] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2485.448160][T18033] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2485.475040][T18033] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2485.589687][ T3906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2485.624171][ T3906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2485.654117][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2485.677203][ T3906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2485.686752][ T3906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2485.714727][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2486.250242][T18148] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2486.264478][T18148] CPU: 0 PID: 18148 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2486.272952][T18148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2486.283044][T18148] Call Trace:
[ 2486.286355][T18148]  <TASK>
[ 2486.289321][T18148]  dump_stack_lvl+0x1e3/0x2cb
[ 2486.294048][T18148]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2486.299552][T18148]  ? panic+0x75d/0x75d
[ 2486.303665][T18148]  ? ___ratelimit+0x4c0/0x670
[ 2486.308386][T18148]  ? local_lock_release+0x170/0x170
[ 2486.313605][T18148]  dump_header+0xdf/0x9c0
[ 2486.317978][T18148]  oom_kill_process+0xf8/0x520
[ 2486.322839][T18148]  out_of_memory+0xf30/0x12f0
[ 2486.327527][T18148]  ? mutex_lock_io_nested+0x60/0x60
[ 2486.332741][T18148]  ? preempt_schedule+0xd9/0xe0
[ 2486.337598][T18148]  ? unregister_oom_notifier+0x20/0x20
[ 2486.343066][T18148]  ? lockdep_hardirqs_on+0x94/0x130
[ 2486.348294][T18148]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2486.353859][T18148]  ? preempt_schedule_thunk+0x16/0x18
[ 2486.359248][T18148]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2486.364828][T18148]  ? cgroup_file_notify+0x123/0x190
[ 2486.370151][T18148]  memory_max_write+0x34d/0x470
[ 2486.375108][T18148]  ? memory_max_show+0xa0/0xa0
[ 2486.379896][T18148]  ? read_lock_is_recursive+0x10/0x10
[ 2486.385275][T18148]  ? memory_max_show+0xa0/0xa0
[ 2486.390050][T18148]  cgroup_file_write+0x2c6/0x690
[ 2486.395002][T18148]  ? mutex_lock_io_nested+0x60/0x60
[ 2486.400217][T18148]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2486.405335][T18148]  ? __virt_addr_valid+0x22b/0x2e0
[ 2486.410466][T18148]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2486.415585][T18148]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2486.420890][T18148]  vfs_write+0x7ae/0xba0
[ 2486.425148][T18148]  ? file_end_write+0x250/0x250
[ 2486.430119][T18148]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2486.436287][T18148]  ? ksys_write+0xfd/0x2c0
[ 2486.440713][T18148]  ksys_write+0x19c/0x2c0
[ 2486.445050][T18148]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2486.451225][T18148]  ? __ia32_sys_read+0x80/0x80
[ 2486.455999][T18148]  ? syscall_enter_from_user_mode+0x37/0x220
[ 2486.461991][T18148]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2486.467990][T18148]  do_syscall_64+0x3d/0xb0
[ 2486.472420][T18148]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2486.478322][T18148] RIP: 0033:0x7f3dd9e8c169
[ 2486.482745][T18148] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2486.502361][T18148] RSP: 002b:00007f3ddab7b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2486.510783][T18148] RAX: ffffffffffffffda RBX: 00007f3dd9fac050 RCX: 00007f3dd9e8c169
[ 2486.518777][T18148] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2486.526756][T18148] RBP: 00007f3dd9ee7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2486.534733][T18148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2486.542729][T18148] R13: 00007ffee7138e2f R14: 00007f3ddab7b300 R15: 0000000000022000
[ 2486.550725][T18148]  </TASK>
[ 2486.575985][T31261] Bluetooth: hci0: command 0x0419 tx timeout
[ 2486.588781][T18148] memory: usage 10684kB, limit 0kB, failcnt 585
[ 2486.609952][T18148] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2486.621063][T18148] Memory cgroup stats for /syz5:
[ 2486.621264][T18148] anon 118784
[ 2486.621264][T18148] file 10461184
[ 2486.621264][T18148] kernel 311296
[ 2486.621264][T18148] kernel_stack 65536
[ 2486.621264][T18148] pagetables 77824
[ 2486.621264][T18148] sec_pagetables 0
[ 2486.621264][T18148] percpu 0
[ 2486.621264][T18148] sock 0
[ 2486.621264][T18148] vmalloc 0
[ 2486.621264][T18148] shmem 10461184
[ 2486.621264][T18148] zswap 0
[ 2486.621264][T18148] zswapped 0
[ 2486.621264][T18148] file_mapped 163840
[ 2486.621264][T18148] file_dirty 0
[ 2486.621264][T18148] file_writeback 0
[ 2486.621264][T18148] swapcached 0
[ 2486.621264][T18148] anon_thp 0
[ 2486.621264][T18148] file_thp 0
[ 2486.621264][T18148] shmem_thp 0
[ 2486.621264][T18148] inactive_anon 10461184
[ 2486.621264][T18148] active_anon 118784
[ 2486.621264][T18148] inactive_file 0
[ 2486.621264][T18148] active_file 0
[ 2486.621264][T18148] unevictable 0
[ 2486.621264][T18148] slab_reclaimable 56024
[ 2486.621264][T18148] slab_unreclaimable 83600
[ 2486.621264][T18148] slab 139624
[ 2486.721441][T18148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18033,uid=0
[ 2486.745491][T18148] Memory cgroup out of memory: Killed process 18033 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2488.924162][   T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2489.191424][   T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2489.290454][   T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2489.433229][   T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2490.278326][   T56] device hsr_slave_0 left promiscuous mode
[ 2490.286691][   T56] device hsr_slave_1 left promiscuous mode
[ 2490.295062][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2490.302909][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2490.312155][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2490.322590][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2490.331745][   T56] device bridge_slave_1 left promiscuous mode
[ 2490.338672][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2490.350385][   T56] device bridge_slave_0 left promiscuous mode
[ 2490.356996][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2490.371200][   T56] device veth1_macvtap left promiscuous mode
[ 2490.378519][   T56] device veth0_macvtap left promiscuous mode
[ 2490.388875][   T56] device veth1_vlan left promiscuous mode
[ 2490.398203][   T56] device veth0_vlan left promiscuous mode
[ 2490.720899][   T56] team0 (unregistering): Port device team_slave_1 removed
[ 2490.775370][   T56] team0 (unregistering): Port device team_slave_0 removed
[ 2490.789616][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2490.815827][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2490.957873][   T56] bond0 (unregistering): Released all slaves
18:13:49 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r1)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:13:49 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:13:49 executing program 2:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x0, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)="263abd030e98ff4dc870bd6688a86408", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @map_fd={0x18, 0x0, 0x1, 0x24}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_put\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x5, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:13:49 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:13:49 executing program 3:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffa}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x0, 0xd14df105eac57c3d, 0x10, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x2, 0x0, 0x9, 0x7, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x3f82, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x3, 0x80000001}, 0x10}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000040)="263abd030e98ff4dc870bd6688a86408", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xdp_bulk_tx\x00'}, 0x10)
r1 = getpid()
perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x63, 0xa, 0xff00}, [@call={0x75}, @exit, @map_fd={0x18, 0x0, 0x1, 0x24}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_put\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x5, 0x3, 0x1f, 0x14, 0x0, 0x3, 0x40400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6dc3, 0x3, @perf_bp={&(0x7f0000000540)}, 0xc0a8, 0x4, 0x0, 0x7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x0, 0xc9be}, 0xffffffffffffffff, 0x0, r2, 0x0)

18:13:50 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:13:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:13:50 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002480)={0x18, 0x4, &(0x7f0000002280)=@framed={{}, [@jmp={0x6, 0x0, 0x3}]}, &(0x7f0000002300)='syzkaller\x00', 0x4, 0x9f, &(0x7f0000002340)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

18:13:50 executing program 2:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x16}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfeb9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xf, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80)
r1 = getpid()
perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8006, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cpuset.cpus\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x40, 0x66, 0x0, 0x0, 0x9, 0x80004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x2220, 0x5, 0x9, 0x0, 0x7c, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xb)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000140))
r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x1, 0xfe, 0x4, 0x3, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9435, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x84962, 0x20, 0x20, 0x6, 0x3, 0x200, 0x1, 0x0, 0x1f, 0x0, 0x2}, r1, 0x9, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0xff, 0x2, 0x2, 0x0, 0x7, 0x4a080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000380), 0x7}, 0x200, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1ff}, 0x0, 0xf, r3, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x8, 0x8, 0x5, 0x3f, 0x0, 0x3ff, 0x28094, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x1c}, 0x15836, 0xe2f, 0x8, 0x6, 0x7, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1, 0x9, 0x1, 0x18, 0x0, 0x8, 0xe00a0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x1830, 0x6, 0x9d6, 0x6, 0x0, 0x2, 0x6, 0x0, 0x20, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xb)

18:13:51 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x8422}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r0, &(0x7f0000000000), 0x248800)

18:13:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="0dac395a9f41238ba03838164b048311e3d72eafa3ff097b107eccec87cc2e5129216e305e14f3764730ff391532bbea1094a00cdad9e8ecd7b961ea1ba7826c718457379a932f6d4985bdb207ccd12d793fe20995095bdc1ca959f43bcd1d1fd39077b7e45f92de72c8d5f207e37453bb40fe0adb294b06d4e4add65233990d45ca32c28c497aca73ab09e581e76d37e855657868390027ee38e7bb2da7db918b6fd0d9167425081d9d791454dd3976bb8d30ef59c134b99984daf6686df50eb395d45c5eb8dd5c3d20e68104edebbc69ee01b09d163b365828371643c0a56c6f34aba8d1cb82778013017a07395c33d03ffb85e359756be9a2a6f96bf20733d27dcb5acc070facfcea308a6e751602ef8bc76255df9a7eaf2e3e6dbd56174c4fd659c28496be5a3a13aa15a5c75c1d", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

[ 2502.190286][T22622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2502.200039][T22622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2502.222613][T22622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2502.232872][T22622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2502.240514][T22622] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2502.249115][T22622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2502.829965][T18525] chnl_net:caif_netlink_parms(): no params data found
[ 2503.083427][T18525] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2503.090680][T18525] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2503.130341][T18525] device bridge_slave_0 entered promiscuous mode
[ 2503.140080][T18525] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2503.162592][T18525] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2503.170868][T18525] device bridge_slave_1 entered promiscuous mode
[ 2503.311514][T18525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2503.336926][T18525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2503.434043][T18525] team0: Port device team_slave_0 added
[ 2503.455013][T18525] team0: Port device team_slave_1 added
[ 2503.590740][T18525] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2503.615412][T18525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2503.694054][T18525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2503.728616][T18525] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2503.738612][T18525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2503.800157][T18525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2503.914382][T18525] device hsr_slave_0 entered promiscuous mode
[ 2503.952730][T18525] device hsr_slave_1 entered promiscuous mode
[ 2503.971944][T18525] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2503.999057][T18525] Cannot create hsr debugfs directory
[ 2504.332723][T22622] Bluetooth: hci0: command 0x0409 tx timeout
[ 2505.096055][T18525] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2505.106463][T18525] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2505.118087][T18525] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2505.129637][T18525] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2505.258062][T18525] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2505.272249][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2505.282135][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2505.344181][T18525] 8021q: adding VLAN 0 to HW filter on device team0
[ 2505.355483][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2505.371688][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2505.384271][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2505.391418][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2505.443338][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2505.451642][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2505.468854][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2505.479694][T17830] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2505.486878][T17830] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2505.502552][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2505.552235][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2505.566510][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2505.576488][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2505.587368][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2505.617595][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2505.626661][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2505.637932][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2505.648412][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2505.683467][T18525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2505.696675][T18525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2505.707634][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2505.718515][T17830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2506.065027][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2506.082648][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2506.108352][T18525] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2506.412646][T22622] Bluetooth: hci0: command 0x041b tx timeout
[ 2506.605780][T18544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2506.636895][T18544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2506.675166][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2506.689225][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2506.700467][T18525] device veth0_vlan entered promiscuous mode
[ 2506.715995][T18544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2506.729112][T18544] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2506.749527][T18525] device veth1_vlan entered promiscuous mode
[ 2506.764810][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2506.802883][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2506.811614][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2506.831384][T18525] device veth0_macvtap entered promiscuous mode
[ 2506.844185][T18525] device veth1_macvtap entered promiscuous mode
[ 2506.862134][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2506.874974][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2506.885342][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2506.897925][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2506.908106][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2506.919248][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2506.945092][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2506.955992][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2506.972947][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2507.003803][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2507.034039][T18525] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2507.045264][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2507.063867][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2507.072064][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2507.094292][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2507.109191][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2507.125112][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2507.138470][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2507.149408][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2507.172459][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2507.192722][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2507.212504][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2507.233779][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2507.248757][T18525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2507.262275][T18525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2507.276349][T18525] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2507.300722][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2507.312020][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2507.323967][T18525] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2507.340435][T18525] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2507.351622][T18525] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2507.370117][T18525] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2507.508823][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2507.548152][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2507.575461][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2507.590693][ T3906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2507.611177][ T3906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2507.644369][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2508.272233][T18622] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2508.283634][T18622] CPU: 0 PID: 18622 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2508.292100][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2508.302284][T18622] Call Trace:
[ 2508.305605][T18622]  <TASK>
[ 2508.308637][T18622]  dump_stack_lvl+0x1e3/0x2cb
[ 2508.313399][T18622]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2508.318909][T18622]  ? panic+0x75d/0x75d
[ 2508.323032][T18622]  ? ___ratelimit+0x4c0/0x670
[ 2508.327766][T18622]  ? local_lock_release+0x170/0x170
[ 2508.333021][T18622]  dump_header+0xdf/0x9c0
[ 2508.337402][T18622]  oom_kill_process+0xf8/0x520
[ 2508.342218][T18622]  out_of_memory+0xf30/0x12f0
[ 2508.346947][T18622]  ? mutex_lock_io_nested+0x60/0x60
[ 2508.352256][T18622]  ? preempt_schedule+0xd9/0xe0
[ 2508.357118][T18622]  ? unregister_oom_notifier+0x20/0x20
[ 2508.362589][T18622]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2508.368760][T18622]  ? lockdep_hardirqs_on+0x94/0x130
[ 2508.373979][T18622]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2508.380166][T18622]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2508.386702][T18622]  ? preempt_schedule_thunk+0x16/0x18
[ 2508.392132][T18622]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2508.397733][T18622]  ? cgroup_file_notify+0x123/0x190
[ 2508.402983][T18622]  memory_max_write+0x34d/0x470
[ 2508.407873][T18622]  ? memory_max_show+0xa0/0xa0
[ 2508.412735][T18622]  ? read_lock_is_recursive+0x10/0x10
[ 2508.418155][T18622]  ? memory_max_show+0xa0/0xa0
[ 2508.423387][T18622]  cgroup_file_write+0x2c6/0x690
[ 2508.428349][T18622]  ? mutex_lock_io_nested+0x60/0x60
[ 2508.433573][T18622]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2508.438734][T18622]  ? __sanitizer_cov_trace_pc+0x41/0x60
[ 2508.444341][T18622]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2508.449463][T18622]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2508.454771][T18622]  vfs_write+0x7ae/0xba0
[ 2508.459053][T18622]  ? file_end_write+0x250/0x250
[ 2508.463933][T18622]  ? mutex_lock_nested+0x17/0x20
[ 2508.468884][T18622]  ? __fdget_pos+0x250/0x2f0
[ 2508.473485][T18622]  ? ksys_write+0x77/0x2c0
[ 2508.477912][T18622]  ksys_write+0x19c/0x2c0
[ 2508.482251][T18622]  ? lockdep_hardirqs_on+0x94/0x130
[ 2508.487471][T18622]  ? __ia32_sys_read+0x80/0x80
[ 2508.492257][T18622]  do_syscall_64+0x3d/0xb0
[ 2508.496689][T18622]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2508.502615][T18622] RIP: 0033:0x7fa6f7c8c169
[ 2508.507040][T18622] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2508.526658][T18622] RSP: 002b:00007fa6f8a1f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2508.535086][T18622] RAX: ffffffffffffffda RBX: 00007fa6f7dac050 RCX: 00007fa6f7c8c169
[ 2508.543071][T18622] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2508.551053][T18622] RBP: 00007fa6f7ce7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2508.559038][T18622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2508.567020][T18622] R13: 00007ffc5907019f R14: 00007fa6f8a1f300 R15: 0000000000022000
[ 2508.575028][T18622]  </TASK>
[ 2508.595634][T22622] Bluetooth: hci0: command 0x040f tx timeout
[ 2508.624288][T18622] memory: usage 10684kB, limit 0kB, failcnt 585
[ 2508.633376][T18622] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2508.640435][T18622] Memory cgroup stats for /syz5:
[ 2508.640649][T18622] anon 118784
[ 2508.640649][T18622] file 10461184
[ 2508.640649][T18622] kernel 282624
[ 2508.640649][T18622] kernel_stack 32768
[ 2508.640649][T18622] pagetables 81920
[ 2508.640649][T18622] sec_pagetables 0
[ 2508.640649][T18622] percpu 0
[ 2508.640649][T18622] sock 0
[ 2508.640649][T18622] vmalloc 0
[ 2508.640649][T18622] shmem 10461184
[ 2508.640649][T18622] zswap 0
[ 2508.640649][T18622] zswapped 0
[ 2508.640649][T18622] file_mapped 163840
[ 2508.640649][T18622] file_dirty 0
[ 2508.640649][T18622] file_writeback 0
[ 2508.640649][T18622] swapcached 0
[ 2508.640649][T18622] anon_thp 0
[ 2508.640649][T18622] file_thp 0
[ 2508.640649][T18622] shmem_thp 0
[ 2508.640649][T18622] inactive_anon 10461184
[ 2508.640649][T18622] active_anon 118784
[ 2508.640649][T18622] inactive_file 0
[ 2508.640649][T18622] active_file 0
[ 2508.640649][T18622] unevictable 0
[ 2508.640649][T18622] slab_reclaimable 58984
[ 2508.640649][T18622] slab_unreclaimable 84896
[ 2508.640649][T18622] slab 143880
[ 2508.751658][T18622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18525,uid=0
[ 2508.774461][T18622] Memory cgroup out of memory: Killed process 18525 (syz-executor.5) total-vm:50576kB, anon-rss:448kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2511.503158][ T3705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2511.673878][ T3705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2511.753519][ T3705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2511.830327][ T3705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2512.700591][ T3705] device hsr_slave_0 left promiscuous mode
[ 2512.710103][ T3705] device hsr_slave_1 left promiscuous mode
[ 2512.717232][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2512.726174][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2512.743621][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2512.751290][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2512.760965][ T3705] device bridge_slave_1 left promiscuous mode
[ 2512.767709][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2512.776944][ T3705] device bridge_slave_0 left promiscuous mode
[ 2512.783608][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2512.797635][ T3705] device veth1_macvtap left promiscuous mode
[ 2512.803876][ T3705] device veth0_macvtap left promiscuous mode
[ 2512.810831][ T3705] device veth1_vlan left promiscuous mode
[ 2512.831407][ T3705] device veth0_vlan left promiscuous mode
[ 2513.149128][ T3705] team0 (unregistering): Port device team_slave_1 removed
[ 2513.162140][ T3705] team0 (unregistering): Port device team_slave_0 removed
[ 2513.176130][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2513.189754][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2513.264694][ T3705] bond0 (unregistering): Released all slaves
18:14:09 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:14:09 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:14:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:14:09 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x8422}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r0, &(0x7f0000000000), 0x248800)

18:14:09 executing program 2:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x16}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfeb9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xf, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80)
r1 = getpid()
perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8006, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cpuset.cpus\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x40, 0x66, 0x0, 0x0, 0x9, 0x80004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x2220, 0x5, 0x9, 0x0, 0x7c, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xb)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000140))
r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x1, 0xfe, 0x4, 0x3, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9435, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x84962, 0x20, 0x20, 0x6, 0x3, 0x200, 0x1, 0x0, 0x1f, 0x0, 0x2}, r1, 0x9, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0xff, 0x2, 0x2, 0x0, 0x7, 0x4a080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000380), 0x7}, 0x200, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1ff}, 0x0, 0xf, r3, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x8, 0x8, 0x5, 0x3f, 0x0, 0x3ff, 0x28094, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x1c}, 0x15836, 0xe2f, 0x8, 0x6, 0x7, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1, 0x9, 0x1, 0x18, 0x0, 0x8, 0xe00a0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x1830, 0x6, 0x9d6, 0x6, 0x0, 0x2, 0x6, 0x0, 0x20, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xb)

18:14:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:14:10 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x8422}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r0, &(0x7f0000000000), 0x248800)

18:14:10 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="0dac395a9f41238ba03838164b048311e3d72eafa3ff097b107eccec87cc2e5129216e305e14f3764730ff391532bbea1094a00cdad9e8ecd7b961ea1ba7826c718457379a932f6d4985bdb207ccd12d793fe20995095bdc1ca959f43bcd1d1fd39077b7e45f92de72c8d5f207e37453bb40fe0adb294b06d4e4add65233990d45ca32c28c497aca73ab09e581e76d37e855657868390027ee38e7bb2da7db918b6fd0d9167425081d9d791454dd3976bb8d30ef59c134b99984daf6686df50eb395d45c5eb8dd5c3d20e68104edebbc69ee01b09d163b365828371643c0a56c6f34aba8d1cb82778013017a07395c33d03ffb85e359756be9a2a6f96bf20733d27dcb5acc070facfcea308a6e751602ef8bc76255df9a7eaf2e3e6dbd56174c4fd659c28496be5a3a13aa15a5c75c1d", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:14:10 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:14:10 executing program 2:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x16}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfeb9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xf, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80)
r1 = getpid()
perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8006, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cpuset.cpus\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x40, 0x66, 0x0, 0x0, 0x9, 0x80004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x2220, 0x5, 0x9, 0x0, 0x7c, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xb)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000140))
r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x1, 0xfe, 0x4, 0x3, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9435, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x84962, 0x20, 0x20, 0x6, 0x3, 0x200, 0x1, 0x0, 0x1f, 0x0, 0x2}, r1, 0x9, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0xff, 0x2, 0x2, 0x0, 0x7, 0x4a080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000380), 0x7}, 0x200, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1ff}, 0x0, 0xf, r3, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x8, 0x8, 0x5, 0x3f, 0x0, 0x3ff, 0x28094, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x1c}, 0x15836, 0xe2f, 0x8, 0x6, 0x7, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1, 0x9, 0x1, 0x18, 0x0, 0x8, 0xe00a0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x1830, 0x6, 0x9d6, 0x6, 0x0, 0x2, 0x6, 0x0, 0x20, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xb)

18:14:10 executing program 3:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x8422}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r0, &(0x7f0000000000), 0x248800)

18:14:11 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

[ 2521.712058][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2521.721123][T31261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2521.730042][T31261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2521.744182][T31261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2521.751516][T31261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2521.956243][T18961] chnl_net:caif_netlink_parms(): no params data found
[ 2522.044961][T18961] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2522.052166][T18961] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2522.061073][T18961] device bridge_slave_0 entered promiscuous mode
[ 2522.070186][T18961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2522.077930][T18961] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2522.086660][T18961] device bridge_slave_1 entered promiscuous mode
[ 2522.119135][T18961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2522.132097][T18961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2522.165974][T18961] team0: Port device team_slave_0 added
[ 2522.175022][T18961] team0: Port device team_slave_1 added
[ 2522.211773][T18961] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2522.220587][T18961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2522.249333][T18961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2522.262664][T18961] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2522.270488][T18961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2522.297044][T18961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2522.375021][T18961] device hsr_slave_0 entered promiscuous mode
[ 2522.382031][T18961] device hsr_slave_1 entered promiscuous mode
[ 2522.395448][T18961] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2522.406548][T18961] Cannot create hsr debugfs directory
[ 2523.405136][T18961] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2523.415535][T18961] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2523.461232][T18961] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2523.473163][T18961] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2523.611029][T18961] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2523.649993][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2523.666397][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2523.679283][T18961] 8021q: adding VLAN 0 to HW filter on device team0
[ 2523.712990][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2523.721825][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2523.731280][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2523.738473][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2523.756027][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2523.764810][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2523.774004][T22622] Bluetooth: hci0: command 0x0409 tx timeout
[ 2523.782966][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2523.791549][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2523.798727][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2523.807275][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2523.855521][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2523.865066][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2523.881049][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2523.903295][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2523.912216][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2523.921348][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2523.931377][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2523.957809][T18961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2523.969668][T18961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2523.979956][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2523.989381][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2523.998847][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2524.309139][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2524.323168][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2524.336998][T18961] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2524.850764][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2524.860320][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2524.890517][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2524.900740][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2524.912108][T18961] device veth0_vlan entered promiscuous mode
[ 2524.920833][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2524.936350][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2524.953565][T18961] device veth1_vlan entered promiscuous mode
[ 2524.984063][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2524.994863][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2525.009946][T18961] device veth0_macvtap entered promiscuous mode
[ 2525.025227][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2525.034741][T17432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2525.046398][T18961] device veth1_macvtap entered promiscuous mode
[ 2525.055349][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2525.064521][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2525.081996][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2525.096746][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.107751][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2525.126140][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.141012][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2525.155251][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.172663][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2525.189010][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.220315][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2525.242416][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.264358][T18961] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2525.278110][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2525.301826][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2525.325501][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2525.340744][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.362830][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2525.392459][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.404265][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2525.422484][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.445592][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2525.472389][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.482283][T18961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2525.505377][T18961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2525.517451][T18961] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2525.532224][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2525.547895][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2525.559560][T18961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2525.571891][T18961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2525.581183][T18961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2525.590364][T18961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2525.715219][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2525.735650][T30270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2525.742962][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2525.762055][T30270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2525.780021][T18544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2525.791459][T18544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2525.853068][T22622] Bluetooth: hci0: command 0x041b tx timeout
[ 2526.379989][T19046] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2526.391672][T19046] CPU: 0 PID: 19046 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2526.400185][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2526.410283][T19046] Call Trace:
[ 2526.413603][T19046]  <TASK>
[ 2526.416585][T19046]  dump_stack_lvl+0x1e3/0x2cb
[ 2526.421317][T19046]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2526.426826][T19046]  ? panic+0x75d/0x75d
[ 2526.430948][T19046]  ? ___ratelimit+0x4c0/0x670
[ 2526.435686][T19046]  ? local_lock_release+0x170/0x170
[ 2526.440956][T19046]  dump_header+0xdf/0x9c0
[ 2526.445368][T19046]  oom_kill_process+0xf8/0x520
[ 2526.450173][T19046]  out_of_memory+0xf30/0x12f0
[ 2526.454920][T19046]  ? mutex_lock_io_nested+0x60/0x60
[ 2526.460188][T19046]  ? preempt_schedule+0xd9/0xe0
[ 2526.465092][T19046]  ? unregister_oom_notifier+0x20/0x20
[ 2526.470613][T19046]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2526.476829][T19046]  ? lockdep_hardirqs_on+0x94/0x130
[ 2526.482089][T19046]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2526.488322][T19046]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2526.493920][T19046]  ? preempt_schedule_thunk+0x16/0x18
[ 2526.499327][T19046]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2526.504907][T19046]  ? cgroup_file_notify+0x123/0x190
[ 2526.510132][T19046]  memory_max_write+0x34d/0x470
[ 2526.515011][T19046]  ? memory_max_show+0xa0/0xa0
[ 2526.519796][T19046]  ? memory_max_show+0xa0/0xa0
[ 2526.524569][T19046]  cgroup_file_write+0x2c6/0x690
[ 2526.529515][T19046]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2526.535689][T19046]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2526.540818][T19046]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2526.545937][T19046]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2526.551243][T19046]  vfs_write+0x7ae/0xba0
[ 2526.555505][T19046]  ? file_end_write+0x250/0x250
[ 2526.560379][T19046]  ? mutex_lock_nested+0x17/0x20
[ 2526.565356][T19046]  ? __fdget_pos+0x250/0x2f0
[ 2526.569956][T19046]  ? ksys_write+0x77/0x2c0
[ 2526.574387][T19046]  ksys_write+0x19c/0x2c0
[ 2526.578739][T19046]  ? print_irqtrace_events+0x210/0x210
[ 2526.584210][T19046]  ? __ia32_sys_read+0x80/0x80
[ 2526.588982][T19046]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2526.594978][T19046]  ? lockdep_hardirqs_on+0x94/0x130
[ 2526.600200][T19046]  ? syscall_enter_from_user_mode+0x2e/0x220
[ 2526.606220][T19046]  do_syscall_64+0x3d/0xb0
[ 2526.610651][T19046]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2526.616560][T19046] RIP: 0033:0x7f50e3a8c169
[ 2526.620987][T19046] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2526.640633][T19046] RSP: 002b:00007f50e472c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2526.649076][T19046] RAX: ffffffffffffffda RBX: 00007f50e3bac050 RCX: 00007f50e3a8c169
[ 2526.657068][T19046] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2526.665066][T19046] RBP: 00007f50e3ae7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2526.673119][T19046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2526.681141][T19046] R13: 00007ffee45643cf R14: 00007f50e472c300 R15: 0000000000022000
[ 2526.689154][T19046]  </TASK>
[ 2526.745581][T19046] memory: usage 10676kB, limit 0kB, failcnt 585
[ 2526.755719][T19046] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2526.766370][T19046] Memory cgroup stats for /syz5:
[ 2526.766574][T19046] anon 118784
[ 2526.766574][T19046] file 10461184
[ 2526.766574][T19046] kernel 274432
[ 2526.766574][T19046] kernel_stack 32768
[ 2526.766574][T19046] pagetables 77824
[ 2526.766574][T19046] sec_pagetables 0
[ 2526.766574][T19046] percpu 0
[ 2526.766574][T19046] sock 0
[ 2526.766574][T19046] vmalloc 0
[ 2526.766574][T19046] shmem 10461184
[ 2526.766574][T19046] zswap 0
[ 2526.766574][T19046] zswapped 0
[ 2526.766574][T19046] file_mapped 163840
[ 2526.766574][T19046] file_dirty 0
[ 2526.766574][T19046] file_writeback 0
[ 2526.766574][T19046] swapcached 0
[ 2526.766574][T19046] anon_thp 0
[ 2526.766574][T19046] file_thp 0
[ 2526.766574][T19046] shmem_thp 0
[ 2526.766574][T19046] inactive_anon 10461184
[ 2526.766574][T19046] active_anon 118784
[ 2526.766574][T19046] inactive_file 0
[ 2526.766574][T19046] active_file 0
[ 2526.766574][T19046] unevictable 0
[ 2526.766574][T19046] slab_reclaimable 51400
[ 2526.766574][T19046] slab_unreclaimable 83600
[ 2526.766574][T19046] slab 135000
[ 2526.871404][T19046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18961,uid=0
[ 2526.895028][T19046] Memory cgroup out of memory: Killed process 18961 (syz-executor.5) total-vm:50576kB, anon-rss:456kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2528.654078][ T1256] ieee802154 phy0 wpan0: encryption failed: -22
[ 2528.660394][ T1256] ieee802154 phy1 wpan1: encryption failed: -22
[ 2529.890508][ T3705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2530.135076][ T3705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2530.200971][ T3705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2530.280350][ T3705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2531.090520][ T3705] device hsr_slave_0 left promiscuous mode
[ 2531.097330][ T3705] device hsr_slave_1 left promiscuous mode
[ 2531.111835][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2531.119430][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2531.135736][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2531.149692][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2531.167225][ T3705] device bridge_slave_1 left promiscuous mode
[ 2531.175834][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2531.189521][ T3705] device bridge_slave_0 left promiscuous mode
[ 2531.198500][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2531.219341][ T3705] device veth1_macvtap left promiscuous mode
[ 2531.229994][ T3705] device veth0_macvtap left promiscuous mode
[ 2531.239044][ T3705] device veth1_vlan left promiscuous mode
[ 2531.250957][ T3705] device veth0_vlan left promiscuous mode
[ 2531.539371][ T3705] team0 (unregistering): Port device team_slave_1 removed
[ 2531.556341][ T3705] team0 (unregistering): Port device team_slave_0 removed
[ 2531.568844][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2531.583416][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2531.648347][ T3705] bond0 (unregistering): Released all slaves
18:14:27 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700)

18:14:27 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:14:27 executing program 3:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x16}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfeb9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xf, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80)
r1 = getpid()
perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8006, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cpuset.cpus\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x40, 0x66, 0x0, 0x0, 0x9, 0x80004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x2220, 0x5, 0x9, 0x0, 0x7c, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xb)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000140))
r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x1, 0xfe, 0x4, 0x3, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9435, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x84962, 0x20, 0x20, 0x6, 0x3, 0x200, 0x1, 0x0, 0x1f, 0x0, 0x2}, r1, 0x9, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0xff, 0x2, 0x2, 0x0, 0x7, 0x4a080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000380), 0x7}, 0x200, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1ff}, 0x0, 0xf, r3, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x8, 0x8, 0x5, 0x3f, 0x0, 0x3ff, 0x28094, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x1c}, 0x15836, 0xe2f, 0x8, 0x6, 0x7, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1, 0x9, 0x1, 0x18, 0x0, 0x8, 0xe00a0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x1830, 0x6, 0x9d6, 0x6, 0x0, 0x2, 0x6, 0x0, 0x20, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xb)

18:14:27 executing program 2:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x16}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfeb9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xf, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80)
r1 = getpid()
perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8006, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cpuset.cpus\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x40, 0x66, 0x0, 0x0, 0x9, 0x80004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x2220, 0x5, 0x9, 0x0, 0x7c, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xb)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000140))
r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x1, 0xfe, 0x4, 0x3, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9435, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x84962, 0x20, 0x20, 0x6, 0x3, 0x200, 0x1, 0x0, 0x1f, 0x0, 0x2}, r1, 0x9, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0xff, 0x2, 0x2, 0x0, 0x7, 0x4a080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000380), 0x7}, 0x200, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1ff}, 0x0, 0xf, r3, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x8, 0x8, 0x5, 0x3f, 0x0, 0x3ff, 0x28094, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x1c}, 0x15836, 0xe2f, 0x8, 0x6, 0x7, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1, 0x9, 0x1, 0x18, 0x0, 0x8, 0xe00a0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x1830, 0x6, 0x9d6, 0x6, 0x0, 0x2, 0x6, 0x0, 0x20, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xb)

18:14:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2e96524839e5982e)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
gettid()
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12)
r1 = perf_event_open(0x0, 0x0, 0xffbffffdf0000002, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x8, 0x0, 0xffff, 0x7, 0x0, 0x1, 0x6, 0x0, 0x6, 0x0, 0x8}, r5, 0x6, 0xffffffffffffffff, 0x5)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00')
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x6)
write$cgroup_int(r3, &(0x7f0000000180), 0x12)

18:14:27 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x56, 0x7f, 0x8, 0x0, 0x538, 0xa410, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000300), 0x2}, 0x300, 0xffffffffffffffff, 0x9, 0x0, 0x3a, 0x3fe, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000200000000000000000000002c2908000000000018410000000000000000005d000000009500000000000000f50677036999832e7ec1ae8a420a04c800e682d95a0e803331e973c589cd46871c8126411b449947b25090af1001000100000000004555a315911d54e9d1b004902176930a83b851af27dfa43b06e775884ca893b4d7caa5d3559723ad1c16268a59f7279a27588d66a235c8a6e8b62b7e5750784f72593486373c98f70d29732077b7ffb34140514653dd2c23cf8051f14b01ff1456990200000038625b0264b69fe02ae079a35c0c4db5791a614f237c73b59123300601ae348ef3bd8ca40ce005a96dcd00ec6cf2e965b60e048757554f4bf70992661dcdfd3d24cc7330508dd4bf3d8df3dcdf0b1c90b2d873cf4a5113f893c7de5900"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:14:27 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:14:28 executing program 2:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x8422}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r0, &(0x7f0000000000), 0x248800)

18:14:28 executing program 3:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x16}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfeb9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x773}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xf, &(0x7f0000000980)=ANY=[@ANYRES64], 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000002f40)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80)
r1 = getpid()
perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8006, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='cpuset.cpus\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x40, 0x66, 0x0, 0x0, 0x9, 0x80004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x2220, 0x5, 0x9, 0x0, 0x7c, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0xb)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000140))
r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x1, 0xfe, 0x4, 0x3, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9435, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x84962, 0x20, 0x20, 0x6, 0x3, 0x200, 0x1, 0x0, 0x1f, 0x0, 0x2}, r1, 0x9, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0xff, 0x2, 0x2, 0x0, 0x7, 0x4a080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000380), 0x7}, 0x200, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1ff}, 0x0, 0xf, r3, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x8, 0x8, 0x5, 0x3f, 0x0, 0x3ff, 0x28094, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x1c}, 0x15836, 0xe2f, 0x8, 0x6, 0x7, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1, 0x9, 0x1, 0x18, 0x0, 0x8, 0xe00a0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x1830, 0x6, 0x9d6, 0x6, 0x0, 0x2, 0x6, 0x0, 0x20, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xb)

18:14:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.self_freezing\x00', 0x26e1, 0x0)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2b6bc3, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x6, 0xfff}, 0x85232, 0x0, 0xfffffffb, 0x2, 0xfff, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0xffffffffffffffef)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0xdb4, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r3]}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/305], &(0x7f0000000140)='syzkaller\x00', 0x401, 0x69, &(0x7f0000000780)=""/105, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)=0x4000000001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_clone(0x5c002480, &(0x7f0000000c00)="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", 0x130, 0x0, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r3, 0x0, 0x179, &(0x7f00000005c0)='b\xd6\xc5\xfb\x1d\x9c\x938\xb0\xddm\xb9\x9bL\xbb\x99t\a\xc9l\x1f\x8e\xc3p\xcb=sc\x1e\xde\xe0\n\x9f\xa2\xfbRm_\xcbN\a\x89@^\xc0\xd5\xa3T\x88n\xa4#\xa8\x03\x00\x00\x00\xc0\xbevhQ\xf0+\xdd\xf5\x18\xa6U\xeb\xa1\x1c\v\xb6\v=\xb3\xbe\xe5\xf8\xae6\xafpe\x05~F\x99\xa1g\x9f\x10\xfb(\xbe\xb4\x95\xc5\xf2\x9f!\x85\a\x00\xbd\xba\a(\xb2\x86\x19\xca\xcb\x13\x1ee(6e\xb1\xaf\x95-\x056!c\xd3\x05\xd0\xdd\xa1\t\xfa\x16\\H\xe2\x00\xb4\xcep\xe5\xe2\xa9\xc2&\x80\xa5\xef\xcdA\xed\xddTL\xc0\xd94{\xdcs1u\xd3\x1c\x8eN\xa7\x96{q(I~\x9a\xa9\x83c\x91\xfa\xff\xe0\x8462\x9fs\xe3?{\xa3{pH8\xe1\xef\xb2\xe9\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1q\xa8\x926m\x7f\xda\x13$C\xb1.\x92\xdb\xb7\xda\xaa\x13\x16\x93k\xa8m\x01;\xd7\x83\xffz\x84\xa3Yy\xeczK\x9b\xd6\xb0e9\x13#E\xd4\xdd\xbfx)\x1eI\x8e\x9c\x03\xeb\x82x\x19\xb8w\xc4\xf4z\xf3\xe6\xca\xf9\xb6\xaf\x02\xd5\xd7\x9e\\\xb92\be\xb8\x8e\x00\x00\x00\x00\x00\x00\x00\x00\xd9\t{\x95[S\xa2\x9e\x89\r(\xaa\x05%\xa5\x85\xf8\x81j\x01\xa0\x1e\x17\xdbA\xb0:j\xa7\xe9\xf1^\xe1h!Km\xa4k*IoK-\x95\xcd\x94h\xb15\x9e\xc7\xc32\x1c\x91\xf1\xfdM\xd9\xb2\xe0\x89\x91\x8am\xdaa\x03\xe4E\x06\xf5S\xe2'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200)=0xfffffffffffffffc, 0x12)
socketpair(0xb, 0x1, 0xffffffff, &(0x7f00000000c0))
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0))

18:14:28 executing program 1:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="bf6990000000800000000076519cc32e335a17a091396a363c034491212aec2e87d4aadf0400605fc1c937469fb9c0ff033916bcfe25ca0be279429f525695d7356deca5b8d01401b6d0245e94262f164ddd94da"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x1, 0x4, 0x9, 0x3, 0x0, 0xe5f7, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3aefeb58, 0x1, @perf_bp={0x0, 0x1}, 0x20, 0x100, 0x80, 0x4, 0x7, 0x200, 0x8000, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
openat$cgroup_ro(r1, &(0x7f00000016c0)='cpuacct.usage_all\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000))
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='io_uring_cqring_wait\x00'}, 0x10)
gettid()

18:14:28 executing program 2:
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x8422}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r0, &(0x7f0000000000), 0x248800)

[ 2539.450124][T31261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2539.468592][T22623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2539.478226][T22623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2539.486387][T22623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2539.493706][T22623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2539.672803][T19397] chnl_net:caif_netlink_parms(): no params data found
[ 2539.758837][T19397] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2539.767229][T19397] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2539.782547][T19397] device bridge_slave_0 entered promiscuous mode
[ 2539.791571][T19397] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2539.806265][T19397] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2539.817264][T19397] device bridge_slave_1 entered promiscuous mode
[ 2539.861602][T19397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2539.880257][T19397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2539.929433][T19397] team0: Port device team_slave_0 added
[ 2539.952321][T19397] team0: Port device team_slave_1 added
[ 2539.991379][T19397] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2540.005093][T19397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2540.039084][T19397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2540.054490][T19397] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2540.061488][T19397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2540.087555][T19397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2540.131483][T19397] device hsr_slave_0 entered promiscuous mode
[ 2540.141203][T19397] device hsr_slave_1 entered promiscuous mode
[ 2540.153735][T19397] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2540.161339][T19397] Cannot create hsr debugfs directory
[ 2541.287959][T19397] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2541.324846][T19397] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2541.341191][T19397] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2541.358231][T19397] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2541.509372][T19397] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2541.536168][T22623] Bluetooth: hci0: command 0x0409 tx timeout
[ 2541.553636][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2541.561604][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2541.600064][T19397] 8021q: adding VLAN 0 to HW filter on device team0
[ 2541.618851][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2541.629752][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2541.638957][T18547] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2541.646139][T18547] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2541.665188][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2541.681662][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2541.699962][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2541.720110][T15383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2541.727321][T15383] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2541.742726][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2541.791012][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2541.800188][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2541.810191][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2541.819438][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2541.833209][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2541.848292][T19397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2541.879797][T19397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2541.900906][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2541.910451][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2541.926279][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2541.936995][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2541.946034][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2541.960485][T18547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2542.283045][T19397] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2542.291207][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2542.303807][T15383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2542.824442][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2542.843218][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2542.886248][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2542.895577][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2542.922503][T19397] device veth0_vlan entered promiscuous mode
[ 2542.941090][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2542.949637][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2542.973516][T19397] device veth1_vlan entered promiscuous mode
[ 2543.015248][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2543.025153][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2543.034853][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2543.043927][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2543.065231][T19397] device veth0_macvtap entered promiscuous mode
[ 2543.084489][T19397] device veth1_macvtap entered promiscuous mode
[ 2543.111988][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.130449][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.141086][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.159110][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.169644][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.187261][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.200145][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.221284][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.239304][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.250295][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.269114][T19397] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2543.280131][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2543.295963][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2543.307789][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2543.320775][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2543.340416][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2543.360795][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.371292][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2543.391948][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.412366][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2543.430470][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.440582][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2543.460148][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.471941][T19397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2543.489658][T19397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.501740][T19397] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2543.515494][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2543.524636][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2543.537129][T19397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2543.553793][T19397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2543.570340][T19397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2543.581017][T19397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2543.630337][T22623] Bluetooth: hci0: command 0x041b tx timeout
[ 2543.706375][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2543.732693][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2543.759467][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2543.766425][ T3705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2543.789279][ T3705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2543.809552][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2544.419888][T19486] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2544.443289][T19486] CPU: 1 PID: 19486 Comm: syz-executor.5 Not tainted 6.1.28-syzkaller #0
[ 2544.451819][T19486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2544.461910][T19486] Call Trace:
[ 2544.465222][T19486]  <TASK>
[ 2544.468185][T19486]  dump_stack_lvl+0x1e3/0x2cb
[ 2544.472913][T19486]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2544.478413][T19486]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2544.484631][T19486]  dump_header+0xdf/0x9c0
[ 2544.489007][T19486]  oom_kill_process+0xf8/0x520
[ 2544.493835][T19486]  out_of_memory+0xf30/0x12f0
[ 2544.498562][T19486]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2544.504756][T19486]  ? lockdep_hardirqs_on+0x94/0x130
[ 2544.510013][T19486]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2544.516210][T19486]  ? unregister_oom_notifier+0x20/0x20
[ 2544.521714][T19486]  mem_cgroup_out_of_memory+0x25f/0x3b0
[ 2544.527300][T19486]  ? preempt_schedule_thunk+0x16/0x18
[ 2544.532725][T19486]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 2544.538324][T19486]  ? cgroup_file_notify+0x123/0x190
[ 2544.543569][T19486]  memory_max_write+0x34d/0x470
[ 2544.548551][T19486]  ? memory_max_show+0xa0/0xa0
[ 2544.553357][T19486]  ? cgroup_file_write+0x1a1/0x690
[ 2544.558508][T19486]  ? memory_max_show+0xa0/0xa0
[ 2544.563303][T19486]  cgroup_file_write+0x2c6/0x690
[ 2544.568275][T19486]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 2544.574493][T19486]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2544.579647][T19486]  ? lock_is_held_type+0x137/0x180
[ 2544.584831][T19486]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 2544.589989][T19486]  kernfs_fop_write_iter+0x3a2/0x4f0
[ 2544.595319][T19486]  vfs_write+0x7ae/0xba0
[ 2544.599598][T19486]  ? file_end_write+0x250/0x250
[ 2544.604524][T19486]  ? mutex_lock_nested+0x17/0x20
[ 2544.609503][T19486]  ? __fdget_pos+0x250/0x2f0
[ 2544.614137][T19486]  ? ksys_write+0x77/0x2c0
[ 2544.618594][T19486]  ksys_write+0x19c/0x2c0
[ 2544.622959][T19486]  ? lockdep_hardirqs_on+0x94/0x130
[ 2544.628200][T19486]  ? __ia32_sys_read+0x80/0x80
[ 2544.633010][T19486]  do_syscall_64+0x3d/0xb0
[ 2544.637464][T19486]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2544.643488][T19486] RIP: 0033:0x7fc38168c169
[ 2544.647945][T19486] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2544.667680][T19486] RSP: 002b:00007fc382369168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2544.676133][T19486] RAX: ffffffffffffffda RBX: 00007fc3817ac050 RCX: 00007fc38168c169
[ 2544.684154][T19486] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005
[ 2544.692167][T19486] RBP: 00007fc3816e7ca1 R08: 0000000000000000 R09: 0000000000000000
[ 2544.700257][T19486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2544.708271][T19486] R13: 00007ffdac03a78f R14: 00007fc382369300 R15: 0000000000022000
[ 2544.716309][T19486]  </TASK>
[ 2544.742460][T19486] memory: usage 10672kB, limit 0kB, failcnt 585
[ 2544.749428][T19486] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2544.756666][T19486] Memory cgroup stats for /syz5:
[ 2544.757541][T19486] anon 118784
[ 2544.757541][T19486] file 10461184
[ 2544.757541][T19486] kernel 274432
[ 2544.757541][T19486] kernel_stack 32768
[ 2544.757541][T19486] pagetables 77824
[ 2544.757541][T19486] sec_pagetables 0
[ 2544.757541][T19486] percpu 0
[ 2544.757541][T19486] sock 0
[ 2544.757541][T19486] vmalloc 0
[ 2544.757541][T19486] shmem 10461184
[ 2544.757541][T19486] zswap 0
[ 2544.757541][T19486] zswapped 0
[ 2544.757541][T19486] file_mapped 163840
[ 2544.757541][T19486] file_dirty 0
[ 2544.757541][T19486] file_writeback 0
[ 2544.757541][T19486] swapcached 0
[ 2544.757541][T19486] anon_thp 0
[ 2544.757541][T19486] file_thp 0
[ 2544.757541][T19486] shmem_thp 0
[ 2544.757541][T19486] inactive_anon 10461184
[ 2544.757541][T19486] active_anon 118784
[ 2544.757541][T19486] inactive_file 0
[ 2544.757541][T19486] active_file 0
[ 2544.757541][T19486] unevictable 0
[ 2544.757541][T19486] slab_reclaimable 56024
[ 2544.757541][T19486] slab_unreclaimable 83600
[ 2544.757541][T19486] slab 139624
[ 2544.858033][T19486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19397,uid=0
[ 2544.883372][T19486] Memory cgroup out of memory: Killed process 19397 (syz-executor.5) total-vm:50576kB, anon-rss:452kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2547.585060][T31174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2547.912075][T31174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2547.995696][T31174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2548.061770][T31174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2549.074661][T31174] device hsr_slave_0 left promiscuous mode
[ 2549.081600][T31174] device hsr_slave_1 left promiscuous mode
[ 2549.089632][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2549.104272][T31174] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2549.118355][T31174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2549.128174][T31174] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2549.138069][T31174] device bridge_slave_1 left promiscuous mode
[ 2549.146410][T31174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2549.154931][T31174] device bridge_slave_0 left promiscuous mode
[ 2549.161163][T31174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2549.176578][T31174] device veth1_macvtap left promiscuous mode
[ 2549.182727][T31174] device veth0_macvtap left promiscuous mode
[ 2549.188831][T31174] device veth1_vlan left promiscuous mode
[ 2549.195188][T31174] device veth0_vlan left promiscuous mode
[ 2549.375042][T31174] team0 (unregistering): Port device team_slave_1 removed
[ 2549.391188][T31174] team0 (unregistering): Port device team_slave_0 removed
[ 2549.409542][T31174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2549.423417][T31174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2549.489144][T31174] bond0 (unregistering): Released all slaves
[ 2549.822887][T31174] ------------[ cut here ]------------
[ 2549.828852][T31174] ODEBUG: free active (active state 0) object type: timer_list hint: batadv_dat_purge+0x0/0x490
[ 2549.846647][T31174] WARNING: CPU: 0 PID: 31174 at lib/debugobjects.c:508 debug_check_no_obj_freed+0x451/0x610
[ 2549.857249][T31174] Modules linked in:
[ 2549.861176][T31174] CPU: 0 PID: 31174 Comm: kworker/u4:9 Not tainted 6.1.28-syzkaller #0
[ 2549.869655][T31174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2549.880565][T31174] Workqueue: netns cleanup_net
[ 2549.885726][T31174] RIP: 0010:debug_check_no_obj_freed+0x451/0x610
[ 2549.892199][T31174] Code: 74 08 48 89 ef e8 ff 53 a7 fd 48 8b 13 4c 8b 45 00 48 c7 c7 e0 cb 3c 8b 48 c7 c6 00 c9 3c 8b 44 89 f1 4d 89 f9 e8 1f 8a 19 fd <0f> 0b 48 ba 00 00 00 00 00 fc ff df 4c 8b 74 24 38 ff 05 e0 6a 1a
[ 2549.911912][T31174] RSP: 0018:ffffc90003ddf7e8 EFLAGS: 00010246
[ 2549.918054][T31174] RAX: 933e60b587086400 RBX: ffffffff8b3ccc58 RCX: ffff88807fb29dc0
[ 2549.926124][T31174] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 2549.934167][T31174] RBP: ffffffff8aeda6e0 R08: ffffffff81524d7e R09: fffff520007bbeb5
[ 2549.942175][T31174] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8aeda6e0
[ 2549.950252][T31174] R13: ffff88807d25f720 R14: 0000000000000000 R15: ffffffff8a50ec80
[ 2549.958320][T31174] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 2549.967351][T31174] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2549.974002][T31174] CR2: 00007fd7c40df108 CR3: 000000000cc8e000 CR4: 00000000003506f0
[ 2549.982021][T31174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2549.990078][T31174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[ 2549.998115][T31174] Call Trace:
[ 2550.001422][T31174]  <TASK>
[ 2550.004453][T31174]  __kmem_cache_free+0x205/0x3c0
[ 2550.009436][T31174]  ? device_release+0x91/0x1c0
[ 2550.014380][T31174]  ? netdev_uevent+0x90/0x90
[ 2550.019061][T31174]  device_release+0x91/0x1c0
[ 2550.023754][T31174]  kobject_put+0x224/0x460
[ 2550.028224][T31174]  netdev_run_todo+0xe56/0xf40
[ 2550.033143][T31174]  ? alloc_netdev_mqs+0xeb0/0xeb0
[ 2550.038207][T31174]  ? netdev_refcnt_read+0x50/0x50
[ 2550.043323][T31174]  ? unregister_netdevice_queue+0x258/0x350
[ 2550.049266][T31174]  ? list_netdevice+0x450/0x450
[ 2550.054219][T31174]  ? br_dev_delete+0xd0/0x100
[ 2550.059008][T31174]  default_device_exit_batch+0x5c1/0x630
[ 2550.064765][T31174]  ? net_rps_action_and_irq_enable+0x220/0x220
[ 2550.070973][T31174]  ? rdma_dev_init_net+0x280/0x280
[ 2550.076212][T31174]  ? mutex_lock_nested+0x17/0x20
[ 2550.081189][T31174]  ? net_rps_action_and_irq_enable+0x220/0x220
[ 2550.087457][T31174]  cleanup_net+0x763/0xb60
[ 2550.091922][T31174]  ? ops_free_list+0x340/0x340
[ 2550.096806][T31174]  process_one_work+0x8aa/0x11f0
[ 2550.101888][T31174]  ? worker_detach_from_pool+0x260/0x260
[ 2550.107630][T31174]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 2550.113255][T31174]  ? kthread_data+0x4e/0xc0
[ 2550.117808][T31174]  ? wq_worker_running+0x97/0x190
[ 2550.122932][T31174]  worker_thread+0xa5f/0x1210
[ 2550.127652][T31174]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 2550.133645][T31174]  ? _raw_spin_unlock+0x40/0x40
[ 2550.138555][T31174]  kthread+0x26e/0x300
[ 2550.142687][T31174]  ? rcu_lock_release+0x20/0x20
[ 2550.147577][T31174]  ? kthread_blkcg+0xd0/0xd0
[ 2550.152210][T31174]  ret_from_fork+0x1f/0x30
[ 2550.156734][T31174]  </TASK>
[ 2550.159787][T31174] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2550.167092][T31174] CPU: 0 PID: 31174 Comm: kworker/u4:9 Not tainted 6.1.28-syzkaller #0
[ 2550.175366][T31174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 2550.185452][T31174] Workqueue: netns cleanup_net
[ 2550.190265][T31174] Call Trace:
[ 2550.193568][T31174]  <TASK>
[ 2550.196522][T31174]  dump_stack_lvl+0x1e3/0x2cb
[ 2550.201239][T31174]  ? nf_tcp_handle_invalid+0x642/0x642
[ 2550.206833][T31174]  ? panic+0x75d/0x75d
[ 2550.210954][T31174]  ? vscnprintf+0x59/0x80
[ 2550.215361][T31174]  panic+0x318/0x75d
[ 2550.219302][T31174]  ? __warn+0x169/0x520
[ 2550.223496][T31174]  ? memcpy_page_flushcache+0xfc/0xfc
[ 2550.228921][T31174]  ? ret_from_fork+0x1f/0x30
[ 2550.233558][T31174]  __warn+0x348/0x520
[ 2550.237567][T31174]  ? debug_check_no_obj_freed+0x451/0x610
[ 2550.243414][T31174]  report_bug+0x2af/0x500
[ 2550.247784][T31174]  ? debug_check_no_obj_freed+0x451/0x610
[ 2550.253567][T31174]  handle_bug+0x3d/0x70
[ 2550.257751][T31174]  exc_invalid_op+0x16/0x40
[ 2550.262312][T31174]  asm_exc_invalid_op+0x16/0x20
[ 2550.267206][T31174] RIP: 0010:debug_check_no_obj_freed+0x451/0x610
[ 2550.273583][T31174] Code: 74 08 48 89 ef e8 ff 53 a7 fd 48 8b 13 4c 8b 45 00 48 c7 c7 e0 cb 3c 8b 48 c7 c6 00 c9 3c 8b 44 89 f1 4d 89 f9 e8 1f 8a 19 fd <0f> 0b 48 ba 00 00 00 00 00 fc ff df 4c 8b 74 24 38 ff 05 e0 6a 1a
[ 2550.293230][T31174] RSP: 0018:ffffc90003ddf7e8 EFLAGS: 00010246
[ 2550.299359][T31174] RAX: 933e60b587086400 RBX: ffffffff8b3ccc58 RCX: ffff88807fb29dc0
[ 2550.307373][T31174] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 2550.315386][T31174] RBP: ffffffff8aeda6e0 R08: ffffffff81524d7e R09: fffff520007bbeb5
[ 2550.323395][T31174] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8aeda6e0
[ 2550.331404][T31174] R13: ffff88807d25f720 R14: 0000000000000000 R15: ffffffff8a50ec80
[ 2550.339495][T31174]  ? batadv_dat_drop_broadcast_packet+0x240/0x240
[ 2550.345968][T31174]  ? __warn_printk+0x28e/0x350
[ 2550.350784][T31174]  ? debug_check_no_obj_freed+0x451/0x610
[ 2550.356558][T31174]  __kmem_cache_free+0x205/0x3c0
[ 2550.361543][T31174]  ? device_release+0x91/0x1c0
[ 2550.366351][T31174]  ? netdev_uevent+0x90/0x90
[ 2550.370980][T31174]  device_release+0x91/0x1c0
[ 2550.375618][T31174]  kobject_put+0x224/0x460
[ 2550.380078][T31174]  netdev_run_todo+0xe56/0xf40
[ 2550.384889][T31174]  ? alloc_netdev_mqs+0xeb0/0xeb0
[ 2550.389950][T31174]  ? netdev_refcnt_read+0x50/0x50
[ 2550.395099][T31174]  ? unregister_netdevice_queue+0x258/0x350
[ 2550.401043][T31174]  ? list_netdevice+0x450/0x450
[ 2550.405935][T31174]  ? br_dev_delete+0xd0/0x100
[ 2550.410645][T31174]  default_device_exit_batch+0x5c1/0x630
[ 2550.416332][T31174]  ? net_rps_action_and_irq_enable+0x220/0x220
[ 2550.422543][T31174]  ? rdma_dev_init_net+0x280/0x280
[ 2550.427692][T31174]  ? mutex_lock_nested+0x17/0x20
[ 2550.432664][T31174]  ? net_rps_action_and_irq_enable+0x220/0x220
[ 2550.438863][T31174]  cleanup_net+0x763/0xb60
[ 2550.443335][T31174]  ? ops_free_list+0x340/0x340
[ 2550.448146][T31174]  process_one_work+0x8aa/0x11f0
[ 2550.454195][T31174]  ? worker_detach_from_pool+0x260/0x260
[ 2550.459897][T31174]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 2550.465495][T31174]  ? kthread_data+0x4e/0xc0
[ 2550.470041][T31174]  ? wq_worker_running+0x97/0x190
[ 2550.475112][T31174]  worker_thread+0xa5f/0x1210
[ 2550.479833][T31174]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 2550.485788][T31174]  ? _raw_spin_unlock+0x40/0x40
[ 2550.490695][T31174]  kthread+0x26e/0x300
[ 2550.494797][T31174]  ? rcu_lock_release+0x20/0x20
[ 2550.499683][T31174]  ? kthread_blkcg+0xd0/0xd0
[ 2550.504313][T31174]  ret_from_fork+0x1f/0x30
[ 2550.508789][T31174]  </TASK>
[ 2550.512077][T31174] Kernel Offset: disabled
[ 2550.516605][T31174] Rebooting in 86400 seconds..