Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts.
2024/04/23 08:26:54 fuzzer started
2024/04/23 08:26:55 dialing manager at 10.128.0.169:30006
[   69.349524][ T5072] cgroup: Unknown subsys name 'net'
[   69.484145][ T5072] cgroup: Unknown subsys name 'rlimit'
2024/04/23 08:26:57 code coverage: enabled
2024/04/23 08:26:57 comparison tracing: enabled
2024/04/23 08:26:57 extra coverage: enabled
2024/04/23 08:26:57 delay kcov mmap: enabled
2024/04/23 08:26:57 setuid sandbox: enabled
2024/04/23 08:26:57 namespace sandbox: enabled
2024/04/23 08:26:57 Android sandbox: /sys/fs/selinux/policy does not exist
2024/04/23 08:26:57 fault injection: enabled
2024/04/23 08:26:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2024/04/23 08:26:57 net packet injection: enabled
2024/04/23 08:26:57 net device setup: enabled
2024/04/23 08:26:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/04/23 08:26:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/04/23 08:26:57 NIC VF setup: PCI device 0000:00:11.0 is not available
2024/04/23 08:26:57 USB emulation: enabled
2024/04/23 08:26:57 hci packet injection: enabled
2024/04/23 08:26:57 wifi device emulation: enabled
2024/04/23 08:26:57 802.15.4 emulation: enabled
2024/04/23 08:26:57 swap file: enabled
[   71.123908][ T5072] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
2024/04/23 08:26:57 starting 5 executor processes
[   71.589614][ T1242] ieee802154 phy0 wpan0: encryption failed: -22
[   71.604663][ T1242] ieee802154 phy1 wpan1: encryption failed: -22
[   72.085678][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.093637][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.102508][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.110008][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.119039][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.137952][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.138570][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.147104][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.153147][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.159354][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.166803][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.175143][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   72.181288][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.187207][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.194692][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   72.208887][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.225088][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   72.225349][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.240529][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.247927][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.248237][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.263245][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.271060][ T5089] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   72.278749][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   72.279004][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.293908][ T5099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   72.304945][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   72.320801][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   72.328914][ T5099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   72.336479][ T5099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   72.866990][ T5091] chnl_net:caif_netlink_parms(): no params data found
[   72.887980][ T5097] chnl_net:caif_netlink_parms(): no params data found
[   73.061137][ T5086] chnl_net:caif_netlink_parms(): no params data found
[   73.072722][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.080956][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.090824][ T5091] bridge_slave_0: entered allmulticast mode
[   73.098584][ T5091] bridge_slave_0: entered promiscuous mode
[   73.148708][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.156333][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.163537][ T5091] bridge_slave_1: entered allmulticast mode
[   73.173963][ T5091] bridge_slave_1: entered promiscuous mode
[   73.197633][ T5085] chnl_net:caif_netlink_parms(): no params data found
[   73.276952][ T5093] chnl_net:caif_netlink_parms(): no params data found
[   73.298081][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.311175][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.399827][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.407268][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.414444][ T5097] bridge_slave_0: entered allmulticast mode
[   73.421853][ T5097] bridge_slave_0: entered promiscuous mode
[   73.487540][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.496224][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.503581][ T5097] bridge_slave_1: entered allmulticast mode
[   73.510762][ T5097] bridge_slave_1: entered promiscuous mode
[   73.518267][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.525620][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.532732][ T5086] bridge_slave_0: entered allmulticast mode
[   73.540878][ T5086] bridge_slave_0: entered promiscuous mode
[   73.549131][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.556931][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.564240][ T5086] bridge_slave_1: entered allmulticast mode
[   73.571373][ T5086] bridge_slave_1: entered promiscuous mode
[   73.609115][ T5091] team0: Port device team_slave_0 added
[   73.620325][ T5091] team0: Port device team_slave_1 added
[   73.662161][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.669323][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.680291][ T5085] bridge_slave_0: entered allmulticast mode
[   73.687454][ T5085] bridge_slave_0: entered promiscuous mode
[   73.697070][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.704187][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.711517][ T5085] bridge_slave_1: entered allmulticast mode
[   73.718634][ T5085] bridge_slave_1: entered promiscuous mode
[   73.761743][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.775052][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.786712][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.827589][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.834573][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.860605][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.873498][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.880804][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.888025][ T5093] bridge_slave_0: entered allmulticast mode
[   73.895225][ T5093] bridge_slave_0: entered promiscuous mode
[   73.916951][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.941736][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.953909][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.970603][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.977741][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.004417][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.016159][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.023290][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.030616][ T5093] bridge_slave_1: entered allmulticast mode
[   74.038337][ T5093] bridge_slave_1: entered promiscuous mode
[   74.071863][ T5097] team0: Port device team_slave_0 added
[   74.134462][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.146607][ T5097] team0: Port device team_slave_1 added
[   74.156027][ T5086] team0: Port device team_slave_0 added
[   74.167462][ T5085] team0: Port device team_slave_0 added
[   74.176592][ T5085] team0: Port device team_slave_1 added
[   74.184531][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.226152][ T5099] Bluetooth: hci1: command tx timeout
[   74.226596][ T4466] Bluetooth: hci3: command tx timeout
[   74.242980][ T5086] team0: Port device team_slave_1 added
[   74.292943][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.300133][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.304785][ T4466] Bluetooth: hci0: command tx timeout
[   74.326316][ T5099] Bluetooth: hci2: command tx timeout
[   74.332119][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.365601][ T5091] hsr_slave_0: entered promiscuous mode
[   74.372023][ T5091] hsr_slave_1: entered promiscuous mode
[   74.385188][ T5099] Bluetooth: hci4: command tx timeout
[   74.406451][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.413443][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.439691][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.452450][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.459468][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.485648][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.501305][ T5093] team0: Port device team_slave_0 added
[   74.508071][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.515454][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.541458][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.561988][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.569010][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.594989][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.612672][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.619750][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.645724][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.659993][ T5093] team0: Port device team_slave_1 added
[   74.789352][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.797529][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.823627][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.836875][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.843839][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.870214][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.885548][ T5097] hsr_slave_0: entered promiscuous mode
[   74.892267][ T5097] hsr_slave_1: entered promiscuous mode
[   74.903062][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.911491][ T5097] Cannot create hsr debugfs directory
[   74.974218][ T5086] hsr_slave_0: entered promiscuous mode
[   74.981078][ T5086] hsr_slave_1: entered promiscuous mode
[   74.987799][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.995647][ T5086] Cannot create hsr debugfs directory
[   75.018135][ T5085] hsr_slave_0: entered promiscuous mode
[   75.026605][ T5085] hsr_slave_1: entered promiscuous mode
[   75.033299][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.041280][ T5085] Cannot create hsr debugfs directory
[   75.227157][ T5093] hsr_slave_0: entered promiscuous mode
[   75.233587][ T5093] hsr_slave_1: entered promiscuous mode
[   75.240786][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.248533][ T5093] Cannot create hsr debugfs directory
[   75.564340][ T5091] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   75.577670][ T5091] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   75.605062][ T5091] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   75.634476][ T5091] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   75.693120][ T5097] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.704171][ T5097] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.715872][ T5097] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.736476][ T5097] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.813308][ T5085] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.827458][ T5085] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.842389][ T5085] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.858840][ T5085] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.966604][ T5086] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.977391][ T5086] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.002498][ T5086] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.037258][ T5086] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.059159][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.193792][ T5093] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.213771][ T5091] 8021q: adding VLAN 0 to HW filter on device team0
[   76.240312][ T5093] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.251684][ T5093] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.264202][ T5093] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.298094][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.305572][ T5099] Bluetooth: hci1: command tx timeout
[   76.306300][ T4466] Bluetooth: hci3: command tx timeout
[   76.328280][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.352419][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.359823][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.385302][ T4466] Bluetooth: hci2: command tx timeout
[   76.385313][ T5099] Bluetooth: hci0: command tx timeout
[   76.424209][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.431400][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.448945][ T5097] 8021q: adding VLAN 0 to HW filter on device team0
[   76.464977][ T4466] Bluetooth: hci4: command tx timeout
[   76.472252][ T5085] 8021q: adding VLAN 0 to HW filter on device team0
[   76.513388][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.520575][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.534552][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.541709][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.607078][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.614245][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.629651][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.636902][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.759818][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.773960][ T5097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.847099][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.868680][ T5086] 8021q: adding VLAN 0 to HW filter on device team0
[   76.940433][ T1785] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.947708][ T1785] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.994538][ T5093] 8021q: adding VLAN 0 to HW filter on device team0
[   77.026373][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.033575][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.075398][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.082585][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.097373][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.104725][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.328659][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.400538][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.503080][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.595424][ T5097] veth0_vlan: entered promiscuous mode
[   77.633324][ T5097] veth1_vlan: entered promiscuous mode
[   77.764112][ T5085] veth0_vlan: entered promiscuous mode
[   77.813075][ T5085] veth1_vlan: entered promiscuous mode
[   77.863962][ T5097] veth0_macvtap: entered promiscuous mode
[   77.887181][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.899919][ T5097] veth1_macvtap: entered promiscuous mode
[   77.912669][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.009708][ T5085] veth0_macvtap: entered promiscuous mode
[   78.050470][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.082758][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.099271][ T5097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.109368][ T5097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.119218][ T5097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.127997][ T5097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.157193][ T5085] veth1_macvtap: entered promiscuous mode
[   78.183341][ T5093] veth0_vlan: entered promiscuous mode
[   78.233945][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.246579][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.260527][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.268201][ T5091] veth0_vlan: entered promiscuous mode
[   78.275252][ T5093] veth1_vlan: entered promiscuous mode
[   78.289202][ T5086] veth0_vlan: entered promiscuous mode
[   78.312499][ T5091] veth1_vlan: entered promiscuous mode
[   78.344988][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.356827][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.369617][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.385850][ T4466] Bluetooth: hci3: command tx timeout
[   78.388040][ T5099] Bluetooth: hci1: command tx timeout
[   78.398221][ T5086] veth1_vlan: entered promiscuous mode
[   78.461577][ T5085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.465312][ T5099] Bluetooth: hci0: command tx timeout
[   78.472824][ T4466] Bluetooth: hci2: command tx timeout
[   78.481022][ T5085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.481818][ T5136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.490570][ T5085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.507853][ T5136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.507930][ T5085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.546338][ T4466] Bluetooth: hci4: command tx timeout
[   78.592177][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.612160][ T5091] veth0_macvtap: entered promiscuous mode
[   78.612255][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.637077][ T5093] veth0_macvtap: entered promiscuous mode
[   78.644473][ T5086] veth0_macvtap: entered promiscuous mode
[   78.671909][ T5091] veth1_macvtap: entered promiscuous mode
[   78.682941][ T5093] veth1_macvtap: entered promiscuous mode
executing program 3:
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f0000000040), 0x3b)

[   78.733980][ T5086] veth1_macvtap: entered promiscuous mode
executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xa1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r3}, 0x10)
write$cgroup_int(r0, &(0x7f0000000200), 0x43451)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)

[   78.841809][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.869282][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.884168][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.898606][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.910814][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.921367][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.933612][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.944427][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.959292][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.969673][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.980262][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.998227][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.012333][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.023452][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.044662][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.056039][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.067236][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.087875][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.106340][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.121118][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.133154][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0
executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)

[   79.162789][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.208055][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.235148][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0))

[   79.248978][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.261924][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.292516][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.313970][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.327002][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.357095][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.367391][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.378060][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.390617][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1
executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)

[   79.407675][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.419404][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.444845][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.458511][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.470834][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.481628][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.492125][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000040))

[   79.503970][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.521668][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.533394][ T5086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.571903][ T5086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.581077][ T5086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.590262][ T5086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.609875][   T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.620821][   T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.658517][ T5093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.674377][ T5093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.683252][ T5093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.692422][ T5093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000004c0)='3', &(0x7f00000005c0)=""/207}, 0x20)

[   79.732905][ T5091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.743465][ T5091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.756403][ T5091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.765519][ T5091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.838257][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.852713][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000380)=""/4096, 0x26, 0x1000, 0x1}, 0x20)

executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team_slave_1\x00', @random="d3a73a5877fa"})
ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000015)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r2}, 0x10)
unlink(&(0x7f0000000140)='./cgroup\x00')

[   80.027511][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.067682][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.177687][ T5187] syz-executor.3[5187] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.177875][ T5187] syz-executor.3[5187] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.195249][ T5187] syz-executor.3[5187] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.215045][ T5187] syz-executor.3[5187] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   80.254155][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.267137][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f00000003c0), 0x9)

executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffe6)

[   80.330952][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.359689][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.436018][ T5134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.443898][ T5134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.472041][ T4466] Bluetooth: hci1: command tx timeout
[   80.472433][ T5099] Bluetooth: hci3: command tx timeout
executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086607, &(0x7f0000000040)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

[   80.546653][ T5099] Bluetooth: hci2: command tx timeout
[   80.546667][ T4466] Bluetooth: hci0: command tx timeout
[   80.560234][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.568295][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[   80.609744][ T5194] EXT4-fs warning (device sda1): ext4_group_extend:1860: can't shrink FS - resize aborted
[   80.635280][ T5099] Bluetooth: hci4: command tx timeout
[   80.651742][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
executing program 4:
socketpair(0x18, 0x0, 0x76, 0x0)

[   80.669235][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program 2:
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_clone(0x100a4200, 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
getpid()
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00'}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)="b8c314530d937f7a0e41a368bce55d37f8dbab2ef91f0b8f74de116a3ff32896f4d478b998e58fa541258afaa7437df688b0f250c08d8d06effde15513bfafcf91dd329e4e2b7549263a928bb7385ab47682807c0a591fe219cc6c847189b355523a", &(0x7f0000000140)=""/132}, 0x20)

executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

[   80.798213][    C0] hrtimer: interrupt took 68763 ns
executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)

executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(r0)

executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)

executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r2}, 0x10)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)

executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"])

executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086607, &(0x7f0000000040)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x40086607, 0x20001412)

[   81.462639][ T5217] EXT4-fs warning (device sda1): ext4_group_extend:1860: can't shrink FS - resize aborted
executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f00000003c0), 0x9)

executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10)
write$cgroup_subtree(r1, 0x0, 0x7ffffffff000)

executing program 2:
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4)
sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)

executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x2009)

executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(r0)

executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='percpu_free_percpu\x00'}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x36)

executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086607, &(0x7f0000000040)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

executing program 3:
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/48, 0x30}], 0x1}, 0x0)

executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f00000003c0), 0x9)

[   82.243533][ T5235] EXT4-fs warning (device sda1): ext4_group_extend:1860: can't shrink FS - resize aborted
executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10)
unlink(&(0x7f0000000140)='./cgroup\x00')

executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/200}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x6, 0xffffffff, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_free_blocks\x00'}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000000), 0x400000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)

executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r3)

executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r3)

[   82.686429][ T5238] syzkaller0: entered promiscuous mode
[   82.692293][ T5238] syzkaller0: entered allmulticast mode
executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(r0)

executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086607, &(0x7f0000000040)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f00000003c0), 0x9)

executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

[   83.169027][ T5263] EXT4-fs warning (device sda1): ext4_group_extend:1860: can't shrink FS - resize aborted
executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(r0)

executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r1)

executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x800c6613, &(0x7f0000000540))

executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380)=""/4096, 0x1a, 0x1000, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25b45}, 0x90)

executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000040))

executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)

executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r3)

executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x15)

executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000852400000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222}, 0x90)

executing program 1:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffe0}], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
close(r0)

executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r3)

[   84.329239][ T5274] 
[   84.331665][ T5274] =====================================================
[   84.338617][ T5274] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[   84.346364][ T5274] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted
[   84.353054][ T5274] -----------------------------------------------------
[   84.359981][ T5274] syz-executor.4/5274 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire:
[   84.367956][ T5274] ffff88807e5acd68 (&htab->buckets[i].lock){+...}-{2:2}, at: sock_hash_delete_elem+0xb0/0x300
[   84.378277][ T5274] 
[   84.378277][ T5274] and this task is already holding:
[   84.385650][ T5274] ffff8880b953e158 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[   84.395132][ T5274] which would create a new lock dependency:
[   84.401008][ T5274]  (&rq->__lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2}
[   84.409102][ T5274] 
[   84.409102][ T5274] but this new dependency connects a HARDIRQ-irq-safe lock:
[   84.418538][ T5274]  (&rq->__lock){-.-.}-{2:2}
[   84.418559][ T5274] 
[   84.418559][ T5274] ... which became HARDIRQ-irq-safe at:
[   84.430828][ T5274]   lock_acquire+0x1e4/0x530
[   84.435414][ T5274]   _raw_spin_lock_nested+0x31/0x40
[   84.440614][ T5274]   raw_spin_rq_lock_nested+0x2a/0x140
[   84.446076][ T5274]   scheduler_tick+0xa1/0x6e0
[   84.450765][ T5274]   update_process_times+0x202/0x230
[   84.456042][ T5274]   tick_periodic+0x190/0x220
[   84.460709][ T5274]   tick_handle_periodic+0x4a/0x160
[   84.465901][ T5274]   timer_interrupt+0x5c/0x70
[   84.470607][ T5274]   __handle_irq_event_percpu+0x28c/0xa30
[   84.476322][ T5274]   handle_irq_event+0x89/0x1f0
[   84.481183][ T5274]   handle_edge_irq+0x25f/0xc20
[   84.486038][ T5274]   __common_interrupt+0x13a/0x230
[   84.491146][ T5274]   common_interrupt+0xa5/0xd0
[   84.495914][ T5274]   asm_common_interrupt+0x26/0x40
[   84.501049][ T5274]   console_flush_all+0x9cd/0xec0
[   84.506098][ T5274]   console_unlock+0x13b/0x4d0
[   84.510858][ T5274]   vprintk_emit+0x509/0x720
[   84.515444][ T5274]   _printk+0xd5/0x120
[   84.519527][ T5274]   cpu_select_mitigations+0x3c/0xa0
[   84.524814][ T5274]   arch_cpu_finalize_init+0x20/0xa0
[   84.530111][ T5274]   start_kernel+0x402/0x500
[   84.534689][ T5274]   x86_64_start_reservations+0x2a/0x30
[   84.540233][ T5274]   x86_64_start_kernel+0x99/0xa0
[   84.545252][ T5274]   common_startup_64+0x13e/0x147
[   84.550271][ T5274] 
[   84.550271][ T5274] to a HARDIRQ-irq-unsafe lock:
[   84.557293][ T5274]  (&htab->buckets[i].lock){+...}-{2:2}
[   84.557356][ T5274] 
[   84.557356][ T5274] ... which became HARDIRQ-irq-unsafe at:
[   84.570791][ T5274] ...
[   84.570797][ T5274]   lock_acquire+0x1e4/0x530
[   84.577955][ T5274]   _raw_spin_lock_bh+0x35/0x50
[   84.582803][ T5274]   sock_hash_delete_elem+0xb0/0x300
[   84.588085][ T5274]   0xffffffffa0002022
[   84.592146][ T5274]   bpf_trace_run4+0x25a/0x490
[   84.596902][ T5274]   ext4_ext_remove_space+0x4a77/0x4db0
[   84.602439][ T5274]   ext4_ext_truncate+0x159/0x2b0
[   84.607458][ T5274]   ext4_truncate+0xa08/0x1130
[   84.612216][ T5274]   ext4_setattr+0x119a/0x1bb0
[   84.616978][ T5274]   notify_change+0xb9d/0xe70
[   84.621646][ T5274]   do_truncate+0x220/0x310
[   84.626145][ T5274]   path_openat+0x29fe/0x3240
[   84.630833][ T5274]   do_filp_open+0x235/0x490
[   84.635416][ T5274]   do_sys_openat2+0x13e/0x1d0
[   84.640178][ T5274]   __x64_sys_openat+0x247/0x2a0
[   84.645115][ T5274]   do_syscall_64+0xfb/0x240
[   84.649708][ T5274]   entry_SYSCALL_64_after_hwframe+0x6d/0x75
[   84.655686][ T5274] 
[   84.655686][ T5274] other info that might help us debug this:
[   84.655686][ T5274] 
[   84.665921][ T5274]  Possible interrupt unsafe locking scenario:
[   84.665921][ T5274] 
[   84.674230][ T5274]        CPU0                    CPU1
[   84.679584][ T5274]        ----                    ----
[   84.684941][ T5274]   lock(&htab->buckets[i].lock);
[   84.689990][ T5274]                                local_irq_disable();
[   84.696732][ T5274]                                lock(&rq->__lock);
[   84.703344][ T5274]                                lock(&htab->buckets[i].lock);
[   84.710879][ T5274]   <Interrupt>
[   84.714329][ T5274]     lock(&rq->__lock);
[   84.718569][ T5274] 
[   84.718569][ T5274]  *** DEADLOCK ***
[   84.718569][ T5274] 
[   84.726699][ T5274] 5 locks held by syz-executor.4/5274:
[   84.732142][ T5274]  #0: ffff88802c0b45c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x259/0x320
[   84.741391][ T5274]  #1: ffff88802ad4e420 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x233/0xcb0
[   84.750271][ T5274]  #2: ffff88806308a200 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_buffered_write_iter+0x97/0x350
[   84.761597][ T5274]  #3: ffff8880b953e158 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[   84.771519][ T5274]  #4: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x114/0x420
[   84.780912][ T5274] 
[   84.780912][ T5274] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[   84.791304][ T5274] -> (&rq->__lock){-.-.}-{2:2} {
[   84.796339][ T5274]    IN-HARDIRQ-W at:
[   84.800313][ T5274]                     lock_acquire+0x1e4/0x530
[   84.806463][ T5274]                     _raw_spin_lock_nested+0x31/0x40
[   84.813230][ T5274]                     raw_spin_rq_lock_nested+0x2a/0x140
[   84.820253][ T5274]                     scheduler_tick+0xa1/0x6e0
[   84.826491][ T5274]                     update_process_times+0x202/0x230
[   84.833328][ T5274]                     tick_periodic+0x190/0x220
[   84.839561][ T5274]                     tick_handle_periodic+0x4a/0x160
[   84.846316][ T5274]                     timer_interrupt+0x5c/0x70
[   84.852556][ T5274]                     __handle_irq_event_percpu+0x28c/0xa30
[   84.859838][ T5274]                     handle_irq_event+0x89/0x1f0
[   84.866251][ T5274]                     handle_edge_irq+0x25f/0xc20
[   84.872680][ T5274]                     __common_interrupt+0x13a/0x230
[   84.879373][ T5274]                     common_interrupt+0xa5/0xd0
[   84.885720][ T5274]                     asm_common_interrupt+0x26/0x40
[   84.892411][ T5274]                     console_flush_all+0x9cd/0xec0
[   84.899006][ T5274]                     console_unlock+0x13b/0x4d0
[   84.905340][ T5274]                     vprintk_emit+0x509/0x720
[   84.911495][ T5274]                     _printk+0xd5/0x120
[   84.917128][ T5274]                     cpu_select_mitigations+0x3c/0xa0
[   84.923979][ T5274]                     arch_cpu_finalize_init+0x20/0xa0
[   84.930828][ T5274]                     start_kernel+0x402/0x500
[   84.936974][ T5274]                     x86_64_start_reservations+0x2a/0x30
[   84.944110][ T5274]                     x86_64_start_kernel+0x99/0xa0
[   84.950715][ T5274]                     common_startup_64+0x13e/0x147
[   84.957303][ T5274]    IN-SOFTIRQ-W at:
[   84.961293][ T5274]                     lock_acquire+0x1e4/0x530
[   84.967460][ T5274]                     _raw_spin_lock_nested+0x31/0x40
[   84.974250][ T5274]                     raw_spin_rq_lock_nested+0x2a/0x140
[   84.981309][ T5274]                     try_to_wake_up+0x7d3/0x1470
[   84.987737][ T5274]                     call_timer_fn+0x17e/0x600
[   84.993993][ T5274]                     __run_timer_base+0x66a/0x8e0
[   85.000488][ T5274]                     run_timer_softirq+0xb7/0x170
[   85.006982][ T5274]                     __do_softirq+0x2bc/0x943
[   85.013148][ T5274]                     __irq_exit_rcu+0xf2/0x1c0
[   85.019384][ T5274]                     irq_exit_rcu+0x9/0x30
[   85.025321][ T5274]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[   85.032599][ T5274]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   85.040232][ T5274]                     default_idle+0x13/0x20
[   85.046211][ T5274]                     default_idle_call+0x74/0xb0
[   85.052625][ T5274]                     do_idle+0x22f/0x5d0
[   85.058339][ T5274]                     cpu_startup_entry+0x42/0x60
[   85.064758][ T5274]                     rest_init+0x2e0/0x300
[   85.070664][ T5274]                     arch_call_rest_init+0xe/0x10
[   85.077192][ T5274]                     start_kernel+0x47a/0x500
[   85.083343][ T5274]                     x86_64_start_reservations+0x2a/0x30
[   85.090470][ T5274]                     x86_64_start_kernel+0x99/0xa0
[   85.097077][ T5274]                     common_startup_64+0x13e/0x147
[   85.103667][ T5274]    INITIAL USE at:
[   85.107556][ T5274]                    lock_acquire+0x1e4/0x530
[   85.113633][ T5274]                    _raw_spin_lock_nested+0x31/0x40
[   85.120312][ T5274]                    raw_spin_rq_lock_nested+0x2a/0x140
[   85.127267][ T5274]                    rq_attach_root+0xee/0x540
[   85.133423][ T5274]                    sched_init+0x64e/0xc30
[   85.139345][ T5274]                    start_kernel+0x1ab/0x500
[   85.145417][ T5274]                    x86_64_start_reservations+0x2a/0x30
[   85.152435][ T5274]                    x86_64_start_kernel+0x99/0xa0
[   85.158953][ T5274]                    common_startup_64+0x13e/0x147
[   85.165456][ T5274]  }
[   85.167948][ T5274]  ... key      at: [<ffffffff926c4080>] sched_init.__key+0x0/0x20
[   85.175840][ T5274] 
[   85.175840][ T5274] the dependencies between the lock to be acquired
[   85.175847][ T5274]  and HARDIRQ-irq-unsafe lock:
[   85.189363][ T5274] -> (&htab->buckets[i].lock){+...}-{2:2} {
[   85.195271][ T5274]    HARDIRQ-ON-W at:
[   85.199242][ T5274]                     lock_acquire+0x1e4/0x530
[   85.205406][ T5274]                     _raw_spin_lock_bh+0x35/0x50
[   85.211819][ T5274]                     sock_hash_delete_elem+0xb0/0x300
[   85.218657][ T5274]                     0xffffffffa0002022
[   85.224277][ T5274]                     bpf_trace_run4+0x25a/0x490
[   85.230594][ T5274]                     ext4_ext_remove_space+0x4a77/0x4db0
[   85.237688][ T5274]                     ext4_ext_truncate+0x159/0x2b0
[   85.244268][ T5274]                     ext4_truncate+0xa08/0x1130
[   85.250586][ T5274]                     ext4_setattr+0x119a/0x1bb0
[   85.256907][ T5274]                     notify_change+0xb9d/0xe70
[   85.263143][ T5274]                     do_truncate+0x220/0x310
[   85.269207][ T5274]                     path_openat+0x29fe/0x3240
[   85.275441][ T5274]                     do_filp_open+0x235/0x490
[   85.281585][ T5274]                     do_sys_openat2+0x13e/0x1d0
[   85.287912][ T5274]                     __x64_sys_openat+0x247/0x2a0
[   85.294444][ T5274]                     do_syscall_64+0xfb/0x240
[   85.300592][ T5274]                     entry_SYSCALL_64_after_hwframe+0x6d/0x75
[   85.308147][ T5274]    INITIAL USE at:
[   85.312033][ T5274]                    lock_acquire+0x1e4/0x530
[   85.318100][ T5274]                    _raw_spin_lock_bh+0x35/0x50
[   85.324422][ T5274]                    sock_hash_delete_elem+0xb0/0x300
[   85.331175][ T5274]                    0xffffffffa0002022
[   85.336721][ T5274]                    bpf_trace_run4+0x25a/0x490
[   85.342965][ T5274]                    ext4_ext_remove_space+0x4a77/0x4db0
[   85.349981][ T5274]                    ext4_ext_truncate+0x159/0x2b0
[   85.356493][ T5274]                    ext4_truncate+0xa08/0x1130
[   85.362743][ T5274]                    ext4_setattr+0x119a/0x1bb0
[   85.368980][ T5274]                    notify_change+0xb9d/0xe70
[   85.375128][ T5274]                    do_truncate+0x220/0x310
[   85.381209][ T5274]                    path_openat+0x29fe/0x3240
[   85.387371][ T5274]                    do_filp_open+0x235/0x490
[   85.393435][ T5274]                    do_sys_openat2+0x13e/0x1d0
[   85.399677][ T5274]                    __x64_sys_openat+0x247/0x2a0
[   85.406093][ T5274]                    do_syscall_64+0xfb/0x240
[   85.412155][ T5274]                    entry_SYSCALL_64_after_hwframe+0x6d/0x75
[   85.419611][ T5274]  }
[   85.422105][ T5274]  ... key      at: [<ffffffff94882300>] sock_hash_alloc.__key+0x0/0x20
[   85.430423][ T5274]  ... acquired at:
[   85.434231][ T5274]    lock_acquire+0x1e4/0x530
[   85.438903][ T5274]    _raw_spin_lock_bh+0x35/0x50
[   85.443835][ T5274]    sock_hash_delete_elem+0xb0/0x300
[   85.449203][ T5274]    bpf_prog_bc4ba9860fbb0da4+0x46/0x4a
[   85.454848][ T5274]    bpf_trace_run2+0x204/0x420
[   85.459726][ T5274]    trace_contention_end+0xf6/0x120
[   85.465009][ T5274]    __pv_queued_spin_lock_slowpath+0x939/0xc60
[   85.471265][ T5274]    queued_spin_lock_slowpath+0x42/0x50
[   85.476898][ T5274]    do_raw_spin_lock+0x272/0x370
[   85.481921][ T5274]    raw_spin_rq_lock_nested+0x2a/0x140
[   85.487467][ T5274]    __schedule+0x354/0x4a20
[   85.492053][ T5274]    preempt_schedule_common+0x84/0xd0
[   85.497509][ T5274]    preempt_schedule+0xe1/0xf0
[   85.502357][ T5274]    preempt_schedule_thunk+0x1a/0x30
[   85.507723][ T5274]    _raw_spin_unlock+0x3e/0x50
[   85.512594][ T5274]    create_empty_buffers+0x53e/0x740
[   85.517959][ T5274]    ext4_block_write_begin+0x27d/0x1850
[   85.523587][ T5274]    ext4_da_write_begin+0x5e8/0xa50
[   85.528883][ T5274]    generic_perform_write+0x322/0x640
[   85.534342][ T5274]    ext4_buffered_write_iter+0xc6/0x350
[   85.539997][ T5274]    ext4_file_write_iter+0x1de/0x1a10
[   85.545450][ T5274]    vfs_write+0xa84/0xcb0
[   85.549879][ T5274]    ksys_write+0x1a0/0x2c0
[   85.554378][ T5274]    do_syscall_64+0xfb/0x240
[   85.559049][ T5274]    entry_SYSCALL_64_after_hwframe+0x6d/0x75
[   85.565114][ T5274] 
[   85.567436][ T5274] 
[   85.567436][ T5274] stack backtrace:
[   85.573313][ T5274] CPU: 1 PID: 5274 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0
[   85.583299][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   85.593356][ T5274] Call Trace:
[   85.596647][ T5274]  <TASK>
[   85.599586][ T5274]  dump_stack_lvl+0x1e7/0x2e0
[   85.604367][ T5274]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.609584][ T5274]  ? __pfx__printk+0x10/0x10
[   85.614171][ T5274]  ? print_shortest_lock_dependencies+0xf2/0x160
[   85.620504][ T5274]  validate_chain+0x4dc7/0x58e0
[   85.625366][ T5274]  ? __pfx_validate_chain+0x10/0x10
[   85.630568][ T5274]  ? __pfx_validate_chain+0x10/0x10
[   85.635781][ T5274]  ? __pfx_validate_chain+0x10/0x10
[   85.640978][ T5274]  ? mark_lock+0x9a/0x350
[   85.645316][ T5274]  ? __pfx_validate_chain+0x10/0x10
[   85.650511][ T5274]  __lock_acquire+0x1346/0x1fd0
[   85.655370][ T5274]  lock_acquire+0x1e4/0x530
[   85.659864][ T5274]  ? sock_hash_delete_elem+0xb0/0x300
[   85.665240][ T5274]  ? __pfx_lockdep_softirqs_off+0x10/0x10
[   85.670968][ T5274]  ? __pfx_lock_acquire+0x10/0x10
[   85.675988][ T5274]  ? sock_hash_delete_elem+0xb0/0x300
[   85.681370][ T5274]  ? __pfx___local_bh_disable_ip+0x10/0x10
[   85.687170][ T5274]  ? __pfx_lock_acquire+0x10/0x10
[   85.692213][ T5274]  ? sock_hash_delete_elem+0xb0/0x300
[   85.697580][ T5274]  _raw_spin_lock_bh+0x35/0x50
[   85.702334][ T5274]  ? sock_hash_delete_elem+0xb0/0x300
[   85.707700][ T5274]  sock_hash_delete_elem+0xb0/0x300
[   85.712897][ T5274]  bpf_prog_bc4ba9860fbb0da4+0x46/0x4a
[   85.718345][ T5274]  bpf_trace_run2+0x204/0x420
[   85.723015][ T5274]  ? bpf_trace_run2+0x114/0x420
[   85.727857][ T5274]  ? __pfx_bpf_trace_run2+0x10/0x10
[   85.733050][ T5274]  ? __lock_acquire+0x1346/0x1fd0
[   85.738071][ T5274]  trace_contention_end+0xf6/0x120
[   85.743189][ T5274]  __pv_queued_spin_lock_slowpath+0x939/0xc60
[   85.749289][ T5274]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[   85.755883][ T5274]  queued_spin_lock_slowpath+0x42/0x50
[   85.761344][ T5274]  do_raw_spin_lock+0x272/0x370
[   85.766204][ T5274]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   85.771603][ T5274]  raw_spin_rq_lock_nested+0x2a/0x140
[   85.776990][ T5274]  __schedule+0x354/0x4a20
[   85.781405][ T5274]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   85.787379][ T5274]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   85.793703][ T5274]  ? irqentry_exit+0x63/0x90
[   85.798294][ T5274]  ? lockdep_hardirqs_on+0x99/0x150
[   85.803494][ T5274]  ? __pfx___schedule+0x10/0x10
[   85.808375][ T5274]  ? preempt_schedule+0xe1/0xf0
[   85.813232][ T5274]  preempt_schedule_common+0x84/0xd0
[   85.818519][ T5274]  preempt_schedule+0xe1/0xf0
[   85.823213][ T5274]  ? __pfx_preempt_schedule+0x10/0x10
[   85.828582][ T5274]  ? do_raw_spin_lock+0x14f/0x370
[   85.833612][ T5274]  preempt_schedule_thunk+0x1a/0x30
[   85.838840][ T5274]  _raw_spin_unlock+0x3e/0x50
[   85.843515][ T5274]  create_empty_buffers+0x53e/0x740
[   85.848708][ T5274]  ? __pfx_workingset_update_node+0x10/0x10
[   85.854605][ T5274]  ext4_block_write_begin+0x27d/0x1850
[   85.860057][ T5274]  ? filemap_add_folio+0x228/0x570
[   85.865196][ T5274]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[   85.871091][ T5274]  ? __pfx_ext4_block_write_begin+0x10/0x10
[   85.876980][ T5274]  ? folio_mapping+0x204/0x560
[   85.881757][ T5274]  ext4_da_write_begin+0x5e8/0xa50
[   85.886867][ T5274]  ? __pfx_ext4_da_write_begin+0x10/0x10
[   85.892496][ T5274]  ? fault_in_iov_iter_readable+0x229/0x280
[   85.898382][ T5274]  generic_perform_write+0x322/0x640
[   85.903663][ T5274]  ? generic_write_checks_count+0x3f5/0x510
[   85.909563][ T5274]  ? __pfx_generic_perform_write+0x10/0x10
[   85.915372][ T5274]  ? ext4_write_checks+0x256/0x2c0
[   85.920490][ T5274]  ext4_buffered_write_iter+0xc6/0x350
[   85.925949][ T5274]  ext4_file_write_iter+0x1de/0x1a10
[   85.931237][ T5274]  ? __pfx_lock_acquire+0x10/0x10
[   85.936260][ T5274]  ? __pfx_ext4_file_write_iter+0x10/0x10
[   85.941982][ T5274]  vfs_write+0xa84/0xcb0
[   85.946245][ T5274]  ? __pfx_vfs_write+0x10/0x10
[   85.951005][ T5274]  ? __fget_files+0x3f4/0x470
[   85.955682][ T5274]  ? __fdget_pos+0x259/0x320
[   85.960271][ T5274]  ksys_write+0x1a0/0x2c0
[   85.964616][ T5274]  ? __pfx_ksys_write+0x10/0x10
[   85.969486][ T5274]  ? do_syscall_64+0x10a/0x240
[   85.974274][ T5274]  ? do_syscall_64+0xb6/0x240
[   85.978982][ T5274]  do_syscall_64+0xfb/0x240
[   85.983498][ T5274]  entry_SYSCALL_64_after_hwframe+0x6d/0x75
[   85.989399][ T5274] RIP: 0033:0x7f9ef747dea9
[   85.993817][ T5274] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   86.013429][ T5274] RSP: 002b:00007f9ef82d40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   86.021839][ T5274] RAX: ffffffffffffffda RBX: 00007f9ef75abf80 RCX: 00007f9ef747dea9
[   86.029818][ T5274] RDX: 00000000fffffd26 RSI: 0000000020000000 RDI: 0000000000000003
[   86.037788][ T5274] RBP: 00007f9ef74ca4a4 R08: 0000000000000000 R09: 0000000000000000
[   86.045760][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.053731][ T5274] R13: 000000000000000b R14: 00007f9ef75abf80 R15: 00007fff1c97fff8
[   86.061709][ T5274]  </TASK>