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"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:02 executing program 3: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000012006bcd9e", 0x33fe0}], 0x1}, 0x0) 00:09:02 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:02 executing program 3: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000012006bcd9e", 0x33fe0}], 0x1}, 0x0) 00:09:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000000), 0xffe000) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x6609, 0x0) write$cgroup_subtree(r0, 0x0, 0xda00) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:09:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0, 0x58402, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xbe, 0x0, 0x0, 0x0, 0xfffffe00, 0x9db, 0x0, 0x0, 0x0, 0xebd}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:09:03 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffeff, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4a080, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x200, 0x0, 0x0, 0x3, 0x1, 0x7fff, 0x1ff, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x0, 0x8, 0x80, 0x0, 0x8b2, 0xb9202, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff}, 0x80240, 0xfffffffffffffff9, 0x0, 0xaacabed2fe8aaaed, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51f5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1801}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 00:09:03 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:03 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e5a868a2c93b8230700000000000000326f8af55453d720910c22c6ba9cb6e5cd292c448b68b1010f9fb5492520c4f52c232e000000ac459ebc2e606df21feaa75ec5419c5b76ce08c6ce9a7876151e04000000ba69f79cb713d0fdc6052ed01fdde50ba15a9478ad387d8d80e802b8fc8693cfa3121983c18611c1c0c9febf9fdb97bef0bde9a5198be5c32bc6b82fbc64fb23812645114f7b3b9d4213b57a3429737d7080ccfb8d8a930f1facaed5551336d4b50015d3c236dd6f0fe9e2285bc2acf581d7e263bff90aaf2f7532177f0686079a76404f94943569d33b648d5cabc996fbe49d0cddfb0e06560bf56f338ae1b4c8df2bbbfd8513558fea85416d5ab4c72cbc0d3181547eeab7ea44a4bdb7a444795f798ff9f4e7be75c804e01467f8ffd414c159e9db857d38cdfce34211ab786b58e1ca764b1769d012cdcc29a28b18fa8f57fff78b8fcb23a4aaad81cf00005ca603313ac3a8f69e5bc75064b17b949efa40b5f246258b4ec908352d147661c1f33e154691b95a742ec9f7f6818bf6c8a5aa45da89a8924040bbf11aa36944591eb1ae808ae62587fe0411e50b57b8fbd648177ec9dfe98b1dbb48687b4f5c00000fd116d22ef9ef9a3918a47417ba0c8836f1ec3e512671377397195ec9ab5783f2d9a2e41a8b61c813e7e48e498649d68f29252b9d3d0900ae0a86ac9c3d93630b0c65bcc59c62496fec7ea7d089f76bebcb1bf4b9cc013cb273f65239688527589917c8f385a4ee628372082889f7fd88ab93c44824fb106b9adbf615eee1d69444408875243d7f5f8144738b233901b0734797f44f1acdb41c0ed7ec1555b31f1e826199d767da3b10ffd3b105f1d899666e03861f7e506bdb5e3ff2e993f2e5aefd06f22cd6e2231c2cdfb678728dca84e2029758c37e91d82268aaee481aadb5ec213aac18af265660e713046083bf25cf1a3a50a16f11d18a3d396eb094a9626f1e9df155a928d6a6a9a3d72529505af41e9d5cb71970593a48"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000000), 0xffe000) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x6609, 0x0) write$cgroup_subtree(r0, 0x0, 0xda00) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:09:03 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:03 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:04 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0, 0x58402, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xbe, 0x0, 0x0, 0x0, 0xfffffe00, 0x9db, 0x0, 0x0, 0x0, 0xebd}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007030000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000015000000000000009500000000000000323c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c01a0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc8890da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:09:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e5a868a2c93b8230700000000000000326f8af55453d720910c22c6ba9cb6e5cd292c448b68b1010f9fb5492520c4f52c232e000000ac459ebc2e606df21feaa75ec5419c5b76ce08c6ce9a7876151e04000000ba69f79cb713d0fdc6052ed01fdde50ba15a9478ad387d8d80e802b8fc8693cfa3121983c18611c1c0c9febf9fdb97bef0bde9a5198be5c32bc6b82fbc64fb23812645114f7b3b9d4213b57a3429737d7080ccfb8d8a930f1facaed5551336d4b50015d3c236dd6f0fe9e2285bc2acf581d7e263bff90aaf2f7532177f0686079a76404f94943569d33b648d5cabc996fbe49d0cddfb0e06560bf56f338ae1b4c8df2bbbfd8513558fea85416d5ab4c72cbc0d3181547eeab7ea44a4bdb7a444795f798ff9f4e7be75c804e01467f8ffd414c159e9db857d38cdfce34211ab786b58e1ca764b1769d012cdcc29a28b18fa8f57fff78b8fcb23a4aaad81cf00005ca603313ac3a8f69e5bc75064b17b949efa40b5f246258b4ec908352d147661c1f33e154691b95a742ec9f7f6818bf6c8a5aa45da89a8924040bbf11aa36944591eb1ae808ae62587fe0411e50b57b8fbd648177ec9dfe98b1dbb48687b4f5c00000fd116d22ef9ef9a3918a47417ba0c8836f1ec3e512671377397195ec9ab5783f2d9a2e41a8b61c813e7e48e498649d68f29252b9d3d0900ae0a86ac9c3d93630b0c65bcc59c62496fec7ea7d089f76bebcb1bf4b9cc013cb273f65239688527589917c8f385a4ee628372082889f7fd88ab93c44824fb106b9adbf615eee1d69444408875243d7f5f8144738b233901b0734797f44f1acdb41c0ed7ec1555b31f1e826199d767da3b10ffd3b105f1d899666e03861f7e506bdb5e3ff2e993f2e5aefd06f22cd6e2231c2cdfb678728dca84e2029758c37e91d82268aaee481aadb5ec213aac18af265660e713046083bf25cf1a3a50a16f11d18a3d396eb094a9626f1e9df155a928d6a6a9a3d72529505af41e9d5cb71970593a48"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:04 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:04 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffeff, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4a080, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x200, 0x0, 0x0, 0x3, 0x1, 0x7fff, 0x1ff, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x0, 0x8, 0x80, 0x0, 0x8b2, 0xb9202, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff}, 0x80240, 0xfffffffffffffff9, 0x0, 0xaacabed2fe8aaaed, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51f5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1801}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 00:09:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:04 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0, 0x58402, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xbe, 0x0, 0x0, 0x0, 0xfffffe00, 0x9db, 0x0, 0x0, 0x0, 0xebd}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:09:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e5a868a2c93b8230700000000000000326f8af55453d720910c22c6ba9cb6e5cd292c448b68b1010f9fb5492520c4f52c232e000000ac459ebc2e606df21feaa75ec5419c5b76ce08c6ce9a7876151e04000000ba69f79cb713d0fdc6052ed01fdde50ba15a9478ad387d8d80e802b8fc8693cfa3121983c18611c1c0c9febf9fdb97bef0bde9a5198be5c32bc6b82fbc64fb23812645114f7b3b9d4213b57a3429737d7080ccfb8d8a930f1facaed5551336d4b50015d3c236dd6f0fe9e2285bc2acf581d7e263bff90aaf2f7532177f0686079a76404f94943569d33b648d5cabc996fbe49d0cddfb0e06560bf56f338ae1b4c8df2bbbfd8513558fea85416d5ab4c72cbc0d3181547eeab7ea44a4bdb7a444795f798ff9f4e7be75c804e01467f8ffd414c159e9db857d38cdfce34211ab786b58e1ca764b1769d012cdcc29a28b18fa8f57fff78b8fcb23a4aaad81cf00005ca603313ac3a8f69e5bc75064b17b949efa40b5f246258b4ec908352d147661c1f33e154691b95a742ec9f7f6818bf6c8a5aa45da89a8924040bbf11aa36944591eb1ae808ae62587fe0411e50b57b8fbd648177ec9dfe98b1dbb48687b4f5c00000fd116d22ef9ef9a3918a47417ba0c8836f1ec3e512671377397195ec9ab5783f2d9a2e41a8b61c813e7e48e498649d68f29252b9d3d0900ae0a86ac9c3d93630b0c65bcc59c62496fec7ea7d089f76bebcb1bf4b9cc013cb273f65239688527589917c8f385a4ee628372082889f7fd88ab93c44824fb106b9adbf615eee1d69444408875243d7f5f8144738b233901b0734797f44f1acdb41c0ed7ec1555b31f1e826199d767da3b10ffd3b105f1d899666e03861f7e506bdb5e3ff2e993f2e5aefd06f22cd6e2231c2cdfb678728dca84e2029758c37e91d82268aaee481aadb5ec213aac18af265660e713046083bf25cf1a3a50a16f11d18a3d396eb094a9626f1e9df155a928d6a6a9a3d72529505af41e9d5cb71970593a48"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:05 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:05 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:05 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:05 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e5a868a2c93b8230700000000000000326f8af55453d720910c22c6ba9cb6e5cd292c448b68b1010f9fb5492520c4f52c232e000000ac459ebc2e606df21feaa75ec5419c5b76ce08c6ce9a7876151e04000000ba69f79cb713d0fdc6052ed01fdde50ba15a9478ad387d8d80e802b8fc8693cfa3121983c18611c1c0c9febf9fdb97bef0bde9a5198be5c32bc6b82fbc64fb23812645114f7b3b9d4213b57a3429737d7080ccfb8d8a930f1facaed5551336d4b50015d3c236dd6f0fe9e2285bc2acf581d7e263bff90aaf2f7532177f0686079a76404f94943569d33b648d5cabc996fbe49d0cddfb0e06560bf56f338ae1b4c8df2bbbfd8513558fea85416d5ab4c72cbc0d3181547eeab7ea44a4bdb7a444795f798ff9f4e7be75c804e01467f8ffd414c159e9db857d38cdfce34211ab786b58e1ca764b1769d012cdcc29a28b18fa8f57fff78b8fcb23a4aaad81cf00005ca603313ac3a8f69e5bc75064b17b949efa40b5f246258b4ec908352d147661c1f33e154691b95a742ec9f7f6818bf6c8a5aa45da89a8924040bbf11aa36944591eb1ae808ae62587fe0411e50b57b8fbd648177ec9dfe98b1dbb48687b4f5c00000fd116d22ef9ef9a3918a47417ba0c8836f1ec3e512671377397195ec9ab5783f2d9a2e41a8b61c813e7e48e498649d68f29252b9d3d0900ae0a86ac9c3d93630b0c65bcc59c62496fec7ea7d089f76bebcb1bf4b9cc013cb273f65239688527589917c8f385a4ee628372082889f7fd88ab93c44824fb106b9adbf615eee1d69444408875243d7f5f8144738b233901b0734797f44f1acdb41c0ed7ec1555b31f1e826199d767da3b10ffd3b105f1d899666e03861f7e506bdb5e3ff2e993f2e5aefd06f22cd6e2231c2cdfb678728dca84e2029758c37e91d82268aaee481aadb5ec213aac18af265660e713046083bf25cf1a3a50a16f11d18a3d396eb094a9626f1e9df155a928d6a6a9a3d72529505af41e9d5cb71970593a48"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:06 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:06 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x28, 0x40, 0x0, 0x0, 0x0, 0x0, 0x58402, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xbe, 0x0, 0x0, 0x0, 0xfffffe00, 0x9db, 0x0, 0x0, 0x0, 0xebd}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 00:09:06 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e5a868a2c93b8230700000000000000326f8af55453d720910c22c6ba9cb6e5cd292c448b68b1010f9fb5492520c4f52c232e000000ac459ebc2e606df21feaa75ec5419c5b76ce08c6ce9a7876151e04000000ba69f79cb713d0fdc6052ed01fdde50ba15a9478ad387d8d80e802b8fc8693cfa3121983c18611c1c0c9febf9fdb97bef0bde9a5198be5c32bc6b82fbc64fb23812645114f7b3b9d4213b57a3429737d7080ccfb8d8a930f1facaed5551336d4b50015d3c236dd6f0fe9e2285bc2acf581d7e263bff90aaf2f7532177f0686079a76404f94943569d33b648d5cabc996fbe49d0cddfb0e06560bf56f338ae1b4c8df2bbbfd8513558fea85416d5ab4c72cbc0d3181547eeab7ea44a4bdb7a444795f798ff9f4e7be75c804e01467f8ffd414c159e9db857d38cdfce34211ab786b58e1ca764b1769d012cdcc29a28b18fa8f57fff78b8fcb23a4aaad81cf00005ca603313ac3a8f69e5bc75064b17b949efa40b5f246258b4ec908352d147661c1f33e154691b95a742ec9f7f6818bf6c8a5aa45da89a8924040bbf11aa36944591eb1ae808ae62587fe0411e50b57b8fbd648177ec9dfe98b1dbb48687b4f5c00000fd116d22ef9ef9a3918a47417ba0c8836f1ec3e512671377397195ec9ab5783f2d9a2e41a8b61c813e7e48e498649d68f29252b9d3d0900ae0a86ac9c3d93630b0c65bcc59c62496fec7ea7d089f76bebcb1bf4b9cc013cb273f65239688527589917c8f385a4ee628372082889f7fd88ab93c44824fb106b9adbf615eee1d69444408875243d7f5f8144738b233901b0734797f44f1acdb41c0ed7ec1555b31f1e826199d767da3b10ffd3b105f1d899666e03861f7e506bdb5e3ff2e993f2e5aefd06f22cd6e2231c2cdfb678728dca84e2029758c37e91d82268aaee481aadb5ec213aac18af265660e713046083bf25cf1a3a50a16f11d18a3d396eb094a9626f1e9df155a928d6a6a9a3d72529505af41e9d5cb71970593a48"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x7, 0x18}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa3000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20}, 0x20020, 0x0, 0x5, 0x2, 0x7f, 0x2, 0x982, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1}, 0x1f00) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x15, 0x8, 0x0, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x7b, &(0x7f0000000f40)=""/123, 0x0, 0x1b, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0x0, 0x200, 0x6}, 0x10}, 0x80) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 00:09:06 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:06 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) 00:09:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x777f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfffffff9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) [ 1103.211080][T16769] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1103.271127][T16769] CPU: 1 PID: 16769 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1103.281598][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1103.291681][T16769] Call Trace: [ 1103.294981][T16769] [ 1103.297936][T16769] dump_stack_lvl+0x136/0x150 [ 1103.302665][T16769] dump_header+0x10a/0xd70 [ 1103.307123][T16769] oom_kill_process+0x25d/0x600 [ 1103.312014][T16769] out_of_memory+0x35c/0x1660 [ 1103.316725][T16769] ? io_schedule_timeout+0x150/0x150 [ 1103.322044][T16769] ? oom_killer_disable+0x2b0/0x2b0 [ 1103.327282][T16769] ? kernfs_notify+0x1ac/0x410 [ 1103.332105][T16769] mem_cgroup_out_of_memory+0x206/0x270 [ 1103.337694][T16769] ? mem_cgroup_margin+0x130/0x130 [ 1103.342868][T16769] memory_max_write+0x2f9/0x3c0 [ 1103.347764][T16769] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1103.353877][T16769] ? lock_sync+0x190/0x190 [ 1103.358340][T16769] cgroup_file_write+0x1e2/0x7b0 [ 1103.363307][T16769] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1103.369399][T16769] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1103.374784][T16769] ? __virt_addr_valid+0x61/0x2e0 [ 1103.379838][T16769] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1103.385224][T16769] kernfs_fop_write_iter+0x3f1/0x600 [ 1103.390537][T16769] vfs_write+0x945/0xd50 [ 1103.394793][T16769] ? kernel_write+0x670/0x670 [ 1103.399492][T16769] ? __fget_files+0x26a/0x480 [ 1103.404205][T16769] ksys_write+0x12b/0x250 [ 1103.408542][T16769] ? __ia32_sys_read+0xb0/0xb0 [ 1103.413316][T16769] ? syscall_enter_from_user_mode+0x26/0x80 [ 1103.419233][T16769] do_syscall_64+0x39/0xb0 [ 1103.423671][T16769] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1103.429580][T16769] RIP: 0033:0x7f9fa3c8c169 [ 1103.433999][T16769] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1103.453623][T16769] RSP: 002b:00007f9fa4ab0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1103.462049][T16769] RAX: ffffffffffffffda RBX: 00007f9fa3dac050 RCX: 00007f9fa3c8c169 00:09:07 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) [ 1103.470029][T16769] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1103.478006][T16769] RBP: 00007f9fa3ce7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1103.485985][T16769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.493958][T16769] R13: 00007ffe23c2f2df R14: 00007f9fa4ab0300 R15: 0000000000022000 [ 1103.501949][T16769] 00:09:07 executing program 3: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:09:07 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:07 executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x8, 0x3, 0x0, 0x3, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x510a, 0x7, 0x80000000, 0x2, 0x6, 0x7, 0x9, 0x0, 0x7f, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r0, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x5, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9e9}, 0x8820, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x81, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ac125d5a53f256d, @perf_bp={0x0, 0x2}, 0x0, 0x75a, 0x0, 0x0, 0x7, 0x20, 0xff, 0x0, 0xbfd, 0x0, 0xffffffffffffffff}, r2, 0x3, r1, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9e9}, 0x0, 0x0, 0x0, 0x4, 0x40, 0x7, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='#!+:%\'\\,{\x8e%$[\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) [ 1103.692945][T16769] memory: usage 10744kB, limit 1024kB, failcnt 268 [ 1103.709562][T16769] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1103.786466][T16769] Memory cgroup stats for /syz4: [ 1103.786760][T16769] anon 147456 [ 1103.786760][T16769] file 10481664 [ 1103.786760][T16769] kernel 372736 [ 1103.786760][T16769] kernel_stack 98304 [ 1103.786760][T16769] pagetables 81920 [ 1103.786760][T16769] sec_pagetables 0 [ 1103.786760][T16769] percpu 64 [ 1103.786760][T16769] sock 0 [ 1103.786760][T16769] vmalloc 0 [ 1103.786760][T16769] shmem 10465280 [ 1103.786760][T16769] zswap 0 [ 1103.786760][T16769] zswapped 0 [ 1103.786760][T16769] file_mapped 311296 [ 1103.786760][T16769] file_dirty 16384 [ 1103.786760][T16769] file_writeback 0 [ 1103.786760][T16769] swapcached 0 [ 1103.786760][T16769] anon_thp 0 [ 1103.786760][T16769] file_thp 0 [ 1103.786760][T16769] shmem_thp 0 [ 1103.786760][T16769] inactive_anon 10465280 [ 1103.786760][T16769] active_anon 147456 [ 1103.786760][T16769] inactive_file 0 [ 1103.786760][T16769] active_file 16384 [ 1103.786760][T16769] unevictable 0 [ 1103.786760][T16769] slab_reclaimable 58872 [ 1103.786760][T16769] slab_unreclaimable 107280 [ 1103.786760][T16769] slab 166152 [ 1103.786760][T16769] workingset_refault_anon 0 [ 1103.786760][T16769] workingset_refault_file 0 [ 1103.786760][T16769] workingset_activate_anon 0 [ 1103.786760][T16769] workingset_activate_file 0 [ 1103.786760][T16769] workingset_restore_anon 0 [ 1103.786760][T16769] workingset_restore_file 0 [ 1103.786760][T16769] workingset_nodereclaim 0 [ 1103.786760][T16769] pgscan 51 [ 1103.786760][T16769] pgsteal 51 [ 1103.786760][T16769] pgscan_kswapd 0 [ 1103.786760][T16769] pgscan_direct 51 [ 1103.786760][T16769] pgscan_khugepaged 0 [ 1103.786760][T16769] pgsteal_kswapd 0 [ 1103.786760][T16769] pgsteal_direct 51 [ 1103.786760][T16769] pgsteal_khugepaged 0 [ 1103.786760][T16769] pgfault 95785 [ 1103.786760][T16769] pgmajfault 0 [ 1103.786760][T16769] pgrefill 4922 [ 1103.786760][T16769] pgactivate 0 [ 1103.786760][T16769] pgdeactivate 0 [ 1103.786760][T16769] pglazyfree 0 [ 1103.786760][T16769] pglazyfreed 0 [ 1103.786760][T16769] zswpin 0 [ 1103.786760][T16769] zswpout 0 [ 1103.786760][T16769] thp_fault_alloc 0 00:09:07 executing program 3: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1104.008298][T16769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16762,uid=0 [ 1104.038971][T16769] Memory cgroup out of memory: Killed process 16769 (syz-executor.4) total-vm:54680kB, anon-rss:380kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 00:09:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1104.146526][T16790] Driver unsupported XDP return value 0 on prog (id 628) dev N/A, expect packet loss! 00:09:08 executing program 3: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1104.199122][T15190] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1104.256616][T15190] CPU: 0 PID: 15190 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1104.267084][T15190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1104.277156][T15190] Call Trace: [ 1104.280449][T15190] [ 1104.283403][T15190] dump_stack_lvl+0x136/0x150 [ 1104.288128][T15190] dump_header+0x10a/0xd70 [ 1104.292574][T15190] oom_kill_process+0x25d/0x600 [ 1104.297453][T15190] out_of_memory+0x35c/0x1660 [ 1104.302167][T15190] ? find_held_lock+0x2d/0x110 [ 1104.306957][T15190] ? oom_killer_disable+0x2b0/0x2b0 [ 1104.312183][T15190] ? rcu_read_unlock+0x9/0x60 [ 1104.316888][T15190] ? find_held_lock+0x2d/0x110 [ 1104.321682][T15190] mem_cgroup_out_of_memory+0x206/0x270 [ 1104.327262][T15190] ? mem_cgroup_margin+0x130/0x130 [ 1104.332400][T15190] ? lock_downgrade+0x690/0x690 [ 1104.337302][T15190] try_charge_memcg+0xf99/0x13a0 [ 1104.342282][T15190] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1104.348298][T15190] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1104.354051][T15190] ? lock_downgrade+0x690/0x690 [ 1104.358934][T15190] ? lock_downgrade+0x690/0x690 [ 1104.363827][T15190] obj_cgroup_charge+0x2af/0x5e0 [ 1104.368793][T15190] ? ext4_alloc_inode+0x28/0x650 [ 1104.373768][T15190] kmem_cache_alloc_lru+0x142/0x600 [ 1104.379001][T15190] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1104.384491][T15190] ext4_alloc_inode+0x28/0x650 [ 1104.389282][T15190] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1104.394763][T15190] alloc_inode+0x61/0x230 [ 1104.399123][T15190] iget_locked+0x1bb/0x700 [ 1104.403575][T15190] __ext4_iget+0x3b2/0x4430 [ 1104.408126][T15190] ? ext4_get_projid+0x190/0x190 [ 1104.413090][T15190] ? ext4_fname_prepare_lookup+0x163/0x200 [ 1104.418923][T15190] ? ext4_fname_setup_filename+0x110/0x110 [ 1104.424772][T15190] ? rcu_is_watching+0x12/0xb0 [ 1104.429576][T15190] ext4_lookup+0x387/0x700 [ 1104.434020][T15190] ? ext4_resetent+0x2e0/0x2e0 [ 1104.438837][T15190] __lookup_slow+0x24c/0x460 [ 1104.443459][T15190] ? lookup_one_qstr_excl+0x180/0x180 [ 1104.448884][T15190] ? lookup_fast+0x14e/0x520 [ 1104.453504][T15190] walk_component+0x33f/0x5a0 [ 1104.458213][T15190] path_lookupat+0x1ba/0x840 [ 1104.462840][T15190] filename_lookup+0x1d2/0x590 [ 1104.467643][T15190] ? may_linkat+0x3b0/0x3b0 [ 1104.472171][T15190] ? __might_fault+0xe2/0x190 [ 1104.476894][T15190] ? __phys_addr_symbol+0x30/0x70 [ 1104.481950][T15190] ? __check_object_size+0x323/0x730 [ 1104.487271][T15190] ? strncpy_from_user+0x1f8/0x350 [ 1104.492420][T15190] ? getname_flags.part.0+0x1dd/0x4f0 [ 1104.497836][T15190] user_path_at_empty+0x46/0x60 [ 1104.502722][T15190] __x64_sys_umount+0xfc/0x190 [ 1104.507518][T15190] ? path_umount+0x10b0/0x10b0 [ 1104.512310][T15190] ? syscall_enter_from_user_mode+0x26/0x80 [ 1104.518241][T15190] do_syscall_64+0x39/0xb0 [ 1104.522698][T15190] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1104.528628][T15190] RIP: 0033:0x7f9fa3c8d5d7 [ 1104.533067][T15190] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1104.552697][T15190] RSP: 002b:00007ffe23c2e438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1104.561136][T15190] RAX: ffffffffffffffda RBX: 00000000000000c3 RCX: 00007f9fa3c8d5d7 [ 1104.569122][T15190] RDX: 00007ffe23c2e50f RSI: 000000000000000a RDI: 00007ffe23c2e500 [ 1104.577113][T15190] RBP: 00007ffe23c2e500 R08: 00000000ffffffff R09: 00007ffe23c2e2d0 [ 1104.585104][T15190] R10: 0000555556cbd853 R11: 0000000000000246 R12: 00007f9fa3ce6cdc [ 1104.593098][T15190] R13: 00007ffe23c2f5c0 R14: 0000555556cbd810 R15: 00007ffe23c2f600 [ 1104.601110][T15190] 00:09:08 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1104.613605][T15190] memory: usage 10412kB, limit 1024kB, failcnt 287 [ 1104.645232][T15190] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1104.674417][T15190] Memory cgroup stats for /syz4: [ 1104.674661][T15190] anon 49152 [ 1104.674661][T15190] file 10481664 [ 1104.674661][T15190] kernel 131072 [ 1104.674661][T15190] kernel_stack 0 [ 1104.674661][T15190] pagetables 8192 [ 1104.674661][T15190] sec_pagetables 0 [ 1104.674661][T15190] percpu 64 [ 1104.674661][T15190] sock 0 [ 1104.674661][T15190] vmalloc 0 [ 1104.674661][T15190] shmem 10465280 [ 1104.674661][T15190] zswap 0 [ 1104.674661][T15190] zswapped 0 [ 1104.674661][T15190] file_mapped 274432 [ 1104.674661][T15190] file_dirty 16384 00:09:08 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) [ 1104.674661][T15190] file_writeback 0 [ 1104.674661][T15190] swapcached 0 [ 1104.674661][T15190] anon_thp 0 [ 1104.674661][T15190] file_thp 0 [ 1104.674661][T15190] shmem_thp 0 [ 1104.674661][T15190] inactive_anon 10465280 [ 1104.674661][T15190] active_anon 49152 [ 1104.674661][T15190] inactive_file 0 [ 1104.674661][T15190] active_file 16384 [ 1104.674661][T15190] unevictable 0 [ 1104.674661][T15190] slab_reclaimable 51496 [ 1104.674661][T15190] slab_unreclaimable 57504 [ 1104.674661][T15190] slab 109000 [ 1104.674661][T15190] workingset_refault_anon 0 [ 1104.674661][T15190] workingset_refault_file 0 [ 1104.674661][T15190] workingset_activate_anon 0 [ 1104.674661][T15190] workingset_activate_file 0 [ 1104.674661][T15190] workingset_restore_anon 0 [ 1104.674661][T15190] workingset_restore_file 0 [ 1104.674661][T15190] workingset_nodereclaim 0 [ 1104.674661][T15190] pgscan 51 [ 1104.674661][T15190] pgsteal 51 [ 1104.674661][T15190] pgscan_kswapd 0 [ 1104.674661][T15190] pgscan_direct 51 [ 1104.674661][T15190] pgscan_khugepaged 0 [ 1104.674661][T15190] pgsteal_kswapd 0 [ 1104.674661][T15190] pgsteal_direct 51 00:09:08 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:08 executing program 3: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1104.674661][T15190] pgsteal_khugepaged 0 [ 1104.674661][T15190] pgfault 95801 [ 1104.674661][T15190] pgmajfault 0 [ 1104.674661][T15190] pgrefill 5066 [ 1104.674661][T15190] pgactivate 0 [ 1104.674661][T15190] pgdeactivate 0 [ 1104.674661][T15190] pglazyfree 0 [ 1104.674661][T15190] pglazyfreed 0 [ 1104.674661][T15190] zswpin 0 [ 1104.674661][T15190] zswpout 0 [ 1104.674661][T15190] thp_fault_alloc 0 00:09:08 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:09 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:09 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:09 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) [ 1105.720969][T15190] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15190,uid=0 [ 1105.781161][T15190] Memory cgroup out of memory: Killed process 15190 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1105.831483][T15260] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1105.879435][T15260] CPU: 1 PID: 15260 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1105.889899][T15260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1105.899975][T15260] Call Trace: [ 1105.903271][T15260] [ 1105.906240][T15260] dump_stack_lvl+0x136/0x150 [ 1105.910964][T15260] dump_header+0x10a/0xd70 [ 1105.915414][T15260] oom_kill_process+0x25d/0x600 [ 1105.920279][T15260] out_of_memory+0x35c/0x1660 [ 1105.924965][T15260] ? oom_killer_disable+0x2b0/0x2b0 [ 1105.930190][T15260] ? rcu_read_unlock+0x9/0x60 [ 1105.934890][T15260] ? find_held_lock+0x2d/0x110 [ 1105.939653][T15260] mem_cgroup_out_of_memory+0x206/0x270 [ 1105.945211][T15260] ? mem_cgroup_margin+0x130/0x130 [ 1105.950321][T15260] ? lock_downgrade+0x690/0x690 [ 1105.955185][T15260] try_charge_memcg+0xf99/0x13a0 [ 1105.960133][T15260] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1105.966114][T15260] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1105.971833][T15260] ? lock_downgrade+0x690/0x690 [ 1105.976678][T15260] ? lock_downgrade+0x690/0x690 [ 1105.981527][T15260] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1105.987062][T15260] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1105.993213][T15260] copy_process+0x4f9/0x7600 [ 1105.997796][T15260] ? _raw_spin_unlock+0x28/0x40 [ 1106.002640][T15260] ? wp_page_reuse+0x197/0x570 [ 1106.007412][T15260] ? pidfd_prepare+0x80/0x80 [ 1106.012004][T15260] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1106.017977][T15260] kernel_clone+0xeb/0x890 [ 1106.022387][T15260] ? create_io_thread+0xe0/0xe0 [ 1106.027229][T15260] ? do_user_addr_fault+0x2b1/0x1210 [ 1106.032517][T15260] ? reacquire_held_locks+0x216/0x4e0 [ 1106.037899][T15260] ? do_user_addr_fault+0x2b1/0x1210 [ 1106.043217][T15260] ? find_held_lock+0x2d/0x110 [ 1106.047986][T15260] __do_sys_clone+0xba/0x100 [ 1106.052574][T15260] ? kernel_clone+0x890/0x890 [ 1106.057254][T15260] ? syscall_enter_from_user_mode+0x26/0x80 [ 1106.063141][T15260] do_syscall_64+0x39/0xb0 [ 1106.067560][T15260] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1106.073473][T15260] RIP: 0033:0x7fbbb9a89e9b [ 1106.077897][T15260] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1106.097496][T15260] RSP: 002b:00007ffedbd6d620 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1106.105897][T15260] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbbb9a89e9b [ 1106.113863][T15260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1106.121824][T15260] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555556c8400 [ 1106.129783][T15260] R10: 00005555556c86d0 R11: 0000000000000246 R12: 0000000000000001 [ 1106.137744][T15260] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffedbd6d700 [ 1106.145718][T15260] [ 1106.150227][T15260] memory: usage 10400kB, limit 1024kB, failcnt 458 [ 1106.166539][T15260] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1106.173962][T15260] Memory cgroup stats for /syz5: [ 1106.174155][T15260] anon 45056 [ 1106.174155][T15260] file 10469376 [ 1106.174155][T15260] kernel 135168 [ 1106.174155][T15260] kernel_stack 0 [ 1106.174155][T15260] pagetables 8192 [ 1106.174155][T15260] sec_pagetables 0 [ 1106.174155][T15260] percpu 0 [ 1106.174155][T15260] sock 0 [ 1106.174155][T15260] vmalloc 0 [ 1106.174155][T15260] shmem 10465280 [ 1106.174155][T15260] zswap 0 [ 1106.174155][T15260] zswapped 0 [ 1106.174155][T15260] file_mapped 274432 [ 1106.174155][T15260] file_dirty 4096 [ 1106.174155][T15260] file_writeback 0 [ 1106.174155][T15260] swapcached 0 [ 1106.174155][T15260] anon_thp 0 [ 1106.174155][T15260] file_thp 0 [ 1106.174155][T15260] shmem_thp 0 [ 1106.174155][T15260] inactive_anon 0 [ 1106.174155][T15260] active_anon 10510336 [ 1106.174155][T15260] inactive_file 0 [ 1106.174155][T15260] active_file 4096 [ 1106.174155][T15260] unevictable 0 [ 1106.174155][T15260] slab_reclaimable 35112 [ 1106.174155][T15260] slab_unreclaimable 77112 [ 1106.174155][T15260] slab 112224 [ 1106.174155][T15260] workingset_refault_anon 0 [ 1106.174155][T15260] workingset_refault_file 0 [ 1106.174155][T15260] workingset_activate_anon 0 [ 1106.174155][T15260] workingset_activate_file 0 [ 1106.174155][T15260] workingset_restore_anon 0 [ 1106.174155][T15260] workingset_restore_file 0 [ 1106.174155][T15260] workingset_nodereclaim 0 [ 1106.174155][T15260] pgscan 3648 [ 1106.174155][T15260] pgsteal 2469 [ 1106.174155][T15260] pgscan_kswapd 0 [ 1106.174155][T15260] pgscan_direct 3648 [ 1106.174155][T15260] pgscan_khugepaged 0 [ 1106.174155][T15260] pgsteal_kswapd 0 [ 1106.174155][T15260] pgsteal_direct 2469 [ 1106.174155][T15260] pgsteal_khugepaged 0 [ 1106.174155][T15260] pgfault 128003 [ 1106.174155][T15260] pgmajfault 0 [ 1106.174155][T15260] pgrefill 3043472 [ 1106.174155][T15260] pgactivate 174 [ 1106.174155][T15260] pgdeactivate 0 [ 1106.174155][T15260] pglazyfree 0 [ 1106.174155][T15260] pglazyfreed 0 [ 1106.174155][T15260] zswpin 0 [ 1106.174155][T15260] zswpout 0 [ 1106.174155][T15260] thp_fault_alloc 0 [ 1106.376507][T15260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15260,uid=0 [ 1106.392390][T15260] Memory cgroup out of memory: Killed process 15260 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1106.541768][T11784] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:09:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:10 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:10 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:10 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1106.629496][T15007] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1106.669911][T15007] CPU: 0 PID: 15007 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1106.680375][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1106.690450][T15007] Call Trace: [ 1106.693744][T15007] [ 1106.696681][T15007] dump_stack_lvl+0x136/0x150 [ 1106.701390][T15007] dump_header+0x10a/0xd70 [ 1106.705819][T15007] oom_kill_process+0x25d/0x600 [ 1106.710678][T15007] out_of_memory+0x35c/0x1660 [ 1106.715370][T15007] ? find_held_lock+0x2d/0x110 [ 1106.720139][T15007] ? oom_killer_disable+0x2b0/0x2b0 [ 1106.725345][T15007] ? rcu_read_unlock+0x9/0x60 [ 1106.730033][T15007] ? find_held_lock+0x2d/0x110 [ 1106.734807][T15007] mem_cgroup_out_of_memory+0x206/0x270 [ 1106.740362][T15007] ? mem_cgroup_margin+0x130/0x130 [ 1106.745482][T15007] ? lock_downgrade+0x690/0x690 [ 1106.750357][T15007] try_charge_memcg+0xf99/0x13a0 [ 1106.755315][T15007] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1106.761309][T15007] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1106.767044][T15007] ? lock_downgrade+0x690/0x690 [ 1106.771908][T15007] ? lock_downgrade+0x690/0x690 [ 1106.776767][T15007] ? rcu_read_unlock+0x9/0x60 [ 1106.781462][T15007] obj_cgroup_charge+0x2af/0x5e0 [ 1106.786407][T15007] ? copy_process+0x3c0/0x7600 [ 1106.791181][T15007] kmem_cache_alloc_node+0xa8/0x3e0 [ 1106.796396][T15007] copy_process+0x3c0/0x7600 [ 1106.800994][T15007] ? _raw_spin_unlock+0x28/0x40 [ 1106.805853][T15007] ? wp_page_reuse+0x197/0x570 [ 1106.810640][T15007] ? pidfd_prepare+0x80/0x80 [ 1106.815252][T15007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1106.821251][T15007] kernel_clone+0xeb/0x890 [ 1106.825678][T15007] ? create_io_thread+0xe0/0xe0 [ 1106.830540][T15007] ? do_user_addr_fault+0x2b1/0x1210 [ 1106.835836][T15007] ? reacquire_held_locks+0x216/0x4e0 [ 1106.841221][T15007] ? do_user_addr_fault+0x2b1/0x1210 [ 1106.846526][T15007] ? find_held_lock+0x2d/0x110 [ 1106.851301][T15007] __do_sys_clone+0xba/0x100 [ 1106.855899][T15007] ? kernel_clone+0x890/0x890 [ 1106.860597][T15007] ? syscall_enter_from_user_mode+0x26/0x80 [ 1106.866506][T15007] do_syscall_64+0x39/0xb0 [ 1106.870938][T15007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1106.876841][T15007] RIP: 0033:0x7f6be6a89e9b [ 1106.881270][T15007] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1106.900883][T15007] RSP: 002b:00007ffd657fa780 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1106.909299][T15007] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6be6a89e9b [ 1106.917271][T15007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1106.925244][T15007] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556842400 [ 1106.933214][T15007] R10: 00005555568426d0 R11: 0000000000000246 R12: 0000000000000001 [ 1106.941188][T15007] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd657fa860 [ 1106.949176][T15007] [ 1106.970677][T11784] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.100988][T15007] memory: usage 10420kB, limit 1024kB, failcnt 329 [ 1107.116431][T15007] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1107.124671][T11784] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.149223][T15007] Memory cgroup stats for /syz1: [ 1107.149458][T15007] anon 49152 [ 1107.149458][T15007] file 10493952 [ 1107.149458][T15007] kernel 126976 [ 1107.149458][T15007] kernel_stack 0 [ 1107.149458][T15007] pagetables 8192 [ 1107.149458][T15007] sec_pagetables 0 [ 1107.149458][T15007] percpu 0 [ 1107.149458][T15007] sock 0 [ 1107.149458][T15007] vmalloc 0 [ 1107.149458][T15007] shmem 10465280 [ 1107.149458][T15007] zswap 0 [ 1107.149458][T15007] zswapped 0 [ 1107.149458][T15007] file_mapped 278528 [ 1107.149458][T15007] file_dirty 28672 [ 1107.149458][T15007] file_writeback 0 [ 1107.149458][T15007] swapcached 0 [ 1107.149458][T15007] anon_thp 0 [ 1107.149458][T15007] file_thp 0 [ 1107.149458][T15007] shmem_thp 0 [ 1107.149458][T15007] inactive_anon 0 [ 1107.149458][T15007] active_anon 10514432 [ 1107.149458][T15007] inactive_file 0 [ 1107.149458][T15007] active_file 28672 [ 1107.149458][T15007] unevictable 0 [ 1107.149458][T15007] slab_reclaimable 38888 [ 1107.149458][T15007] slab_unreclaimable 69488 [ 1107.149458][T15007] slab 108376 [ 1107.149458][T15007] workingset_refault_anon 0 [ 1107.149458][T15007] workingset_refault_file 0 [ 1107.149458][T15007] workingset_activate_anon 0 [ 1107.149458][T15007] workingset_activate_file 0 [ 1107.149458][T15007] workingset_restore_anon 0 [ 1107.149458][T15007] workingset_restore_file 0 [ 1107.149458][T15007] workingset_nodereclaim 0 [ 1107.149458][T15007] pgscan 189 [ 1107.149458][T15007] pgsteal 30 [ 1107.149458][T15007] pgscan_kswapd 0 [ 1107.149458][T15007] pgscan_direct 189 [ 1107.149458][T15007] pgscan_khugepaged 0 [ 1107.149458][T15007] pgsteal_kswapd 0 [ 1107.149458][T15007] pgsteal_direct 30 00:09:11 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) [ 1107.149458][T15007] pgsteal_khugepaged 0 [ 1107.149458][T15007] pgfault 94748 [ 1107.149458][T15007] pgmajfault 0 [ 1107.149458][T15007] pgrefill 10318 [ 1107.149458][T15007] pgactivate 159 [ 1107.149458][T15007] pgdeactivate 0 [ 1107.149458][T15007] pglazyfree 0 [ 1107.149458][T15007] pglazyfreed 0 [ 1107.149458][T15007] zswpin 0 [ 1107.149458][T15007] zswpout 0 [ 1107.149458][T15007] thp_fault_alloc 0 00:09:11 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1107.476866][T15007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15007,uid=0 [ 1107.519446][T15007] Memory cgroup out of memory: Killed process 15007 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 1107.557556][T11784] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.720451][T16838] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1107.776595][T16838] CPU: 0 PID: 16838 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1107.787071][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1107.797149][T16838] Call Trace: [ 1107.800447][T16838] [ 1107.803396][T16838] dump_stack_lvl+0x136/0x150 [ 1107.808121][T16838] dump_header+0x10a/0xd70 [ 1107.812575][T16838] oom_kill_process+0x25d/0x600 [ 1107.817467][T16838] out_of_memory+0x35c/0x1660 [ 1107.822176][T16838] ? io_schedule_timeout+0x150/0x150 [ 1107.827492][T16838] ? oom_killer_disable+0x2b0/0x2b0 [ 1107.832710][T16838] ? kernfs_notify+0x1ac/0x410 [ 1107.837502][T16838] mem_cgroup_out_of_memory+0x206/0x270 [ 1107.843062][T16838] ? mem_cgroup_margin+0x130/0x130 [ 1107.848204][T16838] memory_max_write+0x2f9/0x3c0 [ 1107.853078][T16838] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1107.859170][T16838] ? lock_sync+0x190/0x190 [ 1107.863603][T16838] cgroup_file_write+0x1e2/0x7b0 [ 1107.868557][T16838] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1107.874646][T16838] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1107.880027][T16838] ? __virt_addr_valid+0x61/0x2e0 [ 1107.885078][T16838] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1107.890461][T16838] kernfs_fop_write_iter+0x3f1/0x600 [ 1107.895768][T16838] vfs_write+0x945/0xd50 [ 1107.900023][T16838] ? kernel_write+0x670/0x670 [ 1107.904711][T16838] ? __fget_files+0x26a/0x480 [ 1107.909420][T16838] ksys_write+0x12b/0x250 [ 1107.913764][T16838] ? __ia32_sys_read+0xb0/0xb0 [ 1107.918536][T16838] ? syscall_enter_from_user_mode+0x26/0x80 [ 1107.924462][T16838] do_syscall_64+0x39/0xb0 [ 1107.928910][T16838] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1107.934835][T16838] RIP: 0033:0x7f4ce708c169 [ 1107.939263][T16838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1107.958886][T16838] RSP: 002b:00007f4ce5bbc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1107.967310][T16838] RAX: ffffffffffffffda RBX: 00007f4ce71ac120 RCX: 00007f4ce708c169 [ 1107.975287][T16838] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1107.983263][T16838] RBP: 00007f4ce70e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1107.991242][T16838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.999218][T16838] R13: 00007ffef6a9bbbf R14: 00007f4ce5bbc300 R15: 0000000000022000 [ 1108.007222][T16838] 00:09:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:11 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 00:09:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1108.101047][T16838] memory: usage 10852kB, limit 1024kB, failcnt 494 [ 1108.134193][T16838] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1108.553094][T16838] Memory cgroup stats for /syz2: [ 1108.553337][T16838] anon 147456 [ 1108.553337][T16838] file 10522624 [ 1108.553337][T16838] kernel 442368 [ 1108.553337][T16838] kernel_stack 131072 [ 1108.553337][T16838] pagetables 81920 [ 1108.553337][T16838] sec_pagetables 0 [ 1108.553337][T16838] percpu 64 [ 1108.553337][T16838] sock 0 [ 1108.553337][T16838] vmalloc 0 [ 1108.553337][T16838] shmem 10465280 [ 1108.553337][T16838] zswap 0 [ 1108.553337][T16838] zswapped 0 [ 1108.553337][T16838] file_mapped 376832 [ 1108.553337][T16838] file_dirty 0 [ 1108.553337][T16838] file_writeback 0 [ 1108.553337][T16838] swapcached 0 [ 1108.553337][T16838] anon_thp 0 [ 1108.553337][T16838] file_thp 0 [ 1108.553337][T16838] shmem_thp 0 [ 1108.553337][T16838] inactive_anon 10469376 [ 1108.553337][T16838] active_anon 143360 [ 1108.553337][T16838] inactive_file 57344 [ 1108.553337][T16838] active_file 0 [ 1108.553337][T16838] unevictable 0 [ 1108.553337][T16838] slab_reclaimable 56168 [ 1108.553337][T16838] slab_unreclaimable 140568 [ 1108.553337][T16838] slab 196736 [ 1108.553337][T16838] workingset_refault_anon 0 [ 1108.553337][T16838] workingset_refault_file 0 [ 1108.553337][T16838] workingset_activate_anon 0 [ 1108.553337][T16838] workingset_activate_file 0 [ 1108.553337][T16838] workingset_restore_anon 0 [ 1108.553337][T16838] workingset_restore_file 0 [ 1108.553337][T16838] workingset_nodereclaim 0 [ 1108.553337][T16838] pgscan 239 [ 1108.553337][T16838] pgsteal 35 [ 1108.553337][T16838] pgscan_kswapd 0 [ 1108.553337][T16838] pgscan_direct 239 [ 1108.553337][T16838] pgscan_khugepaged 0 [ 1108.553337][T16838] pgsteal_kswapd 0 [ 1108.553337][T16838] pgsteal_direct 35 [ 1108.553337][T16838] pgsteal_khugepaged 0 [ 1108.553337][T16838] pgfault 120530 [ 1108.553337][T16838] pgmajfault 0 [ 1108.553337][T16838] pgrefill 46249 [ 1108.553337][T16838] pgactivate 204 [ 1108.553337][T16838] pgdeactivate 0 [ 1108.553337][T16838] pglazyfree 0 [ 1108.553337][T16838] pglazyfreed 0 [ 1108.553337][T16838] zswpin 0 [ 1108.553337][T16838] zswpout 0 [ 1108.776501][T16838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15188,uid=0 00:09:12 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x16f05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000940), 0x1}, 0x0, 0x8000001ff, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000003f000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x6, 0x9, 0x6, 0xff, 0x0, 0x100, 0x80000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0xc}, 0x850b2, 0x0, 0x5, 0x9, 0x80, 0x9, 0x127, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x7, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0016e8866b5afd056ad18a2487cd5f729570d9c3fdd005038000"], &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xaa, &(0x7f0000000380)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x54, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x80) openat$cgroup_ro(r4, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0x2e, 0x77, &(0x7f0000000300)="722b5433ae3400285356a737733d52481d57d31402a21b0a4faacb93e61381ca0e96287cf3e227f25f17f3940eb2", &(0x7f0000000680)=""/119, 0xfd205db, 0x0, 0x9c, 0x8e, &(0x7f0000000700)="8a6938c40f0d6a102932fddc1a532b83980c1740c79d1f53c5cfb766d3f7c4c208342f71e78a2839eb0b85646e84feb1f23ebc4f8492c8119d9ea8641129f80f407c4da94276067d16b3b453698e01295ce5aeb5395f724163c1d3f4f041c8ce0c9ef63f05fa7b5687f410fa7402ced68aeeb03d3fbbb22e114852a3d6045f2e776e05346df7ed7fd3f38bed3f2c39c5dfc8cc705743769da88624b8", &(0x7f00000007c0)="b259564c82c0349cbefdfbbaa008766ec1efacc5718c9fe0f911bd7e1b99a2139821c6e295eb6a36544375d7a98982cfa7ed6440ddbb8d79189a613741713a1f4407d7f6f260334a8d2965d0b7c3082ca7e1a3933e9e6bfbc356b2842b77bed0a91327cc1d9ca85cea49b6365dbfdafecb4842b89625d890f1fc3f5d672fbcead74779fea88190b335103550505e", 0x1, 0x81}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000000)={0xa, 0x0, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0x3}, 0xfc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r9) r10 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r10}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0x6, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xbca6}, [@generic={0x2, 0x9, 0x7, 0x3f, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000b40)='GPL\x00', 0x7, 0xa4, &(0x7f0000000b80)=""/164, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xf, 0x2, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'netpci0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x8000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) [ 1109.001017][T16838] Memory cgroup out of memory: Killed process 15188 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 00:09:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1109.275703][T14516] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1109.310955][T14516] CPU: 0 PID: 14516 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1109.321416][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1109.331416][T10649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1109.338409][T14516] Call Trace: [ 1109.341702][T14516] [ 1109.344651][T14516] dump_stack_lvl+0x136/0x150 [ 1109.349370][T14516] dump_header+0x10a/0xd70 [ 1109.353818][T14516] oom_kill_process+0x25d/0x600 [ 1109.358694][T14516] out_of_memory+0x35c/0x1660 [ 1109.363395][T14516] ? find_held_lock+0x2d/0x110 [ 1109.368190][T14516] ? oom_killer_disable+0x2b0/0x2b0 [ 1109.373415][T14516] ? rcu_read_unlock+0x9/0x60 [ 1109.378117][T14516] ? find_held_lock+0x2d/0x110 [ 1109.382905][T14516] mem_cgroup_out_of_memory+0x206/0x270 [ 1109.388566][T14516] ? mem_cgroup_margin+0x130/0x130 [ 1109.393691][T14516] ? lock_downgrade+0x690/0x690 [ 1109.398567][T14516] try_charge_memcg+0xf99/0x13a0 [ 1109.403526][T14516] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1109.409525][T14516] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1109.415256][T14516] ? lock_downgrade+0x690/0x690 [ 1109.420118][T14516] ? lock_downgrade+0x690/0x690 [ 1109.424990][T14516] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1109.430546][T14516] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1109.436717][T14516] copy_process+0x4f9/0x7600 [ 1109.441317][T14516] ? _raw_spin_unlock+0x28/0x40 [ 1109.446178][T14516] ? wp_page_reuse+0x197/0x570 [ 1109.450965][T14516] ? pidfd_prepare+0x80/0x80 [ 1109.455573][T14516] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1109.461569][T14516] kernel_clone+0xeb/0x890 [ 1109.465997][T14516] ? create_io_thread+0xe0/0xe0 [ 1109.470856][T14516] ? do_user_addr_fault+0x2b1/0x1210 [ 1109.476149][T14516] ? reacquire_held_locks+0x216/0x4e0 [ 1109.481532][T14516] ? do_user_addr_fault+0x2b1/0x1210 [ 1109.486830][T14516] ? find_held_lock+0x2d/0x110 [ 1109.491616][T14516] __do_sys_clone+0xba/0x100 [ 1109.496213][T14516] ? kernel_clone+0x890/0x890 [ 1109.500909][T14516] ? syscall_enter_from_user_mode+0x26/0x80 [ 1109.506814][T14516] do_syscall_64+0x39/0xb0 [ 1109.511247][T14516] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1109.517150][T14516] RIP: 0033:0x7f0858889e9b [ 1109.521566][T14516] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1109.541173][T14516] RSP: 002b:00007ffdbf9839d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1109.549588][T14516] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0858889e9b [ 1109.557561][T14516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1109.565536][T14516] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556f1b400 [ 1109.573513][T14516] R10: 0000555556f1b6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1109.581486][T14516] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdbf983ab0 [ 1109.589477][T14516] [ 1109.593969][T10649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1109.603413][T14516] memory: usage 10416kB, limit 1024kB, failcnt 171 [ 1109.609941][T14516] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 00:09:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1109.627713][T10649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1109.638330][T10649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1109.645881][T10649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1109.650208][T16866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1109.653486][T10649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1109.661754][T16866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1109.676525][T16866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1109.704069][T16866] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1109.712204][T16866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1109.761087][T14516] Memory cgroup stats for /syz0: [ 1109.761317][T14516] anon 40960 [ 1109.761317][T14516] file 10477568 [ 1109.761317][T14516] kernel 147456 [ 1109.761317][T14516] kernel_stack 0 [ 1109.761317][T14516] pagetables 8192 [ 1109.761317][T14516] sec_pagetables 0 [ 1109.761317][T14516] percpu 0 [ 1109.761317][T14516] sock 0 [ 1109.761317][T14516] vmalloc 0 [ 1109.761317][T14516] shmem 10465280 [ 1109.761317][T14516] zswap 0 [ 1109.761317][T14516] zswapped 0 [ 1109.761317][T14516] file_mapped 278528 [ 1109.761317][T14516] file_dirty 0 [ 1109.761317][T14516] file_writeback 0 [ 1109.761317][T14516] swapcached 0 [ 1109.761317][T14516] anon_thp 0 [ 1109.761317][T14516] file_thp 0 [ 1109.761317][T14516] shmem_thp 0 [ 1109.761317][T14516] inactive_anon 10465280 [ 1109.761317][T14516] active_anon 40960 [ 1109.761317][T14516] inactive_file 0 [ 1109.761317][T14516] active_file 12288 [ 1109.761317][T14516] unevictable 0 [ 1109.761317][T14516] slab_reclaimable 36040 [ 1109.761317][T14516] slab_unreclaimable 77112 [ 1109.761317][T14516] slab 113152 [ 1109.761317][T14516] workingset_refault_anon 0 [ 1109.761317][T14516] workingset_refault_file 0 [ 1109.761317][T14516] workingset_activate_anon 0 [ 1109.761317][T14516] workingset_activate_file 0 [ 1109.761317][T14516] workingset_restore_anon 0 [ 1109.761317][T14516] workingset_restore_file 0 [ 1109.761317][T14516] workingset_nodereclaim 0 [ 1109.761317][T14516] pgscan 492 [ 1109.761317][T14516] pgsteal 149 [ 1109.761317][T14516] pgscan_kswapd 0 [ 1109.761317][T14516] pgscan_direct 492 [ 1109.761317][T14516] pgscan_khugepaged 0 [ 1109.761317][T14516] pgsteal_kswapd 0 [ 1109.761317][T14516] pgsteal_direct 149 [ 1109.761317][T14516] pgsteal_khugepaged 0 [ 1109.761317][T14516] pgfault 96038 [ 1109.761317][T14516] pgmajfault 0 [ 1109.761317][T14516] pgrefill 11326 [ 1109.761317][T14516] pgactivate 343 [ 1109.761317][T14516] pgdeactivate 0 [ 1109.761317][T14516] pglazyfree 0 [ 1109.761317][T14516] pglazyfreed 0 [ 1109.761317][T14516] zswpin 0 [ 1109.761317][T14516] zswpout 0 [ 1109.761317][T14516] thp_fault_alloc 0 [ 1110.014975][ T5034] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1110.023555][ T5034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1110.037117][ T5034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1110.044727][ T5034] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1110.052890][ T5034] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1110.062131][T14516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=14516,uid=0 00:09:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1110.123230][T14516] Memory cgroup out of memory: Killed process 14516 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1110.201551][T16869] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1110.338254][T16869] CPU: 1 PID: 16869 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1110.348728][T16869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1110.358807][T16869] Call Trace: [ 1110.362108][T16869] [ 1110.365054][T16869] dump_stack_lvl+0x136/0x150 [ 1110.369775][T16869] dump_header+0x10a/0xd70 [ 1110.374227][T16869] oom_kill_process+0x25d/0x600 [ 1110.379111][T16869] out_of_memory+0x35c/0x1660 [ 1110.383826][T16869] ? oom_killer_disable+0x2b0/0x2b0 [ 1110.389055][T16869] ? kernfs_notify+0x1ac/0x410 [ 1110.393866][T16869] ? find_held_lock+0x2d/0x110 [ 1110.398666][T16869] mem_cgroup_out_of_memory+0x206/0x270 [ 1110.404249][T16869] ? mem_cgroup_margin+0x130/0x130 [ 1110.409415][T16869] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1110.415272][T16869] memory_max_write+0x2f9/0x3c0 [ 1110.420167][T16869] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1110.426280][T16869] ? lock_sync+0x190/0x190 [ 1110.430836][T16869] cgroup_file_write+0x1e2/0x7b0 [ 1110.435945][T16869] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1110.442045][T16869] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1110.447430][T16869] ? __virt_addr_valid+0x61/0x2e0 [ 1110.452480][T16869] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1110.457862][T16869] kernfs_fop_write_iter+0x3f1/0x600 [ 1110.463175][T16869] vfs_write+0x945/0xd50 [ 1110.467430][T16869] ? kernel_write+0x670/0x670 [ 1110.472118][T16869] ? __fget_files+0x26a/0x480 [ 1110.476827][T16869] ksys_write+0x12b/0x250 [ 1110.481165][T16869] ? __ia32_sys_read+0xb0/0xb0 [ 1110.485937][T16869] ? syscall_enter_from_user_mode+0x26/0x80 [ 1110.491849][T16869] do_syscall_64+0x39/0xb0 [ 1110.496291][T16869] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1110.502199][T16869] RIP: 0033:0x7f6d4908c169 [ 1110.506616][T16869] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1110.526226][T16869] RSP: 002b:00007f6d49d49168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1110.534646][T16869] RAX: ffffffffffffffda RBX: 00007f6d491ac050 RCX: 00007f6d4908c169 [ 1110.542621][T16869] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1110.550593][T16869] RBP: 00007f6d490e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1110.558565][T16869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.566537][T16869] R13: 00007ffc510b40ef R14: 00007f6d49d49300 R15: 0000000000022000 [ 1110.574526][T16869] [ 1110.594136][T16869] memory: usage 10768kB, limit 1024kB, failcnt 327 [ 1110.613687][T16869] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1110.621252][T16869] Memory cgroup stats for /syz3: [ 1110.621482][T16869] anon 147456 [ 1110.621482][T16869] file 10485760 [ 1110.621482][T16869] kernel 319488 [ 1110.621482][T16869] kernel_stack 32768 [ 1110.621482][T16869] pagetables 77824 [ 1110.621482][T16869] sec_pagetables 0 [ 1110.621482][T16869] percpu 64 [ 1110.621482][T16869] sock 0 [ 1110.621482][T16869] vmalloc 0 [ 1110.621482][T16869] shmem 10465280 [ 1110.621482][T16869] zswap 0 [ 1110.621482][T16869] zswapped 0 [ 1110.621482][T16869] file_mapped 311296 [ 1110.621482][T16869] file_dirty 12288 [ 1110.621482][T16869] file_writeback 0 [ 1110.621482][T16869] swapcached 0 [ 1110.621482][T16869] anon_thp 0 [ 1110.621482][T16869] file_thp 0 [ 1110.621482][T16869] shmem_thp 0 [ 1110.621482][T16869] inactive_anon 147456 [ 1110.621482][T16869] active_anon 10465280 [ 1110.621482][T16869] inactive_file 0 [ 1110.621482][T16869] active_file 20480 [ 1110.621482][T16869] unevictable 0 [ 1110.621482][T16869] slab_reclaimable 52272 [ 1110.621482][T16869] slab_unreclaimable 127776 [ 1110.621482][T16869] slab 180048 [ 1110.621482][T16869] workingset_refault_anon 0 [ 1110.621482][T16869] workingset_refault_file 0 [ 1110.621482][T16869] workingset_activate_anon 0 [ 1110.621482][T16869] workingset_activate_file 0 [ 1110.621482][T16869] workingset_restore_anon 0 [ 1110.621482][T16869] workingset_restore_file 0 [ 1110.621482][T16869] workingset_nodereclaim 0 [ 1110.621482][T16869] pgscan 156 [ 1110.621482][T16869] pgsteal 30 [ 1110.621482][T16869] pgscan_kswapd 0 [ 1110.621482][T16869] pgscan_direct 156 [ 1110.621482][T16869] pgscan_khugepaged 0 [ 1110.621482][T16869] pgsteal_kswapd 0 [ 1110.621482][T16869] pgsteal_direct 30 [ 1110.621482][T16869] pgsteal_khugepaged 0 [ 1110.621482][T16869] pgfault 103956 [ 1110.621482][T16869] pgmajfault 0 [ 1110.621482][T16869] pgrefill 11178 [ 1110.621482][T16869] pgactivate 126 [ 1110.621482][T16869] pgdeactivate 0 [ 1110.621482][T16869] pglazyfree 0 [ 1110.621482][T16869] pglazyfreed 0 [ 1110.621482][T16869] zswpin 0 [ 1110.621482][T16869] zswpout 0 [ 1110.862804][T16869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16863,uid=0 [ 1110.883447][T11784] hsr_slave_0: left promiscuous mode [ 1110.889582][T11784] hsr_slave_1: left promiscuous mode [ 1110.897419][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.905146][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.915321][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.922973][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.927973][T16869] Memory cgroup out of memory: Killed process 16869 (syz-executor.3) total-vm:56728kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1110.950555][T11784] veth0_to_bond: left allmulticast mode [ 1110.960917][T11784] veth0_to_bond: left promiscuous mode [ 1110.974214][T11784] bridge0: port 3(veth0_to_bond) entered disabled state [ 1110.996550][T11784] bridge_slave_1: left allmulticast mode [ 1111.002293][T11784] bridge_slave_1: left promiscuous mode [ 1111.007976][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.024537][T11784] bridge_slave_0: left allmulticast mode [ 1111.030202][T11784] bridge_slave_0: left promiscuous mode [ 1111.036757][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.067005][T11784] veth1_macvtap: left promiscuous mode [ 1111.072663][T11784] veth0_macvtap: left promiscuous mode [ 1111.078172][T11784] veth1_vlan: left promiscuous mode [ 1111.083582][T11784] veth0_vlan: left promiscuous mode [ 1111.228954][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1111.246484][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1111.263328][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.276570][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.389699][T11784] bond0 (unregistering): Released all slaves [ 1111.471689][T16866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1111.480697][T16866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1111.488948][T16866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1111.497694][T16866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1111.508935][T16866] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1111.516451][T16866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1111.715679][T10649] Bluetooth: hci0: command 0x0409 tx timeout [ 1111.743396][T16860] chnl_net:caif_netlink_parms(): no params data found [ 1111.791106][T10649] Bluetooth: hci1: command 0x0409 tx timeout [ 1111.900351][T16870] chnl_net:caif_netlink_parms(): no params data found [ 1111.937107][T16862] chnl_net:caif_netlink_parms(): no params data found [ 1112.100239][T16860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.111055][T10649] Bluetooth: hci2: command 0x0409 tx timeout [ 1112.118529][T16860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.149807][T16860] bridge_slave_0: entered allmulticast mode [ 1112.170936][T16860] bridge_slave_0: entered promiscuous mode [ 1112.233399][T16860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.240512][T16860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.268941][T16860] bridge_slave_1: entered allmulticast mode [ 1112.291027][T16860] bridge_slave_1: entered promiscuous mode [ 1112.401462][T16862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.408578][T16862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.416250][T16862] bridge_slave_0: entered allmulticast mode [ 1112.424850][T16862] bridge_slave_0: entered promiscuous mode [ 1112.432470][T16877] chnl_net:caif_netlink_parms(): no params data found [ 1112.488710][T16862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.498581][T16862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.507319][T16862] bridge_slave_1: entered allmulticast mode [ 1112.522074][T16862] bridge_slave_1: entered promiscuous mode [ 1112.558586][T16860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.600825][T16860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.654270][T16870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.671164][T16870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.678338][T16870] bridge_slave_0: entered allmulticast mode [ 1112.695134][T16870] bridge_slave_0: entered promiscuous mode [ 1112.713059][T16870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.720151][T16870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.736940][T16870] bridge_slave_1: entered allmulticast mode [ 1112.752040][T16870] bridge_slave_1: entered promiscuous mode [ 1112.831188][T10649] Bluetooth: hci5: command 0x0406 tx timeout [ 1112.888769][T16862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.958666][T16860] team0: Port device team_slave_0 added [ 1112.972374][T16860] team0: Port device team_slave_1 added [ 1112.979843][T16862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.016146][T16870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.068502][T16870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.190691][T16877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.199549][T16877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.221943][T16877] bridge_slave_0: entered allmulticast mode [ 1113.228889][T16877] bridge_slave_0: entered promiscuous mode [ 1113.243587][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.250691][T16877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.281203][T16877] bridge_slave_1: entered allmulticast mode [ 1113.288186][T16877] bridge_slave_1: entered promiscuous mode [ 1113.297463][T16860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.305967][T16860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.340026][T16860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.373342][T16862] team0: Port device team_slave_0 added [ 1113.383557][T16870] team0: Port device team_slave_0 added [ 1113.420295][T16860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.427357][T16860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.453685][T16860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.466624][T16862] team0: Port device team_slave_1 added [ 1113.483089][T16870] team0: Port device team_slave_1 added [ 1113.551031][T10649] Bluetooth: hci3: command 0x0409 tx timeout [ 1113.565015][T16877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.579035][T16860] hsr_slave_0: entered promiscuous mode [ 1113.586544][T16860] hsr_slave_1: entered promiscuous mode [ 1113.592692][T16860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1113.600260][T16860] Cannot create hsr debugfs directory [ 1113.633121][T16877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.652335][T16862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.659299][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.685396][T16862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.697906][T16870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.705600][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.733271][T16870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.770142][T16862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.777435][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.804362][T10649] Bluetooth: hci0: command 0x041b tx timeout [ 1113.811528][T16862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.828042][T16870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.836759][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.862843][T16870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.873584][T16866] Bluetooth: hci1: command 0x041b tx timeout [ 1113.894506][T16877] team0: Port device team_slave_0 added [ 1113.945306][T16877] team0: Port device team_slave_1 added [ 1113.981911][T16862] hsr_slave_0: entered promiscuous mode [ 1113.988306][T16862] hsr_slave_1: entered promiscuous mode [ 1113.994567][T16862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.002366][T16862] Cannot create hsr debugfs directory [ 1114.049893][T16877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.060233][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.086982][T16877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.157493][T16877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.165497][T16877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.191486][T16866] Bluetooth: hci2: command 0x041b tx timeout [ 1114.209761][T16877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.268759][T11784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.314105][T16870] hsr_slave_0: entered promiscuous mode [ 1114.350782][T16870] hsr_slave_1: entered promiscuous mode [ 1114.373788][T16870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.390889][T16870] Cannot create hsr debugfs directory [ 1114.433326][T11784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.522140][T11784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.684263][T16877] hsr_slave_0: entered promiscuous mode [ 1114.690627][T16877] hsr_slave_1: entered promiscuous mode [ 1114.710986][T16877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.718594][T16877] Cannot create hsr debugfs directory [ 1114.781480][T11784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.311834][T11784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.383945][T16862] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.432545][T11784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.487603][T16862] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.523957][T11784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.572122][T16862] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.609771][T11784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.631035][T16866] Bluetooth: hci3: command 0x041b tx timeout [ 1115.690445][T16862] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.792664][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.800340][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.847067][T16870] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.871115][T16866] Bluetooth: hci0: command 0x040f tx timeout [ 1115.950969][T16866] Bluetooth: hci1: command 0x040f tx timeout [ 1116.012082][T16870] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.114561][T16870] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.243727][T16870] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.270962][T16866] Bluetooth: hci2: command 0x040f tx timeout [ 1116.586669][T16870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1116.599522][T16870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1116.622420][T16870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1116.639054][T16870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1116.724551][T16860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1116.875403][T16860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1116.917993][T16860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1116.972847][T16860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1117.332885][T16870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.472667][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1117.480519][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1117.510020][T16870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.531708][T16860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.584426][T16877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1117.629015][T16860] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.661577][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1117.670285][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1117.679702][T10640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.686830][T10640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.695503][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1117.703410][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1117.711054][T16866] Bluetooth: hci3: command 0x040f tx timeout [ 1117.749826][T16877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1117.776732][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1117.788286][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1117.797456][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1117.806187][T16964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.813322][T16964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.822626][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1117.831500][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1117.839945][T16964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.847071][T16964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.876844][T16877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1117.940596][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1117.948757][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1117.956938][T16866] Bluetooth: hci0: command 0x0419 tx timeout [ 1117.964080][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1117.975261][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1117.985140][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1117.993840][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1118.002531][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1118.011095][T16964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.018188][T16964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.026545][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1118.034814][T16866] Bluetooth: hci1: command 0x0419 tx timeout [ 1118.050941][T16877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1118.107217][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1118.115513][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1118.124928][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1118.133367][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1118.141944][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1118.150250][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1118.158652][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1118.167015][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1118.175774][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1118.186482][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1118.197676][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1118.219375][T16862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1118.248582][T16860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1118.259831][T16860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1118.272045][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1118.280548][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1118.290325][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1118.300033][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1118.309732][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1118.318375][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1118.327290][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1118.339365][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1118.347672][T16862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1118.361039][T16866] Bluetooth: hci2: command 0x0419 tx timeout [ 1118.379083][T16862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1118.417335][T16862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1118.617257][T16877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.661528][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1118.682446][ T6944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1118.753491][T16877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.796732][T16870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.820408][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1118.828464][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1118.869468][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1118.891566][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1118.900036][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.907170][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.933547][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1118.941927][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1118.949399][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1118.969202][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1118.980138][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.987316][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.013543][T16860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.054289][T16862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.071937][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1119.091696][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1119.100607][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1119.121771][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1119.173318][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1119.192974][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1119.212977][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1119.222942][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1119.242822][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1119.264664][T16877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1119.316026][T16877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1119.345224][T16862] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.357660][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1119.382184][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1119.390650][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1119.423095][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1119.441642][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1119.459553][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1119.470240][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1119.479776][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1119.488051][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1119.531064][T16870] veth0_vlan: entered promiscuous mode [ 1119.542233][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1119.550038][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1119.570519][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1119.590148][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1119.621677][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1119.630170][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.637312][ T9824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.669775][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1119.684894][T16870] veth1_vlan: entered promiscuous mode [ 1119.716146][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1119.725326][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1119.734128][T16964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.741249][T16964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.748812][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1119.791240][T16866] Bluetooth: hci3: command 0x0419 tx timeout [ 1119.819017][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1119.827647][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1119.837688][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1119.846171][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1119.854873][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1119.863812][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1119.872457][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1119.880573][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1119.888973][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1119.897165][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1119.905867][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1119.914554][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1119.922185][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1119.929602][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1119.941705][T16862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1119.956131][T16877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.981124][T16860] veth0_vlan: entered promiscuous mode [ 1120.000355][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1120.009243][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1120.018226][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1120.027272][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1120.053911][T16870] veth0_macvtap: entered promiscuous mode [ 1120.066897][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1120.082322][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1120.101630][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1120.135870][T16860] veth1_vlan: entered promiscuous mode [ 1120.179102][T11784] hsr_slave_0: left promiscuous mode [ 1120.197481][T11784] hsr_slave_1: left promiscuous mode [ 1120.206138][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.219275][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.228965][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.236789][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.253153][T11784] veth0_to_bond: left allmulticast mode [ 1120.268027][T11784] veth0_to_bond: left promiscuous mode [ 1120.274788][T11784] bridge0: port 3(veth0_to_bond) entered disabled state [ 1120.285625][T11784] bridge_slave_1: left allmulticast mode [ 1120.293536][T11784] bridge_slave_1: left promiscuous mode [ 1120.299225][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.319575][T11784] bridge_slave_0: left allmulticast mode [ 1120.329418][T11784] bridge_slave_0: left promiscuous mode [ 1120.343048][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.366404][T11784] hsr_slave_0: left promiscuous mode [ 1120.376010][T11784] hsr_slave_1: left promiscuous mode [ 1120.386637][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.401390][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.410621][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.428866][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.448926][T11784] veth0_to_bond: left allmulticast mode [ 1120.455865][T11784] veth0_to_bond: left promiscuous mode [ 1120.471295][T11784] bridge0: port 3(veth0_to_bond) entered disabled state [ 1120.489665][T11784] bridge_slave_1: left allmulticast mode [ 1120.498025][T11784] bridge_slave_1: left promiscuous mode [ 1120.512541][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.532752][T11784] bridge_slave_0: left allmulticast mode [ 1120.538414][T11784] bridge_slave_0: left promiscuous mode [ 1120.544768][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.558010][T11784] hsr_slave_0: left promiscuous mode [ 1120.564069][T11784] hsr_slave_1: left promiscuous mode [ 1120.569969][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.577976][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.587676][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.595927][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.605489][T11784] veth0_to_bond: left allmulticast mode [ 1120.611989][T11784] veth0_to_bond: left promiscuous mode [ 1120.617587][T11784] bridge0: port 3(veth0_to_bond) entered disabled state [ 1120.626584][T11784] bridge_slave_1: left allmulticast mode [ 1120.632703][T11784] bridge_slave_1: left promiscuous mode [ 1120.638408][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.646665][T11784] bridge_slave_0: left allmulticast mode [ 1120.656670][T11784] bridge_slave_0: left promiscuous mode [ 1120.662514][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.675710][T11784] hsr_slave_0: left promiscuous mode [ 1120.683646][T11784] hsr_slave_1: left promiscuous mode [ 1120.689277][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.700989][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.709274][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.716971][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.726207][T11784] bridge_slave_1: left allmulticast mode [ 1120.731936][T11784] bridge_slave_1: left promiscuous mode [ 1120.737554][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.745783][T11784] bridge_slave_0: left allmulticast mode [ 1120.752102][T11784] bridge_slave_0: left promiscuous mode [ 1120.757786][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.777376][T11784] veth1_macvtap: left promiscuous mode [ 1120.782991][T11784] veth0_macvtap: left promiscuous mode [ 1120.788521][T11784] veth1_vlan: left promiscuous mode [ 1120.795190][T11784] veth0_vlan: left promiscuous mode [ 1120.802293][T11784] veth1_macvtap: left promiscuous mode [ 1120.807821][T11784] veth0_macvtap: left promiscuous mode [ 1120.815844][T11784] veth1_vlan: left promiscuous mode [ 1120.821498][T11784] veth0_vlan: left promiscuous mode [ 1120.828360][T11784] veth1_macvtap: left promiscuous mode [ 1120.835484][T11784] veth0_macvtap: left promiscuous mode [ 1120.841415][T11784] veth1_vlan: left promiscuous mode [ 1120.846709][T11784] veth0_vlan: left promiscuous mode [ 1120.853900][T11784] veth1_macvtap: left promiscuous mode [ 1120.859379][T11784] veth0_macvtap: left promiscuous mode [ 1120.865287][T11784] veth1_vlan: left promiscuous mode [ 1120.871774][T11784] veth0_vlan: left promiscuous mode [ 1121.587761][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1121.600759][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1121.615157][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.628499][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.699052][T11784] bond0 (unregistering): Released all slaves [ 1121.814564][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1121.828085][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1121.839660][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.853924][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.932781][T11784] bond0 (unregistering): Released all slaves [ 1122.073529][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1122.088165][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1122.100169][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.114987][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.188532][T11784] bond0 (unregistering): Released all slaves [ 1122.316463][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1122.331885][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1122.346159][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.367464][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.435423][T11784] bond0 (unregistering): Released all slaves [ 1122.517516][T16870] veth1_macvtap: entered promiscuous mode [ 1122.525223][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1122.533413][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1122.541514][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1122.549994][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1122.585492][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1122.598147][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1122.612184][T16877] veth0_vlan: entered promiscuous mode [ 1122.627914][T16860] veth0_macvtap: entered promiscuous mode [ 1122.640447][T16860] veth1_macvtap: entered promiscuous mode [ 1122.655041][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.680954][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.698441][T16870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.731205][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1122.739046][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1122.753215][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1122.772176][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1122.792968][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1122.803480][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1122.812534][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1122.834300][T16877] veth1_vlan: entered promiscuous mode [ 1122.850218][T16860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.866478][T16860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.876578][T16860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.887443][T16860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.899139][T16860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.910231][T16870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1122.934265][T16870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.955853][T16870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.981406][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1122.989533][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1122.998063][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1123.006968][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1123.016671][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1123.026957][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1123.039335][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1123.059625][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1123.079432][T16860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.090684][T16860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.100646][T16860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.121246][T16860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.132660][T16860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.144643][T16862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.156626][T16870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.179159][T16870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.199673][T16870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.220653][T16870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.297048][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1123.305835][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1123.315251][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1123.341185][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1123.349789][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1123.370187][T16860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.388704][T16860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.412218][T16860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.427695][T16860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.481701][T16877] veth0_macvtap: entered promiscuous mode [ 1123.523158][T16877] veth1_macvtap: entered promiscuous mode [ 1123.531684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1123.539771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1123.654632][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.678375][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.689702][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.709228][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.736188][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.756088][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.776432][T16877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.811972][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1123.812227][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.820585][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1123.863672][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.871626][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.894578][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.904817][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.915567][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.925735][T16877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.936555][T16877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.948098][T16877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.974107][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1123.984009][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1123.993137][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1124.016718][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.024986][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.053182][T16877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.063136][T16877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.071986][T16877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.080683][T16877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.096544][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1124.104574][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1124.113352][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1124.152527][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1124.153654][T10417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.160786][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1124.184312][T10417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.213072][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.222763][T16862] veth0_vlan: entered promiscuous mode [ 1124.229005][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1124.237397][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1124.242942][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.246404][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1124.269470][T16862] veth1_vlan: entered promiscuous mode [ 1124.305757][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1124.350094][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1124.465802][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1124.492239][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1124.509748][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1124.538526][T16862] veth0_macvtap: entered promiscuous mode [ 1124.557818][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.589209][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.663503][T17075] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1124.691165][T17075] CPU: 0 PID: 17075 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1124.701621][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1124.711700][T17075] Call Trace: [ 1124.714999][T17075] [ 1124.717949][T17075] dump_stack_lvl+0x136/0x150 [ 1124.722676][T17075] dump_header+0x10a/0xd70 [ 1124.727161][T17075] oom_kill_process+0x25d/0x600 [ 1124.732046][T17075] out_of_memory+0x35c/0x1660 [ 1124.736759][T17075] ? io_schedule_timeout+0x150/0x150 [ 1124.742084][T17075] ? oom_killer_disable+0x2b0/0x2b0 [ 1124.747310][T17075] ? kernfs_notify+0x1ac/0x410 [ 1124.752124][T17075] mem_cgroup_out_of_memory+0x206/0x270 [ 1124.757715][T17075] ? mem_cgroup_margin+0x130/0x130 [ 1124.762885][T17075] memory_max_write+0x2f9/0x3c0 [ 1124.767779][T17075] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1124.773894][T17075] ? lock_sync+0x190/0x190 [ 1124.778359][T17075] cgroup_file_write+0x1e2/0x7b0 [ 1124.783338][T17075] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1124.789452][T17075] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1124.794862][T17075] ? __virt_addr_valid+0x61/0x2e0 [ 1124.799944][T17075] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1124.805344][T17075] kernfs_fop_write_iter+0x3f1/0x600 [ 1124.810682][T17075] vfs_write+0x945/0xd50 [ 1124.814964][T17075] ? kernel_write+0x670/0x670 [ 1124.819682][T17075] ? __fget_files+0x26a/0x480 [ 1124.824423][T17075] ksys_write+0x12b/0x250 [ 1124.828780][T17075] ? __ia32_sys_read+0xb0/0xb0 [ 1124.833579][T17075] ? syscall_enter_from_user_mode+0x26/0x80 [ 1124.839518][T17075] do_syscall_64+0x39/0xb0 [ 1124.843978][T17075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1124.849913][T17075] RIP: 0033:0x7f267d68c169 [ 1124.854356][T17075] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1124.873997][T17075] RSP: 002b:00007f267e3d0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1124.882447][T17075] RAX: ffffffffffffffda RBX: 00007f267d7ac050 RCX: 00007f267d68c169 [ 1124.890443][T17075] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1124.898445][T17075] RBP: 00007f267d6e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1124.906443][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.914437][T17075] R13: 00007fff2f0796cf R14: 00007f267e3d0300 R15: 0000000000022000 [ 1124.922459][T17075] [ 1124.933544][T16862] veth1_macvtap: entered promiscuous mode [ 1124.948597][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1124.953975][T17075] memory: usage 10732kB, limit 1024kB, failcnt 346 [ 1124.963507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1124.978341][T17075] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1124.982074][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1124.997244][T17075] Memory cgroup stats for /syz1: [ 1124.997467][T17075] anon 118784 [ 1124.997467][T17075] file 10477568 [ 1124.997467][T17075] kernel 380928 [ 1124.997467][T17075] kernel_stack 98304 [ 1124.997467][T17075] pagetables 77824 [ 1124.997467][T17075] sec_pagetables 0 [ 1124.997467][T17075] percpu 64 [ 1124.997467][T17075] sock 0 [ 1124.997467][T17075] vmalloc 0 [ 1124.997467][T17075] shmem 10465280 [ 1124.997467][T17075] zswap 0 [ 1124.997467][T17075] zswapped 0 [ 1124.997467][T17075] file_mapped 311296 [ 1124.997467][T17075] file_dirty 12288 [ 1124.997467][T17075] file_writeback 0 [ 1124.997467][T17075] swapcached 0 [ 1124.997467][T17075] anon_thp 0 [ 1124.997467][T17075] file_thp 0 [ 1124.997467][T17075] shmem_thp 0 [ 1124.997467][T17075] inactive_anon 10584064 [ 1124.997467][T17075] active_anon 0 [ 1124.997467][T17075] inactive_file 12288 [ 1124.997467][T17075] active_file 0 [ 1124.997467][T17075] unevictable 0 [ 1124.997467][T17075] slab_reclaimable 57632 [ 1124.997467][T17075] slab_unreclaimable 121408 [ 1124.997467][T17075] slab 179040 [ 1124.997467][T17075] workingset_refault_anon 0 [ 1124.997467][T17075] workingset_refault_file 0 [ 1124.997467][T17075] workingset_activate_anon 0 [ 1124.997467][T17075] workingset_activate_file 0 [ 1124.997467][T17075] workingset_restore_anon 0 [ 1124.997467][T17075] workingset_restore_file 0 [ 1124.997467][T17075] workingset_nodereclaim 0 [ 1124.997467][T17075] pgscan 193 [ 1124.997467][T17075] pgsteal 34 [ 1124.997467][T17075] pgscan_kswapd 0 [ 1124.997467][T17075] pgscan_direct 193 [ 1124.997467][T17075] pgscan_khugepaged 0 [ 1124.997467][T17075] pgsteal_kswapd 0 [ 1124.997467][T17075] pgsteal_direct 34 [ 1124.997467][T17075] pgsteal_khugepaged 0 [ 1124.997467][T17075] pgfault 94827 [ 1124.997467][T17075] pgmajfault 0 [ 1124.997467][T17075] pgrefill 10610 [ 1124.997467][T17075] pgactivate 159 [ 1124.997467][T17075] pgdeactivate 0 [ 1124.997467][T17075] pglazyfree 0 [ 1124.997467][T17075] pglazyfreed 0 [ 1124.997467][T17075] zswpin 0 [ 1124.997467][T17075] zswpout 0 [ 1124.997467][T17075] thp_fault_alloc 0 [ 1125.194772][T17075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16870,uid=0 [ 1125.229257][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.250533][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.260551][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.279018][T17075] Memory cgroup out of memory: Killed process 16870 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1125.305674][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:09:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) [ 1125.329913][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.367975][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.394400][T14709] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1125.433009][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:09:29 executing program 5: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1125.451101][T14709] CPU: 0 PID: 14709 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1125.461555][T14709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1125.466987][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.471610][T14709] Call Trace: [ 1125.471621][T14709] [ 1125.471630][T14709] dump_stack_lvl+0x136/0x150 [ 1125.471674][T14709] dump_header+0x10a/0xd70 [ 1125.471704][T14709] oom_kill_process+0x25d/0x600 [ 1125.471733][T14709] out_of_memory+0x35c/0x1660 [ 1125.471763][T14709] ? find_held_lock+0x2d/0x110 [ 1125.471793][T14709] ? oom_killer_disable+0x2b0/0x2b0 [ 1125.471821][T14709] ? rcu_read_unlock+0x9/0x60 [ 1125.492224][T16862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.492475][T14709] ? find_held_lock+0x2d/0x110 [ 1125.500289][T11789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.501702][T14709] mem_cgroup_out_of_memory+0x206/0x270 [ 1125.501742][T14709] ? mem_cgroup_margin+0x130/0x130 [ 1125.501771][T14709] ? lock_downgrade+0x690/0x690 [ 1125.501820][T14709] try_charge_memcg+0xf99/0x13a0 [ 1125.501863][T14709] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1125.501901][T14709] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1125.511764][T11789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.516645][T14709] ? lock_downgrade+0x690/0x690 [ 1125.533124][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.533257][T14709] ? lock_downgrade+0x690/0x690 [ 1125.568164][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.573102][T14709] ? rcu_read_unlock+0x9/0x60 [ 1125.573148][T14709] obj_cgroup_charge+0x2af/0x5e0 [ 1125.573177][T14709] ? copy_process+0x3c0/0x7600 [ 1125.580544][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.585262][T14709] kmem_cache_alloc_node+0xa8/0x3e0 [ 1125.585305][T14709] copy_process+0x3c0/0x7600 [ 1125.585336][T14709] ? virtqueue_poll+0x226/0x290 [ 1125.607791][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.610455][T14709] ? virtnet_poll+0x93e/0x14b0 [ 1125.616373][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.620070][T14709] ? pidfd_prepare+0x80/0x80 [ 1125.657982][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.659626][T14709] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1125.671496][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.674754][T14709] kernel_clone+0xeb/0x890 [ 1125.679320][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.689096][T14709] ? __napi_poll+0x158/0x6f0 [ 1125.689150][T14709] ? net_rx_action+0x271/0xcb0 [ 1125.689176][T14709] ? create_io_thread+0xe0/0xe0 [ 1125.689209][T14709] ? net_rx_action+0x84d/0xcb0 [ 1125.689240][T14709] ? kvm_clock_read+0x14/0x30 [ 1125.689267][T14709] ? kvm_sched_clock_read+0x9/0x20 [ 1125.706781][T16862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.710010][T14709] ? sched_clock_cpu+0x6d/0x4d0 [ 1125.732621][T16862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.733963][T14709] __do_sys_clone+0xba/0x100 [ 1125.738706][T16862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.743352][T14709] ? kernel_clone+0x890/0x890 [ 1125.743398][T14709] ? syscall_enter_from_user_mode+0x26/0x80 [ 1125.743437][T14709] do_syscall_64+0x39/0xb0 [ 1125.743474][T14709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1125.743510][T14709] RIP: 0033:0x7f6d49089e9b [ 1125.743532][T14709] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1125.743554][T14709] RSP: 002b:00007ffc510b4330 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1125.743579][T14709] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6d49089e9b [ 1125.743597][T14709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1125.743613][T14709] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555775400 [ 1125.743629][T14709] R10: 00005555557756d0 R11: 0000000000000246 R12: 0000000000000001 [ 1125.743646][T14709] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc510b4410 [ 1125.782003][T16862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.782673][T14709] [ 1125.787323][T16862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.807012][T14709] memory: usage 10404kB, limit 1024kB, failcnt 346 [ 1125.908071][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1125.909951][T14709] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1125.931710][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1125.935226][T14709] Memory cgroup stats for /syz3: [ 1125.949994][T14709] anon 49152 [ 1125.949994][T14709] file 10477568 [ 1125.949994][T14709] kernel 122880 [ 1125.949994][T14709] kernel_stack 0 [ 1125.949994][T14709] pagetables 8192 [ 1125.949994][T14709] sec_pagetables 0 [ 1125.949994][T14709] percpu 0 [ 1125.949994][T14709] sock 0 [ 1125.949994][T14709] vmalloc 0 [ 1125.949994][T14709] shmem 10465280 [ 1125.949994][T14709] zswap 0 [ 1125.949994][T14709] zswapped 0 [ 1125.949994][T14709] file_mapped 278528 [ 1125.949994][T14709] file_dirty 12288 [ 1125.949994][T14709] file_writeback 0 [ 1125.949994][T14709] swapcached 0 [ 1125.949994][T14709] anon_thp 0 [ 1125.949994][T14709] file_thp 0 [ 1125.949994][T14709] shmem_thp 0 [ 1125.949994][T14709] inactive_anon 49152 [ 1125.949994][T14709] active_anon 10465280 [ 1125.949994][T14709] inactive_file 12288 [ 1125.949994][T14709] active_file 0 [ 1125.949994][T14709] unevictable 0 [ 1125.949994][T14709] slab_reclaimable 34616 [ 1125.949994][T14709] slab_unreclaimable 69488 [ 1125.949994][T14709] slab 104104 [ 1125.949994][T14709] workingset_refault_anon 0 [ 1125.949994][T14709] workingset_refault_file 0 [ 1125.949994][T14709] workingset_activate_anon 0 [ 1125.949994][T14709] workingset_activate_file 0 [ 1125.949994][T14709] workingset_restore_anon 0 [ 1125.949994][T14709] workingset_restore_file 0 [ 1125.949994][T14709] workingset_nodereclaim 0 [ 1125.949994][T14709] pgscan 158 [ 1125.949994][T14709] pgsteal 32 [ 1125.949994][T14709] pgscan_kswapd 0 [ 1125.949994][T14709] pgscan_direct 158 [ 1125.949994][T14709] pgscan_khugepaged 0 [ 1125.949994][T14709] pgsteal_kswapd 0 [ 1125.949994][T14709] pgsteal_direct 32 [ 1125.949994][T14709] pgsteal_khugepaged 0 [ 1125.949994][T14709] pgfault 103966 [ 1125.949994][T14709] pgmajfault 0 [ 1125.949994][T14709] pgrefill 11235 [ 1125.949994][T14709] pgactivate 126 [ 1125.949994][T14709] pgdeactivate 0 [ 1125.949994][T14709] pglazyfree 0 [ 1125.949994][T14709] pglazyfreed 0 [ 1125.949994][T14709] zswpin 0 [ 1125.949994][T14709] zswpout 0 [ 1125.949994][T14709] thp_fault_alloc 0 [ 1125.957756][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1126.166857][T14709] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14709,uid=0 [ 1126.182680][T14709] Memory cgroup out of memory: Killed process 14709 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1126.201202][T16860] syz-executor.5 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1126.220823][T16860] CPU: 0 PID: 16860 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1126.231274][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1126.234742][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1126.241327][T16860] Call Trace: [ 1126.241337][T16860] [ 1126.241346][T16860] dump_stack_lvl+0x136/0x150 [ 1126.241390][T16860] dump_header+0x10a/0xd70 [ 1126.241424][T16860] oom_kill_process+0x25d/0x600 [ 1126.241451][T16860] out_of_memory+0x35c/0x1660 [ 1126.241485][T16860] ? oom_killer_disable+0x2b0/0x2b0 [ 1126.251670][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1126.252709][T16860] ? rcu_read_unlock+0x9/0x60 [ 1126.292171][T16860] ? find_held_lock+0x2d/0x110 [ 1126.296954][T16860] mem_cgroup_out_of_memory+0x206/0x270 [ 1126.302534][T16860] ? mem_cgroup_margin+0x130/0x130 [ 1126.307663][T16860] ? lock_downgrade+0x690/0x690 [ 1126.312544][T16860] try_charge_memcg+0xf99/0x13a0 [ 1126.317503][T16860] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1126.323501][T16860] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1126.329250][T16860] ? lock_downgrade+0x690/0x690 [ 1126.334119][T16860] ? lock_downgrade+0x690/0x690 [ 1126.338980][T16860] ? rcu_read_unlock+0x9/0x60 [ 1126.343673][T16860] obj_cgroup_charge+0x2af/0x5e0 [ 1126.348631][T16860] __kmem_cache_alloc_node+0xa3/0x320 [ 1126.354015][T16860] ? kvmalloc_node+0xa2/0x1a0 [ 1126.358709][T16860] ? kvmalloc_node+0xa2/0x1a0 [ 1126.363409][T16860] __kmalloc_node+0x51/0x1a0 [ 1126.368025][T16860] kvmalloc_node+0xa2/0x1a0 [ 1126.372546][T16860] xt_alloc_table_info+0x40/0xa0 [ 1126.377497][T16860] do_ip6t_set_ctl+0x514/0xb30 [ 1126.382287][T16860] ? __mutex_lock+0x231/0x1350 [ 1126.387066][T16860] ? compat_do_replace.constprop.0+0x410/0x410 [ 1126.393322][T16860] ? wait_for_completion_io_timeout+0x20/0x20 [ 1126.399420][T16860] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1126.405421][T16860] nf_setsockopt+0x87/0xe0 [ 1126.409853][T16860] ipv6_setsockopt+0x12b/0x190 [ 1126.414624][T16860] tcp_setsockopt+0x9f/0x100 [ 1126.419229][T16860] ? sock_common_recvmsg+0x190/0x190 [ 1126.424528][T16860] __sys_setsockopt+0x2c6/0x5b0 [ 1126.429389][T16860] ? __ia32_sys_recv+0x100/0x100 [ 1126.434335][T16860] ? up_write+0x520/0x520 [ 1126.438674][T16860] ? handle_mm_fault+0x326/0x9f0 [ 1126.443637][T16860] __x64_sys_setsockopt+0xbe/0x160 [ 1126.448759][T16860] ? syscall_enter_from_user_mode+0x26/0x80 [ 1126.454667][T16860] do_syscall_64+0x39/0xb0 [ 1126.459098][T16860] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1126.465005][T16860] RIP: 0033:0x7f64f628d7ba [ 1126.469424][T16860] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1126.489035][T16860] RSP: 002b:00007ffe8d4c1ab8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1126.497454][T16860] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f64f628d7ba [ 1126.505427][T16860] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1126.513399][T16860] RBP: 00007ffe8d4c1ae0 R08: 0000000000000558 R09: ffffffffffff0000 [ 1126.521373][T16860] R10: 00007f64f6385940 R11: 0000000000000206 R12: 00007ffe8d4c1b40 [ 1126.529348][T16860] R13: 0000000000000003 R14: 00007ffe8d4c1adc R15: 00007f64f63858e0 [ 1126.537341][T16860] [ 1126.555233][T16860] memory: usage 10356kB, limit 1024kB, failcnt 494 [ 1126.562313][T16860] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1126.569713][T16860] Memory cgroup stats for /syz5: [ 1126.569924][T16860] anon 40960 [ 1126.569924][T16860] file 10469376 [ 1126.569924][T16860] kernel 90112 [ 1126.569924][T16860] kernel_stack 0 [ 1126.569924][T16860] pagetables 8192 [ 1126.569924][T16860] sec_pagetables 0 [ 1126.569924][T16860] percpu 0 [ 1126.569924][T16860] sock 0 [ 1126.569924][T16860] vmalloc 0 [ 1126.569924][T16860] shmem 10465280 [ 1126.569924][T16860] zswap 0 [ 1126.569924][T16860] zswapped 0 [ 1126.569924][T16860] file_mapped 274432 [ 1126.569924][T16860] file_dirty 4096 [ 1126.569924][T16860] file_writeback 0 [ 1126.569924][T16860] swapcached 0 [ 1126.569924][T16860] anon_thp 0 [ 1126.569924][T16860] file_thp 0 [ 1126.569924][T16860] shmem_thp 0 [ 1126.569924][T16860] inactive_anon 40960 [ 1126.569924][T16860] active_anon 10465280 [ 1126.569924][T16860] inactive_file 0 [ 1126.569924][T16860] active_file 4096 [ 1126.569924][T16860] unevictable 0 [ 1126.569924][T16860] slab_reclaimable 37808 [ 1126.569924][T16860] slab_unreclaimable 36520 [ 1126.569924][T16860] slab 74328 [ 1126.569924][T16860] workingset_refault_anon 0 [ 1126.569924][T16860] workingset_refault_file 0 [ 1126.569924][T16860] workingset_activate_anon 0 [ 1126.569924][T16860] workingset_activate_file 0 [ 1126.569924][T16860] workingset_restore_anon 0 [ 1126.569924][T16860] workingset_restore_file 0 [ 1126.569924][T16860] workingset_nodereclaim 0 [ 1126.569924][T16860] pgscan 3648 [ 1126.569924][T16860] pgsteal 2469 [ 1126.569924][T16860] pgscan_kswapd 0 [ 1126.569924][T16860] pgscan_direct 3648 [ 1126.569924][T16860] pgscan_khugepaged 0 [ 1126.569924][T16860] pgsteal_kswapd 0 [ 1126.569924][T16860] pgsteal_direct 2469 [ 1126.569924][T16860] pgsteal_khugepaged 0 [ 1126.569924][T16860] pgfault 128098 [ 1126.569924][T16860] pgmajfault 0 [ 1126.569924][T16860] pgrefill 3043523 [ 1126.569924][T16860] pgactivate 174 [ 1126.569924][T16860] pgdeactivate 0 [ 1126.569924][T16860] pglazyfree 0 [ 1126.569924][T16860] pglazyfreed 0 [ 1126.569924][T16860] zswpin 0 [ 1126.569924][T16860] zswpout 0 [ 1126.796386][T16860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16860,uid=0 [ 1126.812177][T16860] Memory cgroup out of memory: Killed process 16860 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1127.062892][T17093] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1127.097164][T17093] CPU: 1 PID: 17093 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1127.107636][T17093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1127.117717][T17093] Call Trace: [ 1127.121016][T17093] [ 1127.123965][T17093] dump_stack_lvl+0x136/0x150 [ 1127.128704][T17093] dump_header+0x10a/0xd70 [ 1127.133164][T17093] oom_kill_process+0x25d/0x600 [ 1127.138055][T17093] out_of_memory+0x35c/0x1660 [ 1127.142769][T17093] ? io_schedule_timeout+0x150/0x150 [ 1127.148092][T17093] ? oom_killer_disable+0x2b0/0x2b0 [ 1127.153323][T17093] ? kernfs_notify+0x1ac/0x410 [ 1127.158136][T17093] mem_cgroup_out_of_memory+0x206/0x270 [ 1127.163722][T17093] ? mem_cgroup_margin+0x130/0x130 [ 1127.168888][T17093] memory_max_write+0x2f9/0x3c0 [ 1127.173784][T17093] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1127.179896][T17093] ? lock_sync+0x190/0x190 [ 1127.184354][T17093] cgroup_file_write+0x1e2/0x7b0 [ 1127.189328][T17093] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1127.195439][T17093] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1127.200844][T17093] ? __virt_addr_valid+0x61/0x2e0 [ 1127.205917][T17093] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1127.211325][T17093] kernfs_fop_write_iter+0x3f1/0x600 [ 1127.216655][T17093] vfs_write+0x945/0xd50 [ 1127.220929][T17093] ? kernel_write+0x670/0x670 [ 1127.225637][T17093] ? __fget_files+0x26a/0x480 [ 1127.230377][T17093] ksys_write+0x12b/0x250 [ 1127.234736][T17093] ? __ia32_sys_read+0xb0/0xb0 [ 1127.239531][T17093] ? syscall_enter_from_user_mode+0x26/0x80 [ 1127.245469][T17093] do_syscall_64+0x39/0xb0 [ 1127.249926][T17093] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1127.255858][T17093] RIP: 0033:0x7fba9c88c169 [ 1127.260296][T17093] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1127.279936][T17093] RSP: 002b:00007fba9d63a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1127.288380][T17093] RAX: ffffffffffffffda RBX: 00007fba9c9ac050 RCX: 00007fba9c88c169 [ 1127.296378][T17093] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1127.304373][T17093] RBP: 00007fba9c8e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1127.312366][T17093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.320360][T17093] R13: 00007fff4c25c61f R14: 00007fba9d63a300 R15: 0000000000022000 [ 1127.328377][T17093] [ 1127.443958][T10649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1127.443970][T17093] memory: usage 10720kB, limit 1024kB, failcnt 495 [ 1127.467771][ T5034] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1127.481531][T17093] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1127.486630][ T5034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1127.489342][T17093] Memory cgroup stats for [ 1127.496647][ T5034] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1127.508685][T10649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1127.508699][T17093] /syz2: [ 1127.516031][T17093] anon 118784 [ 1127.516031][T17093] file 10473472 [ 1127.516031][T17093] kernel 385024 [ 1127.516031][T17093] kernel_stack 98304 [ 1127.516031][T17093] pagetables 81920 [ 1127.516031][T17093] sec_pagetables 0 [ 1127.516031][T17093] percpu 64 [ 1127.516031][T17093] sock 0 [ 1127.516031][T17093] vmalloc 0 [ 1127.516031][T17093] shmem 10465280 [ 1127.516031][T17093] zswap 0 [ 1127.516031][T17093] zswapped 0 [ 1127.516031][T17093] file_mapped 376832 [ 1127.516031][T17093] file_dirty 4096 [ 1127.516031][T17093] file_writeback 0 [ 1127.516031][T17093] swapcached 0 [ 1127.516031][T17093] anon_thp 0 [ 1127.516031][T17093] file_thp 0 [ 1127.516031][T17093] shmem_thp 0 [ 1127.516031][T17093] inactive_anon 10584064 [ 1127.516031][T17093] active_anon 0 [ 1127.516031][T17093] inactive_file 4096 [ 1127.516031][T17093] active_file 4096 [ 1127.516031][T17093] unevictable 0 [ 1127.516031][T17093] slab_reclaimable 58064 [ 1127.516031][T17093] slab_unreclaimable 121408 [ 1127.516031][T17093] slab 179472 [ 1127.516031][T17093] workingset_refault_anon 0 [ 1127.516031][T17093] workingset_refault_file 0 [ 1127.516031][T17093] workingset_activate_anon 0 [ 1127.516031][T17093] workingset_activate_file 0 [ 1127.516031][T17093] workingset_restore_anon 0 [ 1127.516031][T17093] workingset_restore_file 0 [ 1127.516031][T17093] workingset_nodereclaim 0 [ 1127.516031][T17093] pgscan 265 [ 1127.516031][T17093] pgsteal 48 [ 1127.516031][T17093] pgscan_kswapd 0 [ 1127.516031][T17093] pgscan_direct 265 [ 1127.516031][T17093] pgscan_khugepaged 0 [ 1127.516031][T17093] pgsteal_kswapd 0 [ 1127.516031][T17093] pgsteal_direct 48 [ 1127.516031][T17093] pgsteal_khugepaged 0 [ 1127.516031][T17093] pgfault 120611 [ 1127.516031][T17093] pgmajfault 0 [ 1127.516031][T17093] pgrefill 46265 [ 1127.516031][T17093] pgactivate 217 [ 1127.516031][T17093] pgdeactivate 0 [ 1127.516031][T17093] pglazyfree 0 [ 1127.516031][T17093] pglazyfreed 0 [ 1127.516031][T17093] zswpin 0 [ 1127.516031][T17093] zswpout 0 [ 1127.734072][T17093] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16877,uid=0 [ 1127.750628][T17093] Memory cgroup out of memory: Killed process 16877 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1127.763036][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.833496][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.887069][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1128.030609][ T2422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.046711][ T2422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.077002][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1128.207023][T17095] chnl_net:caif_netlink_parms(): no params data found [ 1128.523887][T17095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.569833][T17095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.621058][T17095] bridge_slave_0: entered allmulticast mode [ 1128.629005][T17095] bridge_slave_0: entered promiscuous mode [ 1128.683553][T17095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.690685][T17095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.698328][T17095] bridge_slave_1: entered allmulticast mode [ 1128.705654][T17095] bridge_slave_1: entered promiscuous mode [ 1128.765978][T17095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.814996][T17095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.907561][T17108] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1128.923571][T17108] CPU: 1 PID: 17108 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1128.934029][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1128.944120][T17108] Call Trace: [ 1128.947767][T17108] [ 1128.950717][T17108] dump_stack_lvl+0x136/0x150 [ 1128.955453][T17108] dump_header+0x10a/0xd70 [ 1128.959909][T17108] oom_kill_process+0x25d/0x600 [ 1128.964798][T17108] out_of_memory+0x35c/0x1660 [ 1128.969509][T17108] ? io_schedule_timeout+0x150/0x150 [ 1128.974833][T17108] ? oom_killer_disable+0x2b0/0x2b0 [ 1128.980074][T17108] mem_cgroup_out_of_memory+0x206/0x270 [ 1128.985660][T17108] ? mem_cgroup_margin+0x130/0x130 [ 1128.990830][T17108] memory_max_write+0x2f9/0x3c0 [ 1128.995718][T17108] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1129.001826][T17108] ? lock_sync+0x190/0x190 [ 1129.006293][T17108] cgroup_file_write+0x1e2/0x7b0 [ 1129.011265][T17108] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1129.017375][T17108] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1129.022784][T17108] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1129.028168][T17108] kernfs_fop_write_iter+0x3f1/0x600 [ 1129.033482][T17108] vfs_write+0x945/0xd50 [ 1129.037744][T17108] ? kernel_write+0x670/0x670 [ 1129.042445][T17108] ? __fget_files+0x26a/0x480 [ 1129.047161][T17108] ksys_write+0x12b/0x250 [ 1129.051501][T17108] ? __ia32_sys_read+0xb0/0xb0 [ 1129.056282][T17108] do_syscall_64+0x39/0xb0 [ 1129.060719][T17108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1129.066630][T17108] RIP: 0033:0x7f6fde88c169 [ 1129.071094][T17108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1129.090723][T17108] RSP: 002b:00007f6fdf66c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.099151][T17108] RAX: ffffffffffffffda RBX: 00007f6fde9abf80 RCX: 00007f6fde88c169 [ 1129.107144][T17108] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1129.115131][T17108] RBP: 00007f6fde8e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1129.123114][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.131109][T17108] R13: 00007ffd6e356c6f R14: 00007f6fdf66c300 R15: 0000000000022000 [ 1129.139112][T17108] [ 1129.187191][T17095] team0: Port device team_slave_0 added [ 1129.207511][T17108] memory: usage 10728kB, limit 1024kB, failcnt 304 [ 1129.221155][T17108] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1129.228406][T17108] Memory cgroup stats for /syz4: [ 1129.228615][T17108] anon 114688 [ 1129.228615][T17108] file 10469376 [ 1129.228615][T17108] kernel 389120 [ 1129.228615][T17108] kernel_stack 98304 [ 1129.228615][T17108] pagetables 81920 [ 1129.228615][T17108] sec_pagetables 0 [ 1129.228615][T17108] percpu 64 [ 1129.228615][T17108] sock 0 [ 1129.228615][T17108] vmalloc 0 [ 1129.228615][T17108] shmem 10465280 [ 1129.228615][T17108] zswap 0 [ 1129.228615][T17108] zswapped 0 [ 1129.228615][T17108] file_mapped 311296 [ 1129.228615][T17108] file_dirty 4096 [ 1129.228615][T17108] file_writeback 0 [ 1129.228615][T17108] swapcached 0 [ 1129.228615][T17108] anon_thp 0 [ 1129.228615][T17108] file_thp 0 [ 1129.228615][T17108] shmem_thp 0 [ 1129.228615][T17108] inactive_anon 10575872 [ 1129.228615][T17108] active_anon 4096 [ 1129.228615][T17108] inactive_file 0 [ 1129.228615][T17108] active_file 4096 [ 1129.228615][T17108] unevictable 0 [ 1129.228615][T17108] slab_reclaimable 56848 [ 1129.228615][T17108] slab_unreclaimable 122056 [ 1129.228615][T17108] slab 178904 [ 1129.228615][T17108] workingset_refault_anon 0 [ 1129.228615][T17108] workingset_refault_file 0 [ 1129.228615][T17108] workingset_activate_anon 0 [ 1129.228615][T17108] workingset_activate_file 0 [ 1129.228615][T17108] workingset_restore_anon 0 [ 1129.228615][T17108] workingset_restore_file 0 [ 1129.228615][T17108] workingset_nodereclaim 0 [ 1129.228615][T17108] pgscan 54 [ 1129.228615][T17108] pgsteal 54 [ 1129.228615][T17108] pgscan_kswapd 0 [ 1129.228615][T17108] pgscan_direct 54 [ 1129.228615][T17108] pgscan_khugepaged 0 [ 1129.228615][T17108] pgsteal_kswapd 0 [ 1129.228615][T17108] pgsteal_direct 54 [ 1129.228615][T17108] pgsteal_khugepaged 0 [ 1129.228615][T17108] pgfault 95880 [ 1129.228615][T17108] pgmajfault 0 [ 1129.228615][T17108] pgrefill 5220 [ 1129.228615][T17108] pgactivate 0 [ 1129.228615][T17108] pgdeactivate 0 [ 1129.228615][T17108] pglazyfree 0 [ 1129.228615][T17108] pglazyfreed 0 [ 1129.228615][T17108] zswpin 0 [ 1129.228615][T17108] zswpout 0 [ 1129.228615][T17108] thp_fault_alloc 0 [ 1129.454576][T17095] team0: Port device team_slave_1 added [ 1129.509782][T17095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.527450][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.553698][T17095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.564560][T17108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17107,uid=0 [ 1129.629358][T17095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.636848][ T5034] Bluetooth: hci0: command 0x0409 tx timeout [ 1129.660879][T17095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.672342][T17108] Memory cgroup out of memory: Killed process 17108 (syz-executor.4) total-vm:56728kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1129.721951][T17095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.771177][T17095] hsr_slave_0: entered promiscuous mode [ 1129.777585][T17095] hsr_slave_1: entered promiscuous mode [ 1129.783835][T17095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1129.792160][T17095] Cannot create hsr debugfs directory 00:09:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x7, 0x0, 0x3, 0x3f, 0x0, 0x19f, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440)}, 0xc000, 0x7, 0x38, 0x4, 0x6, 0x4, 0x2, 0x0, 0x10000, 0x0, 0xfffffffffffff168}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="1f77fbd5dc19dbb7b4be67925b0cdecf8097bfbbe1cf6a8a05f52503054a14330f0643d1ed7b0a8911c3b5d67cfef97325f32bb4dceace02b12e1f896a5df6ae2dcb0d619d20038c930f0f439a6b73411caf83c480940acb747f23f5226d43cc", 0x60}], 0x3, 0x0, 0xb0}, 0x5a3ee2f8e26eb308) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='cq_schedule\x00'}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x3) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc87,\x00\xd2\x97C\x00\x00\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x100ece, 0x12) 00:09:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:09:33 executing program 5: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:09:33 executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:09:33 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780), 0x0}, 0x38) r0 = gettid() ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT=r1], 0xda00) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0xfc, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0xf31c}], 0x9, 0x0, 0x0, 0xf00}, 0xfc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) close(r2) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0x0, 0x0}, 0x10) [ 1130.023315][T16862] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1130.070518][T16862] CPU: 1 PID: 16862 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1130.080993][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1130.091066][T16862] Call Trace: [ 1130.094355][T16862] [ 1130.097298][T16862] dump_stack_lvl+0x136/0x150 [ 1130.102017][T16862] dump_header+0x10a/0xd70 [ 1130.106471][T16862] oom_kill_process+0x25d/0x600 [ 1130.111359][T16862] out_of_memory+0x35c/0x1660 [ 1130.116069][T16862] ? find_held_lock+0x2d/0x110 [ 1130.120866][T16862] ? oom_killer_disable+0x2b0/0x2b0 [ 1130.126093][T16862] ? rcu_read_unlock+0x9/0x60 [ 1130.130798][T16862] ? find_held_lock+0x2d/0x110 [ 1130.135584][T16862] mem_cgroup_out_of_memory+0x206/0x270 [ 1130.141149][T16862] ? mem_cgroup_margin+0x130/0x130 [ 1130.146271][T16862] ? lock_downgrade+0x690/0x690 [ 1130.151146][T16862] try_charge_memcg+0xf99/0x13a0 [ 1130.156111][T16862] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1130.162108][T16862] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1130.167841][T16862] ? lock_downgrade+0x690/0x690 [ 1130.172706][T16862] ? lock_downgrade+0x690/0x690 [ 1130.177581][T16862] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1130.183148][T16862] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1130.189328][T16862] copy_process+0x4f9/0x7600 [ 1130.193932][T16862] ? _raw_spin_unlock+0x28/0x40 [ 1130.198797][T16862] ? wp_page_reuse+0x197/0x570 [ 1130.203592][T16862] ? pidfd_prepare+0x80/0x80 [ 1130.208212][T16862] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1130.214216][T16862] kernel_clone+0xeb/0x890 [ 1130.218667][T16862] ? create_io_thread+0xe0/0xe0 [ 1130.223534][T16862] ? do_user_addr_fault+0x2b1/0x1210 [ 1130.228838][T16862] ? reacquire_held_locks+0x216/0x4e0 [ 1130.234230][T16862] ? do_user_addr_fault+0x2b1/0x1210 [ 1130.239541][T16862] ? find_held_lock+0x2d/0x110 [ 1130.244320][T16862] __do_sys_clone+0xba/0x100 [ 1130.248926][T16862] ? kernel_clone+0x890/0x890 [ 1130.253628][T16862] ? syscall_enter_from_user_mode+0x26/0x80 [ 1130.259544][T16862] do_syscall_64+0x39/0xb0 [ 1130.263976][T16862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1130.269882][T16862] RIP: 0033:0x7f6fde889e9b [ 1130.274300][T16862] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1130.293911][T16862] RSP: 002b:00007ffd6e356eb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1130.302330][T16862] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6fde889e9b [ 1130.310303][T16862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1130.318276][T16862] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555559d6400 [ 1130.326250][T16862] R10: 00005555559d66d0 R11: 0000000000000246 R12: 0000000000000001 [ 1130.334225][T16862] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd6e356f90 [ 1130.342212][T16862] [ 1130.349459][T16862] memory: usage 10404kB, limit 1024kB, failcnt 323 [ 1130.369932][T16862] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1130.381248][T16862] Memory cgroup stats for /syz4: [ 1130.381644][T16862] anon 36864 [ 1130.381644][T16862] file 10469376 [ 1130.381644][T16862] kernel 143360 [ 1130.381644][T16862] kernel_stack 0 [ 1130.381644][T16862] pagetables 8192 [ 1130.381644][T16862] sec_pagetables 0 [ 1130.381644][T16862] percpu 64 [ 1130.381644][T16862] sock 0 [ 1130.381644][T16862] vmalloc 0 [ 1130.381644][T16862] shmem 10465280 [ 1130.381644][T16862] zswap 0 [ 1130.381644][T16862] zswapped 0 [ 1130.381644][T16862] file_mapped 274432 [ 1130.381644][T16862] file_dirty 4096 [ 1130.381644][T16862] file_writeback 0 [ 1130.381644][T16862] swapcached 0 [ 1130.381644][T16862] anon_thp 0 [ 1130.381644][T16862] file_thp 0 [ 1130.381644][T16862] shmem_thp 0 [ 1130.381644][T16862] inactive_anon 4096 [ 1130.381644][T16862] active_anon 10498048 [ 1130.381644][T16862] inactive_file 0 [ 1130.381644][T16862] active_file 4096 [ 1130.381644][T16862] unevictable 0 [ 1130.381644][T16862] slab_reclaimable 40864 [ 1130.381644][T16862] slab_unreclaimable 78608 [ 1130.381644][T16862] slab 119472 [ 1130.381644][T16862] workingset_refault_anon 0 [ 1130.381644][T16862] workingset_refault_file 0 [ 1130.381644][T16862] workingset_activate_anon 0 [ 1130.381644][T16862] workingset_activate_file 0 [ 1130.381644][T16862] workingset_restore_anon 0 [ 1130.381644][T16862] workingset_restore_file 0 [ 1130.381644][T16862] workingset_nodereclaim 0 [ 1130.381644][T16862] pgscan 54 [ 1130.381644][T16862] pgsteal 54 [ 1130.381644][T16862] pgscan_kswapd 0 [ 1130.381644][T16862] pgscan_direct 54 [ 1130.381644][T16862] pgscan_khugepaged 0 [ 1130.381644][T16862] pgsteal_kswapd 0 [ 1130.381644][T16862] pgsteal_direct 54 [ 1130.381644][T16862] pgsteal_khugepaged 0 [ 1130.381644][T16862] pgfault 95891 [ 1130.381644][T16862] pgmajfault 0 [ 1130.381644][T16862] pgrefill 5238 [ 1130.381644][T16862] pgactivate 0 [ 1130.381644][T16862] pgdeactivate 0 [ 1130.381644][T16862] pglazyfree 0 [ 1130.381644][T16862] pglazyfreed 0 [ 1130.381644][T16862] zswpin 0 [ 1130.381644][T16862] zswpout 0 [ 1130.381644][T16862] thp_fault_alloc 0 [ 1130.590644][T16862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16862,uid=0 [ 1130.615675][T16862] Memory cgroup out of memory: Killed process 16862 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 00:09:34 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000001380)='GPL\x00', 0x0, 0x55, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe3f, 0x10, 0x0}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 00:09:35 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x8}, {0x0}], 0x2}, 0x0) [ 1131.479675][T11784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.711535][ T5034] Bluetooth: hci0: command 0x041b tx timeout [ 1131.755955][T11784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.071399][T16866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1132.080251][T16866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1132.091732][T16866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1132.099255][T16866] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1132.106877][T16866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1132.151969][T11784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.189437][T17095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1132.266833][T11784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.322965][T17095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1132.370900][T17095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1132.382588][T16866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1132.391755][T16866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1132.399957][T16866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1132.408047][T16866] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1132.411338][T10244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1132.424215][T10244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1132.433562][T10244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1132.444560][ T5031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1132.452586][ T5031] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1132.460618][ T5031] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1132.482420][T17095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1132.574550][ T5031] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1132.582561][ T5031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1132.590374][ T5031] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1132.598440][ T5031] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1132.605849][ T5031] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1132.822722][T11784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.956646][ T5031] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1132.966162][ T5031] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1132.976051][ T5031] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1132.983984][ T5031] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1132.991939][ T5031] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1133.010131][T11784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.105367][T11784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.251665][T17095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.270425][T11784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.379427][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1133.388990][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1133.418521][T17095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.497778][T17138] chnl_net:caif_netlink_parms(): no params data found [ 1133.511304][T17143] chnl_net:caif_netlink_parms(): no params data found [ 1133.555028][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1133.563902][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1133.572709][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.579753][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.588079][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1133.596792][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1133.605704][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.612796][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.634380][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1133.754983][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1133.791200][ T5031] Bluetooth: hci0: command 0x040f tx timeout [ 1133.813029][T17142] chnl_net:caif_netlink_parms(): no params data found [ 1133.870823][T11784] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.958088][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1134.005130][T17149] chnl_net:caif_netlink_parms(): no params data found [ 1134.027670][T11784] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.043176][T17138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.050274][T17138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.068099][T17138] bridge_slave_0: entered allmulticast mode [ 1134.077583][T17138] bridge_slave_0: entered promiscuous mode [ 1134.097025][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1134.115797][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1134.130240][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1134.149785][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1134.160699][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1134.170184][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1134.191256][ T5031] Bluetooth: hci1: command 0x0409 tx timeout [ 1134.274935][T11784] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.288082][T17138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.310315][T17138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.325537][T17138] bridge_slave_1: entered allmulticast mode [ 1134.348686][T17138] bridge_slave_1: entered promiscuous mode [ 1134.409224][T17095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1134.435587][T17095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1134.460755][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1134.469643][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1134.478612][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1134.487672][T17143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.495338][T17143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.502814][T17143] bridge_slave_0: entered allmulticast mode [ 1134.510605][T17143] bridge_slave_0: entered promiscuous mode [ 1134.516862][ T5031] Bluetooth: hci3: command 0x0409 tx timeout [ 1134.523351][T10649] Bluetooth: hci2: command 0x0409 tx timeout [ 1134.578899][T11784] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.671140][ T5031] Bluetooth: hci4: command 0x0409 tx timeout [ 1134.744192][T17143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.752979][T17143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.760280][T17143] bridge_slave_1: entered allmulticast mode [ 1134.769411][T17143] bridge_slave_1: entered promiscuous mode [ 1134.825621][T17138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.924937][T17138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.986701][T17143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.032366][T17142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.039484][T17142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.058494][T17142] bridge_slave_0: entered allmulticast mode [ 1135.071298][ T5031] Bluetooth: hci5: command 0x0409 tx timeout [ 1135.072185][T17142] bridge_slave_0: entered promiscuous mode [ 1135.150717][T17143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.211176][T17142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.218300][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.261280][T17142] bridge_slave_1: entered allmulticast mode [ 1135.268298][T17142] bridge_slave_1: entered promiscuous mode [ 1135.348490][T17138] team0: Port device team_slave_0 added [ 1135.361276][T17149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.368386][T17149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.391079][T17149] bridge_slave_0: entered allmulticast mode [ 1135.398034][T17149] bridge_slave_0: entered promiscuous mode [ 1135.465351][T11784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.520606][T17153] chnl_net:caif_netlink_parms(): no params data found [ 1135.555511][T17138] team0: Port device team_slave_1 added [ 1135.562061][T17149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.569164][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.601126][T17149] bridge_slave_1: entered allmulticast mode [ 1135.608136][T17149] bridge_slave_1: entered promiscuous mode [ 1135.687461][T17142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.732176][T11784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.810353][T17095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.840614][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1135.861463][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1135.871046][ T5031] Bluetooth: hci0: command 0x0419 tx timeout [ 1135.873772][T17143] team0: Port device team_slave_0 added [ 1135.901225][T17142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.933202][T11784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.962580][T17138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.969549][T17138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.030867][T17138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.056352][T17138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.070954][T17138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.120942][T17138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.215127][T17143] team0: Port device team_slave_1 added [ 1136.262522][T11784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.274175][ T5031] Bluetooth: hci1: command 0x041b tx timeout [ 1136.336394][T17149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.403164][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1136.421631][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1136.497029][T17149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.562876][T17143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.569868][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.596125][ T5031] Bluetooth: hci3: command 0x041b tx timeout [ 1136.602168][ T5031] Bluetooth: hci2: command 0x041b tx timeout [ 1136.603451][T17143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.626541][T17142] team0: Port device team_slave_0 added [ 1136.657793][T17095] veth0_vlan: entered promiscuous mode [ 1136.670309][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1136.692453][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1136.734448][T17138] hsr_slave_0: entered promiscuous mode [ 1136.750991][T10649] Bluetooth: hci4: command 0x041b tx timeout [ 1136.762202][T17138] hsr_slave_1: entered promiscuous mode [ 1136.781161][T17138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.788741][T17138] Cannot create hsr debugfs directory [ 1136.907973][T17143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.922925][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.957819][T17143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.973448][T17142] team0: Port device team_slave_1 added [ 1136.984830][T17095] veth1_vlan: entered promiscuous mode [ 1137.008952][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1137.017357][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1137.087302][T17149] team0: Port device team_slave_0 added [ 1137.101292][T17153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.108407][T17153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.131201][T17153] bridge_slave_0: entered allmulticast mode [ 1137.138273][T17153] bridge_slave_0: entered promiscuous mode [ 1137.151086][T10649] Bluetooth: hci5: command 0x041b tx timeout [ 1137.257224][T17149] team0: Port device team_slave_1 added [ 1137.278945][T17153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.286651][T17153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.301356][T17153] bridge_slave_1: entered allmulticast mode [ 1137.322410][T17153] bridge_slave_1: entered promiscuous mode [ 1137.362558][T17142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.369537][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.420647][T17142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.596790][T17143] hsr_slave_0: entered promiscuous mode [ 1137.627162][T17143] hsr_slave_1: entered promiscuous mode [ 1137.679813][T17143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1137.687554][T17143] Cannot create hsr debugfs directory [ 1137.767788][T17142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.785130][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.821857][T17142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.837874][T17149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.851225][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.926610][T17149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.953055][T17149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.960051][T17149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.020905][T17149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.115397][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1138.124235][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1138.152119][T17153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.174931][T11784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.190704][T17095] veth0_macvtap: entered promiscuous mode [ 1138.256940][T17153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.304038][T11784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.351222][T10649] Bluetooth: hci1: command 0x040f tx timeout [ 1138.389480][T11784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.415153][T17095] veth1_macvtap: entered promiscuous mode [ 1138.429288][T17153] team0: Port device team_slave_0 added [ 1138.440680][T17142] hsr_slave_0: entered promiscuous mode [ 1138.450799][T17142] hsr_slave_1: entered promiscuous mode [ 1138.468931][T17142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.477702][T17142] Cannot create hsr debugfs directory [ 1138.491205][T17149] hsr_slave_0: entered promiscuous mode [ 1138.498013][T17149] hsr_slave_1: entered promiscuous mode [ 1138.505691][T17149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.513865][T17149] Cannot create hsr debugfs directory [ 1138.567537][T11784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.596488][T17153] team0: Port device team_slave_1 added [ 1138.671357][T10649] Bluetooth: hci2: command 0x040f tx timeout [ 1138.677407][T10649] Bluetooth: hci3: command 0x040f tx timeout [ 1138.726143][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.761106][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.781205][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.810901][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.820745][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.842452][T10649] Bluetooth: hci4: command 0x040f tx timeout [ 1138.880928][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.890764][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.946172][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.956087][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.966651][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.982823][T17095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.001785][T17153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.008756][T17153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.070328][T17153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.116157][T17153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.131081][T17153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1139.158369][T17153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.190742][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1139.231011][T10649] Bluetooth: hci5: command 0x040f tx timeout [ 1139.332092][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1139.341226][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1139.502209][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.540937][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.550783][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.580904][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.590730][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.620979][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.640934][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.660972][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.670814][T17095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.700922][T17095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.721685][T17095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.743847][T17095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.770953][T17095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.779686][T17095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.810989][T17095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.935133][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1139.947598][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1140.056570][T17153] hsr_slave_0: entered promiscuous mode [ 1140.071815][T17153] hsr_slave_1: entered promiscuous mode [ 1140.090994][T17153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1140.098608][T17153] Cannot create hsr debugfs directory [ 1140.431148][T10649] Bluetooth: hci1: command 0x0419 tx timeout [ 1140.590783][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.599235][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.673503][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1140.726380][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.752618][T10649] Bluetooth: hci3: command 0x0419 tx timeout [ 1140.758706][T10649] Bluetooth: hci2: command 0x0419 tx timeout [ 1140.781058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.911380][T10649] Bluetooth: hci4: command 0x0419 tx timeout [ 1141.053952][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1141.311063][T10649] Bluetooth: hci5: command 0x0419 tx timeout [ 1141.462038][T17284] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1141.520925][T17284] CPU: 1 PID: 17284 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1141.531397][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1141.541470][T17284] Call Trace: [ 1141.544772][T17284] [ 1141.547728][T17284] dump_stack_lvl+0x136/0x150 [ 1141.552463][T17284] dump_header+0x10a/0xd70 [ 1141.556925][T17284] oom_kill_process+0x25d/0x600 [ 1141.561818][T17284] out_of_memory+0x35c/0x1660 [ 1141.566542][T17284] ? oom_killer_disable+0x2b0/0x2b0 [ 1141.571780][T17284] ? kernfs_notify+0x1ac/0x410 [ 1141.576597][T17284] ? find_held_lock+0x2d/0x110 [ 1141.581406][T17284] mem_cgroup_out_of_memory+0x206/0x270 [ 1141.586994][T17284] ? mem_cgroup_margin+0x130/0x130 [ 1141.592158][T17284] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1141.598021][T17284] memory_max_write+0x2f9/0x3c0 [ 1141.602920][T17284] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1141.609039][T17284] ? lock_sync+0x190/0x190 [ 1141.613504][T17284] cgroup_file_write+0x1e2/0x7b0 [ 1141.618476][T17284] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1141.624582][T17284] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1141.629975][T17284] ? __virt_addr_valid+0x61/0x2e0 [ 1141.635029][T17284] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1141.640410][T17284] kernfs_fop_write_iter+0x3f1/0x600 [ 1141.645722][T17284] vfs_write+0x945/0xd50 [ 1141.649983][T17284] ? kernel_write+0x670/0x670 [ 1141.654670][T17284] ? __fget_files+0x26a/0x480 [ 1141.659380][T17284] ksys_write+0x12b/0x250 [ 1141.663718][T17284] ? __ia32_sys_read+0xb0/0xb0 [ 1141.668492][T17284] ? syscall_enter_from_user_mode+0x26/0x80 [ 1141.674408][T17284] do_syscall_64+0x39/0xb0 [ 1141.678856][T17284] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1141.684771][T17284] RIP: 0033:0x7f7b9148c169 [ 1141.689194][T17284] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1141.708820][T17284] RSP: 002b:00007f7b9218a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1141.717245][T17284] RAX: ffffffffffffffda RBX: 00007f7b915ac050 RCX: 00007f7b9148c169 [ 1141.725222][T17284] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1141.733197][T17284] RBP: 00007f7b914e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1141.741171][T17284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.749143][T17284] R13: 00007ffece5ddf1f R14: 00007f7b9218a300 R15: 0000000000022000 [ 1141.757134][T17284] [ 1141.773912][T17284] memory: usage 10704kB, limit 1024kB, failcnt 189 [ 1141.782448][T17284] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1141.789325][T17284] Memory cgroup stats for /syz0: [ 1141.789520][T17284] anon 118784 [ 1141.789520][T17284] file 10469376 [ 1141.789520][T17284] kernel 352256 [ 1141.789520][T17284] kernel_stack 98304 [ 1141.789520][T17284] pagetables 77824 [ 1141.789520][T17284] sec_pagetables 0 [ 1141.789520][T17284] percpu 64 [ 1141.789520][T17284] sock 0 [ 1141.789520][T17284] vmalloc 0 [ 1141.789520][T17284] shmem 10465280 [ 1141.789520][T17284] zswap 0 [ 1141.789520][T17284] zswapped 0 [ 1141.789520][T17284] file_mapped 311296 [ 1141.789520][T17284] file_dirty 4096 [ 1141.789520][T17284] file_writeback 0 [ 1141.789520][T17284] swapcached 0 [ 1141.789520][T17284] anon_thp 0 [ 1141.789520][T17284] file_thp 0 [ 1141.789520][T17284] shmem_thp 0 [ 1141.789520][T17284] inactive_anon 118784 [ 1141.789520][T17284] active_anon 10465280 [ 1141.789520][T17284] inactive_file 0 [ 1141.789520][T17284] active_file 4096 [ 1141.789520][T17284] unevictable 0 [ 1141.789520][T17284] slab_reclaimable 51928 [ 1141.789520][T17284] slab_unreclaimable 94696 [ 1141.789520][T17284] slab 146624 [ 1141.789520][T17284] workingset_refault_anon 0 [ 1141.789520][T17284] workingset_refault_file 0 [ 1141.789520][T17284] workingset_activate_anon 0 [ 1141.789520][T17284] workingset_activate_file 0 [ 1141.789520][T17284] workingset_restore_anon 0 [ 1141.789520][T17284] workingset_restore_file 0 [ 1141.789520][T17284] workingset_nodereclaim 0 [ 1141.789520][T17284] pgscan 503 [ 1141.789520][T17284] pgsteal 151 [ 1141.789520][T17284] pgscan_kswapd 0 [ 1141.789520][T17284] pgscan_direct 503 [ 1141.789520][T17284] pgscan_khugepaged 0 [ 1141.789520][T17284] pgsteal_kswapd 0 [ 1141.789520][T17284] pgsteal_direct 151 [ 1141.789520][T17284] pgsteal_khugepaged 0 [ 1141.789520][T17284] pgfault 96112 [ 1141.789520][T17284] pgmajfault 0 [ 1141.789520][T17284] pgrefill 11342 [ 1141.789520][T17284] pgactivate 352 [ 1141.789520][T17284] pgdeactivate 0 [ 1141.789520][T17284] pglazyfree 0 [ 1141.789520][T17284] pglazyfreed 0 [ 1141.789520][T17284] zswpin 0 [ 1141.789520][T17284] zswpout 0 [ 1141.978828][T17284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17282,uid=0 [ 1142.016596][T17284] Memory cgroup out of memory: Killed process 17282 (syz-executor.0) total-vm:56728kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 00:09:45 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x1a) close(r3) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000008000000000000000900000095000000000000001820000039e099ba61c2ff86cb571e3e952fa014b49a102fa1fbfe4ed9cbad14053b5241733806e9c540d2fd0d2e1d2de8f7c1e71defb169fb7ba76c68fdac9c9e5d0b729278c38d89535b2594091477155ba1e6f538a8a41d6d93108ade35d6d9fc3d301477880869cb6005a171cf5003e9aabb4df64e", @ANYBLOB="0000000007000000053303000500000018560000080000000000000000000000186900000400000000000000", @ANYRES8, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xfffffffc, 0x2}, 0x8, 0x10, 0x0}, 0x80) r4 = gettid() perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0xab1, 0x808, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x90320, 0x0, 0xda, 0x0, 0x40, 0x8000, 0x0, 0x0, 0x2}, r4, 0xc, 0xffffffffffffffff, 0x0) [ 1142.238443][T17297] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1142.271057][T17297] CPU: 0 PID: 17297 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1142.281519][T17297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1142.291592][T17297] Call Trace: [ 1142.294888][T17297] [ 1142.297836][T17297] dump_stack_lvl+0x136/0x150 [ 1142.302559][T17297] dump_header+0x10a/0xd70 [ 1142.307004][T17297] oom_kill_process+0x25d/0x600 [ 1142.311880][T17297] out_of_memory+0x35c/0x1660 [ 1142.316587][T17297] ? find_held_lock+0x2d/0x110 [ 1142.321380][T17297] ? oom_killer_disable+0x2b0/0x2b0 [ 1142.326588][T17297] ? rcu_read_unlock+0x9/0x60 [ 1142.331276][T17297] ? find_held_lock+0x2d/0x110 [ 1142.336052][T17297] mem_cgroup_out_of_memory+0x206/0x270 [ 1142.341612][T17297] ? mem_cgroup_margin+0x130/0x130 [ 1142.346733][T17297] ? lock_downgrade+0x690/0x690 [ 1142.351609][T17297] try_charge_memcg+0xf99/0x13a0 [ 1142.356572][T17297] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1142.362589][T17297] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1142.368342][T17297] ? lock_downgrade+0x690/0x690 [ 1142.373215][T17297] ? lock_downgrade+0x690/0x690 [ 1142.378092][T17297] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1142.383650][T17297] __alloc_pages+0x1f3/0x4a0 [ 1142.388257][T17297] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1142.395040][T17297] ? __lock_acquire+0xbe1/0x5df0 [ 1142.400002][T17297] ? find_held_lock+0x2d/0x110 [ 1142.404788][T17297] alloc_pages+0x1aa/0x270 [ 1142.409224][T17297] get_zeroed_page+0x14/0x40 [ 1142.413830][T17297] __pud_alloc+0x3b/0x180 [ 1142.418175][T17297] __handle_mm_fault+0x839/0x41c0 [ 1142.423212][T17297] ? mt_find+0x3b9/0xa60 [ 1142.427469][T17297] ? vm_iomap_memory+0x190/0x190 [ 1142.432414][T17297] ? mas_find+0x200/0x200 [ 1142.436779][T17297] handle_mm_fault+0x2af/0x9f0 [ 1142.441563][T17297] do_user_addr_fault+0x51a/0x1210 [ 1142.446696][T17297] exc_page_fault+0x98/0x170 [ 1142.451302][T17297] asm_exc_page_fault+0x26/0x30 [ 1142.456168][T17297] RIP: 0033:0x7f7b91427766 [ 1142.460587][T17297] Code: ff ff 66 90 48 8b 0d 89 df ca 00 4c 63 05 72 df ca 00 48 8b 05 73 df ca 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 59 df ca 00 c3 52 48 8d 35 e2 f1 0b 00 48 89 c2 48 [ 1142.480200][T17297] RSP: 002b:00007ffece5ddf98 EFLAGS: 00010287 [ 1142.486272][T17297] RAX: 0000001b30020000 RBX: 0000000000000003 RCX: 0000001b30020000 [ 1142.494244][T17297] RDX: 0000001b30020004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 1142.502217][T17297] RBP: 0000000000000000 R08: 0000001b30420000 R09: 0000000000040000 [ 1142.510188][T17297] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 1142.518161][T17297] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffece5de240 [ 1142.526152][T17297] [ 1142.604422][T17297] memory: usage 10536kB, limit 1024kB, failcnt 218 [ 1142.611217][T17297] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1142.618147][T17297] Memory cgroup stats for /syz0: [ 1142.618526][T17297] anon 73728 [ 1142.618526][T17297] file 10469376 [ 1142.618526][T17297] kernel 237568 [ 1142.618526][T17297] kernel_stack 32768 [ 1142.618526][T17297] pagetables 57344 [ 1142.618526][T17297] sec_pagetables 0 [ 1142.618526][T17297] percpu 128 [ 1142.618526][T17297] sock 0 [ 1142.618526][T17297] vmalloc 0 [ 1142.618526][T17297] shmem 10465280 [ 1142.618526][T17297] zswap 0 [ 1142.618526][T17297] zswapped 0 [ 1142.618526][T17297] file_mapped 278528 [ 1142.618526][T17297] file_dirty 4096 [ 1142.618526][T17297] file_writeback 0 [ 1142.618526][T17297] swapcached 0 [ 1142.618526][T17297] anon_thp 0 [ 1142.618526][T17297] file_thp 0 [ 1142.618526][T17297] shmem_thp 0 [ 1142.618526][T17297] inactive_anon 73728 [ 1142.618526][T17297] active_anon 10465280 [ 1142.618526][T17297] inactive_file 0 [ 1142.618526][T17297] active_file 4096 [ 1142.618526][T17297] unevictable 0 [ 1142.618526][T17297] slab_reclaimable 39464 [ 1142.618526][T17297] slab_unreclaimable 78528 [ 1142.618526][T17297] slab 117992 [ 1142.618526][T17297] workingset_refault_anon 0 [ 1142.618526][T17297] workingset_refault_file 0 [ 1142.618526][T17297] workingset_activate_anon 0 [ 1142.618526][T17297] workingset_activate_file 0 [ 1142.618526][T17297] workingset_restore_anon 0 [ 1142.618526][T17297] workingset_restore_file 0 [ 1142.618526][T17297] workingset_nodereclaim 0 [ 1142.618526][T17297] pgscan 503 [ 1142.618526][T17297] pgsteal 151 [ 1142.618526][T17297] pgscan_kswapd 0 [ 1142.618526][T17297] pgscan_direct 503 [ 1142.618526][T17297] pgscan_khugepaged 0 [ 1142.618526][T17297] pgsteal_kswapd 0 [ 1142.618526][T17297] pgsteal_direct 151 [ 1142.618526][T17297] pgsteal_khugepaged 0 [ 1142.618526][T17297] pgfault 96161 [ 1142.618526][T17297] pgmajfault 0 [ 1142.618526][T17297] pgrefill 11369 [ 1142.618526][T17297] pgactivate 352 [ 1142.618526][T17297] pgdeactivate 0 [ 1142.618526][T17297] pglazyfree 0 [ 1142.618526][T17297] pglazyfreed 0 [ 1142.618526][T17297] zswpin 0 [ 1142.618526][T17297] zswpout 0 [ 1142.807215][T17297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17095,uid=0 [ 1142.825835][T17297] Memory cgroup out of memory: Killed process 17095 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1143.311910][T17149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1143.348108][T17149] netdevsim netdevsim2 netdevsim1: renamed from eth1 00:09:47 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) [ 1143.380447][T17149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1143.433419][T17149] netdevsim netdevsim2 netdevsim3: renamed from eth3 00:09:47 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) socketpair(0x1a, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0xa30, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100000054000000000000000200000000000000"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r1) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) [ 1143.812824][T17149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.847480][T17149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.861464][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1143.869086][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1143.902734][T17138] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1143.922336][T17138] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1143.962724][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1143.981569][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1143.991760][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.998855][ T9819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.019882][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1144.041568][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1144.050055][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.057212][ T9819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.077356][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1144.100347][T17138] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1144.173166][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1144.188818][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1144.199286][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1144.208917][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1144.226392][T17138] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1144.285909][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1144.294090][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1144.303417][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1144.312917][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1144.321759][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1144.330121][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1144.343515][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1144.424064][T17149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1144.664022][T17138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.758997][T17149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.770233][T17138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.792800][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1144.800707][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1144.809684][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1144.817515][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1144.881911][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1144.890781][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1144.921525][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.928629][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.966421][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1144.981808][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1145.072544][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1145.080602][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1145.111591][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1145.120081][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.127220][T17269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.181216][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1145.190123][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1145.217835][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1145.238448][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1145.264729][T10649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1145.273154][T10649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1145.281532][T10649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1145.289043][T10649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1145.297812][T10649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1145.313282][T17149] veth0_vlan: entered promiscuous mode [ 1145.326621][T17149] veth1_vlan: entered promiscuous mode [ 1145.372475][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1145.381196][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1145.492084][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1145.511962][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1145.520541][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1145.543755][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1145.563007][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1145.581609][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1145.601489][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1145.621399][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1145.641636][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1145.652065][T17138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1145.693572][T17143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1145.738834][T17149] veth0_macvtap: entered promiscuous mode [ 1145.784845][T17143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1145.813322][T17143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1145.837368][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1145.846527][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1145.857829][T17149] veth1_macvtap: entered promiscuous mode [ 1145.904517][T11784] hsr_slave_0: left promiscuous mode [ 1145.941508][T11784] hsr_slave_1: left promiscuous mode [ 1145.947454][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1145.980284][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.004986][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.020968][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.043129][T11784] bridge_slave_1: left allmulticast mode [ 1146.048805][T11784] bridge_slave_1: left promiscuous mode [ 1146.071227][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.083955][T11784] bridge_slave_0: left allmulticast mode [ 1146.089621][T11784] bridge_slave_0: left promiscuous mode [ 1146.110980][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.181028][T11784] hsr_slave_0: left promiscuous mode [ 1146.186979][T11784] hsr_slave_1: left promiscuous mode [ 1146.202067][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.209505][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.241825][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.249280][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.283566][T11784] bridge_slave_1: left allmulticast mode [ 1146.289247][T11784] bridge_slave_1: left promiscuous mode [ 1146.311077][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.331439][T11784] bridge_slave_0: left allmulticast mode [ 1146.337130][T11784] bridge_slave_0: left promiscuous mode [ 1146.351151][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.411367][T11784] hsr_slave_0: left promiscuous mode [ 1146.431044][T11784] hsr_slave_1: left promiscuous mode [ 1146.450985][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.458434][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.496759][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.511244][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.542984][T11784] bridge_slave_1: left allmulticast mode [ 1146.548655][T11784] bridge_slave_1: left promiscuous mode [ 1146.561079][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.582046][T11784] bridge_slave_0: left allmulticast mode [ 1146.587711][T11784] bridge_slave_0: left promiscuous mode [ 1146.601085][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.651066][T11784] hsr_slave_0: left promiscuous mode [ 1146.657014][T11784] hsr_slave_1: left promiscuous mode [ 1146.691025][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.698507][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.723174][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.730604][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.745616][T11784] veth0_to_bond: left allmulticast mode [ 1146.760990][T11784] veth0_to_bond: left promiscuous mode [ 1146.766593][T11784] bridge0: port 3(veth0_to_bond) entered disabled state [ 1146.789035][T11784] bridge_slave_1: left allmulticast mode [ 1146.795583][T11784] bridge_slave_1: left promiscuous mode [ 1146.801760][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.810556][T11784] bridge_slave_0: left allmulticast mode [ 1146.816887][T11784] bridge_slave_0: left promiscuous mode [ 1146.822863][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.836342][T11784] hsr_slave_0: left promiscuous mode [ 1146.843105][T11784] hsr_slave_1: left promiscuous mode [ 1146.849022][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.857026][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.867096][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.878485][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.889790][T11784] bridge_slave_1: left allmulticast mode [ 1146.896068][T11784] bridge_slave_1: left promiscuous mode [ 1146.902217][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.912172][T11784] bridge_slave_0: left allmulticast mode [ 1146.917837][T11784] bridge_slave_0: left promiscuous mode [ 1146.923811][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.951486][T11784] veth1_macvtap: left promiscuous mode [ 1146.957024][T11784] veth0_macvtap: left promiscuous mode [ 1146.963045][T11784] veth1_vlan: left promiscuous mode [ 1146.968347][T11784] veth0_vlan: left promiscuous mode [ 1146.976254][T11784] veth1_macvtap: left promiscuous mode [ 1146.981926][T11784] veth0_macvtap: left promiscuous mode [ 1146.987502][T11784] veth1_vlan: left promiscuous mode [ 1146.995482][T11784] veth0_vlan: left promiscuous mode [ 1147.004171][T11784] veth1_macvtap: left promiscuous mode [ 1147.009705][T11784] veth0_macvtap: left promiscuous mode [ 1147.015724][T11784] veth1_vlan: left promiscuous mode [ 1147.021251][T11784] veth0_vlan: left promiscuous mode [ 1147.028215][T11784] veth1_macvtap: left promiscuous mode [ 1147.038749][T11784] veth0_macvtap: left promiscuous mode [ 1147.045389][T11784] veth1_vlan: left promiscuous mode [ 1147.054311][T11784] veth0_vlan: left promiscuous mode [ 1147.069675][T11784] veth1_macvtap: left promiscuous mode [ 1147.084781][T11784] veth0_macvtap: left promiscuous mode [ 1147.090474][T11784] veth1_vlan: left promiscuous mode [ 1147.096733][T11784] veth0_vlan: left promiscuous mode [ 1147.391179][T10649] Bluetooth: hci0: command 0x0409 tx timeout [ 1148.342835][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1148.381492][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1148.411017][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.461232][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.638317][T11784] bond0 (unregistering): Released all slaves [ 1148.969645][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1149.002834][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1149.017288][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.034536][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.201614][T11784] bond0 (unregistering): Released all slaves [ 1149.449693][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1149.481211][T10649] Bluetooth: hci0: command 0x041b tx timeout [ 1149.491295][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1149.516114][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.540715][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.722062][T11784] bond0 (unregistering): Released all slaves [ 1149.984951][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1150.024145][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1150.049503][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.082245][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.197739][T11784] bond0 (unregistering): Released all slaves [ 1150.472727][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1150.501687][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1150.533694][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.569702][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.752153][T11784] bond0 (unregistering): Released all slaves [ 1150.844662][T17143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1150.865128][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1150.873395][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1150.936393][T17149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.971032][T17149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.982931][T17149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.009619][T17142] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1151.031640][T17142] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1151.048427][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1151.062176][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1151.082915][T17149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.110939][T17149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.132264][T17149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.151212][T17142] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1151.183523][T17142] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1151.216116][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1151.224919][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1151.238162][T17149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.260794][T17149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.269783][T17149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.291242][T17149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.347046][T17153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1151.358075][T17153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1151.382960][T17138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.422629][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1151.430008][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1151.444417][T17153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1151.455898][T17153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1151.554901][T10649] Bluetooth: hci0: command 0x040f tx timeout [ 1151.566852][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1151.576959][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1151.656980][T17305] chnl_net:caif_netlink_parms(): no params data found [ 1151.693038][T17143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.709752][T17138] veth0_vlan: entered promiscuous mode [ 1151.714079][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.724392][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.785393][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1151.793824][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1151.802915][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1151.826279][T17143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.850262][T17138] veth1_vlan: entered promiscuous mode [ 1151.856420][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1151.872194][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1151.880171][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1151.888720][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1151.896718][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1151.904568][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1151.914061][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1151.922601][T16963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.929668][T16963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.967589][T17142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.005448][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1152.019976][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1152.029100][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1152.037751][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.044914][ T9824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.052836][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1152.074346][T17153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.096177][T17305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.103666][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.104608][ T2422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.110806][T17305] bridge_slave_0: entered allmulticast mode [ 1152.126412][T17305] bridge_slave_0: entered promiscuous mode [ 1152.129397][ T2422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.136453][T17305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.147305][T17305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.154768][T17305] bridge_slave_1: entered allmulticast mode [ 1152.163763][T17305] bridge_slave_1: entered promiscuous mode [ 1152.185165][T17142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.211660][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1152.227724][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1152.236204][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1152.247530][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1152.256152][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1152.268851][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1152.278307][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1152.289859][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1152.299946][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1152.340712][T17305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.355867][T17153] 8021q: adding VLAN 0 to HW filter on device team0 00:09:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1152.392612][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1152.402213][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1152.415437][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.422574][T17269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.432910][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 00:09:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1152.442880][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1152.471934][T17305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.505646][T17138] veth0_macvtap: entered promiscuous mode [ 1152.530219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1152.546589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1152.556452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1152.565433][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.572582][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.580222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1152.588985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1152.597648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1152.606462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1152.615134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1152.623696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1152.632718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1152.641600][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.648664][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.656624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1152.665245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1152.674351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1152.683255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1152.691926][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.699019][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.729608][T17305] team0: Port device team_slave_0 added [ 1152.745249][T17143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1152.755454][T17138] veth1_macvtap: entered promiscuous mode [ 1152.792641][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1152.800533][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1152.809372][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1152.817489][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1152.825997][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1152.838205][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1152.847542][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1152.859115][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1152.870059][T17305] team0: Port device team_slave_1 added [ 1152.910075][T17138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.922808][T17138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.933412][T17138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.944301][T17138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.959089][T17138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.975531][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1152.990373][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1153.000168][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1153.009398][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1153.018050][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1153.026389][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1153.035136][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1153.044286][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1153.061283][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1153.070087][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1153.079263][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1153.092431][T17305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.099380][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.137438][T17305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.161789][T17142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1153.171391][T17138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.183197][T17138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.195020][T17138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1153.205645][T17138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.223572][T17138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.235820][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1153.245310][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1153.254301][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1153.270231][T17305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.277601][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.311128][T17305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.330557][T17138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.349937][T17138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.358736][T17138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.376596][T17138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.420153][T17153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1153.447882][T17153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1153.476579][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1153.492098][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1153.500663][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1153.531596][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1153.540190][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1153.556552][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1153.607967][T17143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.629752][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1153.639076][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1153.646777][T10649] Bluetooth: hci0: command 0x0419 tx timeout [ 1153.661582][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1153.728468][T17305] hsr_slave_0: entered promiscuous mode [ 1153.759076][T17305] hsr_slave_1: entered promiscuous mode [ 1153.919903][T17142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.952812][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1153.962979][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1153.984888][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1154.011204][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1154.129005][T17153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.136511][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.153522][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1154.162098][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1154.162110][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.201292][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1154.215944][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1154.232654][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1154.259064][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1154.282766][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1154.317723][T17143] veth0_vlan: entered promiscuous mode [ 1154.359546][T17143] veth1_vlan: entered promiscuous mode [ 1154.403640][T10417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.451654][T10417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.461627][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1154.512056][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1154.532872][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1154.560130][T17143] veth0_macvtap: entered promiscuous mode [ 1154.685012][T17305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.793740][T17143] veth1_macvtap: entered promiscuous mode [ 1154.933404][T17393] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1155.001031][T17393] CPU: 1 PID: 17393 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1155.011508][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1155.021584][T17393] Call Trace: [ 1155.024882][T17393] [ 1155.027835][T17393] dump_stack_lvl+0x136/0x150 [ 1155.032560][T17393] dump_header+0x10a/0xd70 [ 1155.037009][T17393] oom_kill_process+0x25d/0x600 [ 1155.041884][T17393] out_of_memory+0x35c/0x1660 [ 1155.046593][T17393] ? io_schedule_timeout+0x150/0x150 [ 1155.051915][T17393] ? oom_killer_disable+0x2b0/0x2b0 [ 1155.057149][T17393] ? kernfs_notify+0x1ac/0x410 [ 1155.061966][T17393] mem_cgroup_out_of_memory+0x206/0x270 [ 1155.067557][T17393] ? mem_cgroup_margin+0x130/0x130 [ 1155.072729][T17393] memory_max_write+0x2f9/0x3c0 [ 1155.077623][T17393] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1155.083738][T17393] ? lock_sync+0x190/0x190 [ 1155.088202][T17393] cgroup_file_write+0x1e2/0x7b0 [ 1155.093189][T17393] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1155.099301][T17393] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1155.104711][T17393] ? __virt_addr_valid+0x61/0x2e0 [ 1155.109797][T17393] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1155.115202][T17393] kernfs_fop_write_iter+0x3f1/0x600 [ 1155.120536][T17393] vfs_write+0x945/0xd50 [ 1155.124810][T17393] ? kernel_write+0x670/0x670 [ 1155.129515][T17393] ? __fget_files+0x26a/0x480 [ 1155.134250][T17393] ksys_write+0x12b/0x250 [ 1155.138605][T17393] ? __ia32_sys_read+0xb0/0xb0 [ 1155.143394][T17393] ? syscall_enter_from_user_mode+0x26/0x80 [ 1155.149326][T17393] do_syscall_64+0x39/0xb0 [ 1155.153785][T17393] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1155.159716][T17393] RIP: 0033:0x7f4f8788c169 [ 1155.164159][T17393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1155.183798][T17393] RSP: 002b:00007f4f8860b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1155.192245][T17393] RAX: ffffffffffffffda RBX: 00007f4f879ac050 RCX: 00007f4f8788c169 [ 1155.200241][T17393] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000006 [ 1155.208238][T17393] RBP: 00007f4f878e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1155.216233][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.224227][T17393] R13: 00007ffd6cf054df R14: 00007f4f8860b300 R15: 0000000000022000 [ 1155.232246][T17393] [ 1155.264705][T17393] memory: usage 10736kB, limit 1024kB, failcnt 363 [ 1155.293189][T17143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.303787][T17393] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1155.323147][T17143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.333375][T17393] Memory cgroup stats for /syz3: [ 1155.333605][T17393] anon 118784 [ 1155.333605][T17393] file 10473472 [ 1155.333605][T17393] kernel 389120 [ 1155.333605][T17393] kernel_stack 98304 [ 1155.333605][T17393] pagetables 81920 [ 1155.333605][T17393] sec_pagetables 0 [ 1155.333605][T17393] percpu 64 [ 1155.333605][T17393] sock 0 [ 1155.333605][T17393] vmalloc 0 [ 1155.333605][T17393] shmem 10465280 [ 1155.333605][T17393] zswap 0 [ 1155.333605][T17393] zswapped 0 [ 1155.333605][T17393] file_mapped 311296 [ 1155.333605][T17393] file_dirty 0 [ 1155.333605][T17393] file_writeback 0 [ 1155.333605][T17393] swapcached 0 [ 1155.333605][T17393] anon_thp 0 [ 1155.333605][T17393] file_thp 0 [ 1155.333605][T17393] shmem_thp 0 [ 1155.333605][T17393] inactive_anon 0 [ 1155.333605][T17393] active_anon 10584064 [ 1155.333605][T17393] inactive_file 0 [ 1155.333605][T17393] active_file 8192 [ 1155.333605][T17393] unevictable 0 [ 1155.333605][T17393] slab_reclaimable 57072 [ 1155.333605][T17393] slab_unreclaimable 122056 [ 1155.333605][T17393] slab 179128 [ 1155.333605][T17393] workingset_refault_anon 0 [ 1155.333605][T17393] workingset_refault_file 0 [ 1155.333605][T17393] workingset_activate_anon 0 [ 1155.333605][T17393] workingset_activate_file 0 [ 1155.333605][T17393] workingset_restore_anon 0 [ 1155.333605][T17393] workingset_restore_file 0 [ 1155.333605][T17393] workingset_nodereclaim 0 [ 1155.333605][T17393] pgscan 193 [ 1155.333605][T17393] pgsteal 33 [ 1155.333605][T17393] pgscan_kswapd 0 [ 1155.333605][T17393] pgscan_direct 193 [ 1155.333605][T17393] pgscan_khugepaged 0 [ 1155.333605][T17393] pgsteal_kswapd 0 [ 1155.333605][T17393] pgsteal_direct 33 [ 1155.333605][T17393] pgsteal_khugepaged 0 [ 1155.333605][T17393] pgfault 104045 [ 1155.333605][T17393] pgmajfault 0 [ 1155.333605][T17393] pgrefill 11286 [ 1155.333605][T17393] pgactivate 160 [ 1155.333605][T17393] pgdeactivate 0 [ 1155.333605][T17393] pglazyfree 0 [ 1155.333605][T17393] pglazyfreed 0 [ 1155.333605][T17393] zswpin 0 [ 1155.333605][T17393] zswpout 0 [ 1155.333605][T17393] thp_fault_alloc 0 [ 1155.540954][T17143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.560914][T17143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.570753][T17143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1155.600928][T17143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.623303][T17143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.642785][T17305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.693027][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1155.702227][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1155.710305][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1155.734441][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1155.757336][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1155.772110][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1155.782767][T17143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.800895][T17143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.822285][T17143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.850992][T17143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.871193][T17143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.890907][T17143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.912504][T17143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.958729][T17305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.001217][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1156.010169][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1156.032155][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1156.076244][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1156.094753][T17143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.112556][T17143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.131354][T17143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.148941][T17143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.205227][T17305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.237557][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1156.248351][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1156.266876][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1156.288610][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1156.313129][T17153] veth0_vlan: entered promiscuous mode [ 1156.321184][T17142] veth0_vlan: entered promiscuous mode [ 1156.348515][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1156.362729][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1156.378691][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1156.395430][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1156.418024][T17142] veth1_vlan: entered promiscuous mode [ 1156.447476][T17153] veth1_vlan: entered promiscuous mode [ 1156.515205][T17393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17138,uid=0 [ 1156.579256][T17393] Memory cgroup out of memory: Killed process 17138 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1156.638929][T17153] veth0_macvtap: entered promiscuous mode [ 1156.677844][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.698257][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1156.705806][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.717715][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1156.726552][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1156.735206][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1156.744375][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1156.753568][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1156.762317][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1156.781662][T17142] veth0_macvtap: entered promiscuous mode [ 1156.822978][T17153] veth1_macvtap: entered promiscuous mode [ 1156.879674][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1156.887967][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1156.897471][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1156.908693][T17142] veth1_macvtap: entered promiscuous mode [ 1157.005952][T17305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1157.022197][T11508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.030299][T11508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.052980][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1157.072183][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1157.085660][T17305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1157.097756][T17305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1157.111100][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.128367][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.139801][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.161853][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.179556][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.190239][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:10:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1157.207878][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.218540][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.248556][T17153] batman_adv: batadv0: Interface activated: batadv_slave_0 00:10:01 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000100), 0x20000000, 0x2}, 0x20) [ 1157.312432][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.324740][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.335031][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.360893][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.370732][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.382065][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.392911][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.403713][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.414234][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.433218][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.454480][T17142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.471446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1157.479398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1157.501301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1157.527606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1157.539924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1157.564473][T17305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1157.591653][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.608152][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.621602][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.632656][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.643810][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.663065][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.679593][T17153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.691769][T17153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.709022][T17153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.753536][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1157.772115][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1157.797046][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.817673][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.829265][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.839924][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.850308][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.866100][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.887727][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.898710][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.912725][T17142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.924403][T17142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.938870][T17142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.948842][T17153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.965509][T17153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.975186][T17153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.987855][T17153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.011481][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1158.020119][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1158.060521][T17142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.069811][T17142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.079081][T17142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.089278][T17142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.239728][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.260639][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.295978][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1158.309319][T17305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.322873][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.343510][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.354522][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1158.384957][T10417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.400169][T11784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.416281][T10417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.424526][T17305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.434813][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1158.443782][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.457518][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1158.472735][T11508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.480780][T11508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.495703][T11784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.516490][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1158.526478][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.535445][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.542590][T10451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.550400][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1158.559511][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.568275][T10451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.575425][T10451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.587194][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1158.618489][T11784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.678159][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1158.689831][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1158.704789][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1158.718840][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1158.753320][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1158.806688][T11784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.848440][T17305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1158.867881][T17305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.889986][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1158.898827][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1158.907903][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1158.917109][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1158.926742][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.935764][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1158.944408][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.975126][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:10:02 executing program 5: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:10:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:02 executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:10:02 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x8}, {0x0}], 0x2}, 0x0) 00:10:03 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x8}, {0x0}], 0x2}, 0x0) 00:10:03 executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00ff22"], 0x33fe0) recvmsg$kcm(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 00:10:03 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x8}, {0x0}], 0x2}, 0x0) [ 1159.385668][ T5031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1159.406000][ T5031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1159.454906][ T5031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1159.462907][ T5031] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1159.470781][ T5031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1159.794680][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1159.809380][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1159.857622][T17305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.948300][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1159.961737][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1160.026871][T17444] chnl_net:caif_netlink_parms(): no params data found [ 1160.054990][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1160.063557][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1160.076801][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1160.086826][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1160.101656][T17305] veth0_vlan: entered promiscuous mode [ 1160.144789][T17305] veth1_vlan: entered promiscuous mode [ 1160.215448][T17305] veth0_macvtap: entered promiscuous mode [ 1160.222672][T17444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.229757][T17444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.244712][T17444] bridge_slave_0: entered allmulticast mode [ 1160.259179][T17444] bridge_slave_0: entered promiscuous mode [ 1160.267915][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1160.276656][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1160.285224][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1160.293828][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1160.303626][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1160.347028][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.354778][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.362311][T17444] bridge_slave_1: entered allmulticast mode [ 1160.370498][T17444] bridge_slave_1: entered promiscuous mode [ 1160.379531][T17305] veth1_macvtap: entered promiscuous mode [ 1160.453323][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.463926][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.474165][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.484959][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.496875][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.508254][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.520980][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.538328][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.548398][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.569034][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.580288][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.592907][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.604517][T17305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.618350][T17444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.630673][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1160.650711][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1160.662016][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1160.688970][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.700567][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.711671][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.723688][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.733671][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.744385][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.757551][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.768332][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.778344][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.789108][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.799515][T17305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.810178][T17305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.826261][T17305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.839342][T17444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.862715][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1160.871774][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1160.932716][T17444] team0: Port device team_slave_0 added [ 1160.952628][T17444] team0: Port device team_slave_1 added [ 1160.959468][T17305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.969257][T17305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.979063][T17305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.988018][T17305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.060777][T17444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.067965][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.108566][T17444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.164150][T17444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.172701][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.199079][T17444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.303011][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.303902][T17444] hsr_slave_0: entered promiscuous mode [ 1161.336875][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.345268][T17444] hsr_slave_1: entered promiscuous mode [ 1161.366046][T17444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1161.385199][T17444] Cannot create hsr debugfs directory [ 1161.419002][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1161.449933][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.477818][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.489603][T11784] hsr_slave_0: left promiscuous mode [ 1161.505407][T11784] hsr_slave_1: left promiscuous mode [ 1161.521091][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.528504][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.547417][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.555172][T10649] Bluetooth: hci1: command 0x0409 tx timeout [ 1161.571999][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.581664][T11784] bridge_slave_1: left allmulticast mode [ 1161.587331][T11784] bridge_slave_1: left promiscuous mode [ 1161.594527][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.604011][T11784] bridge_slave_0: left allmulticast mode [ 1161.609666][T11784] bridge_slave_0: left promiscuous mode [ 1161.615811][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.628528][T11784] hsr_slave_0: left promiscuous mode [ 1161.635271][T11784] hsr_slave_1: left promiscuous mode [ 1161.643129][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.650780][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.660302][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.667957][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.678095][T11784] bridge_slave_1: left allmulticast mode [ 1161.701700][T11784] bridge_slave_1: left promiscuous mode [ 1161.707319][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.719688][T11784] bridge_slave_0: left allmulticast mode [ 1161.738025][T11784] bridge_slave_0: left promiscuous mode [ 1161.745443][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.771437][T11784] veth1_macvtap: left promiscuous mode [ 1161.776976][T11784] veth0_macvtap: left promiscuous mode [ 1161.787789][T11784] veth1_vlan: left promiscuous mode [ 1161.793328][T11784] veth0_vlan: left promiscuous mode [ 1161.800226][T11784] veth1_macvtap: left promiscuous mode [ 1161.806925][T11784] veth0_macvtap: left promiscuous mode [ 1161.813962][T11784] veth1_vlan: left promiscuous mode [ 1161.819283][T11784] veth0_vlan: left promiscuous mode [ 1162.162490][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1162.178368][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1162.190706][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.210747][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.289501][T11784] bond0 (unregistering): Released all slaves [ 1162.427026][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1162.440733][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1162.462109][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.481131][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.579925][T11784] bond0 (unregistering): Released all slaves [ 1162.704589][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:10:07 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) socketpair(0x1a, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0xa30, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100000054000000000000000200000000000000"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r1) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 00:10:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:07 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xffd7000000000000) 00:10:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) [ 1163.631126][T10649] Bluetooth: hci1: command 0x041b tx timeout [ 1164.104518][T17444] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1164.133706][T17444] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1164.164398][T17444] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1164.211093][T17444] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1164.449980][T17444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.479240][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1164.491540][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1164.502636][T17444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.524386][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1164.542402][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1164.567866][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.575017][T10451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.613865][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1164.632269][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1164.651598][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1164.660173][T10451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.667323][T10451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.691322][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1164.701720][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1164.740281][T17444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1164.771228][T17444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1164.802949][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1164.818639][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1164.858337][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1164.878689][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1164.921469][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1164.930013][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1164.961813][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1164.981404][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1165.023295][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1165.063134][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1165.488950][T17444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.509268][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1165.521223][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1165.574163][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1165.589230][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1165.643194][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1165.652602][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1165.690397][T17444] veth0_vlan: entered promiscuous mode [ 1165.708262][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1165.716911][T10649] Bluetooth: hci1: command 0x040f tx timeout [ 1165.731754][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1165.744252][T17444] veth1_vlan: entered promiscuous mode [ 1165.768344][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1165.777020][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1165.785574][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1165.795811][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1165.806624][T17444] veth0_macvtap: entered promiscuous mode [ 1165.823680][T17444] veth1_macvtap: entered promiscuous mode [ 1165.840002][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.858717][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.868926][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.888501][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.915803][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.929364][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.951245][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.970892][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.980721][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.013171][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.025524][T17444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.040095][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1166.051646][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1166.059813][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1166.069417][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1166.080615][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.099165][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.121072][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.138295][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.174365][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.231005][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.260884][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.285367][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.302617][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.318375][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.361085][T17444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.371277][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1166.387182][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1166.417918][T17444] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.450945][T17444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.468986][T17444] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.478264][T17444] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.646803][T11789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.678599][T11789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.697163][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1166.747958][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.766875][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.794722][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:10:10 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000100), 0x20000000, 0x2}, 0x20) 00:10:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:10 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xffd7000000000000) 00:10:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:10 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) socketpair(0x1a, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0xa30, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100000054000000000000000200000000000000"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r1) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 00:10:11 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000100), 0x20000000, 0x2}, 0x20) 00:10:11 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xffd7000000000000) 00:10:11 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000100), 0x20000000, 0x2}, 0x20) 00:10:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:11 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xffd7000000000000) [ 1167.791221][T10649] Bluetooth: hci1: command 0x0419 tx timeout 00:10:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:11 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) socketpair(0x1a, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0xa30, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100000054000000000000000200000000000000"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r1) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 00:10:11 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) socketpair(0x1a, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0xa30, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100000054000000000000000200000000000000"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r1) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 00:10:12 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xffd7000000000000) 00:10:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000004c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @jmp={0x5, 0x0, 0x4, 0x0, 0xa, 0x2}, @call={0x85, 0x0, 0x0, 0xa2}, @ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x7, 0x0, 0x6, 0x7fffffff}, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)='}', 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xb, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @exit, @alu={0x4, 0x1, 0xd, 0x3, 0x2, 0xfffffffffffffffe, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x81, 0xc7, &(0x7f0000000840)=""/199, 0x0, 0x4, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xf, 0x1e800, 0x20}, 0x10, 0x0, r1}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x23000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 00:10:12 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xffd7000000000000) 00:10:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x7) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xa0}, 0x700) 00:10:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="36400000490091b125ca23890f82f3110a", @ANYBLOB="b7b4"], 0xfe33) [ 1169.233480][T17637] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'. 00:10:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="36400000490091b125ca23890f82f3110a", @ANYBLOB="b7b4"], 0xfe33) [ 1169.534282][T17643] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'. 00:10:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="36400000490091b125ca23890f82f3110a", @ANYBLOB="b7b4"], 0xfe33) 00:10:13 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0xffd7000000000000) 00:10:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x7) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xa0}, 0x700) 00:10:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0xfffffffffffffffc) [ 1169.805288][T17646] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'. 00:10:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0xfffffffffffffffc) 00:10:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="36400000490091b125ca23890f82f3110a", @ANYBLOB="b7b4"], 0xfe33) 00:10:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x7) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xa0}, 0x700) 00:10:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:16 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) socketpair(0x1a, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0xa30, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100000054000000000000000200000000000000"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r1) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 00:10:16 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1172.679369][T17674] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'. 00:10:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0xfffffffffffffffc) 00:10:16 executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x4, 0x110, 0xc}}], 0x18}, 0x0) 00:10:16 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:10:16 executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x4, 0x110, 0xc}}], 0x18}, 0x0) 00:10:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0xfffffffffffffffc) 00:10:17 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:10:17 executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x4, 0x110, 0xc}}], 0x18}, 0x0) 00:10:17 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0xc, 0x7, 0x81, 0x0, 0x5, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x9, 0x1000}, 0x11000, 0xffffffffffffffff, 0x50, 0x4, 0x3, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x18800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) 00:10:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x7) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xa0}, 0x700) 00:10:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:10:19 executing program 1: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x4, 0x110, 0xc}}], 0x18}, 0x0) 00:10:19 executing program 2: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) socketpair(0x1a, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xd}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0xa30, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100000054000000000000000200000000000000"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r1) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 00:10:19 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0xc, 0x7, 0x81, 0x0, 0x5, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x9, 0x1000}, 0x11000, 0xffffffffffffffff, 0x50, 0x4, 0x3, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x18800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) 00:10:19 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000480), 0x0}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x44001000, 0x0, 0x0, &(0x7f0000001200), 0x0, 0x0) perf_event_open(0x0, r3, 0xe, 0xffffffffffffffff, 0x9) 00:10:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:20 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0xc, 0x7, 0x81, 0x0, 0x5, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x9, 0x1000}, 0x11000, 0xffffffffffffffff, 0x50, 0x4, 0x3, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x18800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) 00:10:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) [ 1177.232181][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.238525][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 00:10:21 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0xc, 0x7, 0x81, 0x0, 0x5, 0x40000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x9, 0x1000}, 0x11000, 0xffffffffffffffff, 0x50, 0x4, 0x3, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x18800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) 00:10:22 executing program 4: r0 = syz_clone(0x40040100, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') 00:10:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:24 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000480), 0x0}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x44001000, 0x0, 0x0, &(0x7f0000001200), 0x0, 0x0) perf_event_open(0x0, r3, 0xe, 0xffffffffffffffff, 0x9) 00:10:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:29 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000480), 0x0}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x44001000, 0x0, 0x0, &(0x7f0000001200), 0x0, 0x0) perf_event_open(0x0, r3, 0xe, 0xffffffffffffffff, 0x9) 00:10:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:30 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000480), 0x0}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x44001000, 0x0, 0x0, &(0x7f0000001200), 0x0, 0x0) perf_event_open(0x0, r3, 0xe, 0xffffffffffffffff, 0x9) 00:10:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:32 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1189.129563][T17153] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1189.183829][T17153] CPU: 0 PID: 17153 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1189.194289][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1189.204354][T17153] Call Trace: [ 1189.207630][T17153] [ 1189.210558][T17153] dump_stack_lvl+0x136/0x150 [ 1189.215257][T17153] dump_header+0x10a/0xd70 [ 1189.219681][T17153] oom_kill_process+0x25d/0x600 [ 1189.224539][T17153] out_of_memory+0x35c/0x1660 [ 1189.229229][T17153] ? find_held_lock+0x2d/0x110 [ 1189.233999][T17153] ? oom_killer_disable+0x2b0/0x2b0 [ 1189.239201][T17153] ? rcu_read_unlock+0x9/0x60 [ 1189.243895][T17153] ? find_held_lock+0x2d/0x110 [ 1189.248670][T17153] mem_cgroup_out_of_memory+0x206/0x270 [ 1189.254228][T17153] ? mem_cgroup_margin+0x130/0x130 [ 1189.259345][T17153] ? lock_downgrade+0x690/0x690 [ 1189.264221][T17153] try_charge_memcg+0xf99/0x13a0 [ 1189.269179][T17153] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1189.275177][T17153] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1189.280912][T17153] ? lock_downgrade+0x690/0x690 [ 1189.285775][T17153] ? lock_downgrade+0x690/0x690 [ 1189.290645][T17153] obj_cgroup_charge+0x2af/0x5e0 [ 1189.295591][T17153] ? ext4_alloc_inode+0x28/0x650 [ 1189.300534][T17153] kmem_cache_alloc_lru+0x142/0x600 [ 1189.305749][T17153] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1189.311218][T17153] ext4_alloc_inode+0x28/0x650 [ 1189.315985][T17153] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1189.321448][T17153] alloc_inode+0x61/0x230 [ 1189.325789][T17153] iget_locked+0x1bb/0x700 [ 1189.330218][T17153] __ext4_iget+0x3b2/0x4430 [ 1189.334744][T17153] ? ext4_get_projid+0x190/0x190 [ 1189.339689][T17153] ? ext4_fname_prepare_lookup+0x163/0x200 [ 1189.345513][T17153] ? ext4_fname_setup_filename+0x110/0x110 [ 1189.351333][T17153] ? rcu_is_watching+0x12/0xb0 [ 1189.356117][T17153] ext4_lookup+0x387/0x700 [ 1189.360541][T17153] ? ext4_resetent+0x2e0/0x2e0 [ 1189.365333][T17153] __lookup_slow+0x24c/0x460 [ 1189.369930][T17153] ? lookup_one_qstr_excl+0x180/0x180 [ 1189.375330][T17153] ? lookup_fast+0x14e/0x520 [ 1189.379927][T17153] walk_component+0x33f/0x5a0 [ 1189.384615][T17153] path_lookupat+0x1ba/0x840 [ 1189.389218][T17153] filename_lookup+0x1d2/0x590 [ 1189.393989][T17153] ? may_linkat+0x3b0/0x3b0 [ 1189.398501][T17153] ? __might_fault+0xe2/0x190 [ 1189.403203][T17153] ? __phys_addr_symbol+0x30/0x70 [ 1189.408235][T17153] ? __check_object_size+0x323/0x730 [ 1189.413530][T17153] ? strncpy_from_user+0x1f8/0x350 [ 1189.418657][T17153] ? getname_flags.part.0+0x1dd/0x4f0 [ 1189.424041][T17153] user_path_at_empty+0x46/0x60 [ 1189.428902][T17153] __x64_sys_umount+0xfc/0x190 [ 1189.433671][T17153] ? path_umount+0x10b0/0x10b0 [ 1189.438443][T17153] ? syscall_enter_from_user_mode+0x26/0x80 [ 1189.444352][T17153] do_syscall_64+0x39/0xb0 [ 1189.448783][T17153] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1189.454685][T17153] RIP: 0033:0x7f5bebe8d5d7 [ 1189.459105][T17153] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1189.478714][T17153] RSP: 002b:00007ffddf6073a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1189.487133][T17153] RAX: ffffffffffffffda RBX: 0000000000000041 RCX: 00007f5bebe8d5d7 [ 1189.495107][T17153] RDX: 00007ffddf60747f RSI: 000000000000000a RDI: 00007ffddf607470 [ 1189.503080][T17153] RBP: 00007ffddf607470 R08: 00000000ffffffff R09: 00007ffddf607240 [ 1189.511053][T17153] R10: 00005555555df853 R11: 0000000000000246 R12: 00007f5bebee6cdc [ 1189.519026][T17153] R13: 00007ffddf608530 R14: 00005555555df810 R15: 00007ffddf608570 [ 1189.527014][T17153] [ 1189.578474][T17153] memory: usage 10452kB, limit 0kB, failcnt 374 [ 1189.585206][T17153] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1189.603244][T17153] Memory cgroup stats for /syz4: [ 1189.603466][T17153] anon 49152 [ 1189.603466][T17153] file 10498048 [ 1189.603466][T17153] kernel 143360 [ 1189.603466][T17153] kernel_stack 0 [ 1189.603466][T17153] pagetables 8192 [ 1189.603466][T17153] sec_pagetables 0 [ 1189.603466][T17153] percpu 0 [ 1189.603466][T17153] sock 0 [ 1189.603466][T17153] vmalloc 0 [ 1189.603466][T17153] shmem 10465280 [ 1189.603466][T17153] zswap 0 [ 1189.603466][T17153] zswapped 0 [ 1189.603466][T17153] file_mapped 274432 [ 1189.603466][T17153] file_dirty 32768 [ 1189.603466][T17153] file_writeback 0 [ 1189.603466][T17153] swapcached 0 [ 1189.603466][T17153] anon_thp 0 [ 1189.603466][T17153] file_thp 0 [ 1189.603466][T17153] shmem_thp 0 [ 1189.603466][T17153] inactive_anon 49152 [ 1189.603466][T17153] active_anon 10465280 [ 1189.603466][T17153] inactive_file 32768 [ 1189.603466][T17153] active_file 0 [ 1189.603466][T17153] unevictable 0 [ 1189.603466][T17153] slab_reclaimable 48512 [ 1189.603466][T17153] slab_unreclaimable 77496 [ 1189.603466][T17153] slab 126008 [ 1189.603466][T17153] workingset_refault_anon 0 [ 1189.603466][T17153] workingset_refault_file 0 [ 1189.603466][T17153] workingset_activate_anon 0 [ 1189.603466][T17153] workingset_activate_file 0 [ 1189.603466][T17153] workingset_restore_anon 0 [ 1189.603466][T17153] workingset_restore_file 0 [ 1189.603466][T17153] workingset_nodereclaim 0 [ 1189.603466][T17153] pgscan 60 [ 1189.603466][T17153] pgsteal 60 [ 1189.603466][T17153] pgscan_kswapd 0 [ 1189.603466][T17153] pgscan_direct 60 [ 1189.603466][T17153] pgscan_khugepaged 0 [ 1189.603466][T17153] pgsteal_kswapd 0 [ 1189.603466][T17153] pgsteal_direct 60 [ 1189.603466][T17153] pgsteal_khugepaged 0 [ 1189.603466][T17153] pgfault 98464 [ 1189.603466][T17153] pgmajfault 0 [ 1189.603466][T17153] pgrefill 5830 [ 1189.603466][T17153] pgactivate 0 [ 1189.603466][T17153] pgdeactivate 0 [ 1189.603466][T17153] pglazyfree 0 [ 1189.603466][T17153] pglazyfreed 0 [ 1189.603466][T17153] zswpin 0 [ 1189.603466][T17153] zswpout 0 [ 1189.603466][T17153] thp_fault_alloc 0 [ 1189.926921][T17153] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17153,uid=0 [ 1189.961583][T17153] Memory cgroup out of memory: Killed process 17153 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 00:10:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, 0x0, 0x4ea00) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000025) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(0x0, r1, 0x0, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:10:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000003f00ea0485000044ce00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3e0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xffffffffffffff01, 0x0, 0x7, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) perf_event_open$cgroup(&(0x7f0000000a00)={0x5, 0x80, 0xe9, 0xce, 0x40, 0xad, 0x0, 0x8, 0x23c21, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x2000, 0x0, 0x401, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xb4e, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x2b, 0xfa, &(0x7f0000000440)="e1965e690a9ecfd3a079839d05f5b876cc624d99a2e8305e820891c01e66f94346af7d8965d7d1489d733c", &(0x7f0000000480)=""/250, 0x7ff, 0x0, 0xd7, 0x0, &(0x7f0000000580)="f8fd962c35502a8e07b6a9a77f085b4f931fd24df0e58e150f8aab065c6480538ce477e72bdf508dd92cecbcbdebac5e581cd18c1de070be4f89f6c1b4b4047a58a4f4555ff5743e6542375b82835537203b2efb793ba8d13bb889bbc78e0381d66871d35b1f9ac7c4b431a90a648e696c26ec43d7f38e7f391177a60347e018c0b06367dc7c015b1fff00eff602df79d60df41ecc842e9944923c76c4fdfcc71336292fc91572bd428f108afaf5a800e33ea6cd2a7099ea77a5afe81468e9b732cf74ac2c76a7385960059a103142079dd1adec17bd38", &(0x7f0000000680), 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='hrtimer_expire_entry\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x248800) 00:10:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1193.506016][T17844] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1193.646520][T17844] CPU: 0 PID: 17844 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1193.656991][T17844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1193.667061][T17844] Call Trace: [ 1193.670348][T17844] [ 1193.673293][T17844] dump_stack_lvl+0x136/0x150 [ 1193.678007][T17844] dump_header+0x10a/0xd70 [ 1193.682454][T17844] oom_kill_process+0x25d/0x600 [ 1193.687327][T17844] out_of_memory+0x35c/0x1660 [ 1193.692030][T17844] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1193.697889][T17844] ? oom_killer_disable+0x2b0/0x2b0 [ 1193.703124][T17844] ? mark_held_locks+0x9f/0xe0 [ 1193.707930][T17844] mem_cgroup_out_of_memory+0x206/0x270 [ 1193.713507][T17844] ? mem_cgroup_margin+0x130/0x130 [ 1193.718657][T17844] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 1193.724503][T17844] memory_max_write+0x2f9/0x3c0 [ 1193.729387][T17844] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1193.735494][T17844] ? lock_sync+0x190/0x190 [ 1193.739953][T17844] cgroup_file_write+0x1e2/0x7b0 [ 1193.744917][T17844] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1193.751016][T17844] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1193.756407][T17844] ? __virt_addr_valid+0x61/0x2e0 [ 1193.761474][T17844] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1193.766870][T17844] kernfs_fop_write_iter+0x3f1/0x600 [ 1193.772191][T17844] vfs_write+0x945/0xd50 [ 1193.776457][T17844] ? kernel_write+0x670/0x670 [ 1193.781159][T17844] ? __fget_files+0x26a/0x480 [ 1193.785889][T17844] ksys_write+0x12b/0x250 [ 1193.790235][T17844] ? __ia32_sys_read+0xb0/0xb0 [ 1193.795023][T17844] ? syscall_enter_from_user_mode+0x26/0x80 [ 1193.800957][T17844] do_syscall_64+0x39/0xb0 [ 1193.805404][T17844] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1193.811334][T17844] RIP: 0033:0x7f5bb108c169 [ 1193.815766][T17844] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1193.835399][T17844] RSP: 002b:00007f5bafbdd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1193.843841][T17844] RAX: ffffffffffffffda RBX: 00007f5bb11ac050 RCX: 00007f5bb108c169 [ 1193.851831][T17844] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1193.859824][T17844] RBP: 00007f5bb10e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1193.867887][T17844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.875879][T17844] R13: 00007ffeb41a373f R14: 00007f5bafbdd300 R15: 0000000000022000 [ 1193.883900][T17844] [ 1193.921569][T10649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1193.930521][T10649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1193.938749][T10649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1193.945872][T17844] memory: usage 11108kB, limit 0kB, failcnt 523 [ 1193.952347][T17844] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1193.959212][T17844] Memory cgroup stats for /syz5: [ 1193.959413][T17844] anon 143360 [ 1193.959413][T17844] file 10530816 [ 1193.959413][T17844] kernel 630784 [ 1193.959413][T17844] kernel_stack 32768 [ 1193.959413][T17844] pagetables 81920 [ 1193.959413][T17844] sec_pagetables 0 [ 1193.959413][T17844] percpu 64 [ 1193.959413][T17844] sock 0 [ 1193.959413][T17844] vmalloc 0 [ 1193.959413][T17844] shmem 10465280 [ 1193.959413][T17844] zswap 0 [ 1193.959413][T17844] zswapped 0 [ 1193.959413][T17844] file_mapped 311296 [ 1193.959413][T17844] file_dirty 65536 [ 1193.959413][T17844] file_writeback 0 [ 1193.959413][T17844] swapcached 0 [ 1193.959413][T17844] anon_thp 0 [ 1193.959413][T17844] file_thp 0 [ 1193.959413][T17844] shmem_thp 0 [ 1193.959413][T17844] inactive_anon 143360 [ 1193.959413][T17844] active_anon 10465280 [ 1193.959413][T17844] inactive_file 61440 [ 1193.959413][T17844] active_file 0 [ 1193.959413][T17844] unevictable 0 [ 1193.959413][T17844] slab_reclaimable 116096 [ 1193.959413][T17844] slab_unreclaimable 371408 [ 1193.959413][T17844] slab 487504 [ 1193.959413][T17844] workingset_refault_anon 0 [ 1193.959413][T17844] workingset_refault_file 0 [ 1193.959413][T17844] workingset_activate_anon 0 [ 1193.959413][T17844] workingset_activate_file 0 [ 1193.959413][T17844] workingset_restore_anon 0 [ 1193.959413][T17844] workingset_restore_file 0 [ 1193.959413][T17844] workingset_nodereclaim 0 [ 1193.959413][T17844] pgscan 3656 [ 1193.959413][T17844] pgsteal 2477 [ 1193.959413][T17844] pgscan_kswapd 0 [ 1193.959413][T17844] pgscan_direct 3656 [ 1193.959413][T17844] pgscan_khugepaged 0 [ 1193.959413][T17844] pgsteal_kswapd 0 [ 1193.959413][T17844] pgsteal_direct 2477 [ 1193.959413][T17844] pgsteal_khugepaged 0 [ 1193.959413][T17844] pgfault 130076 [ 1193.959413][T17844] pgmajfault 0 [ 1193.959413][T17844] pgrefill 3044328 [ 1193.959413][T17844] pgactivate 174 [ 1193.959413][T17844] pgdeactivate 0 [ 1193.959413][T17844] pglazyfree 0 [ 1193.959413][T17844] pglazyfreed 0 [ 1193.959413][T17844] zswpin 0 [ 1193.959413][T17844] zswpout 0 [ 1194.147350][T10649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1194.156630][T10649] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1194.164622][T10649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 00:10:38 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1194.201061][T17844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17842,uid=0 [ 1194.217786][T17844] Memory cgroup out of memory: Killed process 17844 (syz-executor.5) total-vm:56728kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1194.270739][T17142] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1194.282945][T17142] CPU: 0 PID: 17142 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1194.293385][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1194.303455][T17142] Call Trace: [ 1194.306745][T17142] [ 1194.309691][T17142] dump_stack_lvl+0x136/0x150 [ 1194.314410][T17142] dump_header+0x10a/0xd70 [ 1194.318856][T17142] oom_kill_process+0x25d/0x600 [ 1194.323734][T17142] out_of_memory+0x35c/0x1660 [ 1194.328444][T17142] ? find_held_lock+0x2d/0x110 [ 1194.333236][T17142] ? oom_killer_disable+0x2b0/0x2b0 [ 1194.338459][T17142] ? rcu_read_unlock+0x9/0x60 [ 1194.343165][T17142] ? find_held_lock+0x2d/0x110 [ 1194.347963][T17142] mem_cgroup_out_of_memory+0x206/0x270 [ 1194.353539][T17142] ? mem_cgroup_margin+0x130/0x130 [ 1194.358674][T17142] ? lock_downgrade+0x690/0x690 [ 1194.363569][T17142] try_charge_memcg+0xf99/0x13a0 [ 1194.368544][T17142] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1194.374554][T17142] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1194.380302][T17142] ? lock_downgrade+0x690/0x690 [ 1194.385183][T17142] ? lock_downgrade+0x690/0x690 [ 1194.390079][T17142] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1194.395652][T17142] __alloc_pages+0x1f3/0x4a0 [ 1194.400275][T17142] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1194.407089][T17142] ? copy_page_range+0x1bc0/0x3830 [ 1194.412234][T17142] alloc_pages+0x1aa/0x270 [ 1194.416681][T17142] get_zeroed_page+0x14/0x40 [ 1194.421305][T17142] __pud_alloc+0x3b/0x180 [ 1194.425668][T17142] copy_page_range+0x2199/0x3830 [ 1194.430644][T17142] ? mas_wr_modify+0x2da/0x16d0 [ 1194.435556][T17142] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 1194.441502][T17142] ? mas_store+0x275/0x3a0 [ 1194.445954][T17142] ? handle_mm_fault+0x9f0/0x9f0 [ 1194.450913][T17142] ? down_write+0x14f/0x200 [ 1194.455467][T17142] dup_mmap+0x10bc/0x19d0 [ 1194.459839][T17142] ? replace_mm_exe_file+0x4c0/0x4c0 [ 1194.465170][T17142] ? lockdep_hardirqs_on+0x7d/0x100 [ 1194.470412][T17142] ? mm_init+0xc7a/0x1030 [ 1194.474777][T17142] copy_process+0x65ae/0x7600 [ 1194.479480][T17142] ? _raw_spin_unlock+0x28/0x40 [ 1194.484384][T17142] ? pidfd_prepare+0x80/0x80 [ 1194.489017][T17142] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1194.495040][T17142] kernel_clone+0xeb/0x890 [ 1194.499491][T17142] ? create_io_thread+0xe0/0xe0 [ 1194.504372][T17142] ? do_user_addr_fault+0x2b1/0x1210 [ 1194.509685][T17142] ? reacquire_held_locks+0x216/0x4e0 [ 1194.515085][T17142] ? do_user_addr_fault+0x2b1/0x1210 [ 1194.520411][T17142] ? find_held_lock+0x2d/0x110 [ 1194.525205][T17142] __do_sys_clone+0xba/0x100 [ 1194.529831][T17142] ? kernel_clone+0x890/0x890 [ 1194.534559][T17142] ? syscall_enter_from_user_mode+0x26/0x80 [ 1194.540487][T17142] do_syscall_64+0x39/0xb0 [ 1194.544938][T17142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1194.550869][T17142] RIP: 0033:0x7f5bb1089e9b [ 1194.555302][T17142] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1194.574933][T17142] RSP: 002b:00007ffeb41a3980 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1194.583370][T17142] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bb1089e9b [ 1194.591361][T17142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1194.599345][T17142] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555940400 [ 1194.607332][T17142] R10: 00005555559406d0 R11: 0000000000000246 R12: 0000000000000001 [ 1194.615322][T17142] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeb41a3a60 [ 1194.623337][T17142] [ 1194.790365][T17142] memory: usage 10864kB, limit 0kB, failcnt 542 [ 1194.796731][T17142] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1194.803884][T17142] Memory cgroup stats for /syz5: [ 1194.804113][T17142] anon 45056 [ 1194.804113][T17142] file 10469376 [ 1194.804113][T17142] kernel 569344 [ 1194.804113][T17142] kernel_stack 32768 [ 1194.804113][T17142] pagetables 49152 [ 1194.804113][T17142] sec_pagetables 0 [ 1194.804113][T17142] percpu 128 [ 1194.804113][T17142] sock 0 [ 1194.804113][T17142] vmalloc 0 [ 1194.804113][T17142] shmem 10465280 [ 1194.804113][T17142] zswap 0 [ 1194.804113][T17142] zswapped 0 [ 1194.804113][T17142] file_mapped 274432 [ 1194.804113][T17142] file_dirty 4096 [ 1194.804113][T17142] file_writeback 0 [ 1194.804113][T17142] swapcached 0 [ 1194.804113][T17142] anon_thp 0 [ 1194.804113][T17142] file_thp 0 [ 1194.804113][T17142] shmem_thp 0 [ 1194.804113][T17142] inactive_anon 0 [ 1194.804113][T17142] active_anon 10510336 [ 1194.804113][T17142] inactive_file 0 [ 1194.804113][T17142] active_file 4096 [ 1194.804113][T17142] unevictable 0 [ 1194.804113][T17142] slab_reclaimable 104144 [ 1194.804113][T17142] slab_unreclaimable 363232 [ 1194.804113][T17142] slab 467376 [ 1194.804113][T17142] workingset_refault_anon 0 [ 1194.804113][T17142] workingset_refault_file 0 [ 1194.804113][T17142] workingset_activate_anon 0 [ 1194.804113][T17142] workingset_activate_file 0 [ 1194.804113][T17142] workingset_restore_anon 0 [ 1194.804113][T17142] workingset_restore_file 0 [ 1194.804113][T17142] workingset_nodereclaim 0 [ 1194.804113][T17142] pgscan 3656 [ 1194.804113][T17142] pgsteal 2477 [ 1194.804113][T17142] pgscan_kswapd 0 [ 1194.804113][T17142] pgscan_direct 3656 [ 1194.804113][T17142] pgscan_khugepaged 0 [ 1194.804113][T17142] pgsteal_kswapd 0 [ 1194.804113][T17142] pgsteal_direct 2477 [ 1194.804113][T17142] pgsteal_khugepaged 0 [ 1194.804113][T17142] pgfault 130085 [ 1194.804113][T17142] pgmajfault 0 [ 1194.804113][T17142] pgrefill 3044346 [ 1194.804113][T17142] pgactivate 174 [ 1194.804113][T17142] pgdeactivate 0 [ 1194.804113][T17142] pglazyfree 0 [ 1194.804113][T17142] pglazyfreed 0 [ 1194.804113][T17142] zswpin 0 [ 1194.804113][T17142] zswpout 0 [ 1195.140128][T17846] chnl_net:caif_netlink_parms(): no params data found [ 1195.452734][T11784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.490942][T17142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17142,uid=0 [ 1195.520992][T17142] Memory cgroup out of memory: Killed process 17142 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1195.831795][T11784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:10:40 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1196.190982][T10649] Bluetooth: hci5: command 0x0409 tx timeout [ 1196.356893][T11784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.495886][T17846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.560538][T17846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.591709][T17846] bridge_slave_0: entered allmulticast mode 00:10:40 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1196.610977][T17846] bridge_slave_0: entered promiscuous mode [ 1196.671696][T11784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.741029][T17846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.748148][T17846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.801176][T17846] bridge_slave_1: entered allmulticast mode [ 1196.808137][T17846] bridge_slave_1: entered promiscuous mode [ 1196.949325][T17846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.014479][T17846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:10:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1197.225902][T17846] team0: Port device team_slave_0 added [ 1197.352025][T17846] team0: Port device team_slave_1 added [ 1197.459691][T17846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.476536][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.546895][T17846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.609749][T17846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.636684][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.700737][T17846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.925626][T17856] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1197.958569][T17856] CPU: 1 PID: 17856 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1197.969026][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1197.979084][T17856] Call Trace: [ 1197.982362][T17856] [ 1197.985294][T17856] dump_stack_lvl+0x136/0x150 [ 1197.989995][T17856] dump_header+0x10a/0xd70 [ 1197.994445][T17856] oom_kill_process+0x25d/0x600 [ 1197.999316][T17856] out_of_memory+0x35c/0x1660 [ 1198.004004][T17856] ? io_schedule_timeout+0x150/0x150 [ 1198.009313][T17856] ? oom_killer_disable+0x2b0/0x2b0 [ 1198.014547][T17856] mem_cgroup_out_of_memory+0x206/0x270 [ 1198.020122][T17856] ? mem_cgroup_margin+0x130/0x130 [ 1198.025268][T17856] memory_max_write+0x2f9/0x3c0 [ 1198.030136][T17856] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1198.036218][T17856] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1198.042400][T17856] ? lockdep_hardirqs_on+0x7d/0x100 [ 1198.047615][T17856] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1198.053802][T17856] cgroup_file_write+0x1e2/0x7b0 [ 1198.058755][T17856] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1198.064841][T17856] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1198.070227][T17856] ? lock_is_held_type+0x103/0x140 [ 1198.075358][T17856] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1198.080740][T17856] kernfs_fop_write_iter+0x3f1/0x600 [ 1198.086048][T17856] vfs_write+0x945/0xd50 [ 1198.090304][T17856] ? kernel_write+0x670/0x670 [ 1198.095011][T17856] ? __fget_files+0x26a/0x480 [ 1198.099728][T17856] ksys_write+0x12b/0x250 [ 1198.104067][T17856] ? __ia32_sys_read+0xb0/0xb0 [ 1198.108844][T17856] ? syscall_enter_from_user_mode+0x26/0x80 [ 1198.114753][T17856] do_syscall_64+0x39/0xb0 [ 1198.119192][T17856] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1198.125102][T17856] RIP: 0033:0x7f8a2088c169 [ 1198.129523][T17856] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1198.149141][T17856] RSP: 002b:00007f8a21540168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1198.157561][T17856] RAX: ffffffffffffffda RBX: 00007f8a209ac050 RCX: 00007f8a2088c169 [ 1198.165535][T17856] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1198.173510][T17856] RBP: 00007f8a208e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1198.181486][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.189459][T17856] R13: 00007fff9737fedf R14: 00007f8a21540300 R15: 0000000000022000 [ 1198.197452][T17856] [ 1198.236175][T17846] hsr_slave_0: entered promiscuous mode [ 1198.271037][T10649] Bluetooth: hci5: command 0x041b tx timeout 00:10:42 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1198.400289][T17856] memory: usage 10736kB, limit 0kB, failcnt 495 [ 1198.400316][T17846] hsr_slave_1: entered promiscuous mode [ 1198.433554][T17856] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1198.448388][T17856] Memory cgroup stats for /syz2: [ 1198.456970][T17856] anon 147456 [ 1198.456970][T17856] file 10473472 [ 1198.456970][T17856] kernel 372736 [ 1198.456970][T17856] kernel_stack 98304 [ 1198.456970][T17856] pagetables 77824 [ 1198.456970][T17856] sec_pagetables 0 [ 1198.456970][T17856] percpu 64 [ 1198.456970][T17856] sock 0 [ 1198.456970][T17856] vmalloc 0 [ 1198.456970][T17856] shmem 10465280 [ 1198.456970][T17856] zswap 0 [ 1198.456970][T17856] zswapped 0 [ 1198.456970][T17856] file_mapped 376832 [ 1198.456970][T17856] file_dirty 8192 [ 1198.456970][T17856] file_writeback 0 [ 1198.456970][T17856] swapcached 0 [ 1198.456970][T17856] anon_thp 0 [ 1198.456970][T17856] file_thp 0 [ 1198.456970][T17856] shmem_thp 0 [ 1198.456970][T17856] inactive_anon 147456 [ 1198.456970][T17856] active_anon 10465280 [ 1198.456970][T17856] inactive_file 8192 [ 1198.456970][T17856] active_file 0 [ 1198.456970][T17856] unevictable 0 [ 1198.456970][T17856] slab_reclaimable 48512 [ 1198.456970][T17856] slab_unreclaimable 117120 [ 1198.456970][T17856] slab 165632 [ 1198.456970][T17856] workingset_refault_anon 0 [ 1198.456970][T17856] workingset_refault_file 0 [ 1198.456970][T17856] workingset_activate_anon 0 [ 1198.456970][T17856] workingset_activate_file 0 [ 1198.456970][T17856] workingset_restore_anon 0 [ 1198.456970][T17856] workingset_restore_file 0 [ 1198.456970][T17856] workingset_nodereclaim 0 [ 1198.456970][T17856] pgscan 268 [ 1198.456970][T17856] pgsteal 51 [ 1198.456970][T17856] pgscan_kswapd 0 [ 1198.456970][T17856] pgscan_direct 268 [ 1198.456970][T17856] pgscan_khugepaged 0 [ 1198.456970][T17856] pgsteal_kswapd 0 [ 1198.456970][T17856] pgsteal_direct 51 [ 1198.456970][T17856] pgsteal_khugepaged 0 [ 1198.456970][T17856] pgfault 122292 [ 1198.456970][T17856] pgmajfault 0 [ 1198.456970][T17856] pgrefill 46301 [ 1198.456970][T17856] pgactivate 217 [ 1198.456970][T17856] pgdeactivate 0 [ 1198.456970][T17856] pglazyfree 0 [ 1198.456970][T17856] pglazyfreed 0 [ 1198.456970][T17856] zswpin 0 [ 1198.456970][T17856] zswpout 0 00:10:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1198.707404][T17846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1198.738399][T17846] Cannot create hsr debugfs directory [ 1199.137859][T10649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1199.147699][T10649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1199.155813][T10649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1199.163355][T17856] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17854,uid=0 [ 1199.182526][T17856] Memory cgroup out of memory: Killed process 17854 (syz-executor.2) total-vm:56728kB, anon-rss:508kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1199.201560][T10649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1199.209337][T10649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1199.217795][T10649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 00:10:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1199.652046][T17305] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1199.680235][T17305] CPU: 1 PID: 17305 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1199.690697][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1199.700771][T17305] Call Trace: [ 1199.704066][T17305] [ 1199.707009][T17305] dump_stack_lvl+0x136/0x150 [ 1199.711727][T17305] dump_header+0x10a/0xd70 [ 1199.716175][T17305] oom_kill_process+0x25d/0x600 [ 1199.721053][T17305] out_of_memory+0x35c/0x1660 [ 1199.725759][T17305] ? find_held_lock+0x2d/0x110 [ 1199.730558][T17305] ? oom_killer_disable+0x2b0/0x2b0 [ 1199.735785][T17305] ? rcu_read_unlock+0x9/0x60 [ 1199.740489][T17305] ? find_held_lock+0x2d/0x110 [ 1199.745285][T17305] mem_cgroup_out_of_memory+0x206/0x270 [ 1199.750867][T17305] ? mem_cgroup_margin+0x130/0x130 [ 1199.756009][T17305] ? lock_downgrade+0x690/0x690 [ 1199.760910][T17305] try_charge_memcg+0xf99/0x13a0 [ 1199.765893][T17305] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1199.771913][T17305] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1199.777672][T17305] ? lock_downgrade+0x690/0x690 [ 1199.782559][T17305] ? lock_downgrade+0x690/0x690 [ 1199.787455][T17305] obj_cgroup_charge+0x2af/0x5e0 [ 1199.792420][T17305] ? __d_alloc+0x32/0x980 [ 1199.796776][T17305] kmem_cache_alloc_lru+0x142/0x600 [ 1199.802015][T17305] __d_alloc+0x32/0x980 [ 1199.806195][T17305] ? __lock_acquire+0x1916/0x5df0 [ 1199.811254][T17305] d_alloc+0x4e/0x240 [ 1199.815261][T17305] d_alloc_parallel+0xe8/0x1530 [ 1199.820155][T17305] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1199.826174][T17305] ? __d_lookup_rcu+0x4e0/0x4e0 [ 1199.831055][T17305] ? lockdep_init_map_type+0x21e/0x810 [ 1199.836544][T17305] ? lock_downgrade+0x690/0x690 [ 1199.841428][T17305] ? lockdep_init_map_type+0x21e/0x810 [ 1199.846933][T17305] __lookup_slow+0x193/0x460 [ 1199.851559][T17305] ? lookup_one_qstr_excl+0x180/0x180 [ 1199.856988][T17305] ? lookup_fast+0x14e/0x520 [ 1199.861610][T17305] walk_component+0x33f/0x5a0 [ 1199.866317][T17305] path_lookupat+0x1ba/0x840 [ 1199.870936][T17305] filename_lookup+0x1d2/0x590 [ 1199.875731][T17305] ? may_linkat+0x3b0/0x3b0 [ 1199.880261][T17305] ? __might_fault+0xe2/0x190 [ 1199.884987][T17305] ? __phys_addr_symbol+0x30/0x70 [ 1199.890049][T17305] ? __check_object_size+0x323/0x730 [ 1199.895366][T17305] ? strncpy_from_user+0x1f8/0x350 [ 1199.900511][T17305] ? getname_flags.part.0+0x1dd/0x4f0 [ 1199.905922][T17305] user_path_at_empty+0x46/0x60 [ 1199.910804][T17305] __x64_sys_umount+0xfc/0x190 [ 1199.915588][T17305] ? path_umount+0x10b0/0x10b0 [ 1199.920377][T17305] ? syscall_enter_from_user_mode+0x26/0x80 [ 1199.926304][T17305] do_syscall_64+0x39/0xb0 [ 1199.930753][T17305] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1199.936678][T17305] RIP: 0033:0x7fbfdcc8d5d7 [ 1199.941200][T17305] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1199.960822][T17305] RSP: 002b:00007ffea3f7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1199.969249][T17305] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfdcc8d5d7 [ 1199.977224][T17305] RDX: 00007ffea3f7a0fb RSI: 000000000000000a RDI: 00007ffea3f7a0f0 [ 1199.985198][T17305] RBP: 00007ffea3f7a0f0 R08: 00000000ffffffff R09: 00007ffea3f79ec0 [ 1199.993172][T17305] R10: 0000555555dfa893 R11: 0000000000000246 R12: 00007fbfdcce6cdc [ 1200.001146][T17305] R13: 00007ffea3f7b1b0 R14: 0000555555dfa810 R15: 00007ffea3f7b1f0 [ 1200.009135][T17305] [ 1200.042445][T17305] memory: usage 10444kB, limit 0kB, failcnt 295 [ 1200.048745][T17305] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1200.083031][T17305] Memory cgroup stats for /syz0: [ 1200.083259][T17305] anon 49152 [ 1200.083259][T17305] file 10518528 [ 1200.083259][T17305] kernel 126976 [ 1200.083259][T17305] kernel_stack 0 [ 1200.083259][T17305] pagetables 12288 [ 1200.083259][T17305] sec_pagetables 0 [ 1200.083259][T17305] percpu 0 [ 1200.083259][T17305] sock 0 [ 1200.083259][T17305] vmalloc 0 [ 1200.083259][T17305] shmem 10465280 [ 1200.083259][T17305] zswap 0 [ 1200.083259][T17305] zswapped 0 [ 1200.083259][T17305] file_mapped 278528 [ 1200.083259][T17305] file_dirty 53248 [ 1200.083259][T17305] file_writeback 0 [ 1200.083259][T17305] swapcached 0 [ 1200.083259][T17305] anon_thp 0 [ 1200.083259][T17305] file_thp 0 [ 1200.083259][T17305] shmem_thp 0 [ 1200.083259][T17305] inactive_anon 10514432 [ 1200.083259][T17305] active_anon 0 [ 1200.083259][T17305] inactive_file 53248 [ 1200.083259][T17305] active_file 0 [ 1200.083259][T17305] unevictable 0 [ 1200.083259][T17305] slab_reclaimable 44672 [ 1200.083259][T17305] slab_unreclaimable 60344 [ 1200.083259][T17305] slab 105016 [ 1200.083259][T17305] workingset_refault_anon 0 [ 1200.083259][T17305] workingset_refault_file 0 [ 1200.083259][T17305] workingset_activate_anon 0 [ 1200.083259][T17305] workingset_activate_file 0 [ 1200.083259][T17305] workingset_restore_anon 0 [ 1200.083259][T17305] workingset_restore_file 0 [ 1200.083259][T17305] workingset_nodereclaim 0 [ 1200.083259][T17305] pgscan 507 [ 1200.083259][T17305] pgsteal 155 [ 1200.083259][T17305] pgscan_kswapd 0 [ 1200.083259][T17305] pgscan_direct 507 [ 1200.083259][T17305] pgscan_khugepaged 0 [ 1200.083259][T17305] pgsteal_kswapd 0 [ 1200.083259][T17305] pgsteal_direct 155 [ 1200.083259][T17305] pgsteal_khugepaged 0 [ 1200.083259][T17305] pgfault 97532 [ 1200.083259][T17305] pgmajfault 0 [ 1200.083259][T17305] pgrefill 12123 [ 1200.083259][T17305] pgactivate 352 [ 1200.083259][T17305] pgdeactivate 0 [ 1200.083259][T17305] pglazyfree 0 [ 1200.083259][T17305] pglazyfreed 0 [ 1200.083259][T17305] zswpin 0 [ 1200.083259][T17305] zswpout 0 [ 1200.083259][T17305] thp_fault_alloc 0 [ 1200.289538][T17305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17305,uid=0 [ 1200.313111][T17305] Memory cgroup out of memory: Killed process 17305 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1200.331779][T17444] syz-executor.3 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1200.351122][T10649] Bluetooth: hci5: command 0x040f tx timeout [ 1200.354998][T17444] CPU: 0 PID: 17444 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1200.367527][T17444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1200.377595][T17444] Call Trace: [ 1200.380885][T17444] [ 1200.383829][T17444] dump_stack_lvl+0x136/0x150 [ 1200.388547][T17444] dump_header+0x10a/0xd70 [ 1200.392996][T17444] oom_kill_process+0x25d/0x600 [ 1200.397862][T17444] out_of_memory+0x35c/0x1660 [ 1200.402538][T17444] ? oom_killer_disable+0x2b0/0x2b0 [ 1200.407726][T17444] ? rcu_read_unlock+0x9/0x60 [ 1200.412406][T17444] ? find_held_lock+0x2d/0x110 [ 1200.417187][T17444] mem_cgroup_out_of_memory+0x206/0x270 [ 1200.422725][T17444] ? mem_cgroup_margin+0x130/0x130 [ 1200.427825][T17444] ? lock_downgrade+0x690/0x690 [ 1200.432674][T17444] try_charge_memcg+0xf99/0x13a0 [ 1200.437606][T17444] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1200.443579][T17444] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1200.449301][T17444] ? lock_downgrade+0x690/0x690 [ 1200.454185][T17444] ? lock_downgrade+0x690/0x690 [ 1200.459028][T17444] ? rcu_read_unlock+0x9/0x60 [ 1200.463701][T17444] obj_cgroup_charge+0x2af/0x5e0 [ 1200.468628][T17444] __kmem_cache_alloc_node+0xa3/0x320 [ 1200.473992][T17444] ? kvmalloc_node+0xa2/0x1a0 [ 1200.478663][T17444] ? kvmalloc_node+0xa2/0x1a0 [ 1200.483332][T17444] __kmalloc_node+0x51/0x1a0 [ 1200.487908][T17444] kvmalloc_node+0xa2/0x1a0 [ 1200.492406][T17444] xt_alloc_table_info+0x40/0xa0 [ 1200.497339][T17444] do_ip6t_set_ctl+0x514/0xb30 [ 1200.502090][T17444] ? __mutex_lock+0x231/0x1350 [ 1200.506845][T17444] ? compat_do_replace.constprop.0+0x410/0x410 [ 1200.512995][T17444] ? wait_for_completion_io_timeout+0x20/0x20 [ 1200.519072][T17444] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1200.525049][T17444] nf_setsockopt+0x87/0xe0 [ 1200.529461][T17444] ipv6_setsockopt+0x12b/0x190 [ 1200.534216][T17444] tcp_setsockopt+0x9f/0x100 [ 1200.538800][T17444] ? sock_common_recvmsg+0x190/0x190 [ 1200.544077][T17444] __sys_setsockopt+0x2c6/0x5b0 [ 1200.548915][T17444] ? __ia32_sys_recv+0x100/0x100 [ 1200.553846][T17444] ? up_write+0x520/0x520 [ 1200.558164][T17444] ? handle_mm_fault+0x326/0x9f0 [ 1200.563107][T17444] __x64_sys_setsockopt+0xbe/0x160 [ 1200.568207][T17444] ? syscall_enter_from_user_mode+0x26/0x80 [ 1200.574089][T17444] do_syscall_64+0x39/0xb0 [ 1200.578498][T17444] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1200.584383][T17444] RIP: 0033:0x7fd69048d7ba [ 1200.588781][T17444] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1200.608373][T17444] RSP: 002b:00007ffd8a7d23c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 1200.616775][T17444] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007fd69048d7ba [ 1200.624733][T17444] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1200.632691][T17444] RBP: 00007ffd8a7d23f0 R08: 0000000000000558 R09: ffffffffffff0000 [ 1200.640653][T17444] R10: 00007fd690585940 R11: 0000000000000202 R12: 00007ffd8a7d2450 [ 1200.648610][T17444] R13: 0000000000000003 R14: 00007ffd8a7d23ec R15: 00007fd6905858e0 [ 1200.656582][T17444] [ 1200.662735][T17444] memory: usage 10360kB, limit 0kB, failcnt 382 [ 1200.669001][T17444] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1200.675944][T17444] Memory cgroup stats for /syz3: [ 1200.676141][T17444] anon 40960 [ 1200.676141][T17444] file 10473472 [ 1200.676141][T17444] kernel 94208 [ 1200.676141][T17444] kernel_stack 0 [ 1200.676141][T17444] pagetables 12288 [ 1200.676141][T17444] sec_pagetables 0 [ 1200.676141][T17444] percpu 0 [ 1200.676141][T17444] sock 0 [ 1200.676141][T17444] vmalloc 0 [ 1200.676141][T17444] shmem 10465280 [ 1200.676141][T17444] zswap 0 [ 1200.676141][T17444] zswapped 0 [ 1200.676141][T17444] file_mapped 278528 [ 1200.676141][T17444] file_dirty 8192 [ 1200.676141][T17444] file_writeback 0 [ 1200.676141][T17444] swapcached 0 [ 1200.676141][T17444] anon_thp 0 [ 1200.676141][T17444] file_thp 0 [ 1200.676141][T17444] shmem_thp 0 [ 1200.676141][T17444] inactive_anon 10465280 [ 1200.676141][T17444] active_anon 40960 [ 1200.676141][T17444] inactive_file 8192 [ 1200.676141][T17444] active_file 0 [ 1200.676141][T17444] unevictable 0 [ 1200.676141][T17444] slab_reclaimable 36304 [ 1200.676141][T17444] slab_unreclaimable 36216 [ 1200.676141][T17444] slab 72520 [ 1200.676141][T17444] workingset_refault_anon 0 [ 1200.676141][T17444] workingset_refault_file 0 [ 1200.676141][T17444] workingset_activate_anon 0 [ 1200.676141][T17444] workingset_activate_file 0 [ 1200.676141][T17444] workingset_restore_anon 0 [ 1200.676141][T17444] workingset_restore_file 0 [ 1200.676141][T17444] workingset_nodereclaim 0 [ 1200.676141][T17444] pgscan 197 [ 1200.676141][T17444] pgsteal 37 [ 1200.676141][T17444] pgscan_kswapd 0 [ 1200.676141][T17444] pgscan_direct 197 [ 1200.676141][T17444] pgscan_khugepaged 0 [ 1200.676141][T17444] pgsteal_kswapd 0 [ 1200.676141][T17444] pgsteal_direct 37 [ 1200.676141][T17444] pgsteal_khugepaged 0 [ 1200.676141][T17444] pgfault 105148 [ 1200.676141][T17444] pgmajfault 0 [ 1200.676141][T17444] pgrefill 11349 [ 1200.676141][T17444] pgactivate 160 [ 1200.676141][T17444] pgdeactivate 0 [ 1200.676141][T17444] pglazyfree 0 [ 1200.676141][T17444] pglazyfreed 0 [ 1200.676141][T17444] zswpin 0 [ 1200.676141][T17444] zswpout 0 [ 1200.676141][T17444] thp_fault_alloc 0 [ 1200.878951][T17444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17444,uid=0 [ 1200.901612][T17444] Memory cgroup out of memory: Killed process 17444 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1200.919347][T17149] syz-executor.2 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1200.948871][T17149] CPU: 0 PID: 17149 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1200.959324][T17149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1200.969391][T17149] Call Trace: [ 1200.972671][T17149] [ 1200.975599][T17149] dump_stack_lvl+0x136/0x150 [ 1200.980295][T17149] dump_header+0x10a/0xd70 [ 1200.984718][T17149] oom_kill_process+0x25d/0x600 [ 1200.989577][T17149] out_of_memory+0x35c/0x1660 [ 1200.994268][T17149] ? oom_killer_disable+0x2b0/0x2b0 [ 1200.999470][T17149] ? rcu_read_unlock+0x9/0x60 [ 1201.004157][T17149] ? find_held_lock+0x2d/0x110 [ 1201.008930][T17149] mem_cgroup_out_of_memory+0x206/0x270 [ 1201.014489][T17149] ? mem_cgroup_margin+0x130/0x130 [ 1201.019605][T17149] ? lock_downgrade+0x690/0x690 [ 1201.024477][T17149] try_charge_memcg+0xf99/0x13a0 [ 1201.029432][T17149] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1201.035430][T17149] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1201.041171][T17149] ? lock_downgrade+0x690/0x690 [ 1201.046041][T17149] ? lock_downgrade+0x690/0x690 [ 1201.050910][T17149] obj_cgroup_charge+0x2af/0x5e0 [ 1201.055859][T17149] ? ext4_alloc_inode+0x28/0x650 [ 1201.060804][T17149] kmem_cache_alloc_lru+0x142/0x600 [ 1201.066020][T17149] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1201.071491][T17149] ext4_alloc_inode+0x28/0x650 [ 1201.076270][T17149] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1201.081747][T17149] alloc_inode+0x61/0x230 [ 1201.086095][T17149] iget_locked+0x1bb/0x700 [ 1201.090527][T17149] __ext4_iget+0x3b2/0x4430 [ 1201.095054][T17149] ? ext4_get_projid+0x190/0x190 [ 1201.100011][T17149] ? ext4_fname_prepare_lookup+0x163/0x200 [ 1201.105834][T17149] ? ext4_fname_setup_filename+0x110/0x110 [ 1201.111656][T17149] ? rcu_is_watching+0x12/0xb0 [ 1201.116435][T17149] ext4_lookup+0x387/0x700 [ 1201.120863][T17149] ? ext4_resetent+0x2e0/0x2e0 [ 1201.125652][T17149] __lookup_slow+0x24c/0x460 [ 1201.130251][T17149] ? lookup_one_qstr_excl+0x180/0x180 [ 1201.135654][T17149] ? lookup_fast+0x14e/0x520 [ 1201.140261][T17149] walk_component+0x33f/0x5a0 [ 1201.144947][T17149] path_lookupat+0x1ba/0x840 [ 1201.149549][T17149] filename_lookup+0x1d2/0x590 [ 1201.154323][T17149] ? may_linkat+0x3b0/0x3b0 [ 1201.158833][T17149] ? __might_fault+0xe2/0x190 [ 1201.163534][T17149] ? __phys_addr_symbol+0x30/0x70 [ 1201.168567][T17149] ? __check_object_size+0x323/0x730 [ 1201.173862][T17149] ? strncpy_from_user+0x1f8/0x350 [ 1201.178986][T17149] ? getname_flags.part.0+0x1dd/0x4f0 [ 1201.184375][T17149] user_path_at_empty+0x46/0x60 [ 1201.189234][T17149] __x64_sys_umount+0xfc/0x190 [ 1201.194004][T17149] ? path_umount+0x10b0/0x10b0 [ 1201.198775][T17149] ? syscall_enter_from_user_mode+0x26/0x80 [ 1201.204682][T17149] do_syscall_64+0x39/0xb0 [ 1201.209112][T17149] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1201.215016][T17149] RIP: 0033:0x7f8a2088d5d7 [ 1201.219435][T17149] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1201.239043][T17149] RSP: 002b:00007fff9737f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1201.247464][T17149] RAX: ffffffffffffffda RBX: 000000000000002f RCX: 00007f8a2088d5d7 [ 1201.255436][T17149] RDX: 00007fff9737f10f RSI: 000000000000000a RDI: 00007fff9737f100 [ 1201.263406][T17149] RBP: 00007fff9737f100 R08: 00000000ffffffff R09: 00007fff9737eed0 [ 1201.271374][T17149] R10: 00005555574eb853 R11: 0000000000000246 R12: 00007f8a208e6cdc [ 1201.279342][T17149] R13: 00007fff973801c0 R14: 00005555574eb810 R15: 00007fff97380200 [ 1201.287326][T17149] [ 1201.311627][T10649] Bluetooth: hci2: command 0x0409 tx timeout [ 1201.420963][T17149] memory: usage 10428kB, limit 0kB, failcnt 514 [ 1201.427252][T17149] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1201.453880][T17149] Memory cgroup stats for /syz2: [ 1201.454086][T17149] anon 49152 [ 1201.454086][T17149] file 10473472 [ 1201.454086][T17149] kernel 122880 [ 1201.454086][T17149] kernel_stack 0 [ 1201.454086][T17149] pagetables 8192 [ 1201.454086][T17149] sec_pagetables 0 [ 1201.454086][T17149] percpu 0 [ 1201.454086][T17149] sock 0 [ 1201.454086][T17149] vmalloc 0 [ 1201.454086][T17149] shmem 10465280 [ 1201.454086][T17149] zswap 0 [ 1201.454086][T17149] zswapped 0 [ 1201.454086][T17149] file_mapped 339968 [ 1201.454086][T17149] file_dirty 8192 [ 1201.454086][T17149] file_writeback 0 [ 1201.454086][T17149] swapcached 0 [ 1201.454086][T17149] anon_thp 0 [ 1201.454086][T17149] file_thp 0 [ 1201.454086][T17149] shmem_thp 0 [ 1201.454086][T17149] inactive_anon 10465280 [ 1201.454086][T17149] active_anon 49152 [ 1201.454086][T17149] inactive_file 8192 [ 1201.454086][T17149] active_file 0 [ 1201.454086][T17149] unevictable 0 [ 1201.454086][T17149] slab_reclaimable 48128 [ 1201.454086][T17149] slab_unreclaimable 61048 [ 1201.454086][T17149] slab 109176 [ 1201.454086][T17149] workingset_refault_anon 0 [ 1201.454086][T17149] workingset_refault_file 0 [ 1201.454086][T17149] workingset_activate_anon 0 [ 1201.454086][T17149] workingset_activate_file 0 [ 1201.454086][T17149] workingset_restore_anon 0 [ 1201.454086][T17149] workingset_restore_file 0 [ 1201.454086][T17149] workingset_nodereclaim 0 [ 1201.454086][T17149] pgscan 268 [ 1201.454086][T17149] pgsteal 51 [ 1201.454086][T17149] pgscan_kswapd 0 [ 1201.454086][T17149] pgscan_direct 268 [ 1201.454086][T17149] pgscan_khugepaged 0 [ 1201.454086][T17149] pgsteal_kswapd 0 [ 1201.454086][T17149] pgsteal_direct 51 [ 1201.454086][T17149] pgsteal_khugepaged 0 [ 1201.454086][T17149] pgfault 122296 [ 1201.454086][T17149] pgmajfault 0 [ 1201.454086][T17149] pgrefill 46337 [ 1201.454086][T17149] pgactivate 217 [ 1201.454086][T17149] pgdeactivate 0 [ 1201.454086][T17149] pglazyfree 0 [ 1201.454086][T17149] pglazyfreed 0 [ 1201.454086][T17149] zswpin 0 [ 1201.454086][T17149] zswpout 0 [ 1201.454086][T17149] thp_fault_alloc 0 [ 1201.744472][T17873] chnl_net:caif_netlink_parms(): no params data found [ 1201.797940][T17149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17149,uid=0 [ 1201.814265][T17149] Memory cgroup out of memory: Killed process 17149 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1201.960259][T17873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.980003][T17873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.018543][T17873] bridge_slave_0: entered allmulticast mode [ 1202.042579][T17873] bridge_slave_0: entered promiscuous mode [ 1202.283003][T17873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.290206][T17873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.351780][T17873] bridge_slave_1: entered allmulticast mode [ 1202.358783][T17873] bridge_slave_1: entered promiscuous mode [ 1202.431064][T10649] Bluetooth: hci5: command 0x0419 tx timeout [ 1202.536400][T17873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.566439][T17873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.688979][T11784] hsr_slave_0: left promiscuous mode [ 1202.695309][T11784] hsr_slave_1: left promiscuous mode [ 1202.701632][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1202.709586][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.719434][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1202.727974][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.737316][T11784] bridge_slave_1: left allmulticast mode [ 1202.743626][T11784] bridge_slave_1: left promiscuous mode [ 1202.749324][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.758815][T11784] bridge_slave_0: left allmulticast mode [ 1202.764813][T11784] bridge_slave_0: left promiscuous mode [ 1202.770499][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.786661][T11784] veth1_macvtap: left promiscuous mode [ 1202.792336][T11784] veth0_macvtap: left promiscuous mode [ 1202.797911][T11784] veth1_vlan: left promiscuous mode [ 1202.804104][T11784] veth0_vlan: left promiscuous mode [ 1203.138046][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1203.158191][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1203.185678][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.208950][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.299608][T11784] bond0 (unregistering): Released all slaves [ 1203.370548][T17873] team0: Port device team_slave_0 added [ 1203.391208][T10649] Bluetooth: hci2: command 0x041b tx timeout [ 1203.394446][T17873] team0: Port device team_slave_1 added [ 1203.502370][T17873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.509351][T17873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.600958][T17873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.659976][T17873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.682466][T17873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.750898][T17873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.835910][T17873] hsr_slave_0: entered promiscuous mode [ 1203.848263][T17873] hsr_slave_1: entered promiscuous mode [ 1203.854912][T17873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1203.866578][T17873] Cannot create hsr debugfs directory [ 1203.895722][T17846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1203.940734][T17846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1203.965259][T17846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1203.986947][T17846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1204.148823][T17873] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.204347][T17846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.242617][T17873] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.287343][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1204.304223][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1204.324501][T17846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.340156][T17873] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.382743][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1204.391894][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1204.411920][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.419033][ T6940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.441232][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1204.450406][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1204.481368][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.488469][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.511310][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1204.613384][T17873] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.652846][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1204.681492][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1204.690373][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1204.729711][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1204.754105][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1204.771769][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1204.787137][T17846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1204.814925][T17846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.845735][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1204.855893][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1204.871512][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1204.880068][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1204.911513][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1204.957097][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1205.100251][T17873] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1205.127416][T17873] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1205.158555][T17873] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1205.178848][T17873] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1205.321080][T17873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.353275][T17846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.361264][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1205.369422][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1205.387189][T17873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.395167][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1205.403814][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1205.422400][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1205.432026][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1205.440730][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.447873][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.455759][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1205.465117][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1205.475002][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.481442][T10649] Bluetooth: hci2: command 0x040f tx timeout [ 1205.482119][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.509894][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1205.562608][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1205.574158][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1205.590453][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1205.600264][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1205.617213][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1205.628989][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1205.652232][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1205.660691][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1205.674739][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1205.687644][T17873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.707143][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1205.716573][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1205.998816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1206.008416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1206.022993][T17873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.048266][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1206.057321][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1206.079837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1206.090412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1206.109981][T17846] veth0_vlan: entered promiscuous mode [ 1206.119892][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1206.131738][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1206.144559][T17846] veth1_vlan: entered promiscuous mode [ 1206.178036][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1206.187017][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1206.195583][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1206.204579][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1206.258039][T11784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.283842][T17846] veth0_macvtap: entered promiscuous mode [ 1206.304046][T17846] veth1_macvtap: entered promiscuous mode [ 1206.320308][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.335872][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.360915][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.390557][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.410870][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.430871][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.440687][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.468998][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.489517][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.510530][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.522588][T17846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.550083][T11784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.577465][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1206.585841][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1206.595517][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1206.604482][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1206.619570][T11784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.642633][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.653746][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.664664][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.690718][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.711831][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.729086][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.740633][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.764129][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.781116][T17846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.798890][T17846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.822399][T17846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.882036][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1206.890506][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1206.899805][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1206.908996][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1206.923824][T11784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.959357][T17846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.977994][T17846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.989441][T17846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.004972][T17846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.031427][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1207.049037][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1207.073751][T17873] veth0_vlan: entered promiscuous mode [ 1207.094843][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1207.113163][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1207.131439][T17873] veth1_vlan: entered promiscuous mode [ 1207.208065][T17873] veth0_macvtap: entered promiscuous mode [ 1207.229001][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1207.244884][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1207.253311][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1207.261994][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1207.286159][T17873] veth1_macvtap: entered promiscuous mode [ 1207.340591][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1207.350991][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1207.379466][T11784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.460137][T11508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.468530][T11508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.475691][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1207.534250][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.560966][T10649] Bluetooth: hci2: command 0x0419 tx timeout [ 1207.570003][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1207.600981][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.610821][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1207.622632][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.640961][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1207.652364][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.662355][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1207.678094][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.687992][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1207.698558][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.723538][T17873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.754886][T11784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.784090][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1207.796118][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1207.815272][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1207.844112][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1207.871098][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.900920][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1207.920889][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.941024][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1207.971068][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1207.990899][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1208.010875][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.020753][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1208.035051][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.053690][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1208.068823][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.084105][T17873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.123561][T11784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.138406][T11508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.154844][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1208.171647][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1208.179975][T11508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.196532][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.222975][T17873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.246647][T17873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.255647][T17873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.264520][T17873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.287230][T11784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.453873][T11508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.475718][T11508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.559695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1208.624912][T11508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.656488][T11508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.883521][T11784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.956100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1209.088555][T11784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.275127][T11784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.455867][T17969] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1209.511835][T11784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.661061][T17969] CPU: 0 PID: 17969 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1209.671540][T17969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1209.681622][T17969] Call Trace: [ 1209.684914][T17969] [ 1209.687857][T17969] dump_stack_lvl+0x136/0x150 [ 1209.692574][T17969] dump_header+0x10a/0xd70 [ 1209.697025][T17969] oom_kill_process+0x25d/0x600 [ 1209.701903][T17969] out_of_memory+0x35c/0x1660 [ 1209.706621][T17969] ? io_schedule_timeout+0x150/0x150 [ 1209.711940][T17969] ? oom_killer_disable+0x2b0/0x2b0 [ 1209.717175][T17969] mem_cgroup_out_of_memory+0x206/0x270 [ 1209.722764][T17969] ? mem_cgroup_margin+0x130/0x130 [ 1209.727930][T17969] memory_max_write+0x2f9/0x3c0 [ 1209.732818][T17969] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1209.738922][T17969] ? mark_held_locks+0x9f/0xe0 [ 1209.743726][T17969] cgroup_file_write+0x1e2/0x7b0 [ 1209.748703][T17969] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1209.754809][T17969] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1209.760235][T17969] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1209.765648][T17969] kernfs_fop_write_iter+0x3f1/0x600 [ 1209.770985][T17969] vfs_write+0x945/0xd50 [ 1209.775257][T17969] ? kernel_write+0x670/0x670 [ 1209.779962][T17969] ? __fget_files+0x26a/0x480 [ 1209.784696][T17969] ksys_write+0x12b/0x250 [ 1209.789047][T17969] ? __ia32_sys_read+0xb0/0xb0 [ 1209.793838][T17969] ? syscall_enter_from_user_mode+0x26/0x80 [ 1209.799778][T17969] do_syscall_64+0x39/0xb0 [ 1209.804237][T17969] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1209.810167][T17969] RIP: 0033:0x7f4a0768c169 [ 1209.814608][T17969] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1209.834242][T17969] RSP: 002b:00007f4a0844d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1209.842680][T17969] RAX: ffffffffffffffda RBX: 00007f4a077ac050 RCX: 00007f4a0768c169 [ 1209.850660][T17969] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1209.858632][T17969] RBP: 00007f4a076e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1209.866650][T17969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.874646][T17969] R13: 00007ffd4869ebcf R14: 00007f4a0844d300 R15: 0000000000022000 [ 1209.882643][T17969] [ 1209.928588][T17969] memory: usage 10676kB, limit 0kB, failcnt 414 [ 1209.983784][T17969] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1210.031168][T17969] Memory cgroup stats for /syz4: [ 1210.031394][T17969] anon 114688 [ 1210.031394][T17969] file 10465280 [ 1210.031394][T17969] kernel 348160 [ 1210.031394][T17969] kernel_stack 98304 [ 1210.031394][T17969] pagetables 81920 [ 1210.031394][T17969] sec_pagetables 0 [ 1210.031394][T17969] percpu 64 [ 1210.031394][T17969] sock 0 [ 1210.031394][T17969] vmalloc 0 [ 1210.031394][T17969] shmem 10465280 [ 1210.031394][T17969] zswap 0 [ 1210.031394][T17969] zswapped 0 [ 1210.031394][T17969] file_mapped 311296 [ 1210.031394][T17969] file_dirty 0 [ 1210.031394][T17969] file_writeback 0 [ 1210.031394][T17969] swapcached 0 [ 1210.031394][T17969] anon_thp 0 [ 1210.031394][T17969] file_thp 0 [ 1210.031394][T17969] shmem_thp 0 [ 1210.031394][T17969] inactive_anon 114688 [ 1210.031394][T17969] active_anon 10465280 [ 1210.031394][T17969] inactive_file 0 [ 1210.031394][T17969] active_file 0 [ 1210.031394][T17969] unevictable 0 [ 1210.031394][T17969] slab_reclaimable 47928 [ 1210.031394][T17969] slab_unreclaimable 89288 [ 1210.031394][T17969] slab 137216 [ 1210.031394][T17969] workingset_refault_anon 0 [ 1210.031394][T17969] workingset_refault_file 0 [ 1210.031394][T17969] workingset_activate_anon 0 [ 1210.031394][T17969] workingset_activate_file 0 [ 1210.031394][T17969] workingset_restore_anon 0 [ 1210.031394][T17969] workingset_restore_file 0 [ 1210.031394][T17969] workingset_nodereclaim 0 [ 1210.031394][T17969] pgscan 67 [ 1210.031394][T17969] pgsteal 67 [ 1210.031394][T17969] pgscan_kswapd 0 [ 1210.031394][T17969] pgscan_direct 67 [ 1210.031394][T17969] pgscan_khugepaged 0 [ 1210.031394][T17969] pgsteal_kswapd 0 [ 1210.031394][T17969] pgsteal_direct 67 [ 1210.031394][T17969] pgsteal_khugepaged 0 [ 1210.031394][T17969] pgfault 98562 [ 1210.031394][T17969] pgmajfault 0 [ 1210.031394][T17969] pgrefill 6440 [ 1210.031394][T17969] pgactivate 0 [ 1210.031394][T17969] pgdeactivate 0 [ 1210.031394][T17969] pglazyfree 0 [ 1210.031394][T17969] pglazyfreed 0 [ 1210.031394][T17969] zswpin 0 [ 1210.031394][T17969] zswpout 0 [ 1210.031394][T17969] thp_fault_alloc 0 [ 1210.581080][T17969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17846,uid=0 [ 1210.616402][T17969] Memory cgroup out of memory: Killed process 17846 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1210.652239][T17873] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1210.673558][T17873] CPU: 0 PID: 17873 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1210.683997][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1210.694041][T17873] Call Trace: [ 1210.697305][T17873] [ 1210.700225][T17873] dump_stack_lvl+0x136/0x150 [ 1210.704900][T17873] dump_header+0x10a/0xd70 [ 1210.709306][T17873] oom_kill_process+0x25d/0x600 [ 1210.714145][T17873] out_of_memory+0x35c/0x1660 [ 1210.718815][T17873] ? oom_killer_disable+0x2b0/0x2b0 [ 1210.724002][T17873] ? rcu_read_unlock+0x9/0x60 [ 1210.728667][T17873] ? find_held_lock+0x2d/0x110 [ 1210.733427][T17873] mem_cgroup_out_of_memory+0x206/0x270 [ 1210.738968][T17873] ? mem_cgroup_margin+0x130/0x130 [ 1210.744067][T17873] ? lock_downgrade+0x690/0x690 [ 1210.748916][T17873] try_charge_memcg+0xf99/0x13a0 [ 1210.753855][T17873] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1210.759837][T17873] ? rcu_read_unlock+0x9/0x60 [ 1210.764512][T17873] ? lock_downgrade+0x690/0x690 [ 1210.769362][T17873] charge_memcg+0x90/0x3b0 [ 1210.773765][T17873] __mem_cgroup_charge+0x2b/0x90 [ 1210.778688][T17873] __handle_mm_fault+0x2296/0x41c0 [ 1210.783809][T17873] ? vm_iomap_memory+0x190/0x190 [ 1210.788758][T17873] ? mas_walk+0x58f/0x730 [ 1210.793102][T17873] ? numa_migrate_prep+0x3a0/0x3a0 [ 1210.798226][T17873] ? do_user_addr_fault+0x367/0x1210 [ 1210.803515][T17873] handle_mm_fault+0x2af/0x9f0 [ 1210.808273][T17873] do_user_addr_fault+0x2ca/0x1210 [ 1210.813373][T17873] ? rcu_is_watching+0x12/0xb0 [ 1210.818129][T17873] exc_page_fault+0x98/0x170 [ 1210.822708][T17873] asm_exc_page_fault+0x26/0x30 [ 1210.827556][T17873] RIP: 0033:0x7f0320e5a875 [ 1210.831963][T17873] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d aa 12 0a 00 e8 75 c9 ff ff [ 1210.851557][T17873] RSP: 002b:00007ffea37075b0 EFLAGS: 00010206 [ 1210.857607][T17873] RAX: 00000000000187c1 RBX: 00007f0320f895e0 RCX: 00005555562fc840 [ 1210.865649][T17873] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 1210.873606][T17873] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007f0320f89640 [ 1210.881575][T17873] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 1210.889549][T17873] R13: 0000000000008040 R14: 0000000000000804 R15: 00005555562f4800 [ 1210.897526][T17873] [ 1210.917530][T17873] memory: usage 10468kB, limit 0kB, failcnt 617 [ 1210.924355][T17873] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1210.931675][T17873] Memory cgroup stats for /syz5: [ 1210.931866][T17873] anon 36864 [ 1210.931866][T17873] file 10559488 [ 1210.931866][T17873] kernel 122880 [ 1210.931866][T17873] kernel_stack 0 [ 1210.931866][T17873] pagetables 8192 [ 1210.931866][T17873] sec_pagetables 0 [ 1210.931866][T17873] percpu 0 [ 1210.931866][T17873] sock 0 [ 1210.931866][T17873] vmalloc 0 [ 1210.931866][T17873] shmem 10465280 [ 1210.931866][T17873] zswap 0 [ 1210.931866][T17873] zswapped 0 [ 1210.931866][T17873] file_mapped 274432 [ 1210.931866][T17873] file_dirty 94208 [ 1210.931866][T17873] file_writeback 0 [ 1210.931866][T17873] swapcached 0 [ 1210.931866][T17873] anon_thp 0 [ 1210.931866][T17873] file_thp 0 [ 1210.931866][T17873] shmem_thp 0 [ 1210.931866][T17873] inactive_anon 36864 [ 1210.931866][T17873] active_anon 10465280 [ 1210.931866][T17873] inactive_file 0 [ 1210.931866][T17873] active_file 94208 [ 1210.931866][T17873] unevictable 0 [ 1210.931866][T17873] slab_reclaimable 45928 [ 1210.931866][T17873] slab_unreclaimable 59960 [ 1210.931866][T17873] slab 105888 [ 1210.931866][T17873] workingset_refault_anon 0 [ 1210.931866][T17873] workingset_refault_file 0 [ 1210.931866][T17873] workingset_activate_anon 0 [ 1210.931866][T17873] workingset_activate_file 0 [ 1210.931866][T17873] workingset_restore_anon 0 [ 1210.931866][T17873] workingset_restore_file 0 [ 1210.931866][T17873] workingset_nodereclaim 0 [ 1210.931866][T17873] pgscan 3657 [ 1210.931866][T17873] pgsteal 2478 [ 1210.931866][T17873] pgscan_kswapd 0 [ 1210.931866][T17873] pgscan_direct 3657 [ 1210.931866][T17873] pgscan_khugepaged 0 [ 1210.931866][T17873] pgsteal_kswapd 0 [ 1210.931866][T17873] pgsteal_direct 2478 [ 1210.931866][T17873] pgsteal_khugepaged 0 [ 1210.931866][T17873] pgfault 130197 [ 1210.931866][T17873] pgmajfault 0 [ 1210.931866][T17873] pgrefill 3048546 [ 1210.931866][T17873] pgactivate 174 [ 1210.931866][T17873] pgdeactivate 0 [ 1210.931866][T17873] pglazyfree 0 [ 1210.931866][T17873] pglazyfreed 0 [ 1210.931866][T17873] zswpin 0 [ 1210.931866][T17873] zswpout 0 [ 1211.126637][T17873] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17873,uid=0 [ 1211.148813][T17873] Memory cgroup out of memory: Killed process 17873 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 00:10:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1211.478123][T17143] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1211.518055][T17143] CPU: 0 PID: 17143 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1211.528517][T17143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1211.538589][T17143] Call Trace: [ 1211.541883][T17143] [ 1211.544824][T17143] dump_stack_lvl+0x136/0x150 [ 1211.549541][T17143] dump_header+0x10a/0xd70 [ 1211.553990][T17143] oom_kill_process+0x25d/0x600 [ 1211.558868][T17143] out_of_memory+0x35c/0x1660 [ 1211.563575][T17143] ? find_held_lock+0x2d/0x110 [ 1211.568370][T17143] ? oom_killer_disable+0x2b0/0x2b0 [ 1211.573593][T17143] ? rcu_read_unlock+0x9/0x60 [ 1211.578300][T17143] ? find_held_lock+0x2d/0x110 [ 1211.583093][T17143] mem_cgroup_out_of_memory+0x206/0x270 [ 1211.588670][T17143] ? mem_cgroup_margin+0x130/0x130 [ 1211.593810][T17143] ? lock_downgrade+0x690/0x690 [ 1211.598706][T17143] try_charge_memcg+0xf99/0x13a0 [ 1211.603689][T17143] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1211.609707][T17143] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1211.615467][T17143] ? lock_downgrade+0x690/0x690 [ 1211.620351][T17143] ? lock_downgrade+0x690/0x690 [ 1211.625226][T17143] ? rcu_read_unlock+0x9/0x60 [ 1211.629941][T17143] obj_cgroup_charge+0x2af/0x5e0 [ 1211.634904][T17143] ? copy_process+0x3c0/0x7600 [ 1211.639699][T17143] kmem_cache_alloc_node+0xa8/0x3e0 [ 1211.644938][T17143] copy_process+0x3c0/0x7600 [ 1211.649560][T17143] ? _raw_spin_unlock+0x28/0x40 [ 1211.654441][T17143] ? wp_page_reuse+0x197/0x570 [ 1211.659249][T17143] ? pidfd_prepare+0x80/0x80 [ 1211.663879][T17143] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1211.669905][T17143] kernel_clone+0xeb/0x890 [ 1211.674353][T17143] ? create_io_thread+0xe0/0xe0 [ 1211.679230][T17143] ? do_user_addr_fault+0x2b1/0x1210 [ 1211.684541][T17143] ? reacquire_held_locks+0x216/0x4e0 [ 1211.689941][T17143] ? do_user_addr_fault+0x2b1/0x1210 [ 1211.695260][T17143] ? find_held_lock+0x2d/0x110 [ 1211.700053][T17143] __do_sys_clone+0xba/0x100 [ 1211.704671][T17143] ? kernel_clone+0x890/0x890 [ 1211.709390][T17143] ? syscall_enter_from_user_mode+0x26/0x80 [ 1211.715326][T17143] do_syscall_64+0x39/0xb0 [ 1211.719779][T17143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1211.725706][T17143] RIP: 0033:0x7f633c289e9b [ 1211.730142][T17143] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1211.749771][T17143] RSP: 002b:00007ffe3100d060 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1211.758231][T17143] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f633c289e9b [ 1211.766221][T17143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 00:10:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1211.774208][T17143] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555562c6400 [ 1211.782197][T17143] R10: 00005555562c66d0 R11: 0000000000000246 R12: 0000000000000001 [ 1211.790183][T17143] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe3100d140 [ 1211.798194][T17143] [ 1211.808621][T17143] memory: usage 10356kB, limit 0kB, failcnt 372 [ 1211.830974][T17143] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1211.837855][T17143] Memory cgroup stats for /syz1: [ 1211.838071][T17143] anon 45056 [ 1211.838071][T17143] file 10469376 [ 1211.838071][T17143] kernel 86016 [ 1211.838071][T17143] kernel_stack 0 [ 1211.838071][T17143] pagetables 8192 [ 1211.838071][T17143] sec_pagetables 0 [ 1211.838071][T17143] percpu 0 [ 1211.838071][T17143] sock 0 [ 1211.838071][T17143] vmalloc 0 [ 1211.838071][T17143] shmem 10465280 [ 1211.838071][T17143] zswap 0 [ 1211.838071][T17143] zswapped 0 [ 1211.838071][T17143] file_mapped 278528 [ 1211.838071][T17143] file_dirty 0 [ 1211.838071][T17143] file_writeback 0 [ 1211.838071][T17143] swapcached 0 [ 1211.838071][T17143] anon_thp 0 [ 1211.838071][T17143] file_thp 0 [ 1211.838071][T17143] shmem_thp 0 [ 1211.838071][T17143] inactive_anon 10465280 [ 1211.838071][T17143] active_anon 45056 [ 1211.838071][T17143] inactive_file 4096 [ 1211.838071][T17143] active_file 0 [ 1211.838071][T17143] unevictable 0 [ 1211.838071][T17143] slab_reclaimable 38216 [ 1211.838071][T17143] slab_unreclaimable 32296 [ 1211.838071][T17143] slab 70512 [ 1211.838071][T17143] workingset_refault_anon 0 [ 1211.838071][T17143] workingset_refault_file 0 [ 1211.838071][T17143] workingset_activate_anon 0 [ 1211.838071][T17143] workingset_activate_file 0 [ 1211.838071][T17143] workingset_restore_anon 0 [ 1211.838071][T17143] workingset_restore_file 0 [ 1211.838071][T17143] workingset_nodereclaim 0 [ 1211.838071][T17143] pgscan 220 [ 1211.838071][T17143] pgsteal 41 [ 1211.838071][T17143] pgscan_kswapd 0 [ 1211.838071][T17143] pgscan_direct 220 [ 1211.838071][T17143] pgscan_khugepaged 0 [ 1211.838071][T17143] pgsteal_kswapd 0 [ 1211.838071][T17143] pgsteal_direct 41 [ 1211.838071][T17143] pgsteal_khugepaged 0 [ 1211.838071][T17143] pgfault 96591 [ 1211.838071][T17143] pgmajfault 0 [ 1211.838071][T17143] pgrefill 10980 [ 1211.838071][T17143] pgactivate 179 [ 1211.838071][T17143] pgdeactivate 0 [ 1211.838071][T17143] pglazyfree 0 [ 1211.838071][T17143] pglazyfreed 0 [ 1211.838071][T17143] zswpin 0 [ 1211.838071][T17143] zswpout 0 [ 1211.838071][T17143] thp_fault_alloc 0 [ 1212.057266][T17143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17143,uid=0 [ 1212.107015][T17143] Memory cgroup out of memory: Killed process 17143 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 00:10:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:10:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1213.164798][ T5031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1213.174643][ T5031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1213.195495][ T5031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1213.203078][ T5031] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1213.210320][ T5031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1213.427338][T10649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1213.436125][T10649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1213.466155][T10244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1213.474921][ T5034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1213.482191][T10244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1213.491042][T10244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1213.491327][ T5034] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1213.507003][T16866] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1213.509407][ T5034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1213.514631][T16866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1213.891190][T16866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1213.899792][T16866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1213.909144][T16866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1213.917397][T16866] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1213.924852][T16866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1214.015564][T11784] hsr_slave_0: left promiscuous mode [ 1214.031922][T11784] hsr_slave_1: left promiscuous mode [ 1214.044135][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.065954][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.121932][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.129370][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.163899][T11784] bridge_slave_1: left allmulticast mode [ 1214.169857][T11784] bridge_slave_1: left promiscuous mode [ 1214.176564][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.185860][T11784] bridge_slave_0: left allmulticast mode [ 1214.192079][T11784] bridge_slave_0: left promiscuous mode [ 1214.197820][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.211166][T11784] hsr_slave_0: left promiscuous mode [ 1214.217014][T11784] hsr_slave_1: left promiscuous mode [ 1214.223414][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.241396][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.253362][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.260777][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.291519][T10244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1214.299500][T10244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1214.307606][T10244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1214.308716][T11784] bridge_slave_1: left allmulticast mode [ 1214.328707][T16866] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1214.336032][T16866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1214.351101][T11784] bridge_slave_1: left promiscuous mode [ 1214.356851][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.379018][T11784] bridge_slave_0: left allmulticast mode [ 1214.384870][T11784] bridge_slave_0: left promiscuous mode [ 1214.390558][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.405316][T11784] hsr_slave_0: left promiscuous mode [ 1214.411532][T11784] hsr_slave_1: left promiscuous mode [ 1214.417454][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.425970][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.429610][ T5034] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1214.443410][ T5034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1214.443885][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.451330][ T5034] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1214.465068][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.465885][ T5034] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1214.480359][ T5034] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1214.487844][T11784] bridge_slave_1: left allmulticast mode [ 1214.493567][ T5034] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1214.500684][T11784] bridge_slave_1: left promiscuous mode [ 1214.514201][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.523220][T11784] bridge_slave_0: left allmulticast mode [ 1214.528874][T11784] bridge_slave_0: left promiscuous mode [ 1214.535119][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.546620][T11784] hsr_slave_0: left promiscuous mode [ 1214.554781][T11784] hsr_slave_1: left promiscuous mode [ 1214.560397][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.569825][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.579185][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.586912][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.596733][T11784] bridge_slave_1: left allmulticast mode [ 1214.602473][T11784] bridge_slave_1: left promiscuous mode [ 1214.608180][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.616430][T11784] bridge_slave_0: left allmulticast mode [ 1214.622208][T11784] bridge_slave_0: left promiscuous mode [ 1214.627835][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.646873][T11784] veth1_macvtap: left promiscuous mode [ 1214.652629][T11784] veth0_macvtap: left promiscuous mode [ 1214.658154][T11784] veth1_vlan: left promiscuous mode [ 1214.663568][T11784] veth0_vlan: left promiscuous mode [ 1214.669694][T11784] veth1_macvtap: left promiscuous mode [ 1214.676124][T11784] veth0_macvtap: left promiscuous mode [ 1214.681800][T11784] veth1_vlan: left promiscuous mode [ 1214.687248][T11784] veth0_vlan: left promiscuous mode [ 1214.694477][T11784] veth1_macvtap: left promiscuous mode [ 1214.699973][T11784] veth0_macvtap: left promiscuous mode [ 1214.705782][T11784] veth1_vlan: left promiscuous mode [ 1214.711103][T11784] veth0_vlan: left promiscuous mode [ 1214.717422][T11784] veth1_macvtap: left promiscuous mode [ 1214.723189][T11784] veth0_macvtap: left promiscuous mode [ 1214.728692][T11784] veth1_vlan: left promiscuous mode [ 1214.734228][T11784] veth0_vlan: left promiscuous mode [ 1215.137437][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1215.157368][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1215.171478][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.186709][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.243776][ T5034] Bluetooth: hci0: command 0x0409 tx timeout [ 1215.256079][T11784] bond0 (unregistering): Released all slaves [ 1215.404776][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1215.419229][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1215.431724][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.447301][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.523625][T11784] bond0 (unregistering): Released all slaves [ 1215.561272][ T5034] Bluetooth: hci2: command 0x0409 tx timeout [ 1215.567521][T10244] Bluetooth: hci1: command 0x0409 tx timeout [ 1215.649901][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1215.668033][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1215.682072][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.696970][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.758328][T11784] bond0 (unregistering): Released all slaves [ 1215.863777][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1215.877417][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1215.892195][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.908058][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.951149][T10244] Bluetooth: hci3: command 0x0409 tx timeout [ 1215.981914][T11784] bond0 (unregistering): Released all slaves [ 1216.054520][T18020] chnl_net:caif_netlink_parms(): no params data found [ 1216.352384][T10244] Bluetooth: hci4: command 0x0409 tx timeout [ 1216.507631][T18020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.514948][T10244] Bluetooth: hci5: command 0x0409 tx timeout [ 1216.521567][T18020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.529044][T18020] bridge_slave_0: entered allmulticast mode [ 1216.536082][T18020] bridge_slave_0: entered promiscuous mode [ 1216.543575][T18026] chnl_net:caif_netlink_parms(): no params data found [ 1216.592827][T18020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.599935][T18020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.607410][T18020] bridge_slave_1: entered allmulticast mode [ 1216.614385][T18020] bridge_slave_1: entered promiscuous mode [ 1216.621006][T18023] chnl_net:caif_netlink_parms(): no params data found [ 1216.764564][T18020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.788988][T18020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.829289][T18049] chnl_net:caif_netlink_parms(): no params data found [ 1216.934011][T18038] chnl_net:caif_netlink_parms(): no params data found [ 1217.028245][T18020] team0: Port device team_slave_0 added [ 1217.052889][T18026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.060000][T18026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.067591][T18026] bridge_slave_0: entered allmulticast mode [ 1217.094876][T18026] bridge_slave_0: entered promiscuous mode [ 1217.117907][T18020] team0: Port device team_slave_1 added [ 1217.143686][T18023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.151054][T18023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.158204][T18023] bridge_slave_0: entered allmulticast mode [ 1217.165186][T18023] bridge_slave_0: entered promiscuous mode [ 1217.172808][T18026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.179901][T18026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.187222][T18026] bridge_slave_1: entered allmulticast mode [ 1217.194351][T18026] bridge_slave_1: entered promiscuous mode [ 1217.223724][T18049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.230801][T18049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.238355][T18049] bridge_slave_0: entered allmulticast mode [ 1217.247197][T18049] bridge_slave_0: entered promiscuous mode [ 1217.263513][T18051] chnl_net:caif_netlink_parms(): no params data found [ 1217.279545][T18023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.286917][T18023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.294334][T18023] bridge_slave_1: entered allmulticast mode [ 1217.301120][T18023] bridge_slave_1: entered promiscuous mode [ 1217.316534][T18049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.320940][ T5034] Bluetooth: hci0: command 0x041b tx timeout [ 1217.323743][T18049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.347043][T18049] bridge_slave_1: entered allmulticast mode [ 1217.370202][T18049] bridge_slave_1: entered promiscuous mode [ 1217.418594][T18023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.448365][T18020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.455714][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.483771][T18020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.499551][T18020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.506721][T18020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.533053][T18020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.546686][T18023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.578234][T18026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.625093][T18026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.631227][ T5034] Bluetooth: hci1: command 0x041b tx timeout [ 1217.634499][T10244] Bluetooth: hci2: command 0x041b tx timeout [ 1217.642699][T18049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.659084][T18049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.732401][T18023] team0: Port device team_slave_0 added [ 1217.778368][T18023] team0: Port device team_slave_1 added [ 1217.784550][T18038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.792912][T18038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.800079][T18038] bridge_slave_0: entered allmulticast mode [ 1217.807110][T18038] bridge_slave_0: entered promiscuous mode [ 1217.834827][T18049] team0: Port device team_slave_0 added [ 1217.840801][T18051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.848320][T18051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.856238][T18051] bridge_slave_0: entered allmulticast mode [ 1217.863707][T18051] bridge_slave_0: entered promiscuous mode [ 1217.932983][T18038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.940104][T18038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.947521][T18038] bridge_slave_1: entered allmulticast mode [ 1217.954944][T18038] bridge_slave_1: entered promiscuous mode [ 1217.966525][T18026] team0: Port device team_slave_0 added [ 1217.976459][T18020] hsr_slave_0: entered promiscuous mode [ 1217.989328][T18020] hsr_slave_1: entered promiscuous mode [ 1217.997571][T18049] team0: Port device team_slave_1 added [ 1218.004340][T18051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.021257][T18051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.028424][T18051] bridge_slave_1: entered allmulticast mode [ 1218.034912][T10244] Bluetooth: hci3: command 0x041b tx timeout [ 1218.051575][T18051] bridge_slave_1: entered promiscuous mode [ 1218.058743][T18023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.071178][T18023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.100919][T18023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.142690][T18026] team0: Port device team_slave_1 added [ 1218.210581][T18023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.236203][T18023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.272306][T18023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.362871][T18038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.407815][T18049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.416272][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.431381][T10244] Bluetooth: hci4: command 0x041b tx timeout [ 1218.443422][T18049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.462241][T18051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.474636][T18051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.506066][T18038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.515868][T18026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.523103][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.549572][T18026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.566325][T18026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.573330][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.599839][T16866] Bluetooth: hci5: command 0x041b tx timeout [ 1218.607813][T18026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.627714][T18049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.647306][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.686291][T18049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.736897][T18023] hsr_slave_0: entered promiscuous mode [ 1218.751332][T18023] hsr_slave_1: entered promiscuous mode [ 1218.757441][T18023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1218.765116][T18023] Cannot create hsr debugfs directory [ 1218.857241][T18051] team0: Port device team_slave_0 added [ 1218.873601][T18038] team0: Port device team_slave_0 added [ 1218.901720][T18038] team0: Port device team_slave_1 added [ 1218.972616][T18051] team0: Port device team_slave_1 added [ 1218.982617][T18026] hsr_slave_0: entered promiscuous mode [ 1218.998966][T18026] hsr_slave_1: entered promiscuous mode [ 1219.008273][T18026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1219.024237][T18026] Cannot create hsr debugfs directory [ 1219.065233][T18049] hsr_slave_0: entered promiscuous mode [ 1219.072060][T18049] hsr_slave_1: entered promiscuous mode [ 1219.085982][T18049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1219.100479][T18049] Cannot create hsr debugfs directory [ 1219.184733][T18051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.203961][T18051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.241013][T18051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.267496][T18038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.275627][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.313304][T18038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.338194][T18038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.355949][T18038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.390960][T16866] Bluetooth: hci0: command 0x040f tx timeout [ 1219.395678][T18038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.458467][T18051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.470790][T18051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.499766][T18051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.688776][T18038] hsr_slave_0: entered promiscuous mode [ 1219.711220][T10244] Bluetooth: hci1: command 0x040f tx timeout [ 1219.720945][T10244] Bluetooth: hci2: command 0x040f tx timeout [ 1219.735342][T18038] hsr_slave_1: entered promiscuous mode [ 1219.741489][T18038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1219.749057][T18038] Cannot create hsr debugfs directory [ 1219.988117][T18051] hsr_slave_0: entered promiscuous mode [ 1220.004035][T18051] hsr_slave_1: entered promiscuous mode [ 1220.010698][T18051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.019069][T18051] Cannot create hsr debugfs directory [ 1220.112405][T10244] Bluetooth: hci3: command 0x040f tx timeout [ 1220.511294][T10244] Bluetooth: hci4: command 0x040f tx timeout [ 1220.671075][T16866] Bluetooth: hci5: command 0x040f tx timeout [ 1220.827307][T11784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.957688][T11784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.062643][T11784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.175956][T11784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.238002][T18023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1221.319949][T18023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1221.354350][T18023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1221.428938][T18023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1221.470924][T16866] Bluetooth: hci0: command 0x0419 tx timeout [ 1221.672149][T11784] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.791013][T16866] Bluetooth: hci2: command 0x0419 tx timeout [ 1221.791141][T10244] Bluetooth: hci1: command 0x0419 tx timeout [ 1221.853590][T11784] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.911939][T18023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.041622][T11784] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.081689][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1222.089583][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1222.135084][T11784] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.165979][T18023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.191114][T10244] Bluetooth: hci3: command 0x0419 tx timeout [ 1222.228477][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1222.248402][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1222.269471][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.276609][ T6940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.295841][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1222.309257][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1222.324097][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.331226][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.348677][T18020] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1222.372961][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1222.381406][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1222.394135][T18020] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1222.413749][T18020] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1222.422952][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1222.432112][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1222.440741][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1222.449902][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1222.484858][T18020] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1222.495174][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1222.504403][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1222.520330][T18023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1222.539204][T18023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1222.574196][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1222.584603][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1222.591114][T10244] Bluetooth: hci4: command 0x0419 tx timeout [ 1222.593624][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1222.606967][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1222.616186][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1222.674747][T11784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.751098][T10244] Bluetooth: hci5: command 0x0419 tx timeout [ 1222.853138][T11784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.101699][T11784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.267517][T11784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.330712][T18020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.430651][T18023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.480438][T18020] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.509799][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1223.519861][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1223.527933][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1223.536171][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1223.584304][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1223.594145][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1223.602995][T16964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.610090][T16964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.618097][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1223.628453][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1223.637579][T16964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.644710][T16964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.653038][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1223.661841][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1223.670548][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1223.697796][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1223.706625][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1223.742154][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1223.751440][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1223.760109][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1223.769173][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1223.777611][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1223.786202][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1223.801923][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1223.809887][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1223.817691][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1223.825617][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1223.835260][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1223.843833][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1223.852496][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1223.891571][T18020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1223.904127][T18023] veth0_vlan: entered promiscuous mode [ 1223.966369][T18023] veth1_vlan: entered promiscuous mode [ 1224.181037][T18049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1224.203807][T18049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1224.245743][T18049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1224.273799][T18049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1224.504508][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1224.518713][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1224.527505][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1224.543300][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1224.569087][T18023] veth0_macvtap: entered promiscuous mode [ 1224.736815][T18020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.753589][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1224.766146][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1224.790563][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1224.800697][T18023] veth1_macvtap: entered promiscuous mode [ 1224.918833][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1224.928085][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1224.946626][T18023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.957736][T18023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.973419][T18023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.001786][T18023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.012075][T18023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.022801][T18023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.035111][T18023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.168842][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1225.187347][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1225.225763][T18023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.262906][T18023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.289481][T18023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.310995][T18023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.330930][T18023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.350951][T18023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.378595][T18023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.404857][T18049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.498955][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1225.521532][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1225.530294][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1225.572066][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1225.598378][T18020] veth0_vlan: entered promiscuous mode [ 1225.607546][T18023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.619548][T18023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.641268][T18023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.650002][T18023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.771886][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1225.782552][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1225.801362][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1225.821402][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1225.834849][T18020] veth1_vlan: entered promiscuous mode [ 1225.935613][T18049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.041264][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1226.049824][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1226.142302][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1226.151469][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1226.160432][ T9763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.167582][ T9763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.203847][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1226.215619][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1226.231657][ T9763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.238752][ T9763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.257745][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1226.267142][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1226.291480][T18020] veth0_macvtap: entered promiscuous mode [ 1226.311211][ T2422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.319626][ T2422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.326202][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1226.361607][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1226.369665][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1226.386012][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1226.396072][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1226.404695][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1226.413670][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1226.502530][T18020] veth1_macvtap: entered promiscuous mode [ 1226.536428][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1226.546930][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1226.618170][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.660944][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.680912][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.700942][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.710774][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.740917][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.750761][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.791001][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.804398][T18020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.831437][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1226.839940][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1226.848508][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1226.857283][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1226.877030][T11508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.897850][T11508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.935271][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.952884][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.970892][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.994019][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.014242][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.031948][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.051164][T18020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.071579][T18020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.098258][T18020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.126505][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1227.141859][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1227.161119][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1227.173321][T18049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1227.192019][T18049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1227.230715][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1227.246975][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.266775][T18020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.287518][T18020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.301976][T18020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.310706][T18020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.401805][T18026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1227.498143][T18026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1227.564066][T18026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1227.887517][T18026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1227.981446][T18038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1228.091397][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.099821][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.151169][T18038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1228.208472][T18049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.253482][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1228.266494][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1228.301624][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1228.373862][T18038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1228.412071][T18038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1228.491474][T18051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1228.601523][T11508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.609549][T11508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.620142][T18051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1228.639645][T18051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1228.681755][T18205] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1228.734011][T18205] CPU: 1 PID: 18205 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1228.743261][T18026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.744440][T18205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1228.761091][T18205] Call Trace: [ 1228.764384][T18205] [ 1228.767334][T18205] dump_stack_lvl+0x136/0x150 [ 1228.772061][T18205] dump_header+0x10a/0xd70 [ 1228.776513][T18205] oom_kill_process+0x25d/0x600 [ 1228.781395][T18205] out_of_memory+0x35c/0x1660 [ 1228.786101][T18205] ? io_schedule_timeout+0x150/0x150 [ 1228.791422][T18205] ? oom_killer_disable+0x2b0/0x2b0 [ 1228.796665][T18205] mem_cgroup_out_of_memory+0x206/0x270 [ 1228.802252][T18205] ? mem_cgroup_margin+0x130/0x130 [ 1228.807398][T18205] memory_max_write+0x2f9/0x3c0 [ 1228.812272][T18205] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1228.818363][T18205] ? cgroup_file_write+0x8e/0x7b0 [ 1228.823405][T18205] cgroup_file_write+0x1e2/0x7b0 [ 1228.828352][T18205] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1228.834439][T18205] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1228.839831][T18205] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1228.845214][T18205] kernfs_fop_write_iter+0x3f1/0x600 [ 1228.850523][T18205] vfs_write+0x945/0xd50 [ 1228.854776][T18205] ? kernel_write+0x670/0x670 [ 1228.859461][T18205] ? lockdep_hardirqs_on+0x7d/0x100 [ 1228.864671][T18205] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1228.870868][T18205] ksys_write+0x12b/0x250 [ 1228.875216][T18205] ? __ia32_sys_read+0xb0/0xb0 [ 1228.879994][T18205] ? syscall_enter_from_user_mode+0x26/0x80 [ 1228.885909][T18205] do_syscall_64+0x39/0xb0 [ 1228.890342][T18205] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1228.896251][T18205] RIP: 0033:0x7ff59408c169 [ 1228.900669][T18205] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1228.920283][T18205] RSP: 002b:00007ff594e46168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1228.928701][T18205] RAX: ffffffffffffffda RBX: 00007ff5941ac050 RCX: 00007ff59408c169 [ 1228.936680][T18205] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1228.944653][T18205] RBP: 00007ff5940e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1228.952626][T18205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.960607][T18205] R13: 00007ffe53e2975f R14: 00007ff594e46300 R15: 0000000000022000 [ 1228.968601][T18205] [ 1228.982951][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1229.001135][T18051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1229.042315][T18205] memory: usage 10720kB, limit 0kB, failcnt 536 [ 1229.049447][T18205] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1229.057246][T18205] Memory cgroup stats for /syz2: [ 1229.057468][T18205] anon 118784 [ 1229.057468][T18205] file 10514432 [ 1229.057468][T18205] kernel 282624 [ 1229.057468][T18205] kernel_stack 32768 [ 1229.057468][T18205] pagetables 81920 [ 1229.057468][T18205] sec_pagetables 0 [ 1229.057468][T18205] percpu 64 [ 1229.057468][T18205] sock 0 [ 1229.057468][T18205] vmalloc 0 [ 1229.057468][T18205] shmem 10465280 [ 1229.057468][T18205] zswap 0 [ 1229.057468][T18205] zswapped 0 [ 1229.057468][T18205] file_mapped 376832 [ 1229.057468][T18205] file_dirty 49152 [ 1229.057468][T18205] file_writeback 0 [ 1229.057468][T18205] swapcached 0 [ 1229.057468][T18205] anon_thp 0 [ 1229.057468][T18205] file_thp 0 [ 1229.057468][T18205] shmem_thp 0 [ 1229.057468][T18205] inactive_anon 10465280 [ 1229.057468][T18205] active_anon 118784 [ 1229.057468][T18205] inactive_file 45056 [ 1229.057468][T18205] active_file 0 [ 1229.057468][T18205] unevictable 0 [ 1229.057468][T18205] slab_reclaimable 53072 [ 1229.057468][T18205] slab_unreclaimable 89288 [ 1229.057468][T18205] slab 142360 [ 1229.057468][T18205] workingset_refault_anon 0 [ 1229.057468][T18205] workingset_refault_file 0 [ 1229.057468][T18205] workingset_activate_anon 0 [ 1229.057468][T18205] workingset_activate_file 0 [ 1229.057468][T18205] workingset_restore_anon 0 [ 1229.057468][T18205] workingset_restore_file 0 [ 1229.057468][T18205] workingset_nodereclaim 0 [ 1229.057468][T18205] pgscan 269 [ 1229.057468][T18205] pgsteal 52 [ 1229.057468][T18205] pgscan_kswapd 0 [ 1229.057468][T18205] pgscan_direct 269 [ 1229.057468][T18205] pgscan_khugepaged 0 [ 1229.057468][T18205] pgsteal_kswapd 0 [ 1229.057468][T18205] pgsteal_direct 52 [ 1229.057468][T18205] pgsteal_khugepaged 0 [ 1229.057468][T18205] pgfault 122398 [ 1229.057468][T18205] pgmajfault 0 [ 1229.057468][T18205] pgrefill 47125 [ 1229.057468][T18205] pgactivate 217 [ 1229.057468][T18205] pgdeactivate 0 [ 1229.057468][T18205] pglazyfree 0 [ 1229.057468][T18205] pglazyfreed 0 [ 1229.057468][T18205] zswpin 0 [ 1229.057468][T18205] zswpout 0 [ 1229.119931][T18026] 8021q: adding VLAN 0 to HW filter on device team0 00:11:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1229.416458][T18205] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18200,uid=0 [ 1229.439670][T18205] Memory cgroup out of memory: Killed process 18205 (syz-executor.2) total-vm:56728kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1229.550554][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1229.566507][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1229.581682][T18023] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1229.601478][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1229.603644][T18023] CPU: 0 PID: 18023 Comm: syz-executor.2 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1229.610065][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1229.619930][T18023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1229.619945][T18023] Call Trace: [ 1229.619952][T18023] [ 1229.619962][T18023] dump_stack_lvl+0x136/0x150 [ 1229.620006][T18023] dump_header+0x10a/0xd70 [ 1229.620038][T18023] oom_kill_process+0x25d/0x600 [ 1229.620067][T18023] out_of_memory+0x35c/0x1660 [ 1229.620098][T18023] ? find_held_lock+0x2d/0x110 [ 1229.667661][T18023] ? oom_killer_disable+0x2b0/0x2b0 [ 1229.672872][T18023] ? rcu_read_unlock+0x9/0x60 [ 1229.677559][T18023] ? find_held_lock+0x2d/0x110 [ 1229.682334][T18023] mem_cgroup_out_of_memory+0x206/0x270 [ 1229.687887][T18023] ? mem_cgroup_margin+0x130/0x130 [ 1229.693006][T18023] ? lock_downgrade+0x690/0x690 [ 1229.697880][T18023] try_charge_memcg+0xf99/0x13a0 [ 1229.702835][T18023] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1229.708826][T18023] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1229.714558][T18023] ? lock_downgrade+0x690/0x690 [ 1229.719423][T18023] ? lock_downgrade+0x690/0x690 [ 1229.724294][T18023] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1229.729846][T18023] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1229.736012][T18023] copy_process+0x4f9/0x7600 [ 1229.740617][T18023] ? _raw_spin_unlock+0x28/0x40 [ 1229.745479][T18023] ? wp_page_reuse+0x197/0x570 [ 1229.750264][T18023] ? pidfd_prepare+0x80/0x80 [ 1229.754882][T18023] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1229.760882][T18023] kernel_clone+0xeb/0x890 [ 1229.765309][T18023] ? create_io_thread+0xe0/0xe0 [ 1229.770165][T18023] ? do_user_addr_fault+0x2b1/0x1210 [ 1229.775464][T18023] ? reacquire_held_locks+0x216/0x4e0 [ 1229.780847][T18023] ? do_user_addr_fault+0x2b1/0x1210 [ 1229.786146][T18023] ? find_held_lock+0x2d/0x110 [ 1229.790923][T18023] __do_sys_clone+0xba/0x100 [ 1229.795521][T18023] ? kernel_clone+0x890/0x890 [ 1229.800216][T18023] ? syscall_enter_from_user_mode+0x26/0x80 [ 1229.806123][T18023] do_syscall_64+0x39/0xb0 [ 1229.810557][T18023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1229.816465][T18023] RIP: 0033:0x7ff594089e9b [ 1229.820884][T18023] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1229.840494][T18023] RSP: 002b:00007ffe53e299a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1229.848911][T18023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff594089e9b [ 1229.856881][T18023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1229.864853][T18023] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557314400 [ 1229.872822][T18023] R10: 00005555573146d0 R11: 0000000000000246 R12: 0000000000000001 [ 1229.880791][T18023] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe53e29a80 [ 1229.888777][T18023] [ 1229.894797][T18023] memory: usage 10392kB, limit 0kB, failcnt 565 [ 1229.901167][T18023] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1229.921083][T18023] Memory cgroup stats for /syz2: [ 1229.921304][T18023] anon 40960 [ 1229.921304][T18023] file 10469376 [ 1229.921304][T18023] kernel 126976 [ 1229.921304][T18023] kernel_stack 0 [ 1229.921304][T18023] pagetables 8192 [ 1229.921304][T18023] sec_pagetables 0 [ 1229.921304][T18023] percpu 64 [ 1229.921304][T18023] sock 0 [ 1229.921304][T18023] vmalloc 0 [ 1229.921304][T18023] shmem 10465280 [ 1229.921304][T18023] zswap 0 [ 1229.921304][T18023] zswapped 0 [ 1229.921304][T18023] file_mapped 339968 [ 1229.921304][T18023] file_dirty 4096 [ 1229.921304][T18023] file_writeback 0 [ 1229.921304][T18023] swapcached 0 [ 1229.921304][T18023] anon_thp 0 [ 1229.921304][T18023] file_thp 0 [ 1229.921304][T18023] shmem_thp 0 [ 1229.921304][T18023] inactive_anon 40960 [ 1229.921304][T18023] active_anon 10465280 [ 1229.921304][T18023] inactive_file 0 [ 1229.921304][T18023] active_file 4096 [ 1229.921304][T18023] unevictable 0 [ 1229.921304][T18023] slab_reclaimable 42856 [ 1229.921304][T18023] slab_unreclaimable 53192 [ 1229.921304][T18023] slab 96048 [ 1229.921304][T18023] workingset_refault_anon 0 [ 1229.921304][T18023] workingset_refault_file 0 [ 1229.921304][T18023] workingset_activate_anon 0 [ 1229.921304][T18023] workingset_activate_file 0 [ 1229.921304][T18023] workingset_restore_anon 0 [ 1229.921304][T18023] workingset_restore_file 0 [ 1229.921304][T18023] workingset_nodereclaim 0 [ 1229.921304][T18023] pgscan 269 [ 1229.921304][T18023] pgsteal 52 [ 1229.921304][T18023] pgscan_kswapd 0 [ 1229.921304][T18023] pgscan_direct 269 [ 1229.921304][T18023] pgscan_khugepaged 0 [ 1229.921304][T18023] pgsteal_kswapd 0 [ 1229.921304][T18023] pgsteal_direct 52 [ 1229.921304][T18023] pgsteal_khugepaged 0 [ 1229.921304][T18023] pgfault 122409 [ 1229.921304][T18023] pgmajfault 0 [ 1229.921304][T18023] pgrefill 47152 [ 1229.921304][T18023] pgactivate 217 [ 1229.921304][T18023] pgdeactivate 0 [ 1229.921304][T18023] pglazyfree 0 [ 1229.921304][T18023] pglazyfreed 0 [ 1229.921304][T18023] zswpin 0 [ 1229.921304][T18023] zswpout 0 [ 1229.921304][T18023] thp_fault_alloc 0 [ 1230.121973][T16963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.129082][T16963] bridge0: port 1(bridge_slave_0) entered forwarding state 00:11:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1230.177566][T11784] hsr_slave_0: left promiscuous mode [ 1230.194516][T11784] hsr_slave_1: left promiscuous mode [ 1230.210156][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.221427][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.253260][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.260731][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.268352][T18023] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18023,uid=0 [ 1230.284552][T18023] Memory cgroup out of memory: Killed process 18023 (syz-executor.2) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1230.294089][T11784] bridge_slave_1: left allmulticast mode [ 1230.302115][T18020] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1230.317008][T11784] bridge_slave_1: left promiscuous mode [ 1230.331053][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.339205][T18020] CPU: 0 PID: 18020 Comm: syz-executor.3 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1230.349641][T18020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1230.359706][T18020] Call Trace: [ 1230.362973][T18020] [ 1230.365891][T18020] dump_stack_lvl+0x136/0x150 [ 1230.370566][T18020] dump_header+0x10a/0xd70 [ 1230.374973][T18020] oom_kill_process+0x25d/0x600 [ 1230.379811][T18020] out_of_memory+0x35c/0x1660 [ 1230.384478][T18020] ? oom_killer_disable+0x2b0/0x2b0 [ 1230.389664][T18020] ? rcu_read_unlock+0x9/0x60 [ 1230.394348][T18020] ? find_held_lock+0x2d/0x110 [ 1230.399142][T18020] mem_cgroup_out_of_memory+0x206/0x270 [ 1230.404722][T18020] ? mem_cgroup_margin+0x130/0x130 [ 1230.409850][T18020] ? lock_downgrade+0x690/0x690 [ 1230.414704][T18020] try_charge_memcg+0xf99/0x13a0 [ 1230.419638][T18020] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1230.425616][T18020] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1230.431333][T18020] ? lock_downgrade+0x690/0x690 [ 1230.436185][T18020] ? lock_downgrade+0x690/0x690 [ 1230.441050][T18020] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1230.446620][T18020] __alloc_pages+0x1f3/0x4a0 [ 1230.451245][T18020] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1230.458030][T18020] ? find_held_lock+0x2d/0x110 [ 1230.462793][T18020] ? lock_downgrade+0x690/0x690 [ 1230.467633][T18020] ? do_raw_spin_lock+0x124/0x2b0 [ 1230.472667][T18020] alloc_pages+0x1aa/0x270 [ 1230.477079][T18020] __pmd_alloc+0x3f/0x5d0 [ 1230.481394][T18020] ? __pud_alloc+0xe4/0x180 [ 1230.485884][T18020] copy_page_range+0x22c1/0x3830 [ 1230.490810][T18020] ? mas_wr_modify+0x2da/0x16d0 [ 1230.495695][T18020] ? mas_wr_store_entry.isra.0+0x4fb/0x1090 [ 1230.501613][T18020] ? mas_store+0x275/0x3a0 [ 1230.506022][T18020] ? handle_mm_fault+0x9f0/0x9f0 [ 1230.510945][T18020] ? down_write+0x14f/0x200 [ 1230.515450][T18020] dup_mmap+0x10bc/0x19d0 [ 1230.519775][T18020] ? replace_mm_exe_file+0x4c0/0x4c0 [ 1230.525060][T18020] ? lockdep_hardirqs_on+0x7d/0x100 [ 1230.530256][T18020] ? mm_init+0xc7a/0x1030 [ 1230.534577][T18020] copy_process+0x65ae/0x7600 [ 1230.539244][T18020] ? _raw_spin_unlock+0x28/0x40 [ 1230.544117][T18020] ? pidfd_prepare+0x80/0x80 [ 1230.548752][T18020] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1230.554770][T18020] kernel_clone+0xeb/0x890 [ 1230.559218][T18020] ? create_io_thread+0xe0/0xe0 [ 1230.564083][T18020] ? do_user_addr_fault+0x2b1/0x1210 [ 1230.569360][T18020] ? reacquire_held_locks+0x216/0x4e0 [ 1230.574720][T18020] ? do_user_addr_fault+0x2b1/0x1210 [ 1230.580001][T18020] ? find_held_lock+0x2d/0x110 [ 1230.584757][T18020] __do_sys_clone+0xba/0x100 [ 1230.589335][T18020] ? kernel_clone+0x890/0x890 [ 1230.594035][T18020] ? syscall_enter_from_user_mode+0x26/0x80 [ 1230.599960][T18020] do_syscall_64+0x39/0xb0 [ 1230.604397][T18020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1230.610285][T18020] RIP: 0033:0x7f7e7d089e9b [ 1230.614684][T18020] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1230.634280][T18020] RSP: 002b:00007ffd1ed4c4d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1230.642688][T18020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7e7d089e9b [ 1230.650665][T18020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1230.658645][T18020] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555e85400 [ 1230.666619][T18020] R10: 0000555555e856d0 R11: 0000000000000246 R12: 0000000000000001 [ 1230.674580][T18020] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd1ed4c5b0 [ 1230.682549][T18020] [ 1230.692199][T18020] memory: usage 10412kB, limit 0kB, failcnt 436 [ 1230.693334][T11784] bridge_slave_0: left allmulticast mode [ 1230.698474][T18020] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1230.711152][T18020] Memory cgroup stats for /syz3: [ 1230.711771][T18020] anon 45056 [ 1230.711771][T18020] file 10469376 [ 1230.711771][T18020] kernel 147456 [ 1230.711771][T18020] kernel_stack 32768 [ 1230.711771][T18020] pagetables 8192 [ 1230.711771][T18020] sec_pagetables 0 [ 1230.711771][T18020] percpu 64 [ 1230.711771][T18020] sock 0 [ 1230.711771][T18020] vmalloc 0 [ 1230.711771][T18020] shmem 10465280 [ 1230.711771][T18020] zswap 0 [ 1230.711771][T18020] zswapped 0 [ 1230.711771][T18020] file_mapped 278528 [ 1230.711771][T18020] file_dirty 4096 [ 1230.711771][T18020] file_writeback 0 [ 1230.711771][T18020] swapcached 0 [ 1230.711771][T18020] anon_thp 0 [ 1230.711771][T18020] file_thp 0 [ 1230.711771][T18020] shmem_thp 0 [ 1230.711771][T18020] inactive_anon 8192 [ 1230.711771][T18020] active_anon 10502144 [ 1230.711771][T18020] inactive_file 0 [ 1230.711771][T18020] active_file 4096 [ 1230.711771][T18020] unevictable 0 [ 1230.711771][T18020] slab_reclaimable 34136 [ 1230.711771][T18020] slab_unreclaimable 55336 [ 1230.711771][T18020] slab 89472 [ 1230.711771][T18020] workingset_refault_anon 0 [ 1230.711771][T18020] workingset_refault_file 0 [ 1230.711771][T18020] workingset_activate_anon 0 [ 1230.711771][T18020] workingset_activate_file 0 [ 1230.711771][T18020] workingset_restore_anon 0 [ 1230.711771][T18020] workingset_restore_file 0 [ 1230.711771][T18020] workingset_nodereclaim 0 [ 1230.711771][T18020] pgscan 198 [ 1230.711771][T18020] pgsteal 38 [ 1230.711771][T18020] pgscan_kswapd 0 [ 1230.711771][T18020] pgscan_direct 198 [ 1230.711771][T18020] pgscan_khugepaged 0 [ 1230.711771][T18020] pgsteal_kswapd 0 [ 1230.711771][T18020] pgsteal_direct 38 [ 1230.711771][T18020] pgsteal_khugepaged 0 [ 1230.711771][T18020] pgfault 105368 [ 1230.711771][T18020] pgmajfault 0 [ 1230.711771][T18020] pgrefill 19917 [ 1230.711771][T18020] pgactivate 160 [ 1230.711771][T18020] pgdeactivate 0 [ 1230.711771][T18020] pglazyfree 0 [ 1230.711771][T18020] pglazyfreed 0 [ 1230.711771][T18020] zswpin 0 [ 1230.711771][T18020] zswpout 0 [ 1230.711771][T18020] thp_fault_alloc 0 [ 1230.911043][T18020] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18020,uid=0 [ 1230.926740][T11784] bridge_slave_0: left promiscuous mode [ 1230.932676][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.940142][T18020] Memory cgroup out of memory: Killed process 18020 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1230.974516][T11784] hsr_slave_0: left promiscuous mode [ 1230.980421][T11784] hsr_slave_1: left promiscuous mode [ 1230.991559][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.998975][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.023463][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.031121][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.040414][T11784] bridge_slave_1: left allmulticast mode [ 1231.047308][T11784] bridge_slave_1: left promiscuous mode [ 1231.056169][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.064294][T11784] bridge_slave_0: left allmulticast mode [ 1231.070204][T11784] bridge_slave_0: left promiscuous mode [ 1231.076288][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.089135][T11784] hsr_slave_0: left promiscuous mode [ 1231.094936][T11784] hsr_slave_1: left promiscuous mode [ 1231.100577][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.108182][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.117711][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.126090][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.135605][T11784] bridge_slave_1: left allmulticast mode [ 1231.141502][T11784] bridge_slave_1: left promiscuous mode [ 1231.147128][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.160056][T11784] bridge_slave_0: left allmulticast mode [ 1231.166113][T11784] bridge_slave_0: left promiscuous mode [ 1231.172798][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.188438][T11784] veth1_macvtap: left promiscuous mode [ 1231.199102][T11784] veth0_macvtap: left promiscuous mode [ 1231.204813][T11784] veth1_vlan: left promiscuous mode [ 1231.210067][T11784] veth0_vlan: left promiscuous mode [ 1231.217101][T11784] veth1_macvtap: left promiscuous mode [ 1231.222687][T11784] veth0_macvtap: left promiscuous mode [ 1231.228191][T11784] veth1_vlan: left promiscuous mode [ 1231.233747][T11784] veth0_vlan: left promiscuous mode [ 1231.240653][T11784] veth1_macvtap: left promiscuous mode [ 1231.246490][T11784] veth0_macvtap: left promiscuous mode [ 1231.252322][T11784] veth1_vlan: left promiscuous mode [ 1231.257579][T11784] veth0_vlan: left promiscuous mode [ 1231.597921][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1231.614630][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1231.627899][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.642347][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.710486][T11784] bond0 (unregistering): Released all slaves [ 1231.835685][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1231.856193][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1231.869425][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.884122][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.953521][T11784] bond0 (unregistering): Released all slaves [ 1232.090218][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1232.105454][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1232.118587][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1232.137076][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1232.203824][T11784] bond0 (unregistering): Released all slaves [ 1232.288640][T18038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.304190][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1232.318968][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1232.328366][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1232.337284][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.344381][ T9818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.352737][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1232.466084][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1232.474141][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1232.482416][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1232.492716][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1232.502205][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1232.524489][T18038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.546875][T18049] veth0_vlan: entered promiscuous mode [ 1232.561838][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 00:11:16 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001800)=ANY=[@ANYBLOB="b7020000120f1d09bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000d0b68af1de640300000000007502faff07cd02020404000003007d60b70700000d1000006a0a00fe0000000e8500000028000000b70000000e14002995000000000000002fa5ad3548ebb63d18db6a1c72821c9b767ac8328fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd539e030b0000000000007f4133b08e6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91004cd5817e0b7f005e6ee7a39e2f0b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de3535e7dacf1b13f7e875d1843c2288e7ff949a7a48ce18799ee53de177a81ea67a8f84538a9a311c754e5ab59a43f56d2085786e7ec07d78917f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a442bc098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e08000000007b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8254479c12f7c84fa5df32b70a80cce69cf30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48eb19767e00b75041739952fe87fde27ce0172f497e251f5b102893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7686bc2e1b45577c205c70631e8ad585951950e851250540593e61860b69a521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7f58bde38b44ab13d980c894e00009338923789a1edcd8043fe83919088383268324a25df14010c8ea79c0d93ca77fd6c7ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e4ffac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9c151c2fcc8dc389671c2d08b6e2641500568445b00cee4585af04fa69e0380be0d66649dcf3bf8a9066e5961197332c5c9da52b573109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628ebe757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc76e5d3c6840ad05a57af1ede94d87590ce90a0a7579766f847ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea910900785f61278dde47e6672e93a314a5f60e7b682bf0cacde21f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfed749d516d014cef5f98126324e202badc1e5c20d69e576a770000000000005addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0c901973cd7c9d197d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe84f483b15f45b9a1d3af087047c568aef1d8659c6146a793026ebfc0bb5ec10b6290dc757a4903a88fb2c035f9349b6d2f0c051b8b775152786118a1020000fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad10e5e9d26631c2f1db3a2882f6e130a79517a88de7596429a20793e12616aa32b3e720c6521fbe933321adde8ca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9605a504bca38627df469cebb7db08358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec1741ceb39a3ecd9e3c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd47741270000008000000000b2eebd5e1626cab98499328ff024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd11c63d567f91dd943f62d167fed1b605965a5c2b32d094a461a990000000000000000000000000000000000000000000200000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd85481743db5d6c2cb6a204d45f88dd4140c8edb598a36e21ad132bf6b88c99c5a5ed047d6589c10a5f6633b01813fc5cd7d048469a966bbfb300fd772cbadf2cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f84a3bb96253717a177ac091d0f4632f638b09a0307ff317298540bcb9e1a57f9e6fe9f19e481a3f77cead663f42456e080952636515c758f1047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c420b035ff7961484a0f62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af61e6b052e473ed26b0309080ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dcfa0c052feecee18c64c4600a0bc3d4945d4b918865bb726a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4a1b4ea8b5322f78e9f3048351b550c59a634b47981420081ea4da18b9d318fa001ce660b28bbcf3c1a8893d130b26d25e491f478ae4f95f71ea8897b32858f78d6e25537b959b69a04c5507008b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9d10cba734336703def181022cb9f1e62079c48c13fe1659b157e5d9de7bfb929e715ed1a9a505a04a8d8474482295afbb9de90de2e918522cac2d5b5ac09d1fdc4147d6393a684ad7234ecb65d0008000000000000560ad146e8b9e9cd9b050edb1f6735c90a76b1ba4dbdee34d0b6750f25ba7251944ada7766c301c65e56351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86e7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801c836a40b0100d0961533737c57e9b7337b981a99f63f600f9064f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb5686ac900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc50eddbf01ece3cb8a363ecbeb8198997115d7151f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62b1788ff918433787f8026ef5c518113d48419a14a2bd8d4afff527513a2efc8403be48e494b3de33b1deefd9d902e8dc868f30161c2cd13b21b0a20362181186ff8cf4c8d58d74822f92554287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae3344295bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a22afb4d184ba84498b1367e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e18747546fc7a4a619753fd9ba9c18e746aa9ea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094bd933ceef87a3ec0c2ac70d5f843425100950000009e000000000008000018779600e4283095c203b1f202000000000000008f7ded9f030000002e050000009f95a59418f612dfa87c654043da1a59c3c43c7884ab65d4b34984afe30c67179c4f5a3ba0e491f2b942b754a3c296fc1ce1d23a1e32a124acacc0d5b878c4ad63591c3fc7d3a4d4296d4bab0a88e55ff9c2536654bb2f83e8015fac216119e8ce582698938c9a331a974087b71f07e50300f7ff00d03bf057b408c86a1165bd9a1bdbf3dff88c9b2173a75d5fc82dce6d8a3f297231e33588d7cf183109c1118d94a41d48f8efcf193ff21ec1cff64a1b912ededeb080f9a241e07709e6dd6a3a7e18200c9e80b9634e6f0c4d000000000000000000000000000000005e50e77204fcf8931ad07b38a39957e6b3a3c909000000e9d694e483e848fe0d00ee7c7d6cc30932a9575aa8808d10a4963560250bb4e60e88c726f63662cb143daf4b9ebd0774998a59fbb42dc35f12452cca456a12b7d15cf3ce7ea350e9510e96527cde622998e83e65b235c284543ca32436f9e705dff00f08df1115175628a327876dea291480c2dde8a59d1856eed2b502965038af0d56e49e0e2e9cb0e25104805f386d460e212c27ac7bafe6a0078f8648ff9f1e0257338ae58457fb27b29430cc9ac6a33ea11b88ae8bc95dffa293aa69d6d47f89b28a25a7ec2fce6691549990f93d1f02e1b61981369d303b6b1260d5537e85315551adabe00c98282795dc5547aab3dcbd82a06e7f00c8160af19f1fc40000fc4f099814631024b734c0cd8843c5cb124a21092e6cdd8aa2f4d3f93e92c6d850898890d9449e3f499af92be74ba8ba7928feabbd99d6288dece7513c50b973bab87214415078857d18032ab5adb8d4bf32405cc5f63eba7e60bcd0098fd7957943b3c4cf13de4e049e06ad7ebc236d1088c99d35f40555364ff86cab4542261999bccd3269e51d10900a1c05696b47ff33a159abce6bb1d69193bd01f59f1d3f431b4e08e8db623cb8375baa50785b8fcd37ce4c52abe43c1e3368735022e7cc7a9b397b494d0183cbd8dae2ba19b32adc91444f519ad33f7f2680e3cf7ecd3cfc67816eb66b1faa78dd8e3f7e233b6048c53813e6b508dfc713583d8ef8f9cfff5cdae59aa7aca654b1740c90eb75ca000000000000000000000000000000000000000000faa13c07b5f590ee4c8bfbd828e912b150dde95daf9d2aac6d4ec9d43cc0bb87155691d640fd000000e4a2d2aa0607b026f78417471e6ea0d10000309b29d0dae2d2c9c730ac21cc2a6213596a784a09775f86a9e6d5b6c7b3c5d10177a873edb630fdf9b1e11005a1ce41d04a2ad3f5d25a1595e7609849033d2e86ac682f2f0cde376f50a88a3ab5e83f56e43a07641b82c077fa1479b79e85c71a9c00000000000000078ce7c4ab383dac0325fa7f4ffb201c479265ff572dd061679c0000000000000f4f6b4ef8eb757ac80dc44711ae17816e32e38d7c894ab51238b2d7051ee26121404c0ade6faea7e72449cf38be7173b066f3a7835a31f1516c4cb1fda57ec8c19bc2800e246c1b64cf278c7afb3c9a5e346bdb259ac6788eefd5086e45554c8e2bdde8a3ac990dd929277a6af1876940c7c012f4b7d3d7aa68f2f07d83e925b326b05f130000000000000000000000000000000003572023092306e73a16f4b362f725b22b32be04e53a2219e3b08d75537c158ea4c4821d17d3b844dbe87408c34bb0f26ba43bd4530afb769d45b93b8f2b6c194afc197f77bfb136dfd38c265479bd4f74b9d0b5c2f37eaacb2894370ab02abe06b823a2753ca82ea8888f2a5063212212772dcc541de26c97c1312fc247b56a9cd3e05bcb8bc93363edfa05f9c76e94190f917c3af6884c8742371f25eb0000000000000000000000004ae9afd11c62a57a29a163acc55ca9fe6da9ce6d59bdd87adec5ba4052a5edcd99997240710e8b2a08b69f79f78c78b9f720bcf6a2ab411d420db8231780cdf52d44985768353ce1bc587700adf3a307ff11be0ca772f1bcc565070ef9345c2d55f0506d9059fff65ca75c9809c8e5e423f6f210a195e9b59a08c43dab5b025b1dc33cfdafe62aa8f13c38341267a920fc0be4e61fe9d8bed61524ad62896e3dfba3091cf028cdb3fabb530f1d0d4bdf391c5dda4b8b248ea58cb56aed4d968d506a108626e2423c506cc11bc2ec9de3b793fec489d08085e8c582cf6fc06c20eb57f7a1ba7315c67b65fcd373982ae902e67966990cf34be5ed5dcf39b9e44fb0165fa40fcc5643678bab244a3a76f43dd267db562efe5156b85f6e909066b8f37b81b756eeeeee4598195e70d74bd1451fabd160815b9e81b9c4abffef4b12d82e401a0cce36fbfedaec4ab6a89e128ef71e63f2239792338e87e4c7d571d6e4bc165ea1d476531b4ddfbb698101e8563f7c25b4d527240dafb074437aa96f66e293df31b7b7689ff290585e132fa95aa09c08ee57f089afc0522b438480aa3dc9f41330dcd3b25703feb85777de8fd5ac57464a31ae5924745f797a0c852ddf67e01dd5736b4826e16f885afb91b6a7f226e0d0aaabd0c01a8262cb35e501ddb3c191797560c91717a2215012da9e717ec8d65887138e3bc3886e5b6f3058e58fb4320338d6413ce94012c293e0042a2f5dd86b78d05efd9e44bbbccfae8b9361072af38c1aa3c030196d72d01a160a19c0060900e8bb2f3613a7ddacf2b878aa6b2952556d79bd183ae195e14d32ffd398ae01dbd20b034da17f5a78ceb03a16e39181a07b14e54f4e2061049569046877b9f54781066213ec2e85a4dcd5960ad486e7c05a21e52e5c688c1f315169452b1b6a795dd837867899c64a04ec08a4b2d5455d93f6d5baf14ffced8576bfde19de2903835607505b4af824a0a69aee28fe65683dc83c19fed253a5824442530c85d354c05c8b95030e629fb817697f746b9dd02fb40edf4f9886a758e0741ca2711e425f2f5be70a7fa600718fa7af2eb416a2b774f5d36f5632d791e0ba01f58f2165e6d5e564aef11dbc558170cf47c5934d41f558b02dc04d3ae4aee08aa5ad7d1e5ad92cdb90db79e73524d97ca3ce0828513c74fb0a1543eba7d17d37cc1f1f2d937bfd5fafeb23f691b326554b92d8b97e76e2cbbcb858a16287c2090727334096e574b6bb937ec9f048e041f178e8d3a3543c6862fc8b63f968501fabd17cbc81db1ad47d37d3e371913f2e8c5bfad0fe02190fde2af3ac5c9a2d64ec4db0c8b211dbdf4d7b7401248de7269c0b8d4c374d9fecb9fdff846c4e57d7d976c3f571474e4f65a87954e31e67c8cf6ac7823451b448ec90ca0b36405f6d2eef4055b5d2f4dad1aa89216f6d89bd43c4de92d8f61781a9349626fb65952dfa3c68aada76c3105d65bde2bddb981f753407c7696b767aeb3707606d0d993000000000000000000000000000000000000081fc1757219481d8ea25ae810c28e4d70a1fcb09eb54a0a88b364a152006703c17efed0749162232b0cf826d45082b8d92332e71c9c75d9b1d71389344ce53fdfe4bb4e98aac3bcecf365cf422fb876d80cc9eb03bc107502f54edc54ede2dcdbe8324d027f0824535ef2f995c214d5de0d726adb42d91a931d15ef8227403"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x400, 0x32, 0x0, 0x1908, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000180)=""/43) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x400, 0x32, 0x0, 0x1908, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x4f, &(0x7f00000003c0)=""/79, 0x41100, 0x13, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x95f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r3, 0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=@raw=[@generic={0x13, 0x5, 0x0, 0x4, 0x10000}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, @generic={0x8, 0xe, 0x8, 0x4, 0x6}, @alu={0x4, 0x0, 0xa, 0x9, 0x5, 0xc, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ldst={0x2, 0x3, 0x2, 0x2, 0x0, 0x20, 0xfffffffffffffff0}], &(0x7f0000000080)='syzkaller\x00', 0x7ff, 0x9a, &(0x7f0000000540)=""/154, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0xfffffe00, 0x48ac}, 0x10}, 0x80) 00:11:16 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f0000000000)) [ 1232.570814][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1232.583668][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1232.621800][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1232.651453][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1232.659874][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1232.711487][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1232.719804][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1232.754640][T18026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1232.827006][T18026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1232.867857][T18049] veth1_vlan: entered promiscuous mode [ 1232.901640][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1232.909575][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1232.940473][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1232.948592][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1232.957016][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1232.965776][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1232.974460][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1232.983393][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1232.992894][T10451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.999994][T10451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.042793][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1233.052156][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1233.060193][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1233.080309][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1233.099069][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.106212][T15103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.114566][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1233.123702][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1233.132998][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1233.142236][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1233.155479][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1233.198705][T18049] veth0_macvtap: entered promiscuous mode [ 1233.231629][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1233.240459][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1233.253401][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1233.271545][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1233.287188][T18038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1233.314611][T18038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1233.330512][T18049] veth1_macvtap: entered promiscuous mode [ 1233.354945][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1233.377904][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1233.386263][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.396019][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.431825][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1233.440224][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1233.462812][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1233.507840][T18051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.517013][T18049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.532274][T18049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.542542][T18049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.558810][T18049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.570692][T18049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.594326][T18026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.610691][T18051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.634278][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1233.654589][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1233.667440][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1233.676329][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1233.685288][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1233.693485][ T9818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1233.712913][T18049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.724410][T18049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.740515][T18049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.751186][T18049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.770583][T18049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.842240][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1233.861435][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1233.870198][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1233.894656][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1233.903680][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1233.931981][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1233.940809][T16963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.947973][T16963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.956292][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1233.974185][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1233.988632][T16963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.995779][T16963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.014603][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1234.061168][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1234.082765][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1234.100587][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1234.112629][T18049] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.132552][T18049] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.142099][T18049] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.150823][T18049] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.194423][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1234.222829][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1234.230760][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1234.248654][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1234.259561][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1234.277638][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1234.288587][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1234.306557][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1234.318408][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1234.340711][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1234.387710][ T5034] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1234.400698][ T5034] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1234.402527][T18026] veth0_vlan: entered promiscuous mode [ 1234.408465][ T5034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1234.427662][ T5034] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1234.439373][ T5034] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1234.439412][T18051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1234.501325][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1234.509220][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1234.517815][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1234.525468][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1234.535910][T18038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.573215][T18026] veth1_vlan: entered promiscuous mode [ 1234.651607][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1234.681818][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1234.698916][T18026] veth0_macvtap: entered promiscuous mode [ 1234.727659][T18026] veth1_macvtap: entered promiscuous mode [ 1234.818100][T18026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.819289][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.861882][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.868437][T18026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.879046][T18026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.889676][T18026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.899738][T18026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.910219][T18026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.922315][T18026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.940446][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1234.950437][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1234.989370][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1235.009309][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1235.035463][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1235.078558][T18026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.110942][T18026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.120784][T18026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.160050][T18026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.175839][T18026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.186613][T18026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.214007][T18026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.228202][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.232327][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1235.260447][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.282730][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1235.302985][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1235.332485][T18026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.354372][T18026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.363175][T18026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.372529][T18026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.431165][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1235.438632][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1235.468662][T18051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.622870][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1235.637690][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1235.718520][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1235.753424][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1235.909259][T18277] chnl_net:caif_netlink_parms(): no params data found [ 1235.950454][T18051] veth0_vlan: entered promiscuous mode [ 1236.024701][T18038] veth0_vlan: entered promiscuous mode [ 1236.042783][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1236.071240][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1236.079746][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1236.089050][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1236.098536][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1236.106752][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1236.115006][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1236.123204][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1236.149062][T18051] veth1_vlan: entered promiscuous mode [ 1236.163876][T18315] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1236.183090][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.192526][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.211098][T18315] CPU: 1 PID: 18315 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1236.221551][T18315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1236.231624][T18315] Call Trace: [ 1236.234926][T18315] [ 1236.237876][T18315] dump_stack_lvl+0x136/0x150 [ 1236.242602][T18315] dump_header+0x10a/0xd70 [ 1236.247052][T18315] oom_kill_process+0x25d/0x600 [ 1236.251941][T18315] out_of_memory+0x35c/0x1660 [ 1236.256665][T18315] ? io_schedule_timeout+0x150/0x150 [ 1236.261982][T18315] ? oom_killer_disable+0x2b0/0x2b0 [ 1236.267228][T18315] mem_cgroup_out_of_memory+0x206/0x270 [ 1236.272813][T18315] ? mem_cgroup_margin+0x130/0x130 [ 1236.277980][T18315] memory_max_write+0x2f9/0x3c0 [ 1236.282877][T18315] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1236.288988][T18315] ? lock_sync+0x190/0x190 [ 1236.293449][T18315] cgroup_file_write+0x1e2/0x7b0 [ 1236.298417][T18315] ? mem_cgroup_force_empty_write+0x160/0x160 [ 1236.304527][T18315] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1236.309941][T18315] ? cgroup_get_from_path+0x6e0/0x6e0 [ 1236.315347][T18315] kernfs_fop_write_iter+0x3f1/0x600 [ 1236.320673][T18315] vfs_write+0x945/0xd50 [ 1236.324947][T18315] ? kernel_write+0x670/0x670 [ 1236.329648][T18315] ? lockdep_hardirqs_on+0x7d/0x100 [ 1236.334872][T18315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1236.341079][T18315] ksys_write+0x12b/0x250 [ 1236.345431][T18315] ? __ia32_sys_read+0xb0/0xb0 [ 1236.350223][T18315] ? __x64_sys_write+0x11/0xb0 [ 1236.355016][T18315] ? __sanitizer_cov_trace_pc+0x60/0x70 [ 1236.360606][T18315] do_syscall_64+0x39/0xb0 [ 1236.365059][T18315] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1236.370987][T18315] RIP: 0033:0x7fe27e48c169 [ 1236.375420][T18315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1236.395047][T18315] RSP: 002b:00007fe27f110168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1236.403470][T18315] RAX: ffffffffffffffda RBX: 00007fe27e5ac050 RCX: 00007fe27e48c169 [ 1236.411445][T18315] RDX: 0000000000000012 RSI: 0000000020000180 RDI: 0000000000000005 [ 1236.419415][T18315] RBP: 00007fe27e4e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1236.427389][T18315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1236.435363][T18315] R13: 00007ffff6d67e7f R14: 00007fe27f110300 R15: 0000000000022000 [ 1236.443360][T18315] [ 1236.455483][T18315] memory: usage 10708kB, limit 0kB, failcnt 634 [ 1236.468634][T18315] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1236.483689][T18038] veth1_vlan: entered promiscuous mode [ 1236.496901][T18315] Memory cgroup stats for /syz5: [ 1236.497115][T18315] anon 118784 [ 1236.497115][T18315] file 10465280 [ 1236.497115][T18315] kernel 368640 [ 1236.497115][T18315] kernel_stack 98304 [ 1236.497115][T18315] pagetables 77824 [ 1236.497115][T18315] sec_pagetables 0 [ 1236.497115][T18315] percpu 64 [ 1236.497115][T18315] sock 0 [ 1236.497115][T18315] vmalloc 0 [ 1236.497115][T18315] shmem 10465280 [ 1236.497115][T18315] zswap 0 [ 1236.497115][T18315] zswapped 0 [ 1236.497115][T18315] file_mapped 311296 [ 1236.497115][T18315] file_dirty 0 [ 1236.497115][T18315] file_writeback 0 [ 1236.497115][T18315] swapcached 0 [ 1236.497115][T18315] anon_thp 0 [ 1236.497115][T18315] file_thp 0 [ 1236.497115][T18315] shmem_thp 0 [ 1236.497115][T18315] inactive_anon 0 [ 1236.497115][T18315] active_anon 10584064 [ 1236.497115][T18315] inactive_file 0 [ 1236.497115][T18315] active_file 0 [ 1236.497115][T18315] unevictable 0 [ 1236.497115][T18315] slab_reclaimable 47320 [ 1236.497115][T18315] slab_unreclaimable 117944 [ 1236.497115][T18315] slab 165264 [ 1236.497115][T18315] workingset_refault_anon 0 [ 1236.497115][T18315] workingset_refault_file 0 [ 1236.497115][T18315] workingset_activate_anon 0 [ 1236.497115][T18315] workingset_activate_file 0 [ 1236.497115][T18315] workingset_restore_anon 0 [ 1236.497115][T18315] workingset_restore_file 0 [ 1236.497115][T18315] workingset_nodereclaim 0 [ 1236.497115][T18315] pgscan 3657 [ 1236.497115][T18315] pgsteal 2478 [ 1236.497115][T18315] pgscan_kswapd 0 [ 1236.497115][T18315] pgscan_direct 3657 [ 1236.497115][T18315] pgscan_khugepaged 0 [ 1236.497115][T18315] pgsteal_kswapd 0 [ 1236.497115][T18315] pgsteal_direct 2478 [ 1236.497115][T18315] pgsteal_khugepaged 0 [ 1236.497115][T18315] pgfault 130277 [ 1236.497115][T18315] pgmajfault 0 [ 1236.497115][T18315] pgrefill 3049719 [ 1236.497115][T18315] pgactivate 174 [ 1236.497115][T18315] pgdeactivate 0 [ 1236.497115][T18315] pglazyfree 0 [ 1236.497115][T18315] pglazyfreed 0 [ 1236.497115][T18315] zswpin 0 [ 1236.497115][T18315] zswpout 0 [ 1236.497870][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1236.502805][T18315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1236.691750][T10244] Bluetooth: hci0: command 0x0409 tx timeout [ 1236.721623][T18315] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18308,uid=0 [ 1236.773263][T18315] Memory cgroup out of memory: Killed process 18315 (syz-executor.5) total-vm:56728kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1236.828522][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1236.866114][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1236.889000][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1236.942018][ T5137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1236.956186][T10417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.989575][T18051] veth0_macvtap: entered promiscuous mode [ 1236.991623][T10417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.061600][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1237.070228][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1237.092727][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1237.100608][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1237.173539][T18277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.180732][T18277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.210396][T18277] bridge_slave_0: entered allmulticast mode [ 1237.234093][T18277] bridge_slave_0: entered promiscuous mode [ 1237.270072][T18277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.283542][T18277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.290719][T18277] bridge_slave_1: entered allmulticast mode [ 1237.315345][T18277] bridge_slave_1: entered promiscuous mode [ 1237.331640][T18051] veth1_macvtap: entered promiscuous mode [ 1237.343413][T18038] veth0_macvtap: entered promiscuous mode [ 1237.350474][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1237.360100][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1237.453347][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1237.616822][T18277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.674085][T18038] veth1_macvtap: entered promiscuous mode [ 1237.681175][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1237.689296][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1237.753609][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.810895][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.844826][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.890909][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1237.939556][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1237.987786][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.051247][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.099820][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.148273][T18051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.193773][T18277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.227568][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.260206][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.280650][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.320951][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.330775][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 00:11:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x3a}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:11:22 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) getpid() r2 = syz_clone(0x40000100, &(0x7f00000000c0)="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", 0xff0, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="47f6bb6af1c750668a1965ad944b91bbe33d88871a91") perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='balance_dirty_pages\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)={&(0x7f0000001500)='./file0\x00', 0x0, 0x8}, 0x10) [ 1238.370892][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.380713][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.417409][T18049] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 1238.470974][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.474604][T18049] CPU: 1 PID: 18049 Comm: syz-executor.5 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1238.491205][T18049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1238.500876][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1238.501253][T18049] Call Trace: [ 1238.501263][T18049] [ 1238.501272][T18049] dump_stack_lvl+0x136/0x150 [ 1238.520870][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.522523][T18049] dump_header+0x10a/0xd70 [ 1238.522559][T18049] oom_kill_process+0x25d/0x600 [ 1238.541614][T18049] out_of_memory+0x35c/0x1660 [ 1238.546318][T18049] ? find_held_lock+0x2d/0x110 [ 1238.551105][T18049] ? oom_killer_disable+0x2b0/0x2b0 [ 1238.556328][T18049] ? rcu_read_unlock+0x9/0x60 [ 1238.561034][T18049] ? find_held_lock+0x2d/0x110 [ 1238.565827][T18049] mem_cgroup_out_of_memory+0x206/0x270 [ 1238.571407][T18049] ? mem_cgroup_margin+0x130/0x130 [ 1238.575825][T18038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.576529][T18049] ? lock_downgrade+0x690/0x690 [ 1238.588597][T18049] try_charge_memcg+0xf99/0x13a0 [ 1238.593574][T18049] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1238.599598][T18049] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1238.605352][T18049] ? lock_downgrade+0x690/0x690 [ 1238.610237][T18049] ? lock_downgrade+0x690/0x690 [ 1238.615120][T18049] ? rcu_read_unlock+0x9/0x60 [ 1238.619835][T18049] obj_cgroup_charge+0x2af/0x5e0 [ 1238.623583][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.624781][T18049] ? copy_process+0x3c0/0x7600 [ 1238.639939][T18049] kmem_cache_alloc_node+0xa8/0x3e0 [ 1238.645177][T18049] copy_process+0x3c0/0x7600 [ 1238.649799][T18049] ? _raw_spin_unlock+0x28/0x40 [ 1238.654680][T18049] ? wp_page_reuse+0x197/0x570 [ 1238.656084][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.659475][T18049] ? pidfd_prepare+0x80/0x80 [ 1238.673857][T18049] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1238.679877][T18049] kernel_clone+0xeb/0x890 [ 1238.684326][T18049] ? create_io_thread+0xe0/0xe0 [ 1238.689202][T18049] ? do_user_addr_fault+0x2b1/0x1210 [ 1238.694514][T18049] ? reacquire_held_locks+0x216/0x4e0 [ 1238.697613][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.699899][T18049] ? do_user_addr_fault+0x2b1/0x1210 [ 1238.715596][T18049] ? find_held_lock+0x2d/0x110 [ 1238.720393][T18049] __do_sys_clone+0xba/0x100 [ 1238.725018][T18049] ? kernel_clone+0x890/0x890 [ 1238.729736][T18049] ? syscall_enter_from_user_mode+0x26/0x80 [ 1238.735666][T18049] do_syscall_64+0x39/0xb0 [ 1238.739797][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.740097][T18049] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1238.746379][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.752175][T18049] RIP: 0033:0x7fe27e489e9b [ 1238.752198][T18049] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1238.761047][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.762815][T18049] RSP: 002b:00007ffff6d680c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1238.800681][T18049] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe27e489e9b [ 1238.808671][T18049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1238.816661][T18049] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555555cb400 [ 1238.824652][T18049] R10: 00005555555cb6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1238.832641][T18049] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffff6d681a0 [ 1238.840649][T18049] [ 1238.849375][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.870995][T10244] Bluetooth: hci0: command 0x041b tx timeout [ 1238.882080][T18049] memory: usage 10388kB, limit 0kB, failcnt 653 [ 1238.888344][T18049] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1238.895541][T18049] Memory cgroup stats for /syz5: [ 1238.895753][T18049] anon 40960 [ 1238.895753][T18049] file 10465280 [ 1238.895753][T18049] kernel 114688 [ 1238.895753][T18049] kernel_stack 0 [ 1238.895753][T18049] pagetables 8192 [ 1238.895753][T18049] sec_pagetables 0 [ 1238.895753][T18049] percpu 0 [ 1238.895753][T18049] sock 0 [ 1238.895753][T18049] vmalloc 0 [ 1238.895753][T18049] shmem 10465280 [ 1238.895753][T18049] zswap 0 [ 1238.895753][T18049] zswapped 0 [ 1238.895753][T18049] file_mapped 274432 [ 1238.895753][T18049] file_dirty 0 [ 1238.895753][T18049] file_writeback 0 [ 1238.895753][T18049] swapcached 0 [ 1238.895753][T18049] anon_thp 0 [ 1238.895753][T18049] file_thp 0 [ 1238.895753][T18049] shmem_thp 0 [ 1238.895753][T18049] inactive_anon 0 [ 1238.895753][T18049] active_anon 10506240 [ 1238.895753][T18049] inactive_file 0 [ 1238.895753][T18049] active_file 0 [ 1238.895753][T18049] unevictable 0 [ 1238.895753][T18049] slab_reclaimable 37512 [ 1238.895753][T18049] slab_unreclaimable 61624 [ 1238.895753][T18049] slab 99136 [ 1238.895753][T18049] workingset_refault_anon 0 [ 1238.895753][T18049] workingset_refault_file 0 [ 1238.895753][T18049] workingset_activate_anon 0 [ 1238.895753][T18049] workingset_activate_file 0 [ 1238.895753][T18049] workingset_restore_anon 0 [ 1238.895753][T18049] workingset_restore_file 0 [ 1238.895753][T18049] workingset_nodereclaim 0 [ 1238.895753][T18049] pgscan 3657 [ 1238.895753][T18049] pgsteal 2478 [ 1238.895753][T18049] pgscan_kswapd 0 [ 1238.895753][T18049] pgscan_direct 3657 [ 1238.895753][T18049] pgscan_khugepaged 0 [ 1238.895753][T18049] pgsteal_kswapd 0 [ 1238.895753][T18049] pgsteal_direct 2478 [ 1238.895753][T18049] pgsteal_khugepaged 0 [ 1238.895753][T18049] pgfault 130287 [ 1238.895753][T18049] pgmajfault 0 [ 1238.895753][T18049] pgrefill 3049719 [ 1238.895753][T18049] pgactivate 174 [ 1238.895753][T18049] pgdeactivate 0 [ 1238.895753][T18049] pglazyfree 0 [ 1238.895753][T18049] pglazyfreed 0 [ 1238.895753][T18049] zswpin 0 [ 1238.895753][T18049] zswpout 0 [ 1238.895753][T18049] thp_fault_alloc 0 [ 1238.909874][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.094130][T18049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18049,uid=0 [ 1239.094368][T18049] Memory cgroup out of memory: Killed process 18049 (syz-executor.5) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 1239.127608][T18026] syz-executor.0 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0 [ 1239.156151][T18026] CPU: 1 PID: 18026 Comm: syz-executor.0 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1239.166593][T18026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1239.176659][T18026] Call Trace: [ 1239.179945][T18026] [ 1239.182887][T18026] dump_stack_lvl+0x136/0x150 [ 1239.187600][T18026] dump_header+0x10a/0xd70 [ 1239.192037][T18026] oom_kill_process+0x25d/0x600 [ 1239.196907][T18026] out_of_memory+0x35c/0x1660 [ 1239.201615][T18026] ? oom_killer_disable+0x2b0/0x2b0 [ 1239.206832][T18026] ? rcu_read_unlock+0x9/0x60 [ 1239.211530][T18026] ? find_held_lock+0x2d/0x110 [ 1239.216326][T18026] mem_cgroup_out_of_memory+0x206/0x270 [ 1239.221924][T18026] ? mem_cgroup_margin+0x130/0x130 [ 1239.227055][T18026] ? lock_downgrade+0x690/0x690 [ 1239.231949][T18026] try_charge_memcg+0xf99/0x13a0 [ 1239.236925][T18026] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1239.242936][T18026] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1239.248683][T18026] ? lock_downgrade+0x690/0x690 [ 1239.253560][T18026] ? lock_downgrade+0x690/0x690 [ 1239.258435][T18026] ? rcu_read_unlock+0x9/0x60 [ 1239.263148][T18026] obj_cgroup_charge+0x2af/0x5e0 [ 1239.268108][T18026] __kmem_cache_alloc_node+0xa3/0x320 [ 1239.273509][T18026] ? kvmalloc_node+0xa2/0x1a0 [ 1239.278222][T18026] ? kvmalloc_node+0xa2/0x1a0 [ 1239.282930][T18026] __kmalloc_node+0x51/0x1a0 [ 1239.287541][T18026] kvmalloc_node+0xa2/0x1a0 [ 1239.292073][T18026] alloc_fdtable+0xf4/0x2a0 [ 1239.296608][T18026] dup_fd+0x74d/0xcf0 [ 1239.300622][T18026] ? security_task_alloc+0xe4/0x250 [ 1239.305846][T18026] copy_process+0x263b/0x7600 [ 1239.310553][T18026] ? _raw_spin_unlock+0x28/0x40 [ 1239.315449][T18026] ? pidfd_prepare+0x80/0x80 [ 1239.320082][T18026] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1239.326094][T18026] kernel_clone+0xeb/0x890 [ 1239.330536][T18026] ? create_io_thread+0xe0/0xe0 [ 1239.335406][T18026] ? do_user_addr_fault+0x2b1/0x1210 [ 1239.340709][T18026] ? reacquire_held_locks+0x216/0x4e0 [ 1239.346111][T18026] ? do_user_addr_fault+0x2b1/0x1210 [ 1239.351424][T18026] ? find_held_lock+0x2d/0x110 [ 1239.351954][T18038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.356193][T18026] __do_sys_clone+0xba/0x100 [ 1239.371182][T18026] ? kernel_clone+0x890/0x890 [ 1239.375911][T18026] ? syscall_enter_from_user_mode+0x26/0x80 [ 1239.381836][T18026] do_syscall_64+0x39/0xb0 [ 1239.386268][T18026] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1239.392172][T18026] RIP: 0033:0x7f61c6c89e9b [ 1239.396591][T18026] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1239.416204][T18026] RSP: 002b:00007ffe628bcf90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1239.424620][T18026] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f61c6c89e9b [ 1239.432596][T18026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1239.440569][T18026] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555567d400 [ 1239.448549][T18026] R10: 000055555567d6d0 R11: 0000000000000246 R12: 0000000000000001 [ 1239.456531][T18026] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe628bd070 [ 1239.464520][T18026] [ 1239.472180][T18038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.492507][T18038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.544611][T18026] memory: usage 10444kB, limit 0kB, failcnt 343 [ 1239.553102][T18026] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1239.553597][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1239.559950][T18026] Memory cgroup stats for /syz0: [ 1239.570479][T18026] anon 45056 [ 1239.570479][T18026] file 10465280 [ 1239.570479][T18026] kernel 126976 [ 1239.570479][T18026] kernel_stack 32768 [ 1239.570479][T18026] pagetables 8192 [ 1239.570479][T18026] sec_pagetables 0 [ 1239.570479][T18026] percpu 0 [ 1239.570479][T18026] sock 0 [ 1239.570479][T18026] vmalloc 0 [ 1239.570479][T18026] shmem 10465280 [ 1239.570479][T18026] zswap 0 [ 1239.570479][T18026] zswapped 0 [ 1239.570479][T18026] file_mapped 278528 [ 1239.570479][T18026] file_dirty 0 [ 1239.570479][T18026] file_writeback 0 [ 1239.570479][T18026] swapcached 0 [ 1239.570479][T18026] anon_thp 0 [ 1239.570479][T18026] file_thp 0 [ 1239.570479][T18026] shmem_thp 0 [ 1239.570479][T18026] inactive_anon 10506240 [ 1239.570479][T18026] active_anon 4096 [ 1239.570479][T18026] inactive_file 0 [ 1239.570479][T18026] active_file 0 [ 1239.570479][T18026] unevictable 0 [ 1239.570479][T18026] slab_reclaimable 36088 [ 1239.570479][T18026] slab_unreclaimable 41632 [ 1239.570479][T18026] slab 77720 [ 1239.570479][T18026] workingset_refault_anon 0 [ 1239.570479][T18026] workingset_refault_file 0 [ 1239.570479][T18026] workingset_activate_anon 0 [ 1239.570479][T18026] workingset_activate_file 0 [ 1239.570479][T18026] workingset_restore_anon 0 [ 1239.570479][T18026] workingset_restore_file 0 [ 1239.570479][T18026] workingset_nodereclaim 0 [ 1239.570479][T18026] pgscan 507 [ 1239.570479][T18026] pgsteal 155 [ 1239.570479][T18026] pgscan_kswapd 0 [ 1239.570479][T18026] pgscan_direct 507 [ 1239.570479][T18026] pgscan_khugepaged 0 [ 1239.570479][T18026] pgsteal_kswapd 0 [ 1239.570479][T18026] pgsteal_direct 155 [ 1239.570479][T18026] pgsteal_khugepaged 0 [ 1239.570479][T18026] pgfault 97656 [ 1239.570479][T18026] pgmajfault 0 [ 1239.570479][T18026] pgrefill 13882 [ 1239.570479][T18026] pgactivate 352 [ 1239.570479][T18026] pgdeactivate 0 [ 1239.570479][T18026] pglazyfree 0 [ 1239.570479][T18026] pglazyfreed 0 [ 1239.570479][T18026] zswpin 0 [ 1239.570479][T18026] zswpout 0 [ 1239.570479][T18026] thp_fault_alloc 0 [ 1239.601925][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1239.775134][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1239.787773][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1239.805536][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1239.809917][T18026] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18026,uid=0 [ 1239.839550][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1239.847884][T18026] Memory cgroup out of memory: Killed process 18026 (syz-executor.0) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1239.863345][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.913238][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1239.948635][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1239.990870][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.007756][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1240.028526][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.039957][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1240.075662][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.093148][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1240.103801][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.136880][T18051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.210461][T16866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1240.213324][T18038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.235153][T18038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.235167][T16866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1240.252237][T18038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.261101][T16866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1240.268356][T18038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.277658][T16866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1240.286497][T16866] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1240.293794][T16866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1240.334582][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1240.347791][T10640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1240.379035][T18051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.388891][T18051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.397943][T18051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.406957][T18051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.421656][T18277] team0: Port device team_slave_0 added [ 1240.460734][T18277] team0: Port device team_slave_1 added [ 1240.621711][T18277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.628693][T18277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.681002][T18277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.721846][T18277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.731478][T18277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.801083][T18277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.884489][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.893301][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.911221][T16866] Bluetooth: hci0: command 0x040f tx timeout [ 1240.948878][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1240.974093][T18277] hsr_slave_0: entered promiscuous mode [ 1240.981597][T18277] hsr_slave_1: entered promiscuous mode [ 1241.001239][T18277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1241.008823][T18277] Cannot create hsr debugfs directory [ 1241.019251][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.059646][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.082222][T11784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.135218][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1241.182229][T11508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.197253][T11508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.247785][T11784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.317623][T16963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1241.345750][T11508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.373843][T11784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.400293][T11508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.438786][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1242.111644][T11784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.322333][T18386] syz-executor.1 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000 [ 1242.350939][T18386] CPU: 1 PID: 18386 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1242.351986][T16866] Bluetooth: hci1: command 0x0409 tx timeout [ 1242.361371][T18386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1242.361389][T18386] Call Trace: [ 1242.361397][T18386] [ 1242.361409][T18386] dump_stack_lvl+0x136/0x150 [ 1242.388498][T18386] dump_header+0x10a/0xd70 [ 1242.392953][T18386] oom_kill_process+0x25d/0x600 [ 1242.397833][T18386] out_of_memory+0x35c/0x1660 [ 1242.402538][T18386] ? find_held_lock+0x2d/0x110 [ 1242.407320][T18386] ? oom_killer_disable+0x2b0/0x2b0 [ 1242.412526][T18386] ? rcu_read_unlock+0x9/0x60 [ 1242.417217][T18386] ? find_held_lock+0x2d/0x110 [ 1242.421998][T18386] mem_cgroup_out_of_memory+0x206/0x270 [ 1242.427558][T18386] ? mem_cgroup_margin+0x130/0x130 [ 1242.432682][T18386] ? lock_downgrade+0x690/0x690 [ 1242.437561][T18386] try_charge_memcg+0xf99/0x13a0 [ 1242.442526][T18386] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1242.448529][T18386] ? rcu_read_unlock+0x9/0x60 [ 1242.453220][T18386] ? lock_downgrade+0x690/0x690 [ 1242.458093][T18386] ? check_preemption_disabled+0x2/0x170 [ 1242.463744][T18386] charge_memcg+0x90/0x3b0 [ 1242.468173][T18386] __mem_cgroup_charge+0x2b/0x90 [ 1242.473114][T18386] ? folio_flags.constprop.0+0x53/0x150 [ 1242.478672][T18386] __filemap_add_folio+0x617/0xe60 [ 1242.483801][T18386] ? lock_downgrade+0x690/0x690 [ 1242.488665][T18386] ? filemap_write_and_wait_range+0x120/0x120 [ 1242.494760][T18386] ? memcg_list_lru_alloc+0xb00/0xb00 [ 1242.500145][T18386] ? alloc_pages+0x1b2/0x270 [ 1242.504756][T18386] ? folio_alloc+0x43/0x70 [ 1242.509192][T18386] filemap_add_folio+0xaf/0x1e0 [ 1242.514059][T18386] ? __filemap_add_folio+0xe60/0xe60 [ 1242.519355][T18386] ? lockdep_hardirqs_on+0x7d/0x100 [ 1242.524565][T18386] ? exc_page_fault+0xc0/0x170 [ 1242.529345][T18386] __filemap_get_folio+0x305/0x990 [ 1242.534475][T18386] ext4_da_write_begin+0x3c5/0x8c0 [ 1242.539611][T18386] ? ext4_write_begin+0x1030/0x1030 [ 1242.544833][T18386] generic_perform_write+0x256/0x570 [ 1242.550136][T18386] ? generic_file_readonly_mmap+0x180/0x180 [ 1242.556044][T18386] ? iunique+0x370/0x370 [ 1242.560309][T18386] ext4_buffered_write_iter+0x15b/0x460 [ 1242.565873][T18386] ext4_file_write_iter+0xbe0/0x1740 [ 1242.571185][T18386] ? ext4_file_mmap+0x6c0/0x6c0 [ 1242.576055][T18386] vfs_write+0x945/0xd50 [ 1242.580305][T18386] ? kernel_write+0x670/0x670 [ 1242.584991][T18386] ? __fget_files+0x26a/0x480 [ 1242.589698][T18386] ksys_write+0x12b/0x250 [ 1242.594033][T18386] ? __ia32_sys_read+0xb0/0xb0 [ 1242.598803][T18386] ? syscall_enter_from_user_mode+0x26/0x80 [ 1242.604715][T18386] do_syscall_64+0x39/0xb0 [ 1242.609150][T18386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1242.615062][T18386] RIP: 0033:0x7ff07ca8c169 [ 1242.619479][T18386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1242.639094][T18386] RSP: 002b:00007ff07d8ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1242.647512][T18386] RAX: ffffffffffffffda RBX: 00007ff07cbabf80 RCX: 00007ff07ca8c169 [ 1242.655485][T18386] RDX: 000000000007bc03 RSI: 0000000020000200 RDI: 0000000000000006 [ 1242.663455][T18386] RBP: 00007ff07cae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1242.671426][T18386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.679398][T18386] R13: 00007ffe66a6ea4f R14: 00007ff07d8ab300 R15: 0000000000022000 [ 1242.687388][T18386] [ 1242.861043][T18386] memory: usage 10736kB, limit 0kB, failcnt 413 [ 1242.886645][T18386] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 00:11:26 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:11:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:11:26 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001380)={&(0x7f0000000000)={0x2, 0x2, @private}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000000040)="c1", 0xffd0}], 0xb}, 0x0) [ 1242.984404][T18386] Memory cgroup stats for /syz1: [ 1242.988584][T18386] anon 114688 [ 1242.988584][T18386] file 10530816 [ 1242.988584][T18386] kernel 348160 [ 1242.988584][T18386] kernel_stack 98304 [ 1242.988584][T18386] pagetables 81920 [ 1242.988584][T18386] sec_pagetables 0 [ 1242.988584][T18386] percpu 64 [ 1242.988584][T18386] sock 0 [ 1242.988584][T18386] vmalloc 0 [ 1242.988584][T18386] shmem 10465280 [ 1242.988584][T18386] zswap 0 [ 1242.988584][T18386] zswapped 0 [ 1242.988584][T18386] file_mapped 311296 [ 1242.988584][T18386] file_dirty 65536 [ 1242.988584][T18386] file_writeback 0 [ 1242.988584][T18386] swapcached 0 [ 1242.988584][T18386] anon_thp 0 [ 1242.988584][T18386] file_thp 0 [ 1242.988584][T18386] shmem_thp 0 [ 1242.988584][T18386] inactive_anon 0 [ 1242.988584][T18386] active_anon 10579968 [ 1242.988584][T18386] inactive_file 65536 [ 1242.988584][T18386] active_file 0 [ 1242.988584][T18386] unevictable 0 [ 1242.988584][T18386] slab_reclaimable 51952 [ 1242.988584][T18386] slab_unreclaimable 89288 [ 1242.988584][T18386] slab 141240 [ 1242.988584][T18386] workingset_refault_anon 0 [ 1242.988584][T18386] workingset_refault_file 0 [ 1242.988584][T18386] workingset_activate_anon 0 [ 1242.988584][T18386] workingset_activate_file 0 [ 1242.988584][T18386] workingset_restore_anon 0 [ 1242.988584][T18386] workingset_restore_file 0 [ 1242.988584][T18386] workingset_nodereclaim 0 [ 1242.988584][T18386] pgscan 229 [ 1242.988584][T18386] pgsteal 41 [ 1242.988584][T18386] pgscan_kswapd 0 [ 1242.988584][T18386] pgscan_direct 229 [ 1242.988584][T18386] pgscan_khugepaged 0 [ 1242.988584][T18386] pgsteal_kswapd 0 [ 1242.988584][T18386] pgsteal_direct 41 [ 1242.988584][T18386] pgsteal_khugepaged 0 [ 1242.988584][T18386] pgfault 96685 [ 1242.988584][T18386] pgmajfault 0 [ 1242.988584][T18386] pgrefill 12113 [ 1242.988584][T18386] pgactivate 188 [ 1242.988584][T18386] pgdeactivate 0 [ 1242.988584][T18386] pglazyfree 0 [ 1242.988584][T18386] pglazyfreed 0 [ 1242.988584][T18386] zswpin 0 [ 1242.988584][T18386] zswpout 0 [ 1242.988584][T18386] thp_fault_alloc 0 [ 1243.027412][T16866] Bluetooth: hci0: command 0x0419 tx timeout [ 1243.342103][T18277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.362253][T18386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18385,uid=0 [ 1243.445902][T18364] chnl_net:caif_netlink_parms(): no params data found [ 1243.480059][T18277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.502116][T18386] Memory cgroup out of memory: Killed process 18385 (syz-executor.1) total-vm:56728kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 1243.569719][T18038] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 1243.581234][T18277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.610921][T18038] CPU: 0 PID: 18038 Comm: syz-executor.4 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1243.621372][T18038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1243.631446][T18038] Call Trace: [ 1243.634736][T18038] [ 1243.637679][T18038] dump_stack_lvl+0x136/0x150 [ 1243.642396][T18038] dump_header+0x10a/0xd70 [ 1243.646843][T18038] oom_kill_process+0x25d/0x600 [ 1243.651725][T18038] out_of_memory+0x35c/0x1660 [ 1243.656430][T18038] ? oom_killer_disable+0x2b0/0x2b0 [ 1243.661659][T18038] ? rcu_read_unlock+0x9/0x60 [ 1243.666364][T18038] ? find_held_lock+0x2d/0x110 [ 1243.671162][T18038] mem_cgroup_out_of_memory+0x206/0x270 [ 1243.676741][T18038] ? mem_cgroup_margin+0x130/0x130 [ 1243.681876][T18038] ? lock_downgrade+0x690/0x690 [ 1243.686769][T18038] try_charge_memcg+0xf99/0x13a0 [ 1243.691742][T18038] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1243.697753][T18038] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1243.703504][T18038] ? lock_downgrade+0x690/0x690 [ 1243.708385][T18038] ? lock_downgrade+0x690/0x690 [ 1243.713278][T18038] obj_cgroup_charge+0x2af/0x5e0 [ 1243.718239][T18038] ? ext4_alloc_inode+0x28/0x650 [ 1243.723205][T18038] kmem_cache_alloc_lru+0x142/0x600 [ 1243.728439][T18038] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1243.733927][T18038] ext4_alloc_inode+0x28/0x650 [ 1243.738716][T18038] ? ext4_free_in_core_inode+0xb0/0xb0 [ 1243.744198][T18038] alloc_inode+0x61/0x230 [ 1243.748556][T18038] iget_locked+0x1bb/0x700 [ 1243.753005][T18038] __ext4_iget+0x3b2/0x4430 [ 1243.757558][T18038] ? ext4_get_projid+0x190/0x190 [ 1243.762535][T18038] ? ext4_fname_prepare_lookup+0x163/0x200 [ 1243.768366][T18038] ? ext4_fname_setup_filename+0x110/0x110 [ 1243.774208][T18038] ? rcu_is_watching+0x12/0xb0 [ 1243.779006][T18038] ext4_lookup+0x387/0x700 [ 1243.783448][T18038] ? ext4_resetent+0x2e0/0x2e0 [ 1243.788257][T18038] __lookup_slow+0x24c/0x460 [ 1243.792871][T18038] ? lookup_one_qstr_excl+0x180/0x180 [ 1243.798304][T18038] ? lookup_fast+0x14e/0x520 [ 1243.802921][T18038] walk_component+0x33f/0x5a0 [ 1243.807625][T18038] path_lookupat+0x1ba/0x840 [ 1243.812244][T18038] filename_lookup+0x1d2/0x590 [ 1243.817038][T18038] ? may_linkat+0x3b0/0x3b0 [ 1243.821566][T18038] ? __might_fault+0xe2/0x190 [ 1243.826287][T18038] ? __phys_addr_symbol+0x30/0x70 [ 1243.831340][T18038] ? __check_object_size+0x323/0x730 [ 1243.836656][T18038] ? strncpy_from_user+0x1f8/0x350 [ 1243.841802][T18038] ? getname_flags.part.0+0x1dd/0x4f0 [ 1243.847206][T18038] user_path_at_empty+0x46/0x60 [ 1243.852088][T18038] __x64_sys_umount+0xfc/0x190 [ 1243.856877][T18038] ? path_umount+0x10b0/0x10b0 [ 1243.861663][T18038] ? syscall_enter_from_user_mode+0x26/0x80 [ 1243.867589][T18038] do_syscall_64+0x39/0xb0 [ 1243.872043][T18038] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1243.877964][T18038] RIP: 0033:0x7f593908d5d7 [ 1243.882394][T18038] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1243.902019][T18038] RSP: 002b:00007ffd3a1618b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1243.910452][T18038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f593908d5d7 [ 1243.918443][T18038] RDX: 00007ffd3a16198e RSI: 000000000000000a RDI: 00007ffd3a161980 [ 1243.926434][T18038] RBP: 00007ffd3a161980 R08: 00000000ffffffff R09: 00007ffd3a161750 [ 1243.934427][T18038] R10: 0000555556133853 R11: 0000000000000246 R12: 00007f59390e6cdc [ 1243.942415][T18038] R13: 00007ffd3a162a40 R14: 0000555556133810 R15: 00007ffd3a162a80 [ 1243.950423][T18038] [ 1244.000958][T18038] memory: usage 10428kB, limit 0kB, failcnt 481 [ 1244.032115][T18038] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1244.061504][T18038] Memory cgroup stats for /syz4: [ 1244.061711][T18038] anon 40960 [ 1244.061711][T18038] file 10518528 [ 1244.061711][T18038] kernel 102400 [ 1244.061711][T18038] kernel_stack 0 [ 1244.061711][T18038] pagetables 8192 [ 1244.061711][T18038] sec_pagetables 0 [ 1244.061711][T18038] percpu 0 [ 1244.061711][T18038] sock 0 [ 1244.061711][T18038] vmalloc 0 [ 1244.061711][T18038] shmem 10465280 [ 1244.061711][T18038] zswap 0 [ 1244.061711][T18038] zswapped 0 [ 1244.061711][T18038] file_mapped 274432 [ 1244.061711][T18038] file_dirty 49152 [ 1244.061711][T18038] file_writeback 0 [ 1244.061711][T18038] swapcached 0 [ 1244.061711][T18038] anon_thp 0 [ 1244.061711][T18038] file_thp 0 [ 1244.061711][T18038] shmem_thp 0 [ 1244.061711][T18038] inactive_anon 10502144 [ 1244.061711][T18038] active_anon 4096 [ 1244.061711][T18038] inactive_file 53248 [ 1244.061711][T18038] active_file 0 [ 1244.061711][T18038] unevictable 0 [ 1244.061711][T18038] slab_reclaimable 49328 [ 1244.061711][T18038] slab_unreclaimable 32944 [ 1244.061711][T18038] slab 82272 [ 1244.061711][T18038] workingset_refault_anon 0 [ 1244.061711][T18038] workingset_refault_file 0 [ 1244.061711][T18038] workingset_activate_anon 0 [ 1244.061711][T18038] workingset_activate_file 0 [ 1244.061711][T18038] workingset_restore_anon 0 [ 1244.061711][T18038] workingset_restore_file 0 [ 1244.061711][T18038] workingset_nodereclaim 0 [ 1244.061711][T18038] pgscan 126 [ 1244.061711][T18038] pgsteal 67 [ 1244.061711][T18038] pgscan_kswapd 0 [ 1244.061711][T18038] pgscan_direct 126 [ 1244.061711][T18038] pgscan_khugepaged 0 [ 1244.061711][T18038] pgsteal_kswapd 0 [ 1244.061711][T18038] pgsteal_direct 67 [ 1244.061711][T18038] pgsteal_khugepaged 0 [ 1244.061711][T18038] pgfault 98667 [ 1244.061711][T18038] pgmajfault 0 [ 1244.061711][T18038] pgrefill 7804 [ 1244.061711][T18038] pgactivate 59 [ 1244.061711][T18038] pgdeactivate 0 [ 1244.061711][T18038] pglazyfree 0 [ 1244.061711][T18038] pglazyfreed 0 [ 1244.061711][T18038] zswpin 0 [ 1244.061711][T18038] zswpout 0 [ 1244.061711][T18038] thp_fault_alloc 0 [ 1244.431638][T16866] Bluetooth: hci1: command 0x041b tx timeout [ 1244.458952][T18277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:11:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1245.013345][T11784] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.020898][T18038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18038,uid=0 [ 1245.081060][T18038] Memory cgroup out of memory: Killed process 18038 (syz-executor.4) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1245.180939][T18051] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1245.204386][T18051] CPU: 1 PID: 18051 Comm: syz-executor.1 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1245.214839][T18051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1245.224907][T18051] Call Trace: [ 1245.228193][T18051] [ 1245.231132][T18051] dump_stack_lvl+0x136/0x150 [ 1245.235850][T18051] dump_header+0x10a/0xd70 [ 1245.240289][T18051] oom_kill_process+0x25d/0x600 [ 1245.245163][T18051] out_of_memory+0x35c/0x1660 [ 1245.249868][T18051] ? oom_killer_disable+0x2b0/0x2b0 [ 1245.255087][T18051] ? rcu_read_unlock+0x9/0x60 [ 1245.259789][T18051] ? find_held_lock+0x2d/0x110 [ 1245.264576][T18051] mem_cgroup_out_of_memory+0x206/0x270 [ 1245.270140][T18051] ? mem_cgroup_margin+0x130/0x130 [ 1245.275260][T18051] ? lock_downgrade+0x690/0x690 [ 1245.280133][T18051] try_charge_memcg+0xf99/0x13a0 [ 1245.285097][T18051] ? mem_cgroup_handle_over_high+0x520/0x520 [ 1245.291096][T18051] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 1245.296833][T18051] ? lock_downgrade+0x690/0x690 [ 1245.301696][T18051] ? lock_downgrade+0x690/0x690 [ 1245.306569][T18051] __memcg_kmem_charge_page+0x16e/0x3c0 [ 1245.312127][T18051] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 1245.318302][T18051] copy_process+0x4f9/0x7600 [ 1245.322907][T18051] ? _raw_spin_unlock+0x28/0x40 [ 1245.327767][T18051] ? wp_page_reuse+0x197/0x570 [ 1245.332551][T18051] ? pidfd_prepare+0x80/0x80 [ 1245.337162][T18051] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1245.343157][T18051] kernel_clone+0xeb/0x890 [ 1245.347584][T18051] ? create_io_thread+0xe0/0xe0 [ 1245.352439][T18051] ? do_user_addr_fault+0x2b1/0x1210 [ 1245.357732][T18051] ? reacquire_held_locks+0x216/0x4e0 [ 1245.363111][T18051] ? do_user_addr_fault+0x2b1/0x1210 [ 1245.368411][T18051] ? find_held_lock+0x2d/0x110 [ 1245.373184][T18051] __do_sys_clone+0xba/0x100 [ 1245.377782][T18051] ? kernel_clone+0x890/0x890 [ 1245.382480][T18051] ? syscall_enter_from_user_mode+0x26/0x80 [ 1245.388385][T18051] do_syscall_64+0x39/0xb0 [ 1245.392823][T18051] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1245.398734][T18051] RIP: 0033:0x7ff07ca89e9b [ 1245.403154][T18051] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 1245.422761][T18051] RSP: 002b:00007ffe66a6ec90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1245.431178][T18051] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff07ca89e9b [ 1245.439157][T18051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1245.447213][T18051] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556bf7400 [ 1245.455196][T18051] R10: 0000555556bf76d0 R11: 0000000000000246 R12: 0000000000000001 [ 1245.463167][T18051] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe66a6ed70 [ 1245.471154][T18051] [ 1245.483185][T18364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.490282][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.551153][T18364] bridge_slave_0: entered allmulticast mode [ 1245.601202][T18364] bridge_slave_0: entered promiscuous mode [ 1245.627591][T16866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1245.636344][T16866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1245.644982][T16866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1245.646612][T18051] memory: usage 10392kB, limit 0kB, failcnt 455 [ 1245.664268][ T5034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1245.673685][ T5034] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1245.680962][ T5034] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1245.700886][T18051] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1245.707760][T18051] Memory cgroup stats for /syz1: [ 1245.707975][T18051] anon 40960 [ 1245.707975][T18051] file 10469376 [ 1245.707975][T18051] kernel 114688 [ 1245.707975][T18051] kernel_stack 0 [ 1245.707975][T18051] pagetables 12288 [ 1245.707975][T18051] sec_pagetables 0 [ 1245.707975][T18051] percpu 0 [ 1245.707975][T18051] sock 0 [ 1245.707975][T18051] vmalloc 0 [ 1245.707975][T18051] shmem 10465280 [ 1245.707975][T18051] zswap 0 [ 1245.707975][T18051] zswapped 0 [ 1245.707975][T18051] file_mapped 278528 [ 1245.707975][T18051] file_dirty 4096 [ 1245.707975][T18051] file_writeback 0 [ 1245.707975][T18051] swapcached 0 [ 1245.707975][T18051] anon_thp 0 [ 1245.707975][T18051] file_thp 0 [ 1245.707975][T18051] shmem_thp 0 [ 1245.707975][T18051] inactive_anon 40960 [ 1245.707975][T18051] active_anon 10465280 [ 1245.707975][T18051] inactive_file 0 [ 1245.707975][T18051] active_file 4096 [ 1245.707975][T18051] unevictable 0 [ 1245.707975][T18051] slab_reclaimable 37448 [ 1245.707975][T18051] slab_unreclaimable 42536 [ 1245.707975][T18051] slab 79984 [ 1245.707975][T18051] workingset_refault_anon 0 [ 1245.707975][T18051] workingset_refault_file 0 [ 1245.707975][T18051] workingset_activate_anon 0 [ 1245.707975][T18051] workingset_activate_file 0 [ 1245.707975][T18051] workingset_restore_anon 0 [ 1245.707975][T18051] workingset_restore_file 0 [ 1245.707975][T18051] workingset_nodereclaim 0 [ 1245.707975][T18051] pgscan 230 [ 1245.707975][T18051] pgsteal 41 [ 1245.707975][T18051] pgscan_kswapd 0 [ 1245.707975][T18051] pgscan_direct 230 [ 1245.707975][T18051] pgscan_khugepaged 0 [ 1245.707975][T18051] pgsteal_kswapd 0 [ 1245.707975][T18051] pgsteal_direct 41 [ 1245.707975][T18051] pgsteal_khugepaged 0 [ 1245.707975][T18051] pgfault 96703 [ 1245.707975][T18051] pgmajfault 0 [ 1245.707975][T18051] pgrefill 13329 [ 1245.707975][T18051] pgactivate 189 [ 1245.707975][T18051] pgdeactivate 0 [ 1245.707975][T18051] pglazyfree 0 [ 1245.707975][T18051] pglazyfreed 0 [ 1245.707975][T18051] zswpin 0 [ 1245.707975][T18051] zswpout 0 [ 1245.707975][T18051] thp_fault_alloc 0 [ 1245.880871][ T5034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1245.906533][ T5034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1245.918472][T18051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18051,uid=0 [ 1245.921921][ T5034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1245.944898][T16866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1245.953260][T16866] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1245.960611][T16866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1245.981153][T11784] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.004056][T18051] Memory cgroup out of memory: Killed process 18051 (syz-executor.1) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 1246.086524][T18364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.101030][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.108195][T18364] bridge_slave_1: entered allmulticast mode [ 1246.142243][T18364] bridge_slave_1: entered promiscuous mode [ 1246.170264][T11784] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:11:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) [ 1246.287898][T11784] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.336536][T18364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.368615][T18277] netdevsim netdevsim3 netdevsim0: renamed from eth0 00:11:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x7bc03) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x7fffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000180), 0x12) 00:11:30 executing program 4: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000100)=""/255, 0xff}, {&(0x7f0000000200)=""/73, 0x49}, {&(0x7f0000000280)=""/184, 0xb8}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x9}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="13100000120091efc15a201b96a01c660a"], 0xfe33) [ 1246.412837][T18364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.511074][T16866] Bluetooth: hci1: command 0x040f tx timeout [ 1246.550682][T18277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1246.595126][T18277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1246.616395][T18277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1246.639623][T18364] team0: Port device team_slave_0 added [ 1246.647659][T18364] team0: Port device team_slave_1 added [ 1246.839985][T18364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.847843][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.874516][T18364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.897719][T18364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.910340][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.948267][T18364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.998199][T11784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.271469][T11784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.368858][T18364] hsr_slave_0: entered promiscuous mode [ 1247.411303][T18364] hsr_slave_1: entered promiscuous mode [ 1247.430993][T18364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.438575][T18364] Cannot create hsr debugfs directory [ 1247.542496][T11784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.663914][T18277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.696665][T11784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.711311][T16866] Bluetooth: hci2: command 0x0409 tx timeout [ 1247.815075][T18396] chnl_net:caif_netlink_parms(): no params data found [ 1247.838481][T18394] chnl_net:caif_netlink_parms(): no params data found [ 1247.921653][T18277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.951726][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1247.959669][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1248.010919][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1248.019604][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1248.031437][T16866] Bluetooth: hci3: command 0x0409 tx timeout [ 1248.039277][T15103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.046430][T15103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.057360][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1248.060529][T10244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1248.081908][T10244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1248.089580][T10244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1248.097489][T10244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1248.105151][T10244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1248.113212][T10244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1248.180657][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1248.190100][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1248.198675][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.205805][T15103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.335450][T18394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.343799][T18394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.420137][T18394] bridge_slave_0: entered allmulticast mode [ 1248.430192][T18394] bridge_slave_0: entered promiscuous mode [ 1248.497331][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1248.512230][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1248.528765][T18394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.536184][T18394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.555639][T18394] bridge_slave_1: entered allmulticast mode [ 1248.571682][T18394] bridge_slave_1: entered promiscuous mode [ 1248.591209][T10244] Bluetooth: hci1: command 0x0419 tx timeout [ 1248.861589][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1248.870683][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1248.892758][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1248.915584][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1248.933860][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1248.951664][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1249.005337][T18394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.033781][T18394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.160438][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1249.206266][T18396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.231312][T18396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.238434][T18396] bridge_slave_0: entered allmulticast mode [ 1249.245883][T18396] bridge_slave_0: entered promiscuous mode [ 1249.313989][T18277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1249.328612][T18277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1249.337184][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1249.346635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1249.362557][T18394] team0: Port device team_slave_0 added [ 1249.396327][T18396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.406699][T18396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.414720][T18396] bridge_slave_1: entered allmulticast mode [ 1249.423533][T18396] bridge_slave_1: entered promiscuous mode [ 1249.473221][T18394] team0: Port device team_slave_1 added [ 1249.534410][T18396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.684701][T18396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.722597][T18394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.738116][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.778781][T18394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.791122][T16866] Bluetooth: hci2: command 0x041b tx timeout [ 1249.798202][T18394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.816694][T18394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.842749][T18394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.111074][T16866] Bluetooth: hci3: command 0x041b tx timeout [ 1250.192934][T16866] Bluetooth: hci4: command 0x0409 tx timeout [ 1250.211199][T18396] team0: Port device team_slave_0 added [ 1250.411716][T18394] hsr_slave_0: entered promiscuous mode [ 1250.422936][T18394] hsr_slave_1: entered promiscuous mode [ 1250.429069][T18394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1250.438627][T18394] Cannot create hsr debugfs directory [ 1250.469433][T18277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.508546][T18396] team0: Port device team_slave_1 added [ 1250.544478][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1250.551951][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1250.805028][T18420] chnl_net:caif_netlink_parms(): no params data found [ 1250.816537][T18396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.823904][T18396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.851849][T18396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.864150][T18364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1250.874971][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1250.885812][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1250.925235][T18396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.932422][T18396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.959825][T18396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.974679][T18364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1251.050768][T18364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1251.128376][T18364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1251.163449][T18277] veth0_vlan: entered promiscuous mode [ 1251.171466][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1251.179775][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1251.213993][T18396] hsr_slave_0: entered promiscuous mode [ 1251.232004][T18396] hsr_slave_1: entered promiscuous mode [ 1251.239988][T18396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1251.261954][T18396] Cannot create hsr debugfs directory [ 1251.293287][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1251.311792][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1251.465533][T18277] veth1_vlan: entered promiscuous mode [ 1251.616167][T18420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.636484][T18420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.653883][T18420] bridge_slave_0: entered allmulticast mode [ 1251.670952][T18420] bridge_slave_0: entered promiscuous mode [ 1251.681723][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1251.690345][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1251.792434][T18420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.799533][T18420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.820998][T18420] bridge_slave_1: entered allmulticast mode [ 1251.827944][T18420] bridge_slave_1: entered promiscuous mode [ 1251.871201][T16866] Bluetooth: hci2: command 0x040f tx timeout [ 1251.912229][T18277] veth0_macvtap: entered promiscuous mode [ 1251.958516][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1251.968409][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1252.009904][T18277] veth1_macvtap: entered promiscuous mode [ 1252.072449][T18420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.090205][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1252.099429][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1252.157496][T18420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.176710][T18364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.191315][T16866] Bluetooth: hci3: command 0x040f tx timeout [ 1252.224868][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.261206][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.271293][T16866] Bluetooth: hci4: command 0x041b tx timeout [ 1252.290814][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.319034][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.341664][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.360942][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.380945][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.400972][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.410796][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.450224][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.461283][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.473325][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.485500][T18277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.554875][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1252.563700][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1252.578786][T18364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.608628][T18420] team0: Port device team_slave_0 added [ 1252.619157][T18420] team0: Port device team_slave_1 added [ 1252.631736][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1252.639343][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1252.651690][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.665734][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.676309][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.687105][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.698147][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.708748][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.718699][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.729275][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.739348][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.752722][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.764398][T18277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.774860][T18277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.786146][T18277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.803197][T18394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1252.827563][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1252.836566][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1252.866714][T18277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.876321][T18277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.885900][T18277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.894691][T18277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.905163][T18394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1252.919758][T18420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.927260][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.953813][T18420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.965417][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1252.978551][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1253.001355][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.008465][ T6940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.028677][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1253.050153][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1253.071519][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.078627][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.101529][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1253.109597][ T6940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1253.175521][T18394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1253.193804][T18420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.200775][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.239695][T18420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.345409][T18394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1253.455306][T11784] hsr_slave_0: left promiscuous mode [ 1253.472376][T11784] hsr_slave_1: left promiscuous mode [ 1253.478301][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.500981][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.511353][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.518760][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.546402][T11784] bridge_slave_1: left allmulticast mode [ 1253.561085][T11784] bridge_slave_1: left promiscuous mode [ 1253.566786][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.575805][T11784] bridge_slave_0: left allmulticast mode [ 1253.581847][T11784] bridge_slave_0: left promiscuous mode [ 1253.587522][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.601448][T11784] hsr_slave_0: left promiscuous mode [ 1253.607352][T11784] hsr_slave_1: left promiscuous mode [ 1253.613373][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.620786][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.630110][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.652539][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.672803][T11784] bridge_slave_1: left allmulticast mode [ 1253.678478][T11784] bridge_slave_1: left promiscuous mode [ 1253.695689][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.705560][T11784] bridge_slave_0: left allmulticast mode [ 1253.712034][T11784] bridge_slave_0: left promiscuous mode [ 1253.717713][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.730682][T11784] hsr_slave_0: left promiscuous mode [ 1253.736689][T11784] hsr_slave_1: left promiscuous mode [ 1253.744187][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.751754][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.761319][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.768733][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.778630][T11784] bridge_slave_1: left allmulticast mode [ 1253.784430][T11784] bridge_slave_1: left promiscuous mode [ 1253.790108][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.807950][T11784] bridge_slave_0: left allmulticast mode [ 1253.813711][T11784] bridge_slave_0: left promiscuous mode [ 1253.819380][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.832747][T11784] hsr_slave_0: left promiscuous mode [ 1253.838597][T11784] hsr_slave_1: left promiscuous mode [ 1253.846220][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.854192][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.873554][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.890924][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.912894][T11784] bridge_slave_1: left allmulticast mode [ 1253.918553][T11784] bridge_slave_1: left promiscuous mode [ 1253.931017][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.951079][T16866] Bluetooth: hci2: command 0x0419 tx timeout [ 1253.957645][T11784] bridge_slave_0: left allmulticast mode [ 1253.970913][T11784] bridge_slave_0: left promiscuous mode [ 1253.976656][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.021611][T11784] veth1_macvtap: left promiscuous mode [ 1254.027148][T11784] veth0_macvtap: left promiscuous mode [ 1254.051342][T11784] veth1_vlan: left promiscuous mode [ 1254.056663][T11784] veth0_vlan: left promiscuous mode [ 1254.072881][T11784] veth1_macvtap: left promiscuous mode [ 1254.078421][T11784] veth0_macvtap: left promiscuous mode [ 1254.096785][T11784] veth1_vlan: left promiscuous mode [ 1254.108752][T11784] veth0_vlan: left promiscuous mode [ 1254.123734][T11784] veth1_macvtap: left promiscuous mode [ 1254.129266][T11784] veth0_macvtap: left promiscuous mode [ 1254.147334][T11784] veth1_vlan: left promiscuous mode [ 1254.158945][T11784] veth0_vlan: left promiscuous mode [ 1254.179058][T11784] veth1_macvtap: left promiscuous mode [ 1254.190343][T11784] veth0_macvtap: left promiscuous mode [ 1254.201284][T11784] veth1_vlan: left promiscuous mode [ 1254.206588][T11784] veth0_vlan: left promiscuous mode [ 1254.270924][T16866] Bluetooth: hci3: command 0x0419 tx timeout [ 1254.350921][T16866] Bluetooth: hci4: command 0x040f tx timeout [ 1255.216637][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1255.236363][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1255.250517][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.284861][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.449061][T11784] bond0 (unregistering): Released all slaves [ 1255.727508][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1255.771450][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1255.794127][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.823447][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.000802][T11784] bond0 (unregistering): Released all slaves [ 1256.210787][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1256.236483][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1256.267491][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.283949][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.431009][T16866] Bluetooth: hci4: command 0x0419 tx timeout [ 1256.444107][T11784] bond0 (unregistering): Released all slaves [ 1256.722671][T11784] team0 (unregistering): Port device team_slave_1 removed [ 1256.761899][T11784] team0 (unregistering): Port device team_slave_0 removed [ 1256.802815][T11784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.841191][T11784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.015463][T11784] bond0 (unregistering): Released all slaves [ 1257.194559][T18420] hsr_slave_0: entered promiscuous mode [ 1257.202569][T18420] hsr_slave_1: entered promiscuous mode [ 1257.217439][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1257.232669][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1257.253215][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1257.272262][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1257.473379][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1257.484887][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1257.493606][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1257.502256][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1257.510586][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1257.519110][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1257.528742][T18364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1257.691438][T11789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.699440][T11789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.709302][T18394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.748595][T17269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1257.825555][T18394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.852599][T10417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.860626][T10417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.885499][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1257.901996][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1257.911636][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1257.941558][T11784] ------------[ cut here ]------------ [ 1257.947314][T11784] ODEBUG: free active (active state 0) object: ffff88807de354f8 object type: timer_list hint: batadv_dat_purge+0x0/0x70 [ 1257.969532][T11784] WARNING: CPU: 1 PID: 11784 at lib/debugobjects.c:505 debug_print_object+0x194/0x2c0 [ 1257.979530][T11784] Modules linked in: [ 1257.983489][T11784] CPU: 1 PID: 11784 Comm: kworker/u4:8 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1257.993783][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1258.003913][T11784] Workqueue: netns cleanup_net [ 1258.008726][T11784] RIP: 0010:debug_print_object+0x194/0x2c0 [ 1258.014602][T11784] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 c7 00 00 00 48 8b 14 dd 80 29 a7 8a 50 4c 89 ee 48 c7 c7 40 1d a7 8a e8 9c 7c 34 fd <0f> 0b 58 83 05 c6 50 63 0a 01 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e [ 1258.034259][T11784] RSP: 0018:ffffc900037cf860 EFLAGS: 00010286 [ 1258.040346][T11784] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1258.048373][T11784] RDX: ffff888064ebbb80 RSI: ffffffff814c03e7 RDI: 0000000000000001 [ 1258.056402][T11784] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1258.064442][T11784] R10: 0000000000000001 R11: 0000000000053d38 R12: ffffffff8a4ed280 [ 1258.072472][T11784] R13: ffffffff8aa723a0 R14: ffff888061147088 R15: ffffffff8172bb90 [ 1258.080467][T11784] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1258.089456][T11784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1258.096089][T11784] CR2: 00007f1c8006b440 CR3: 0000000021f30000 CR4: 00000000003506e0 [ 1258.104115][T11784] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1258.112139][T11784] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1258.120126][T11784] Call Trace: [ 1258.123450][T11784] [ 1258.126395][T11784] ? __batadv_dat_purge.part.0+0x3b0/0x3b0 [ 1258.132267][T11784] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1258.138118][T11784] debug_check_no_obj_freed+0x305/0x420 [ 1258.143743][T11784] slab_free_freelist_hook+0xeb/0x1c0 [ 1258.149151][T11784] ? kvfree+0x46/0x50 [ 1258.153211][T11784] __kmem_cache_free+0xaf/0x2d0 [ 1258.158104][T11784] kvfree+0x46/0x50 [ 1258.161987][T11784] ? net_get_ownership+0x50/0x50 [ 1258.167029][T11784] device_release+0xa3/0x240 [ 1258.171703][T11784] kobject_put+0x1c2/0x4d0 [ 1258.176152][T11784] netdev_run_todo+0x762/0x1100 [ 1258.181070][T11784] ? generic_xdp_install+0x4c0/0x4c0 [ 1258.186392][T11784] ? mutex_is_locked+0x12/0x50 [ 1258.191235][T11784] ? netdev_freemem+0x60/0x60 [ 1258.195939][T11784] ? unregister_netdevice_many+0x20/0x20 [ 1258.201628][T11784] ? sysfs_remove_group+0xc6/0x170 [ 1258.206769][T11784] ? br_dev_delete+0x116/0x1a0 [ 1258.211646][T11784] default_device_exit_batch+0x456/0x5b0 [ 1258.217318][T11784] ? unregister_netdev+0x30/0x30 [ 1258.222338][T11784] ? unregister_netdev+0x30/0x30 [ 1258.227308][T11784] ops_exit_list+0x125/0x170 [ 1258.231985][T11784] cleanup_net+0x4ee/0xb10 [ 1258.236433][T11784] ? unregister_pernet_device+0x80/0x80 [ 1258.242052][T11784] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.247293][T11784] process_one_work+0x99a/0x15e0 [ 1258.252336][T11784] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1258.257755][T11784] ? spin_bug+0x1c0/0x1c0 [ 1258.262163][T11784] ? _raw_spin_lock_irq+0x45/0x50 [ 1258.267227][T11784] worker_thread+0x67d/0x10c0 [ 1258.271993][T11784] ? process_one_work+0x15e0/0x15e0 [ 1258.277232][T11784] kthread+0x344/0x440 [ 1258.281368][T11784] ? kthread_complete_and_exit+0x40/0x40 [ 1258.287035][T11784] ret_from_fork+0x1f/0x30 [ 1258.291564][T11784] [ 1258.294598][T11784] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1258.301884][T11784] CPU: 1 PID: 11784 Comm: kworker/u4:8 Not tainted 6.4.0-rc3-syzkaller-00699-gaa7881fcfe9d #0 [ 1258.312138][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 1258.322204][T11784] Workqueue: netns cleanup_net [ 1258.326990][T11784] Call Trace: [ 1258.330273][T11784] [ 1258.333215][T11784] dump_stack_lvl+0xd9/0x150 [ 1258.337838][T11784] panic+0x686/0x730 [ 1258.341756][T11784] ? panic_smp_self_stop+0xa0/0xa0 [ 1258.346891][T11784] ? show_trace_log_lvl+0x285/0x390 [ 1258.352133][T11784] ? debug_print_object+0x194/0x2c0 [ 1258.357350][T11784] check_panic_on_warn+0xb1/0xc0 [ 1258.362302][T11784] __warn+0xf2/0x390 [ 1258.366205][T11784] ? debug_print_object+0x194/0x2c0 [ 1258.371410][T11784] report_bug+0x2da/0x500 [ 1258.375757][T11784] handle_bug+0x3c/0x70 [ 1258.379914][T11784] exc_invalid_op+0x18/0x50 [ 1258.384418][T11784] asm_exc_invalid_op+0x1a/0x20 [ 1258.389281][T11784] RIP: 0010:debug_print_object+0x194/0x2c0 [ 1258.395098][T11784] Code: df 48 89 fe 48 c1 ee 03 80 3c 16 00 0f 85 c7 00 00 00 48 8b 14 dd 80 29 a7 8a 50 4c 89 ee 48 c7 c7 40 1d a7 8a e8 9c 7c 34 fd <0f> 0b 58 83 05 c6 50 63 0a 01 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e [ 1258.414710][T11784] RSP: 0018:ffffc900037cf860 EFLAGS: 00010286 [ 1258.420779][T11784] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1258.428748][T11784] RDX: ffff888064ebbb80 RSI: ffffffff814c03e7 RDI: 0000000000000001 [ 1258.436719][T11784] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1258.444691][T11784] R10: 0000000000000001 R11: 0000000000053d38 R12: ffffffff8a4ed280 [ 1258.452662][T11784] R13: ffffffff8aa723a0 R14: ffff888061147088 R15: ffffffff8172bb90 [ 1258.460632][T11784] ? calc_wheel_index+0x3d0/0x3d0 [ 1258.465676][T11784] ? __warn_printk+0x187/0x310 [ 1258.470452][T11784] ? __batadv_dat_purge.part.0+0x3b0/0x3b0 [ 1258.476271][T11784] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1258.482093][T11784] debug_check_no_obj_freed+0x305/0x420 [ 1258.487657][T11784] slab_free_freelist_hook+0xeb/0x1c0 [ 1258.493043][T11784] ? kvfree+0x46/0x50 [ 1258.497041][T11784] __kmem_cache_free+0xaf/0x2d0 [ 1258.501908][T11784] kvfree+0x46/0x50 [ 1258.505724][T11784] ? net_get_ownership+0x50/0x50 [ 1258.510664][T11784] device_release+0xa3/0x240 [ 1258.515261][T11784] kobject_put+0x1c2/0x4d0 [ 1258.519687][T11784] netdev_run_todo+0x762/0x1100 [ 1258.524548][T11784] ? generic_xdp_install+0x4c0/0x4c0 [ 1258.529836][T11784] ? mutex_is_locked+0x12/0x50 [ 1258.534602][T11784] ? netdev_freemem+0x60/0x60 [ 1258.539288][T11784] ? unregister_netdevice_many+0x20/0x20 [ 1258.544932][T11784] ? sysfs_remove_group+0xc6/0x170 [ 1258.550053][T11784] ? br_dev_delete+0x116/0x1a0 [ 1258.554825][T11784] default_device_exit_batch+0x456/0x5b0 [ 1258.560466][T11784] ? unregister_netdev+0x30/0x30 [ 1258.565420][T11784] ? unregister_netdev+0x30/0x30 [ 1258.570366][T11784] ops_exit_list+0x125/0x170 [ 1258.574986][T11784] cleanup_net+0x4ee/0xb10 [ 1258.579411][T11784] ? unregister_pernet_device+0x80/0x80 [ 1258.584961][T11784] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.590174][T11784] process_one_work+0x99a/0x15e0 [ 1258.595132][T11784] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1258.600517][T11784] ? spin_bug+0x1c0/0x1c0 [ 1258.604858][T11784] ? _raw_spin_lock_irq+0x45/0x50 [ 1258.609895][T11784] worker_thread+0x67d/0x10c0 [ 1258.614592][T11784] ? process_one_work+0x15e0/0x15e0 [ 1258.619800][T11784] kthread+0x344/0x440 [ 1258.623873][T11784] ? kthread_complete_and_exit+0x40/0x40 [ 1258.629514][T11784] ret_from_fork+0x1f/0x30 [ 1258.633958][T11784] [ 1258.637121][T11784] Kernel Offset: disabled [ 1258.641618][T11784] Rebooting in 86400 seconds..