{&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:08:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:08:36 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2641.050837] Memory cgroup stats for /syz3: cache:12KB rss:72KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2641.073766] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=21903,uid=0 [ 2641.094315] Memory cgroup out of memory: Kill process 21903 (syz-executor3) score 8755000 or sacrifice child [ 2641.105999] Killed process 21903 (syz-executor3) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2641.124654] oom_reaper: reaped process 21903 (syz-executor3), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2641.136583] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2641.154290] CPU: 1 PID: 21904 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2641.161423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2641.170776] Call Trace: [ 2641.170798] dump_stack+0x1db/0x2d0 [ 2641.170817] ? dump_stack_print_info.cold+0x20/0x20 [ 2641.170842] dump_header+0x1e6/0x116c [ 2641.170859] ? add_lock_to_list.isra.0+0x450/0x450 [ 2641.177063] ? print_usage_bug+0xd0/0xd0 [ 2641.194853] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2641.199796] ? ___ratelimit+0x37c/0x686 [ 2641.203790] ? mark_held_locks+0xb1/0x100 [ 2641.207966] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2641.213589] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2641.218707] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2641.223310] ? trace_hardirqs_on+0xbd/0x310 [ 2641.223325] ? kasan_check_read+0x11/0x20 [ 2641.223340] ? ___ratelimit+0x37c/0x686 [ 2641.223353] ? trace_hardirqs_off_caller+0x300/0x300 [ 2641.223367] ? do_raw_spin_trylock+0x270/0x270 [ 2641.223382] ? trace_hardirqs_on_caller+0x310/0x310 [ 2641.231840] ? lock_acquire+0x1db/0x570 [ 2641.231860] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2641.231876] ? ___ratelimit+0xac/0x686 [ 2641.231891] ? idr_get_free+0xee0/0xee0 [ 2641.231907] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2641.272066] oom_kill_process.cold+0x10/0x9d4 [ 2641.276577] ? cgroup_procs_next+0x70/0x70 [ 2641.280879] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2641.285390] ? oom_badness+0xa50/0xa50 [ 2641.289288] ? oom_evaluate_task+0x540/0x540 [ 2641.293710] ? mem_cgroup_iter_break+0x30/0x30 [ 2641.298317] ? mutex_trylock+0x2d0/0x2d0 [ 2641.302388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2641.307945] ? rcu_read_unlock_special+0x380/0x380 [ 2641.312928] out_of_memory+0x885/0x1420 [ 2641.316911] ? mem_cgroup_iter+0x508/0xf30 [ 2641.321155] ? oom_killer_disable+0x340/0x340 [ 2641.325686] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2641.330816] ? lock_acquire+0x1db/0x570 [ 2641.334805] mem_cgroup_out_of_memory+0x160/0x210 [ 2641.339656] ? do_raw_spin_unlock+0xa0/0x330 [ 2641.344076] ? memcg_memory_event+0x40/0x40 [ 2641.348401] ? do_raw_spin_trylock+0x270/0x270 [ 2641.353015] ? _raw_spin_unlock+0x2d/0x50 [ 2641.357180] try_charge+0x12a9/0x19b0 18:08:36 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:08:36 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2641.360992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2641.366544] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2641.371400] ? rcu_read_unlock_special+0x380/0x380 [ 2641.376350] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2641.381216] ? get_mem_cgroup_from_page+0x190/0x190 [ 2641.386264] ? rcu_read_lock_sched_held+0x110/0x130 [ 2641.391297] mem_cgroup_try_charge+0x43a/0xdb0 [ 2641.395926] ? mem_cgroup_protected+0xa10/0xa10 [ 2641.400612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2641.406176] ? print_usage_bug+0xd0/0xd0 [ 2641.410256] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2641.415801] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2641.421357] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2641.426301] wp_page_copy+0x45a/0x1c30 [ 2641.430209] ? swp_swapcount+0x540/0x540 [ 2641.434275] ? pmd_pfn+0x1d0/0x1d0 [ 2641.437801] ? find_held_lock+0x35/0x120 [ 2641.441848] ? do_wp_page+0x70d/0x16b0 [ 2641.445735] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2641.451275] ? kasan_check_read+0x11/0x20 [ 2641.455415] ? do_raw_spin_unlock+0xa0/0x330 [ 2641.459816] ? do_raw_spin_trylock+0x270/0x270 [ 2641.464388] ? __lock_acquire+0x572/0x4a30 [ 2641.468630] do_wp_page+0x715/0x16b0 [ 2641.472343] ? finish_mkwrite_fault+0x540/0x540 [ 2641.477010] ? kasan_check_read+0x11/0x20 [ 2641.481178] ? do_raw_spin_lock+0x156/0x360 [ 2641.485516] ? rwlock_bug.part.0+0x90/0x90 [ 2641.489747] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2641.494882] __handle_mm_fault+0x2c8e/0x55a0 [ 2641.499300] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2641.504142] ? check_preemption_disabled+0x48/0x290 [ 2641.509152] ? handle_mm_fault+0x3cc/0xc80 [ 2641.513398] ? lock_downgrade+0x910/0x910 [ 2641.517533] ? kasan_check_read+0x11/0x20 [ 2641.521686] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2641.526958] ? rcu_read_unlock_special+0x380/0x380 [ 2641.531874] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2641.537412] ? check_preemption_disabled+0x48/0x290 [ 2641.542433] handle_mm_fault+0x4ec/0xc80 [ 2641.546535] ? __handle_mm_fault+0x55a0/0x55a0 [ 2641.551118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2641.556641] ? vmacache_update+0x114/0x140 [ 2641.560869] __do_page_fault+0x5da/0xd60 [ 2641.564929] do_page_fault+0xe6/0x7d8 [ 2641.568715] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2641.573670] ? vmalloc_sync_all+0x30/0x30 [ 2641.577825] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2641.583278] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2641.588206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2641.593759] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2641.598801] ? page_fault+0x8/0x30 [ 2641.602369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2641.607215] ? page_fault+0x8/0x30 [ 2641.610749] page_fault+0x1e/0x30 [ 2641.614206] RIP: 0033:0x42f226 [ 2641.617408] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2641.636310] RSP: 002b:00007fffe204bdd0 EFLAGS: 00010206 [ 2641.641664] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2641.648925] RDX: 0000000002288930 RSI: 0000000002290970 RDI: 0000000000000003 [ 2641.656192] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002287940 [ 2641.663454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2641.670711] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2641.681334] memory: usage 916kB, limit 0kB, failcnt 965216 [ 2641.688921] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2641.701425] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 18:08:36 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x0, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2641.707601] Memory cgroup stats for /syz2: cache:4KB rss:28KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2641.732772] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=21904,uid=0 [ 2641.748407] Memory cgroup out of memory: Kill process 21904 (syz-executor2) score 8756000 or sacrifice child [ 2641.763707] Killed process 21904 (syz-executor2) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2641.774983] oom_reaper: reaped process 21904 (syz-executor2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 18:08:36 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:08:36 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2641.996484] IPVS: ftp: loaded support on port[0] = 21 18:08:37 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:08:37 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:08:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2642.514961] chnl_net:caif_netlink_parms(): no params data found [ 2642.546641] IPVS: ftp: loaded support on port[0] = 21 [ 2642.662507] bridge0: port 1(bridge_slave_0) entered blocking state [ 2642.669284] bridge0: port 1(bridge_slave_0) entered disabled state [ 2642.676825] device bridge_slave_0 entered promiscuous mode [ 2642.702025] bridge0: port 2(bridge_slave_1) entered blocking state [ 2642.708410] bridge0: port 2(bridge_slave_1) entered disabled state [ 2642.716298] device bridge_slave_1 entered promiscuous mode [ 2642.766940] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2642.783446] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2642.808276] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2642.816084] team0: Port device team_slave_0 added [ 2642.822001] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2642.829595] team0: Port device team_slave_1 added [ 2642.845621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2642.858474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2642.972360] device hsr_slave_0 entered promiscuous mode [ 2643.029516] device hsr_slave_1 entered promiscuous mode [ 2643.089555] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2643.096665] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2643.118081] chnl_net:caif_netlink_parms(): no params data found [ 2643.166773] bridge0: port 1(bridge_slave_0) entered blocking state [ 2643.173318] bridge0: port 1(bridge_slave_0) entered disabled state [ 2643.180865] device bridge_slave_0 entered promiscuous mode [ 2643.189775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2643.196121] bridge0: port 2(bridge_slave_1) entered disabled state [ 2643.203535] device bridge_slave_1 entered promiscuous mode [ 2643.220735] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2643.244972] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2643.256419] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2643.278705] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2643.287010] team0: Port device team_slave_0 added [ 2643.293070] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2643.301115] team0: Port device team_slave_1 added [ 2643.306728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2643.317339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2643.393359] device hsr_slave_0 entered promiscuous mode [ 2643.429518] device hsr_slave_1 entered promiscuous mode [ 2643.471968] device bridge_slave_1 left promiscuous mode [ 2643.477501] bridge0: port 2(bridge_slave_1) entered disabled state [ 2643.530373] device bridge_slave_0 left promiscuous mode [ 2643.535939] bridge0: port 1(bridge_slave_0) entered disabled state [ 2643.580579] device bridge_slave_1 left promiscuous mode [ 2643.586027] bridge0: port 2(bridge_slave_1) entered disabled state [ 2643.630000] device bridge_slave_0 left promiscuous mode [ 2643.635484] bridge0: port 1(bridge_slave_0) entered disabled state [ 2643.823293] device hsr_slave_1 left promiscuous mode [ 2643.875262] device hsr_slave_0 left promiscuous mode [ 2643.935299] team0 (unregistering): Port device team_slave_1 removed [ 2643.946710] team0 (unregistering): Port device team_slave_0 removed [ 2643.957886] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2643.993965] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2644.082892] bond0 (unregistering): Released all slaves [ 2644.232966] device hsr_slave_1 left promiscuous mode [ 2644.275320] device hsr_slave_0 left promiscuous mode [ 2644.316925] team0 (unregistering): Port device team_slave_1 removed [ 2644.328539] team0 (unregistering): Port device team_slave_0 removed [ 2644.342012] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2644.393156] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2644.491810] bond0 (unregistering): Released all slaves [ 2644.594894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2644.602473] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2644.626260] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2644.664342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2644.674321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2644.694025] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2644.703368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2644.712528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2644.728158] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2644.737371] 8021q: adding VLAN 0 to HW filter on device team0 [ 2644.748335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2644.760988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2644.769392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2644.777368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2644.785274] bridge0: port 1(bridge_slave_0) entered blocking state [ 2644.791702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2644.799599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2644.810088] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2644.818539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2644.827070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2644.827699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2644.846574] bridge0: port 2(bridge_slave_1) entered blocking state [ 2644.852994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2644.863790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2644.873566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2644.880239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2644.888136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2644.895395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2644.905416] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2644.912315] 8021q: adding VLAN 0 to HW filter on device team0 [ 2644.920788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2644.930025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2644.940264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2644.948827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2644.960706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2644.967564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2644.975812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2644.983772] bridge0: port 1(bridge_slave_0) entered blocking state [ 2644.990227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2644.997092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2645.005616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2645.013469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2645.021592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2645.032514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2645.043871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2645.051116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2645.058367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2645.066027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2645.074062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2645.082955] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.089374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.096590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2645.104990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2645.117056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2645.126960] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2645.134528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2645.145963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2645.153957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2645.172186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2645.184589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2645.192517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2645.201048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2645.208768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2645.216808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2645.225514] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2645.231863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2645.243691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2645.255953] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2645.262954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2645.271308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2645.282654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2645.293897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2645.303815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2645.313831] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2645.322727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2645.369422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2645.377101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2645.387019] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2645.393849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2645.449947] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2645.483553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2645.548492] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2645.558696] CPU: 1 PID: 21974 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2645.565821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2645.575194] Call Trace: [ 2645.577790] dump_stack+0x1db/0x2d0 [ 2645.581426] ? dump_stack_print_info.cold+0x20/0x20 [ 2645.586463] dump_header+0x1e6/0x116c [ 2645.590285] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2645.595046] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2645.599633] ? retint_kernel+0x2d/0x2d [ 2645.603541] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2645.608504] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2645.613440] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2645.618897] ? ___ratelimit+0x37c/0x686 [ 2645.622887] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2645.627657] ? retint_kernel+0x2d/0x2d [ 2645.631604] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2645.636739] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2645.641844] ? ___ratelimit+0xac/0x686 [ 2645.645747] ? idr_get_free+0xee0/0xee0 [ 2645.649740] oom_kill_process.cold+0x10/0x9d4 [ 2645.654250] ? cgroup_procs_next+0x70/0x70 [ 2645.658514] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2645.663016] ? oom_badness+0xa50/0xa50 [ 2645.666916] ? oom_evaluate_task+0x540/0x540 [ 2645.671333] ? mem_cgroup_iter_break+0x30/0x30 [ 2645.675959] ? mem_cgroup_get_max+0xa8/0x240 [ 2645.680380] out_of_memory+0x885/0x1420 [ 2645.684375] ? oom_killer_disable+0x340/0x340 [ 2645.688882] ? preempt_schedule+0x4b/0x60 [ 2645.693038] ? ___preempt_schedule+0x16/0x18 [ 2645.697462] mem_cgroup_out_of_memory+0x160/0x210 [ 2645.702317] ? memcg_memory_event+0x40/0x40 [ 2645.706671] memory_max_write+0x1b0/0x3e0 [ 2645.710832] ? lock_acquire+0x1db/0x570 [ 2645.714818] ? mem_cgroup_write+0x440/0x440 [ 2645.719143] ? lock_release+0xc40/0xc40 [ 2645.723138] ? add_lock_to_list.isra.0+0x450/0x450 [ 2645.728098] ? lock_downgrade+0x910/0x910 [ 2645.732259] cgroup_file_write+0x252/0x830 [ 2645.736513] ? mem_cgroup_write+0x440/0x440 [ 2645.740856] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2645.745818] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2645.750757] kernfs_fop_write+0x2ba/0x480 [ 2645.754923] __vfs_write+0x116/0xb40 [ 2645.758644] ? kernfs_fop_open+0x1030/0x1030 [ 2645.763080] ? kernel_read+0x120/0x120 [ 2645.766982] ? lock_is_held_type+0x17e/0x210 [ 2645.771404] ? rcu_read_lock_sched_held+0x110/0x130 [ 2645.776426] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2645.781194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2645.786733] ? __sb_start_write+0x1ac/0x360 [ 2645.791059] vfs_write+0x20c/0x580 [ 2645.794611] ksys_write+0x105/0x260 [ 2645.798320] ? __ia32_sys_read+0xb0/0xb0 [ 2645.802386] ? trace_hardirqs_off_caller+0x300/0x300 [ 2645.807521] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2645.812293] __x64_sys_write+0x73/0xb0 [ 2645.816198] do_syscall_64+0x1a3/0x800 [ 2645.820097] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2645.825054] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2645.830082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2645.834986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2645.840184] RIP: 0033:0x458099 [ 2645.843385] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2645.862289] RSP: 002b:00007f43b7c9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2645.870014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2645.877287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2645.884559] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2645.891830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43b7c9e6d4 [ 2645.899136] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2645.919556] memory: usage 3100kB, limit 0kB, failcnt 312432 [ 2645.925747] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2645.934369] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2645.969389] Memory cgroup stats for /syz5: cache:148KB rss:2100KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2646.027915] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=21973,uid=0 [ 2646.062585] Memory cgroup out of memory: Kill process 21973 (syz-executor5) score 9271000 or sacrifice child [ 2646.074595] Killed process 21973 (syz-executor5) total-vm:72452kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 2646.094218] oom_reaper: reaped process 21973 (syz-executor5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:08:41 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:08:41 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:08:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:08:41 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:08:41 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:08:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2646.363437] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2646.373898] CPU: 1 PID: 21951 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2646.381019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.390376] Call Trace: [ 2646.392971] dump_stack+0x1db/0x2d0 [ 2646.396612] ? dump_stack_print_info.cold+0x20/0x20 [ 2646.401654] dump_header+0x1e6/0x116c [ 2646.405497] ? add_lock_to_list.isra.0+0x450/0x450 [ 2646.410442] ? print_usage_bug+0xd0/0xd0 [ 2646.414538] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2646.419477] ? ___ratelimit+0x37c/0x686 [ 2646.423473] ? mark_held_locks+0xb1/0x100 [ 2646.427642] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2646.432766] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2646.437879] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2646.442470] ? trace_hardirqs_on+0xbd/0x310 [ 2646.446809] ? kasan_check_read+0x11/0x20 [ 2646.450963] ? ___ratelimit+0x37c/0x686 [ 2646.454955] ? trace_hardirqs_off_caller+0x300/0x300 [ 2646.460061] ? do_raw_spin_trylock+0x270/0x270 [ 2646.464652] ? trace_hardirqs_on_caller+0x310/0x310 [ 2646.469705] ? lock_acquire+0x1db/0x570 [ 2646.473702] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2646.478837] ? ___ratelimit+0xac/0x686 [ 2646.482736] ? idr_get_free+0xee0/0xee0 [ 2646.486717] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2646.491321] oom_kill_process.cold+0x10/0x9d4 [ 2646.495826] ? cgroup_procs_next+0x70/0x70 [ 2646.500074] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2646.504598] ? oom_badness+0xa50/0xa50 [ 2646.508499] ? oom_evaluate_task+0x540/0x540 [ 2646.512915] ? mem_cgroup_iter_break+0x30/0x30 [ 2646.517534] ? mutex_trylock+0x2d0/0x2d0 [ 2646.521627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.527216] ? rcu_read_unlock_special+0x380/0x380 [ 2646.532203] out_of_memory+0x885/0x1420 [ 2646.536226] ? mem_cgroup_iter+0x508/0xf30 [ 2646.540493] ? oom_killer_disable+0x340/0x340 [ 2646.545017] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2646.550129] ? lock_acquire+0x1db/0x570 [ 2646.554132] mem_cgroup_out_of_memory+0x160/0x210 [ 2646.559004] ? do_raw_spin_unlock+0xa0/0x330 [ 2646.563424] ? memcg_memory_event+0x40/0x40 [ 2646.567756] ? do_raw_spin_trylock+0x270/0x270 [ 2646.572354] ? _raw_spin_unlock+0x2d/0x50 [ 2646.576516] try_charge+0x12a9/0x19b0 [ 2646.580343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.585918] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2646.590821] ? rcu_read_unlock_special+0x380/0x380 [ 2646.595783] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2646.600637] ? get_mem_cgroup_from_page+0x190/0x190 [ 2646.605665] ? rcu_read_lock_sched_held+0x110/0x130 [ 2646.610716] mem_cgroup_try_charge+0x43a/0xdb0 [ 2646.615314] ? mem_cgroup_protected+0xa10/0xa10 [ 2646.620009] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.625568] ? print_usage_bug+0xd0/0xd0 [ 2646.629664] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2646.635210] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2646.640812] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2646.645799] wp_page_copy+0x45a/0x1c30 [ 2646.649697] ? swp_swapcount+0x540/0x540 [ 2646.653777] ? pmd_pfn+0x1d0/0x1d0 [ 2646.657322] ? find_held_lock+0x35/0x120 [ 2646.661397] ? do_wp_page+0x70d/0x16b0 [ 2646.662248] IPVS: ftp: loaded support on port[0] = 21 [ 2646.665293] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2646.665318] ? kasan_check_read+0x11/0x20 [ 2646.665333] ? do_raw_spin_unlock+0xa0/0x330 [ 2646.665349] ? do_raw_spin_trylock+0x270/0x270 [ 2646.689193] ? __lock_acquire+0x572/0x4a30 [ 2646.693445] do_wp_page+0x715/0x16b0 [ 2646.693467] ? finish_mkwrite_fault+0x540/0x540 [ 2646.693480] ? kasan_check_read+0x11/0x20 [ 2646.693495] ? do_raw_spin_lock+0x156/0x360 [ 2646.701891] ? rwlock_bug.part.0+0x90/0x90 [ 2646.701909] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2646.701932] __handle_mm_fault+0x2c8e/0x55a0 [ 2646.710385] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2646.710402] ? check_preemption_disabled+0x48/0x290 [ 2646.710421] ? handle_mm_fault+0x3cc/0xc80 [ 2646.719768] ? lock_downgrade+0x910/0x910 [ 2646.728991] ? kasan_check_read+0x11/0x20 [ 2646.729008] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2646.729025] ? rcu_read_unlock_special+0x380/0x380 [ 2646.729040] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2646.729054] ? check_preemption_disabled+0x48/0x290 [ 2646.729074] handle_mm_fault+0x4ec/0xc80 [ 2646.738321] ? __handle_mm_fault+0x55a0/0x55a0 [ 2646.751871] __do_page_fault+0x5da/0xd60 [ 2646.751900] do_page_fault+0xe6/0x7d8 [ 2646.751914] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2646.751932] ? vmalloc_sync_all+0x30/0x30 [ 2646.751947] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2646.771437] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2646.771453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.771468] ? prepare_exit_to_usermode+0x232/0x3b0 18:08:41 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2646.771485] ? page_fault+0x8/0x30 [ 2646.780118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2646.780138] ? page_fault+0x8/0x30 [ 2646.780155] page_fault+0x1e/0x30 [ 2646.780179] RIP: 0033:0x42f226 [ 2646.780194] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2646.780203] RSP: 002b:00007ffd70c3ca60 EFLAGS: 00010206 [ 2646.788934] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 18:08:41 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2646.788944] RDX: 000000000201c930 RSI: 0000000002024970 RDI: 0000000000000003 [ 2646.788952] RBP: 0000000000008041 R08: 0000000000000001 R09: 000000000201b940 [ 2646.788961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2646.788970] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2646.809764] memory: usage 780kB, limit 0kB, failcnt 312440 [ 2646.826099] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2646.918739] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2646.933334] Memory cgroup stats for /syz5: cache:148KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB 18:08:42 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce04f31b6857381d65f3184d8fd6ded9ae1fdaec890fc9e982703e73bb5804aafab8991a68498d4e57d03a8c9b172fcf671298761634b457028a7bd2a37c6c7e9066fcc68f1e5b0465296d1f61285d867959d621d9fa043d73b6e28a4974240af72aaed41de23237ab801ee6be53a54c5b3542811524f868c71c5148255c7f514c67b87c7679a50098dbd9eebe0d902321f9fefcdb46d66a295b1191df3d31d786b247132e45b477151b3c055c0b89087ab8bd082ea1be6504ad6f9423b364a66255b95d07c272ff30ed6c74ae59d9f20211680b5c6900a4dd9a6a537c34e9df406a7b6c5aea20124d6427ca1b8fa1ef80c7d9c9d054722ef41d6136e99092138c44b4549ff5f0812701997d53c259fd79320fcc41ba1e8f8db9a05fde91f9ef76c77684f8e40d3bb60fa3353f57d409d5d3c7ce2fd0674a5dc3772c4c15a4d05e0d239597dc62d5d588ab0d1a2db2116cc3abd56a8fc9ae7ec2743be749e1ceb7ab3fac29f590762af3b1a2988cc22105bc15d03d4b08395723a431ac9a12f14c45f0a99032375e5ed6147ace036eb496b3fd69b7df8d116218b2c5cb2faf084c60d539dbdd9f73fa0aecd1dfb830c192eb4282e74dd455afd74cbe6b48938f47184d685f51444b2709794806b8629924235a5a2b63a1967e6fd01e74404598f563656532e0b47d81394edc55b1f597028ead149a64c092ae626981bbc01e386a10ea8c09abcd95e4ee2377941c5c4d8b504e8dafb5f2778bf74066440d19fbf56554628be82793487cda9edc676c6a8f03d378e38eb0874d014d729dc35ce3f642fd09e2b64b96961e04b4414555f766c8e620acc84c70e4d5c0d3adbdba80265fdf042c92ad3fa1871ff412c6138fde9297c8bbf3ef22f669676cfaad27bce9aed68e29ca89501991b04f48dc697a13d4bc16de448949d8daa8c7e72a820f1b837a8c7", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2647.005003] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=21951,uid=0 18:08:42 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2647.076638] Memory cgroup out of memory: Kill process 21951 (syz-executor5) score 8757000 or sacrifice child [ 2647.118043] Killed process 21951 (syz-executor5) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB 18:08:42 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2647.175449] oom_reaper: reaped process 21951 (syz-executor5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2647.209875] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2647.249611] CPU: 1 PID: 22001 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2647.256731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2647.266098] Call Trace: [ 2647.266120] dump_stack+0x1db/0x2d0 [ 2647.266140] ? dump_stack_print_info.cold+0x20/0x20 [ 2647.266159] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2647.266199] dump_header+0x1e6/0x116c [ 2647.266217] ? add_lock_to_list.isra.0+0x450/0x450 [ 2647.282202] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2647.290908] ? print_usage_bug+0xd0/0xd0 [ 2647.290929] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2647.290946] ? ___ratelimit+0x37c/0x686 [ 2647.290967] ? mark_held_locks+0xb1/0x100 [ 2647.312840] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2647.317982] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2647.323101] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2647.323118] ? trace_hardirqs_on+0xbd/0x310 [ 2647.323138] ? kasan_check_read+0x11/0x20 [ 2647.336146] ? ___ratelimit+0x37c/0x686 [ 2647.340161] ? trace_hardirqs_off_caller+0x300/0x300 [ 2647.345295] ? do_raw_spin_trylock+0x270/0x270 [ 2647.349883] ? trace_hardirqs_on_caller+0x310/0x310 [ 2647.354901] ? lock_acquire+0x1db/0x570 [ 2647.354924] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2647.354940] ? ___ratelimit+0xac/0x686 [ 2647.367892] ? idr_get_free+0xee0/0xee0 [ 2647.371881] oom_kill_process.cold+0x10/0x9d4 [ 2647.371901] ? cgroup_procs_next+0x70/0x70 [ 2647.380626] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2647.380644] ? oom_badness+0xa50/0xa50 [ 2647.380685] ? oom_evaluate_task+0x540/0x540 [ 2647.393436] ? mem_cgroup_iter_break+0x30/0x30 [ 2647.398040] ? out_of_memory+0x11b/0x1420 [ 2647.402227] out_of_memory+0x885/0x1420 [ 2647.402253] ? oom_killer_disable+0x340/0x340 [ 2647.410760] ? preempt_schedule+0x4b/0x60 [ 2647.414929] ? ___preempt_schedule+0x16/0x18 [ 2647.419358] mem_cgroup_out_of_memory+0x160/0x210 [ 2647.424230] ? memcg_memory_event+0x40/0x40 [ 2647.424263] memory_max_write+0x1b0/0x3e0 [ 2647.432733] ? mem_cgroup_write+0x440/0x440 [ 2647.437078] ? cgroup_file_write+0x92/0x830 [ 2647.441405] cgroup_file_write+0x252/0x830 [ 2647.441422] ? mem_cgroup_write+0x440/0x440 [ 2647.441438] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2647.450071] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2647.450088] kernfs_fop_write+0x2ba/0x480 [ 2647.450110] __vfs_write+0x116/0xb40 [ 2647.467817] ? check_preemption_disabled+0x48/0x290 [ 2647.472844] ? kernfs_fop_open+0x1030/0x1030 [ 2647.472861] ? kernel_read+0x120/0x120 [ 2647.472877] ? __lock_is_held+0xb6/0x140 [ 2647.481185] ? rcu_read_lock_sched_held+0x110/0x130 [ 2647.481202] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2647.481219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.490292] ? __sb_start_write+0x1ac/0x360 [ 2647.490311] vfs_write+0x20c/0x580 [ 2647.490333] ksys_write+0x105/0x260 [ 2647.490351] ? __ia32_sys_read+0xb0/0xb0 [ 2647.500625] ? trace_hardirqs_off_caller+0x300/0x300 [ 2647.500642] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2647.500661] __x64_sys_write+0x73/0xb0 [ 2647.508502] do_syscall_64+0x1a3/0x800 [ 2647.508522] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2647.508540] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2647.516232] ? trace_hardirqs_off_thunk+0x1a/0x1c 18:08:42 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2647.526090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.526103] RIP: 0033:0x458099 [ 2647.526119] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2647.533872] RSP: 002b:00007fc174b18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2647.543853] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2647.543876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2647.543899] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2647.543907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc174b196d4 [ 2647.543920] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2647.615085] memory: usage 3444kB, limit 0kB, failcnt 211096 [ 2647.634639] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2647.644066] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2647.651085] Memory cgroup stats for /syz3: cache:12KB rss:2200KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2180KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2647.674150] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22000,uid=0 [ 2647.695547] Memory cgroup out of memory: Kill process 22000 (syz-executor3) score 9272000 or sacrifice child [ 2647.709989] Killed process 22000 (syz-executor3) total-vm:72448kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB [ 2647.733389] syz-executor0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 2647.734463] oom_reaper: reaped process 22000 (syz-executor3), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2647.745520] CPU: 1 PID: 21899 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2647.761153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2647.761159] Call Trace: [ 2647.761203] dump_stack+0x1db/0x2d0 [ 2647.761226] ? dump_stack_print_info.cold+0x20/0x20 [ 2647.781781] dump_header+0x1e6/0x116c [ 2647.785592] ? add_lock_to_list.isra.0+0x450/0x450 [ 2647.790530] ? print_usage_bug+0xd0/0xd0 [ 2647.794602] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2647.799564] ? ___ratelimit+0x37c/0x686 [ 2647.803562] ? mark_held_locks+0xb1/0x100 [ 2647.803581] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2647.803611] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2647.817934] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2647.822521] ? trace_hardirqs_on+0xbd/0x310 [ 2647.822536] ? kasan_check_read+0x11/0x20 [ 2647.822552] ? ___ratelimit+0x37c/0x686 [ 2647.831045] ? trace_hardirqs_off_caller+0x300/0x300 [ 2647.831059] ? do_raw_spin_trylock+0x270/0x270 [ 2647.831075] ? trace_hardirqs_on_caller+0x310/0x310 [ 2647.831089] ? lock_acquire+0x1db/0x570 [ 2647.844731] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2647.844748] ? ___ratelimit+0xac/0x686 [ 2647.844765] ? idr_get_free+0xee0/0xee0 [ 2647.858833] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2647.858858] oom_kill_process.cold+0x10/0x9d4 [ 2647.858892] ? cgroup_procs_next+0x70/0x70 [ 2647.858910] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2647.866747] ? oom_badness+0xa50/0xa50 [ 2647.866768] ? oom_evaluate_task+0x540/0x540 [ 2647.866784] ? mem_cgroup_iter_break+0x30/0x30 [ 2647.880058] ? mutex_trylock+0x2d0/0x2d0 [ 2647.888418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.897401] ? rcu_read_unlock_special+0x380/0x380 [ 2647.897425] out_of_memory+0x885/0x1420 [ 2647.906999] ? mem_cgroup_iter+0x508/0xf30 [ 2647.907020] ? oom_killer_disable+0x340/0x340 [ 2647.907037] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2647.915952] ? lock_acquire+0x1db/0x570 [ 2647.915979] mem_cgroup_out_of_memory+0x160/0x210 [ 2647.915995] ? do_raw_spin_unlock+0xa0/0x330 [ 2647.943023] ? memcg_memory_event+0x40/0x40 [ 2647.947354] ? do_raw_spin_trylock+0x270/0x270 [ 2647.951949] ? _raw_spin_unlock+0x2d/0x50 [ 2647.951981] try_charge+0x12a9/0x19b0 [ 2647.952012] ? check_preemption_disabled+0x48/0x290 [ 2647.952035] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2647.969835] ? rcu_read_lock_sched_held+0x110/0x130 [ 2647.974858] ? __alloc_pages_nodemask+0xaca/0xdc0 [ 2647.979720] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2647.984766] ? ____cache_alloc_node+0x1be/0x1e0 [ 2647.989443] ? cache_grow_begin+0x599/0x8c0 [ 2647.993772] ? cache_grow_begin+0x599/0x8c0 [ 2647.998105] memcg_kmem_charge_memcg+0x7c/0x130 [ 2648.002782] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2648.007284] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2648.012822] ? __cpuset_node_allowed+0x19f/0x640 [ 2648.012842] cache_grow_begin+0x25f/0x8c0 [ 2648.012856] ? kasan_check_read+0x11/0x20 [ 2648.012874] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.031444] ? mempolicy_slab_node+0x139/0x390 [ 2648.036037] fallback_alloc+0x1fd/0x2d0 [ 2648.040043] ____cache_alloc_node+0x1be/0x1e0 [ 2648.044555] kmem_cache_alloc+0x1f5/0x710 [ 2648.048709] ? __lock_acquire+0x572/0x4a30 [ 2648.052974] __alloc_file+0x93/0x480 [ 2648.052991] ? file_free_rcu+0xe0/0xe0 [ 2648.053009] ? mark_held_locks+0x100/0x100 [ 2648.053034] alloc_empty_file+0x72/0x170 [ 2648.068911] path_openat+0x112/0x5650 [ 2648.072717] ? add_lock_to_list.isra.0+0x450/0x450 [ 2648.077679] ? __alloc_fd+0x549/0x700 [ 2648.081499] ? find_held_lock+0x35/0x120 [ 2648.085568] ? path_lookupat.isra.0+0xba0/0xba0 [ 2648.090266] ? do_dup2+0x580/0x580 [ 2648.093817] ? kasan_check_read+0x11/0x20 [ 2648.097969] ? do_raw_spin_unlock+0xa0/0x330 [ 2648.102380] ? do_raw_spin_trylock+0x270/0x270 [ 2648.102398] ? __phys_addr_symbol+0x30/0x70 [ 2648.102423] do_filp_open+0x26f/0x370 [ 2648.102438] ? may_open_dev+0x100/0x100 [ 2648.119102] ? exit_files+0xb0/0xb0 [ 2648.122738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2648.128295] ? digsig_verify.cold+0x32/0x32 [ 2648.132705] ? get_unused_fd_flags+0x122/0x1a0 [ 2648.137296] ? __alloc_fd+0x700/0x700 [ 2648.141099] ? getname_flags+0x277/0x5b0 [ 2648.145176] do_sys_open+0x59a/0x7c0 [ 2648.145197] ? filp_open+0x80/0x80 [ 2648.145230] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.157830] ? trace_hardirqs_off_caller+0x300/0x300 [ 2648.162945] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2648.167746] __x64_sys_open+0x7e/0xc0 [ 2648.171556] do_syscall_64+0x1a3/0x800 [ 2648.175471] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2648.180426] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2648.180448] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2648.180472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.190303] RIP: 0033:0x4560c0 [ 2648.190319] Code: 31 c0 e9 45 ff ff ff 0f 1f 00 80 3f 00 0f 84 f7 00 00 00 55 53 b9 02 00 00 00 be 00 08 09 00 89 c8 48 81 ec 98 00 00 00 0f 05 <48> 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 [ 2648.190327] RSP: 002b:00007ffd87009110 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 2648.190341] RAX: ffffffffffffffda RBX: 0000000000286473 RCX: 00000000004560c0 [ 2648.190350] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007ffd8700a2f0 [ 2648.190361] RBP: 0000000000000010 R08: 0000000000000001 R09: 0000000001045940 [ 2648.232571] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd8700a2f0 [ 2648.232580] R13: 000000000028614a R14: 0000000000000000 R15: 0000000000000000 [ 2648.276220] memory: usage 1928kB, limit 0kB, failcnt 1444250 [ 2648.282371] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2648.289588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2648.295756] Memory cgroup stats for /syz0: cache:24KB rss:136KB rss_huge:0KB shmem:96KB mapped_file:0KB [ 2648.295801] dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:44KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2648.323546] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=21899,uid=0 [ 2648.338203] Memory cgroup out of memory: Kill process 21899 (syz-executor0) score 8982000 or sacrifice child [ 2648.349156] Killed process 21899 (syz-executor0) total-vm:72316kB, anon-rss:92kB, file-rss:35712kB, shmem-rss:0kB [ 2648.360695] oom_reaper: reaped process 21899 (syz-executor0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 18:08:43 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:08:43 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2648.615855] chnl_net:caif_netlink_parms(): no params data found [ 2648.689031] IPVS: ftp: loaded support on port[0] = 21 [ 2648.835358] bridge0: port 1(bridge_slave_0) entered blocking state [ 2648.855111] bridge0: port 1(bridge_slave_0) entered disabled state [ 2648.876346] device bridge_slave_0 entered promiscuous mode [ 2648.915881] bridge0: port 2(bridge_slave_1) entered blocking state [ 2648.955260] bridge0: port 2(bridge_slave_1) entered disabled state [ 2648.963160] device bridge_slave_1 entered promiscuous mode [ 2649.065974] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2649.107927] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2649.146996] chnl_net:caif_netlink_parms(): no params data found [ 2649.168365] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2649.186473] team0: Port device team_slave_0 added [ 2649.214076] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2649.227703] team0: Port device team_slave_1 added [ 2649.252509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2649.292713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2649.326382] bridge0: port 1(bridge_slave_0) entered blocking state [ 2649.335798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2649.352048] device bridge_slave_0 entered promiscuous mode [ 2649.414631] device hsr_slave_0 entered promiscuous mode [ 2649.479786] device hsr_slave_1 entered promiscuous mode [ 2649.529867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2649.536986] bridge0: port 2(bridge_slave_1) entered blocking state [ 2649.545078] bridge0: port 2(bridge_slave_1) entered disabled state [ 2649.552966] device bridge_slave_1 entered promiscuous mode [ 2649.564922] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2649.604180] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2649.613387] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2649.632779] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2649.679632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2649.687021] team0: Port device team_slave_0 added [ 2649.694341] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2649.702416] team0: Port device team_slave_1 added [ 2649.707898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2649.729832] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2649.804315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2649.852396] device hsr_slave_0 entered promiscuous mode [ 2649.889401] device hsr_slave_1 entered promiscuous mode [ 2649.939790] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2649.947038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2649.992221] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2650.002849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2650.012340] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2650.025465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2650.034533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2650.072072] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2650.078187] 8021q: adding VLAN 0 to HW filter on device team0 [ 2650.115984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2650.136740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2650.148636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2650.164527] bridge0: port 1(bridge_slave_0) entered blocking state [ 2650.170959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2650.207201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2650.218412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2650.243220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2650.257337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2650.275517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2650.281945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2650.325597] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2650.340922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2650.350409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2650.367734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2650.375964] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2650.391570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2650.405918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2650.417854] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2650.446970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2650.456505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2650.472545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2650.480991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2650.491787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2650.499237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2650.507159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2650.546431] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2650.561223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2650.568533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2650.580462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2650.595020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2650.604926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2650.625389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2650.659352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2650.666962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2650.677623] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2650.691548] 8021q: adding VLAN 0 to HW filter on device team0 [ 2650.700756] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2650.706814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2650.758556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2650.767033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2650.775146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2650.783843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2650.790296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2650.802814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2650.818845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2650.827233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2650.835917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2650.852436] bridge0: port 2(bridge_slave_1) entered blocking state [ 2650.858807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2650.877198] device bridge_slave_1 left promiscuous mode [ 2650.885322] bridge0: port 2(bridge_slave_1) entered disabled state [ 2650.931109] device bridge_slave_0 left promiscuous mode [ 2650.936665] bridge0: port 1(bridge_slave_0) entered disabled state [ 2650.991351] device bridge_slave_1 left promiscuous mode [ 2650.996883] bridge0: port 2(bridge_slave_1) entered disabled state [ 2651.040962] device bridge_slave_0 left promiscuous mode [ 2651.046502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2651.388201] device hsr_slave_1 left promiscuous mode [ 2651.448461] device hsr_slave_0 left promiscuous mode [ 2651.504783] team0 (unregistering): Port device team_slave_1 removed [ 2651.535771] team0 (unregistering): Port device team_slave_0 removed [ 2651.567098] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2651.631417] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2651.790181] bond0 (unregistering): Released all slaves [ 2651.942917] device hsr_slave_1 left promiscuous mode [ 2651.985521] device hsr_slave_0 left promiscuous mode [ 2652.054737] team0 (unregistering): Port device team_slave_1 removed [ 2652.086193] team0 (unregistering): Port device team_slave_0 removed [ 2652.111464] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2652.136903] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2652.272305] bond0 (unregistering): Released all slaves [ 2652.401478] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2652.422048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2652.439581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2652.463739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2652.473665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2652.482337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2652.511815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2652.535548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2652.557300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2652.568514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2652.588720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2652.599580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2652.607764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2652.672885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2652.694306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2652.720028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2652.727283] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2652.730717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2652.745041] CPU: 1 PID: 22021 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2652.752170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2652.761532] Call Trace: [ 2652.761557] dump_stack+0x1db/0x2d0 [ 2652.761576] ? dump_stack_print_info.cold+0x20/0x20 [ 2652.761602] dump_header+0x1e6/0x116c [ 2652.761624] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2652.761642] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2652.761659] ? retint_kernel+0x2d/0x2d [ 2652.761681] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2652.761702] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2652.772934] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2652.781462] ? ___ratelimit+0x37c/0x686 [ 2652.781488] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2652.781511] ? retint_kernel+0x2d/0x2d [ 2652.781539] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2652.781562] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2652.781594] ? ___ratelimit+0xac/0x686 [ 2652.781611] ? idr_get_free+0xee0/0xee0 [ 2652.794993] oom_kill_process.cold+0x10/0x9d4 [ 2652.795015] ? cgroup_procs_next+0x70/0x70 [ 2652.795035] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2652.805408] ? oom_badness+0xa50/0xa50 [ 2652.805431] ? oom_evaluate_task+0x540/0x540 [ 2652.805449] ? mem_cgroup_iter_break+0x30/0x30 [ 2652.814182] ? mutex_trylock+0x2d0/0x2d0 [ 2652.823180] ? cgroup_file_notify+0x217/0x2e0 [ 2652.823216] out_of_memory+0x885/0x1420 [ 2652.823245] ? oom_killer_disable+0x340/0x340 [ 2652.823266] ? preempt_schedule+0x4b/0x60 [ 2652.823282] ? ___preempt_schedule+0x16/0x18 [ 2652.823308] mem_cgroup_out_of_memory+0x160/0x210 [ 2652.823326] ? memcg_memory_event+0x40/0x40 [ 2652.823357] memory_max_write+0x1b0/0x3e0 [ 2652.823371] ? lock_acquire+0x1db/0x570 [ 2652.823399] ? mem_cgroup_write+0x440/0x440 [ 2652.836343] ? lock_release+0xc40/0xc40 [ 2652.845052] ? add_lock_to_list.isra.0+0x450/0x450 [ 2652.845072] ? check_memory_region+0x112/0x190 [ 2652.845091] cgroup_file_write+0x252/0x830 [ 2652.857952] ? mem_cgroup_write+0x440/0x440 [ 2652.857969] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2652.857996] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2652.866619] kernfs_fop_write+0x2ba/0x480 [ 2652.866643] __vfs_write+0x116/0xb40 [ 2652.866681] ? check_preemption_disabled+0x48/0x290 [ 2652.866697] ? kernfs_fop_open+0x1030/0x1030 [ 2652.879661] ? kernel_read+0x120/0x120 [ 2652.879687] ? __lock_is_held+0xb6/0x140 [ 2652.879715] ? rcu_read_lock_sched_held+0x110/0x130 [ 2652.879729] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2652.879743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.879756] ? __sb_start_write+0x1ac/0x360 [ 2652.879776] vfs_write+0x20c/0x580 [ 2652.879795] ksys_write+0x105/0x260 [ 2652.888341] ? __ia32_sys_read+0xb0/0xb0 [ 2652.888361] ? trace_hardirqs_off_caller+0x300/0x300 [ 2652.888379] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2652.901660] __x64_sys_write+0x73/0xb0 [ 2652.901688] do_syscall_64+0x1a3/0x800 [ 2652.901706] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2652.909993] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2652.910016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2652.910041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2652.910053] RIP: 0033:0x458099 [ 2652.910068] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2652.910076] RSP: 002b:00007fbea6381c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2652.910089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2652.910098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2652.910121] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2652.910130] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbea63826d4 [ 2652.910138] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2652.918150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2652.933948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2652.945279] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2652.960231] memory: usage 3260kB, limit 0kB, failcnt 965217 [ 2652.961453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2652.964618] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2652.984873] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2653.045399] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2653.076324] Memory cgroup stats for /syz2: cache:4KB rss:2052KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2653.090567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2653.097477] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22020,uid=0 [ 2653.106000] Memory cgroup out of memory: Kill process 22020 (syz-executor2) score 9270000 or sacrifice child [ 2653.106513] Killed process 22020 (syz-executor2) total-vm:72584kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB 18:08:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce04f31b6857381d65f3184d8fd6ded9ae1fdaec890fc9e982703e73bb5804aafab8991a68498d4e57d03a8c9b172fcf671298761634b457028a7bd2a37c6c7e9066fcc68f1e5b0465296d1f61285d867959d621d9fa043d73b6e28a4974240af72aaed41de23237ab801ee6be53a54c5b3542811524f868c71c5148255c7f514c67b87c7679a50098dbd9eebe0d902321f9fefcdb46d66a295b1191df3d31d786b247132e45b477151b3c055c0b89087ab8bd082ea1be6504ad6f9423b364a66255b95d07c272ff30ed6c74ae59d9f20211680b5c6900a4dd9a6a537c34e9df406a7b6c5aea20124d6427ca1b8fa1ef80c7d9c9d054722ef41d6136e99092138c44b4549ff5f0812701997d53c259fd79320fcc41ba1e8f8db9a05fde91f9ef76c77684f8e40d3bb60fa3353f57d409d5d3c7ce2fd0674a5dc3772c4c15a4d05e0d239597dc62d5d588ab0d1a2db2116cc3abd56a8fc9ae7ec2743be749e1ceb7ab3fac29f590762af3b1a2988cc22105bc15d03d4b08395723a431ac9a12f14c45f0a99032375e5ed6147ace036eb496b3fd69b7df8d116218b2c5cb2faf084c60d539dbdd9f73fa0aecd1dfb830c192eb4282e74dd455afd74cbe6b48938f47184d685f51444b2709794806b8629924235a5a2b63a1967e6fd01e74404598f563656532e0b47d81394edc55b1f597028ead149a64c092ae626981bbc01e386a10ea8c09abcd95e4ee2377941c5c4d8b504e8dafb5f2778bf74066440d19fbf56554628be82793487cda9edc676c6a8f03d378e38eb0874d014d729dc35ce3f642fd09e2b64b96961e04b4414555f766c8e620acc84c70e4d5c0d3adbdba80265fdf042c92ad3fa1871ff412c6138fde9297c8bbf3ef22f669676cfaad27bce9aed68e29ca89501991b04f48dc697a13d4bc16de448949d8daa8c7e72a820f1b837a8c7", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:08:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:08:48 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:08:48 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:08:48 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2653.109921] oom_reaper: reaped process 22020 (syz-executor2), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2653.264675] syz-executor2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 18:08:48 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2653.330091] CPU: 0 PID: 21991 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2653.337254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2653.346607] Call Trace: [ 2653.346630] dump_stack+0x1db/0x2d0 [ 2653.346647] ? dump_stack_print_info.cold+0x20/0x20 [ 2653.346671] dump_header+0x1e6/0x116c [ 2653.346686] ? add_lock_to_list.isra.0+0x450/0x450 [ 2653.346703] ? print_usage_bug+0xd0/0xd0 [ 2653.346719] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2653.375642] ? ___ratelimit+0x37c/0x686 [ 2653.379627] ? mark_held_locks+0xb1/0x100 [ 2653.379646] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2653.379662] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2653.388904] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2653.388920] ? trace_hardirqs_on+0xbd/0x310 [ 2653.388935] ? kasan_check_read+0x11/0x20 [ 2653.388952] ? ___ratelimit+0x37c/0x686 [ 2653.411038] ? trace_hardirqs_off_caller+0x300/0x300 [ 2653.416152] ? do_raw_spin_trylock+0x270/0x270 [ 2653.416181] ? trace_hardirqs_on_caller+0x310/0x310 [ 2653.425769] ? lock_acquire+0x1db/0x570 [ 2653.429776] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2653.434890] ? ___ratelimit+0xac/0x686 [ 2653.438802] ? idr_get_free+0xee0/0xee0 [ 2653.442792] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2653.447437] oom_kill_process.cold+0x10/0x9d4 [ 2653.451943] ? cgroup_procs_next+0x70/0x70 [ 2653.456200] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2653.460715] ? oom_badness+0xa50/0xa50 [ 2653.464612] ? oom_evaluate_task+0x540/0x540 [ 2653.469032] ? mem_cgroup_iter_break+0x30/0x30 [ 2653.473615] ? mutex_trylock+0x2d0/0x2d0 [ 2653.477679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2653.483240] ? rcu_read_unlock_special+0x380/0x380 [ 2653.488194] out_of_memory+0x885/0x1420 [ 2653.492204] ? mem_cgroup_iter+0x508/0xf30 [ 2653.496449] ? oom_killer_disable+0x340/0x340 [ 2653.500953] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2653.506065] ? lock_acquire+0x1db/0x570 [ 2653.510060] mem_cgroup_out_of_memory+0x160/0x210 [ 2653.514939] ? do_raw_spin_unlock+0xa0/0x330 [ 2653.519355] ? memcg_memory_event+0x40/0x40 [ 2653.523705] ? do_raw_spin_trylock+0x270/0x270 [ 2653.528304] ? _raw_spin_unlock+0x2d/0x50 [ 2653.532466] try_charge+0x12a9/0x19b0 [ 2653.536271] ? check_preemption_disabled+0x48/0x290 [ 2653.541302] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2653.546179] ? rcu_read_lock_sched_held+0x110/0x130 [ 2653.551209] ? __alloc_pages_nodemask+0xaca/0xdc0 [ 2653.556060] ? retint_kernel+0x1b/0x2d [ 2653.559977] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2653.565019] memcg_kmem_charge_memcg+0x7c/0x130 [ 2653.569738] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2653.574291] cache_grow_begin+0x25f/0x8c0 [ 2653.578445] ? kasan_check_read+0x11/0x20 [ 2653.582596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2653.588138] ? mempolicy_slab_node+0x139/0x390 [ 2653.592742] fallback_alloc+0x1fd/0x2d0 [ 2653.596725] ____cache_alloc_node+0x1be/0x1e0 [ 2653.601237] kmem_cache_alloc+0x1f5/0x710 [ 2653.605388] ? __lock_acquire+0x572/0x4a30 [ 2653.609636] __alloc_file+0x93/0x480 [ 2653.613354] ? file_free_rcu+0xe0/0xe0 [ 2653.617264] ? mark_held_locks+0x100/0x100 [ 2653.621520] alloc_empty_file+0x72/0x170 [ 2653.625589] path_openat+0x112/0x5650 [ 2653.629400] ? add_lock_to_list.isra.0+0x450/0x450 [ 2653.634348] ? __alloc_fd+0x549/0x700 [ 2653.638188] ? find_held_lock+0x35/0x120 [ 2653.642258] ? path_lookupat.isra.0+0xba0/0xba0 [ 2653.646931] ? do_dup2+0x580/0x580 [ 2653.650498] ? kasan_check_read+0x11/0x20 [ 2653.654648] ? do_raw_spin_unlock+0xa0/0x330 [ 2653.659062] ? do_raw_spin_trylock+0x270/0x270 [ 2653.663650] ? __phys_addr_symbol+0x30/0x70 [ 2653.667983] do_filp_open+0x26f/0x370 [ 2653.671817] ? may_open_dev+0x100/0x100 [ 2653.675793] ? exit_files+0xb0/0xb0 [ 2653.679427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2653.685003] ? digsig_verify.cold+0x32/0x32 [ 2653.689335] ? get_unused_fd_flags+0x122/0x1a0 [ 2653.693924] ? __alloc_fd+0x700/0x700 [ 2653.697727] ? getname_flags+0x277/0x5b0 [ 2653.701795] do_sys_open+0x59a/0x7c0 [ 2653.705522] ? filp_open+0x80/0x80 [ 2653.709072] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2653.714442] ? trace_hardirqs_off_caller+0x300/0x300 [ 2653.719565] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2653.724330] __x64_sys_open+0x7e/0xc0 [ 2653.728144] do_syscall_64+0x1a3/0x800 [ 2653.732059] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2653.737000] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2653.742039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2653.746898] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2653.752087] RIP: 0033:0x4560c0 [ 2653.755282] Code: 31 c0 e9 45 ff ff ff 0f 1f 00 80 3f 00 0f 84 f7 00 00 00 55 53 b9 02 00 00 00 be 00 08 09 00 89 c8 48 81 ec 98 00 00 00 0f 05 <48> 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 [ 2653.774216] RSP: 002b:00007fff28f78710 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 18:08:48 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2653.781935] RAX: ffffffffffffffda RBX: 00000000002879e9 RCX: 00000000004560c0 [ 2653.789212] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007fff28f798f0 [ 2653.796495] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001cce940 [ 2653.803774] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff28f798f0 [ 2653.811057] R13: 0000000000287984 R14: 0000000000000000 R15: 0000000000000002 [ 2653.844105] memory: usage 884kB, limit 0kB, failcnt 965233 [ 2653.850421] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2653.857231] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2653.899876] Memory cgroup stats for /syz2: cache:4KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB 18:08:48 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2653.966727] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=21991,uid=0 [ 2653.994948] IPVS: ftp: loaded support on port[0] = 21 [ 2654.004840] Memory cgroup out of memory: Kill process 21991 (syz-executor2) score 8756000 or sacrifice child [ 2654.028227] Killed process 21991 (syz-executor2) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2654.064917] oom_reaper: reaped process 21991 (syz-executor2), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2654.077443] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2654.119439] CPU: 1 PID: 22038 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2654.126623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2654.126631] Call Trace: [ 2654.126655] dump_stack+0x1db/0x2d0 [ 2654.126684] ? dump_stack_print_info.cold+0x20/0x20 [ 2654.138648] dump_header+0x1e6/0x116c [ 2654.138666] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2654.147309] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2654.147328] ? retint_kernel+0x2d/0x2d [ 2654.147345] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2654.155895] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2654.155911] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2654.155929] ? ___ratelimit+0x37c/0x686 [ 2654.164405] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2654.164429] ? retint_kernel+0x2d/0x2d [ 2654.174286] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2654.174304] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2654.183716] ? ___ratelimit+0xac/0x686 [ 2654.183735] ? idr_get_free+0xee0/0xee0 [ 2654.183763] oom_kill_process.cold+0x10/0x9d4 [ 2654.192389] ? retint_kernel+0x2d/0x2d [ 2654.192406] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2654.192423] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2654.192438] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2654.192455] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2654.192472] ? oom_badness+0xa50/0xa50 [ 2654.192493] ? oom_evaluate_task+0x540/0x540 [ 2654.192510] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2654.202719] ? retint_kernel+0x2d/0x2d [ 2654.210563] ? out_of_memory+0x822/0x1420 [ 2654.210585] out_of_memory+0x885/0x1420 [ 2654.210611] ? oom_killer_disable+0x340/0x340 [ 2654.210631] ? preempt_schedule+0x4b/0x60 [ 2654.210647] ? ___preempt_schedule+0x16/0x18 [ 2654.210672] mem_cgroup_out_of_memory+0x160/0x210 [ 2654.210695] ? memcg_memory_event+0x40/0x40 [ 2654.210723] memory_max_write+0x1b0/0x3e0 [ 2654.210737] ? lock_acquire+0x1db/0x570 [ 2654.210756] ? mem_cgroup_write+0x440/0x440 [ 2654.224054] ? lock_release+0xc40/0xc40 [ 2654.224074] ? add_lock_to_list.isra.0+0x450/0x450 [ 2654.224089] ? lock_downgrade+0x910/0x910 [ 2654.234321] cgroup_file_write+0x252/0x830 [ 2654.234344] ? mem_cgroup_write+0x440/0x440 [ 2654.242712] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2654.251854] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2654.251870] kernfs_fop_write+0x2ba/0x480 [ 2654.251891] __vfs_write+0x116/0xb40 [ 2654.251907] ? check_preemption_disabled+0x48/0x290 [ 2654.251922] ? kernfs_fop_open+0x1030/0x1030 [ 2654.251938] ? kernel_read+0x120/0x120 [ 2654.251955] ? __lock_is_held+0xb6/0x140 [ 2654.272590] ? rcu_read_lock_sched_held+0x110/0x130 [ 2654.272607] ? rcu_sync_lockdep_assert+0x73/0xb0 18:08:49 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2654.281869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2654.281884] ? __sb_start_write+0x1ac/0x360 [ 2654.281903] vfs_write+0x20c/0x580 [ 2654.281924] ksys_write+0x105/0x260 [ 2654.281942] ? __ia32_sys_read+0xb0/0xb0 [ 2654.281958] ? trace_hardirqs_off_caller+0x300/0x300 [ 2654.281988] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2654.282005] __x64_sys_write+0x73/0xb0 [ 2654.282022] do_syscall_64+0x1a3/0x800 [ 2654.282039] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2654.290498] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2654.298795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2654.298852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2654.307740] RIP: 0033:0x458099 [ 2654.316118] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2654.316128] RSP: 002b:00007fe969316c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2654.316145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2654.325391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2654.325401] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2654.325410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9693176d4 [ 2654.325419] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2654.350022] memory: usage 3152kB, limit 0kB, failcnt 312441 [ 2654.384404] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2654.395522] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2654.409290] Memory cgroup stats for /syz5: cache:148KB rss:2084KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2654.435461] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22036,uid=0 [ 2654.492919] Memory cgroup out of memory: Kill process 22036 (syz-executor5) score 9271000 or sacrifice child [ 2654.503055] Killed process 22036 (syz-executor5) total-vm:72452kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 2654.574920] oom_reaper: reaped process 22036 (syz-executor5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:08:49 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2654.802648] chnl_net:caif_netlink_parms(): no params data found 18:08:49 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:08:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2654.910775] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2654.931127] CPU: 0 PID: 22015 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2654.938290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2654.938296] Call Trace: [ 2654.938318] dump_stack+0x1db/0x2d0 [ 2654.938337] ? dump_stack_print_info.cold+0x20/0x20 [ 2654.938363] dump_header+0x1e6/0x116c [ 2654.953974] ? add_lock_to_list.isra.0+0x450/0x450 [ 2654.953994] ? print_usage_bug+0xd0/0xd0 [ 2654.954016] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2654.962836] ? ___ratelimit+0x37c/0x686 [ 2654.962861] ? mark_held_locks+0xb1/0x100 [ 2654.971852] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2654.971868] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2654.971884] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2654.971900] ? trace_hardirqs_on+0xbd/0x310 [ 2654.971915] ? kasan_check_read+0x11/0x20 [ 2654.971932] ? ___ratelimit+0x37c/0x686 [ 2654.980830] ? trace_hardirqs_off_caller+0x300/0x300 [ 2654.980846] ? do_raw_spin_trylock+0x270/0x270 [ 2654.980861] ? trace_hardirqs_on_caller+0x310/0x310 [ 2654.990108] ? lock_acquire+0x1db/0x570 [ 2654.990132] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2654.990149] ? ___ratelimit+0xac/0x686 [ 2654.990189] ? idr_get_free+0xee0/0xee0 [ 2654.990205] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2654.990231] oom_kill_process.cold+0x10/0x9d4 [ 2654.999913] ? cgroup_procs_next+0x70/0x70 [ 2654.999933] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2654.999950] ? oom_badness+0xa50/0xa50 [ 2654.999970] ? oom_evaluate_task+0x540/0x540 [ 2654.999986] ? mem_cgroup_iter_break+0x30/0x30 [ 2655.008457] ? mutex_trylock+0x2d0/0x2d0 [ 2655.008474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.008502] ? rcu_read_unlock_special+0x380/0x380 [ 2655.017581] out_of_memory+0x885/0x1420 [ 2655.017599] ? mem_cgroup_iter+0x508/0xf30 [ 2655.017619] ? oom_killer_disable+0x340/0x340 [ 2655.027231] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2655.027249] ? lock_acquire+0x1db/0x570 [ 2655.027275] mem_cgroup_out_of_memory+0x160/0x210 [ 2655.036347] ? do_raw_spin_unlock+0xa0/0x330 [ 2655.036367] ? memcg_memory_event+0x40/0x40 [ 2655.036381] ? do_raw_spin_trylock+0x270/0x270 [ 2655.036407] ? _raw_spin_unlock+0x2d/0x50 [ 2655.044378] try_charge+0x12a9/0x19b0 [ 2655.044395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.044420] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2655.053503] ? rcu_read_unlock_special+0x380/0x380 [ 2655.053529] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2655.062269] ? get_mem_cgroup_from_page+0x190/0x190 [ 2655.062293] ? rcu_read_lock_sched_held+0x110/0x130 [ 2655.062312] mem_cgroup_try_charge+0x43a/0xdb0 [ 2655.070626] ? mem_cgroup_protected+0xa10/0xa10 [ 2655.070650] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.070666] ? print_usage_bug+0xd0/0xd0 [ 2655.070682] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2655.070694] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2655.070716] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2655.070734] wp_page_copy+0x45a/0x1c30 [ 2655.079378] ? swp_swapcount+0x540/0x540 [ 2655.079407] ? pmd_pfn+0x1d0/0x1d0 [ 2655.090210] ? find_held_lock+0x35/0x120 [ 2655.090229] ? do_wp_page+0x70d/0x16b0 [ 2655.090245] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2655.090269] ? kasan_check_read+0x11/0x20 [ 2655.090283] ? do_raw_spin_unlock+0xa0/0x330 [ 2655.090299] ? do_raw_spin_trylock+0x270/0x270 [ 2655.098509] ? __lock_acquire+0x572/0x4a30 [ 2655.098534] do_wp_page+0x715/0x16b0 [ 2655.098553] ? finish_mkwrite_fault+0x540/0x540 [ 2655.108147] ? kasan_check_read+0x11/0x20 [ 2655.108189] ? do_raw_spin_lock+0x156/0x360 [ 2655.108207] ? rwlock_bug.part.0+0x90/0x90 [ 2655.108224] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2655.117065] __handle_mm_fault+0x2c8e/0x55a0 [ 2655.117090] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2655.125819] ? check_preemption_disabled+0x48/0x290 [ 2655.125839] ? handle_mm_fault+0x3cc/0xc80 [ 2655.125869] ? lock_downgrade+0x910/0x910 [ 2655.134592] ? kasan_check_read+0x11/0x20 [ 2655.134611] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2655.134628] ? rcu_read_unlock_special+0x380/0x380 [ 2655.134644] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2655.143980] ? check_preemption_disabled+0x48/0x290 [ 2655.144003] handle_mm_fault+0x4ec/0xc80 [ 2655.144021] ? __handle_mm_fault+0x55a0/0x55a0 [ 2655.144035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.144048] ? vmacache_update+0x114/0x140 [ 2655.144073] __do_page_fault+0x5da/0xd60 [ 2655.153849] do_page_fault+0xe6/0x7d8 [ 2655.153866] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2655.163728] ? vmalloc_sync_all+0x30/0x30 [ 2655.163744] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2655.163762] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2655.173361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.173379] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2655.173397] ? page_fault+0x8/0x30 [ 2655.173414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2655.183629] ? page_fault+0x8/0x30 [ 2655.183646] page_fault+0x1e/0x30 [ 2655.183658] RIP: 0033:0x42f226 18:08:50 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2655.183689] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2655.193310] RSP: 002b:00007ffc13afff70 EFLAGS: 00010206 [ 2655.193322] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2655.193331] RDX: 0000000001911930 RSI: 0000000001919970 RDI: 0000000000000003 [ 2655.193339] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001910940 [ 2655.193347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2655.193355] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2655.278945] memory: usage 836kB, limit 0kB, failcnt 312449 [ 2655.477785] IPVS: ftp: loaded support on port[0] = 21 [ 2655.524542] bridge0: port 1(bridge_slave_0) entered blocking state [ 2655.537607] bridge0: port 1(bridge_slave_0) entered disabled state [ 2655.545545] device bridge_slave_0 entered promiscuous mode [ 2655.579818] bridge0: port 2(bridge_slave_1) entered blocking state [ 2655.586241] bridge0: port 2(bridge_slave_1) entered disabled state [ 2655.600584] device bridge_slave_1 entered promiscuous mode [ 2655.619299] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2655.626103] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2655.649479] Memory cgroup stats for /syz5: cache:148KB rss:28KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2655.698979] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22015,uid=0 [ 2655.724043] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2655.729198] Memory cgroup out of memory: Kill process 22015 (syz-executor5) score 8756000 or sacrifice child [ 2655.748725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2655.757304] Killed process 22015 (syz-executor5) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2655.892144] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2655.900023] team0: Port device team_slave_0 added [ 2655.946471] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2655.959868] team0: Port device team_slave_1 added [ 2655.965070] chnl_net:caif_netlink_parms(): no params data found [ 2655.990629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2655.998224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2656.139673] device hsr_slave_0 entered promiscuous mode [ 2656.169359] device hsr_slave_1 entered promiscuous mode [ 2656.209411] bridge0: port 1(bridge_slave_0) entered blocking state [ 2656.215824] bridge0: port 1(bridge_slave_0) entered disabled state [ 2656.231840] device bridge_slave_0 entered promiscuous mode [ 2656.245887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2656.268339] bridge0: port 2(bridge_slave_1) entered blocking state [ 2656.291236] bridge0: port 2(bridge_slave_1) entered disabled state [ 2656.316238] device bridge_slave_1 entered promiscuous mode [ 2656.339481] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2656.400448] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2656.422878] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2656.466719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2656.497325] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2656.525484] team0: Port device team_slave_0 added [ 2656.531820] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2656.558245] team0: Port device team_slave_1 added [ 2656.571252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2656.596958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2656.682392] device hsr_slave_0 entered promiscuous mode [ 2656.719423] device hsr_slave_1 entered promiscuous mode [ 2656.759691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2656.767412] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2656.816885] bridge0: port 2(bridge_slave_1) entered blocking state [ 2656.823341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2656.830069] bridge0: port 1(bridge_slave_0) entered blocking state [ 2656.836447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2656.949341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2656.976003] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2657.008635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2657.026943] bridge0: port 2(bridge_slave_1) entered disabled state [ 2657.046775] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2657.078696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2657.099775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2657.110522] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2657.116616] 8021q: adding VLAN 0 to HW filter on device team0 [ 2657.170107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2657.177982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2657.190240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2657.209480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2657.217812] bridge0: port 1(bridge_slave_0) entered blocking state [ 2657.224265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2657.254403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2657.285332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2657.293351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2657.320221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2657.329538] bridge0: port 2(bridge_slave_1) entered blocking state [ 2657.335913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2657.367801] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2657.393300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2657.403469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2657.420247] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2657.449411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2657.456725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2657.476937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2657.501872] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2657.507984] 8021q: adding VLAN 0 to HW filter on device team0 [ 2657.515807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2657.535246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2657.545911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2657.554210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2657.563127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2657.571490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2657.580389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2657.588114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2657.594570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2657.605008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2657.615549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2657.631529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2657.645401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2657.655788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2657.670459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2657.678486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2657.695216] bridge0: port 2(bridge_slave_1) entered blocking state [ 2657.701662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2657.721688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2657.732951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2657.741907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2657.750510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2657.758199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2657.769872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2657.778276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2657.789840] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2657.795941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2657.818772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2657.826938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2657.839736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2657.847394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2657.889682] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2657.899757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2657.906819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2657.920218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2657.928519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2657.967827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2657.977227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2657.999905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2658.011492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2658.030562] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2658.038344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2658.060267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2658.075380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2658.089735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2658.106076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2658.131929] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2658.139790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2658.176313] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2658.210393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2658.256884] device lo entered promiscuous mode [ 2658.598731] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2658.616999] CPU: 0 PID: 22072 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2658.624137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2658.633674] Call Trace: [ 2658.636288] dump_stack+0x1db/0x2d0 [ 2658.639938] ? dump_stack_print_info.cold+0x20/0x20 [ 2658.644980] dump_header+0x1e6/0x116c [ 2658.648800] ? add_lock_to_list.isra.0+0x450/0x450 [ 2658.653759] ? print_usage_bug+0xd0/0xd0 [ 2658.657837] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2658.662783] ? ___ratelimit+0x37c/0x686 [ 2658.666780] ? mark_held_locks+0xb1/0x100 [ 2658.670946] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2658.676064] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2658.681203] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2658.685800] ? trace_hardirqs_on+0xbd/0x310 [ 2658.690133] ? kasan_check_read+0x11/0x20 [ 2658.694320] ? ___ratelimit+0x37c/0x686 [ 2658.698308] ? trace_hardirqs_off_caller+0x300/0x300 [ 2658.703422] ? do_raw_spin_trylock+0x270/0x270 [ 2658.708014] ? trace_hardirqs_on_caller+0x310/0x310 [ 2658.713054] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2658.718193] ? ___ratelimit+0xac/0x686 [ 2658.722097] ? idr_get_free+0xee0/0xee0 [ 2658.726095] oom_kill_process.cold+0x10/0x9d4 [ 2658.730605] ? cgroup_procs_next+0x70/0x70 [ 2658.734855] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2658.739362] ? oom_badness+0xa50/0xa50 [ 2658.743266] ? oom_evaluate_task+0x540/0x540 [ 2658.747690] ? mem_cgroup_iter_break+0x30/0x30 [ 2658.752308] ? out_of_memory+0x6c5/0x1420 [ 2658.756472] out_of_memory+0x885/0x1420 [ 2658.760476] ? oom_killer_disable+0x340/0x340 [ 2658.764989] ? preempt_schedule+0x4b/0x60 [ 2658.769149] ? ___preempt_schedule+0x16/0x18 [ 2658.773607] mem_cgroup_out_of_memory+0x160/0x210 [ 2658.778462] ? memcg_memory_event+0x40/0x40 [ 2658.782813] memory_max_write+0x1b0/0x3e0 [ 2658.786969] ? lock_acquire+0x1db/0x570 [ 2658.790967] ? mem_cgroup_write+0x440/0x440 [ 2658.795300] ? lock_release+0xc40/0xc40 [ 2658.799291] ? add_lock_to_list.isra.0+0x450/0x450 [ 2658.804230] ? lock_downgrade+0x910/0x910 [ 2658.808398] cgroup_file_write+0x252/0x830 [ 2658.812651] ? mem_cgroup_write+0x440/0x440 [ 2658.816989] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2658.821947] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2658.826889] kernfs_fop_write+0x2ba/0x480 [ 2658.831109] __vfs_write+0x116/0xb40 [ 2658.834881] ? check_preemption_disabled+0x48/0x290 [ 2658.839910] ? kernfs_fop_open+0x1030/0x1030 [ 2658.844335] ? kernel_read+0x120/0x120 [ 2658.848239] ? __lock_is_held+0xb6/0x140 [ 2658.852326] ? rcu_read_lock_sched_held+0x110/0x130 [ 2658.857353] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2658.862121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.867672] ? __sb_start_write+0x1ac/0x360 [ 2658.872013] vfs_write+0x20c/0x580 [ 2658.875572] ksys_write+0x105/0x260 [ 2658.879234] ? __ia32_sys_read+0xb0/0xb0 [ 2658.883314] ? trace_hardirqs_off_caller+0x300/0x300 [ 2658.888433] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2658.893227] __x64_sys_write+0x73/0xb0 [ 2658.897130] do_syscall_64+0x1a3/0x800 [ 2658.901059] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2658.906005] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2658.911041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2658.915905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2658.921103] RIP: 0033:0x458099 [ 2658.924311] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2658.943237] RSP: 002b:00007f56f9a48c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2658.950971] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2658.958262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2658.965547] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2658.972832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56f9a496d4 [ 2658.980116] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2658.996506] memory: usage 3228kB, limit 0kB, failcnt 965234 [ 2659.002749] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2659.010037] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2659.016411] Memory cgroup stats for /syz2: cache:4KB rss:1992KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2116KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2659.038085] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22071,uid=0 [ 2659.053261] Memory cgroup out of memory: Kill process 22071 (syz-executor2) score 9271000 or sacrifice child [ 2659.065118] Killed process 22071 (syz-executor2) total-vm:72452kB, anon-rss:2180kB, file-rss:35672kB, shmem-rss:0kB [ 2659.079560] oom_reaper: reaped process 22071 (syz-executor2), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2659.282387] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2659.292825] CPU: 1 PID: 22053 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2659.299994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2659.309406] Call Trace: [ 2659.312044] dump_stack+0x1db/0x2d0 [ 2659.315667] ? dump_stack_print_info.cold+0x20/0x20 [ 2659.320693] dump_header+0x1e6/0x116c [ 2659.324492] ? add_lock_to_list.isra.0+0x450/0x450 [ 2659.329418] ? print_usage_bug+0xd0/0xd0 [ 2659.333474] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2659.338398] ? ___ratelimit+0x37c/0x686 [ 2659.342370] ? mark_held_locks+0xb1/0x100 [ 2659.346515] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2659.351667] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2659.356770] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2659.361350] ? trace_hardirqs_on+0xbd/0x310 [ 2659.365665] ? kasan_check_read+0x11/0x20 [ 2659.369810] ? ___ratelimit+0x37c/0x686 [ 2659.373776] ? trace_hardirqs_off_caller+0x300/0x300 [ 2659.379020] ? do_raw_spin_trylock+0x270/0x270 [ 2659.383609] ? trace_hardirqs_on_caller+0x310/0x310 [ 2659.388616] ? lock_acquire+0x1db/0x570 [ 2659.392589] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2659.397691] ? ___ratelimit+0xac/0x686 [ 2659.401576] ? idr_get_free+0xee0/0xee0 [ 2659.405542] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2659.410123] oom_kill_process.cold+0x10/0x9d4 [ 2659.414613] ? cgroup_procs_next+0x70/0x70 [ 2659.418842] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2659.423344] ? oom_badness+0xa50/0xa50 [ 2659.427230] ? oom_evaluate_task+0x540/0x540 [ 2659.431632] ? mem_cgroup_iter_break+0x30/0x30 [ 2659.436208] ? mutex_trylock+0x2d0/0x2d0 [ 2659.440262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.445800] ? rcu_read_unlock_special+0x380/0x380 [ 2659.450769] out_of_memory+0x885/0x1420 [ 2659.454740] ? mem_cgroup_iter+0x508/0xf30 [ 2659.458985] ? oom_killer_disable+0x340/0x340 [ 2659.463488] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2659.468620] ? lock_acquire+0x1db/0x570 [ 2659.472598] mem_cgroup_out_of_memory+0x160/0x210 [ 2659.477435] ? do_raw_spin_unlock+0xa0/0x330 [ 2659.481842] ? memcg_memory_event+0x40/0x40 [ 2659.486159] ? do_raw_spin_trylock+0x270/0x270 [ 2659.490760] ? _raw_spin_unlock+0x2d/0x50 [ 2659.494904] try_charge+0x12a9/0x19b0 [ 2659.498704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.504254] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2659.509102] ? rcu_read_unlock_special+0x380/0x380 [ 2659.514079] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2659.518925] ? get_mem_cgroup_from_page+0x190/0x190 [ 2659.523984] ? rcu_read_lock_sched_held+0x110/0x130 [ 2659.528996] mem_cgroup_try_charge+0x43a/0xdb0 [ 2659.533573] ? mem_cgroup_protected+0xa10/0xa10 [ 2659.538241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.543810] ? print_usage_bug+0xd0/0xd0 [ 2659.547867] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2659.553395] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2659.558940] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2659.563869] wp_page_copy+0x45a/0x1c30 [ 2659.567748] ? swp_swapcount+0x540/0x540 [ 2659.571807] ? pmd_pfn+0x1d0/0x1d0 [ 2659.575342] ? find_held_lock+0x35/0x120 [ 2659.579398] ? do_wp_page+0x70d/0x16b0 [ 2659.583284] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2659.588819] ? kasan_check_read+0x11/0x20 [ 2659.592964] ? do_raw_spin_unlock+0xa0/0x330 [ 2659.597410] ? do_raw_spin_trylock+0x270/0x270 [ 2659.601986] ? __lock_acquire+0x572/0x4a30 [ 2659.606221] do_wp_page+0x715/0x16b0 [ 2659.609931] ? finish_mkwrite_fault+0x540/0x540 [ 2659.614591] ? kasan_check_read+0x11/0x20 [ 2659.618732] ? do_raw_spin_lock+0x156/0x360 [ 2659.623050] ? rwlock_bug.part.0+0x90/0x90 [ 2659.627281] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2659.632384] __handle_mm_fault+0x2c8e/0x55a0 [ 2659.636832] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2659.641671] ? check_preemption_disabled+0x48/0x290 [ 2659.646727] ? handle_mm_fault+0x3cc/0xc80 [ 2659.650973] ? lock_downgrade+0x910/0x910 [ 2659.655111] ? kasan_check_read+0x11/0x20 [ 2659.659293] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2659.664562] ? rcu_read_unlock_special+0x380/0x380 [ 2659.669485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2659.675018] ? check_preemption_disabled+0x48/0x290 [ 2659.680033] handle_mm_fault+0x4ec/0xc80 [ 2659.684091] ? __handle_mm_fault+0x55a0/0x55a0 [ 2659.688677] __do_page_fault+0x5da/0xd60 [ 2659.692741] do_page_fault+0xe6/0x7d8 [ 2659.696570] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2659.701499] ? vmalloc_sync_all+0x30/0x30 [ 2659.705640] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2659.711124] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2659.716045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.721578] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2659.726588] ? page_fault+0x8/0x30 [ 2659.730126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2659.734962] ? page_fault+0x8/0x30 [ 2659.738538] page_fault+0x1e/0x30 [ 2659.741986] RIP: 0033:0x42f226 [ 2659.745189] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2659.764087] RSP: 002b:00007ffc10828e50 EFLAGS: 00010206 [ 2659.769450] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2659.776721] RDX: 0000000000c96930 RSI: 0000000000c9e970 RDI: 0000000000000003 [ 2659.783983] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000000c95940 [ 2659.791247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2659.798507] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2659.817385] memory: usage 908kB, limit 0kB, failcnt 965242 [ 2659.823323] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2659.837701] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2659.844715] Memory cgroup stats for /syz2: cache:4KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB [ 2659.844758] writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2659.871606] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22053,uid=0 [ 2659.886259] Memory cgroup out of memory: Kill process 22053 (syz-executor2) score 8756000 or sacrifice child [ 2659.896408] Killed process 22053 (syz-executor2) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2659.907669] oom_reaper: reaped process 22053 (syz-executor2), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2660.409621] device bridge_slave_1 left promiscuous mode [ 2660.415151] bridge0: port 2(bridge_slave_1) entered disabled state [ 2660.469983] device bridge_slave_0 left promiscuous mode [ 2660.475462] bridge0: port 1(bridge_slave_0) entered disabled state [ 2660.531064] device bridge_slave_1 left promiscuous mode [ 2660.536552] bridge0: port 2(bridge_slave_1) entered disabled state [ 2660.589902] device bridge_slave_0 left promiscuous mode [ 2660.595402] bridge0: port 1(bridge_slave_0) entered disabled state [ 2660.892997] device hsr_slave_1 left promiscuous mode [ 2660.935250] device hsr_slave_0 left promiscuous mode [ 2660.994385] team0 (unregistering): Port device team_slave_1 removed [ 2661.017200] team0 (unregistering): Port device team_slave_0 removed [ 2661.054399] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2661.118399] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2661.256690] bond0 (unregistering): Released all slaves [ 2661.411523] device hsr_slave_1 left promiscuous mode [ 2661.454853] device hsr_slave_0 left promiscuous mode [ 2661.524590] team0 (unregistering): Port device team_slave_1 removed [ 2661.559898] team0 (unregistering): Port device team_slave_0 removed [ 2661.582078] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2661.645741] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2661.827697] bond0 (unregistering): Released all slaves [ 2664.999703] device bridge_slave_1 left promiscuous mode [ 2665.005285] bridge0: port 2(bridge_slave_1) entered disabled state [ 2665.060213] device bridge_slave_0 left promiscuous mode [ 2665.065758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2665.264285] device hsr_slave_1 left promiscuous mode [ 2665.325230] device hsr_slave_0 left promiscuous mode [ 2665.404812] team0 (unregistering): Port device team_slave_1 removed [ 2665.422465] team0 (unregistering): Port device team_slave_0 removed [ 2665.435932] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2665.486848] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2665.647646] bond0 (unregistering): Released all slaves 18:09:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce04f31b6857381d65f3184d8fd6ded9ae1fdaec890fc9e982703e73bb5804aafab8991a68498d4e57d03a8c9b172fcf671298761634b457028a7bd2a37c6c7e9066fcc68f1e5b0465296d1f61285d867959d621d9fa043d73b6e28a4974240af72aaed41de23237ab801ee6be53a54c5b3542811524f868c71c5148255c7f514c67b87c7679a50098dbd9eebe0d902321f9fefcdb46d66a295b1191df3d31d786b247132e45b477151b3c055c0b89087ab8bd082ea1be6504ad6f9423b364a66255b95d07c272ff30ed6c74ae59d9f20211680b5c6900a4dd9a6a537c34e9df406a7b6c5aea20124d6427ca1b8fa1ef80c7d9c9d054722ef41d6136e99092138c44b4549ff5f0812701997d53c259fd79320fcc41ba1e8f8db9a05fde91f9ef76c77684f8e40d3bb60fa3353f57d409d5d3c7ce2fd0674a5dc3772c4c15a4d05e0d239597dc62d5d588ab0d1a2db2116cc3abd56a8fc9ae7ec2743be749e1ceb7ab3fac29f590762af3b1a2988cc22105bc15d03d4b08395723a431ac9a12f14c45f0a99032375e5ed6147ace036eb496b3fd69b7df8d116218b2c5cb2faf084c60d539dbdd9f73fa0aecd1dfb830c192eb4282e74dd455afd74cbe6b48938f47184d685f51444b2709794806b8629924235a5a2b63a1967e6fd01e74404598f563656532e0b47d81394edc55b1f597028ead149a64c092ae626981bbc01e386a10ea8c09abcd95e4ee2377941c5c4d8b504e8dafb5f2778bf74066440d19fbf56554628be82793487cda9edc676c6a8f03d378e38eb0874d014d729dc35ce3f642fd09e2b64b96961e04b4414555f766c8e620acc84c70e4d5c0d3adbdba80265fdf042c92ad3fa1871ff412c6138fde9297c8bbf3ef22f669676cfaad27bce9aed68e29ca89501991b04f48dc697a13d4bc16de448949d8daa8c7e72a820f1b837a8c7", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:09:48 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:09:48 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:09:48 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:09:48 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:09:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce04f31b6857381d65f3184d8fd6ded9ae1fdaec890fc9e982703e73bb5804aafab8991a68498d4e57d03a8c9b172fcf671298761634b457028a7bd2a37c6c7e9066fcc68f1e5b0465296d1f61285d867959d621d9fa043d73b6e28a4974240af72aaed41de23237ab801ee6be53a54c5b3542811524f868c71c5148255c7f514c67b87c7679a50098dbd9eebe0d902321f9fefcdb46d66a295b1191df3d31d786b247132e45b477151b3c055c0b89087ab8bd082ea1be6504ad6f9423b364a66255b95d07c272ff30ed6c74ae59d9f20211680b5c6900a4dd9a6a537c34e9df406a7b6c5aea20124d6427ca1b8fa1ef80c7d9c9d054722ef41d6136e99092138c44b4549ff5f0812701997d53c259fd79320fcc41ba1e8f8db9a05fde91f9ef76c77684f8e40d3bb60fa3353f57d409d5d3c7ce2fd0674a5dc3772c4c15a4d05e0d239597dc62d5d588ab0d1a2db2116cc3abd56a8fc9ae7ec2743be749e1ceb7ab3fac29f590762af3b1a2988cc22105bc15d03d4b08395723a431ac9a12f14c45f0a99032375e5ed6147ace036eb496b3fd69b7df8d116218b2c5cb2faf084c60d539dbdd9f73fa0aecd1dfb830c192eb4282e74dd455afd74cbe6b48938f47184d685f51444b2709794806b8629924235a5a2b63a1967e6fd01e74404598f563656532e0b47d81394edc55b1f597028ead149a64c092ae626981bbc01e386a10ea8c09abcd95e4ee2377941c5c4d8b504e8dafb5f2778bf74066440d19fbf56554628be82793487cda9edc676c6a8f03d378e38eb0874d014d729dc35ce3f642fd09e2b64b96961e04b4414555f766c8e620acc84c70e4d5c0d3adbdba80265fdf042c92ad3fa1871ff412c6138fde9297c8bbf3ef22f669676cfaad27bce9aed68e29ca89501991b04f48dc697a13d4bc16de448949d8daa8c7e72a820f1b837a8c7", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:09:48 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:09:48 executing program 0: r0 = getpid() r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x70, 0x9, 0x1ff, 0x4, 0x31f, 0x0, 0x101, 0x460, 0x2, 0x2b20, 0xf2, 0x4, 0x1, 0x7, 0xffffffff, 0x7fffffff, 0x6, 0x4000000000, 0x101, 0x5, 0xff, 0x401, 0x4, 0x3, 0x9, 0xe9d, 0x2, 0x8, 0x7f, 0xbe3, 0xb42, 0x3f, 0x4, 0x3, 0x7, 0x7, 0x40, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x1000, 0x6, 0x4, 0xf, 0x2, 0x2d5d, 0x6}, 0xffffffffffffff9c, 0xf, 0xffffffffffffff9c, 0xe) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x100000000, 0xfffffffffffeffff, 0x1, 0x1f, 0x0, 0x2b, 0x60800, 0x2, 0x1f, 0x0, 0x8, 0x5, 0x0, 0x20, 0x80000001, 0x3, 0x4, 0x1, 0x0, 0x8000, 0x4, 0xf763, 0x40, 0xee, 0xd6e2, 0x0, 0x7fa, 0x5, 0x0, 0xffffffffffff66bb, 0xffffffffffff0001, 0x9, 0x6, 0x3, 0x2, 0x3, 0x0, 0x1000, 0x6, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x401, 0x40, 0x2, 0x41f, 0x5, 0x8}, r0, 0x7, r1, 0x1) r2 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80fffffff05e510befccd7", 0x2e}], 0x1}, 0x0) [ 2713.685252] IPVS: ftp: loaded support on port[0] = 21 18:09:48 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2713.757209] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 2713.796154] netlink: 'syz-executor0': attribute type 29 has an invalid length. 18:09:48 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) [ 2713.893575] device bridge_slave_1 left promiscuous mode [ 2713.900048] bridge0: port 2(bridge_slave_1) entered disabled state [ 2713.959404] device bridge_slave_0 left promiscuous mode [ 2713.965606] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.096361] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2714.109353] CPU: 0 PID: 22095 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2714.116502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2714.125865] Call Trace: [ 2714.128477] dump_stack+0x1db/0x2d0 [ 2714.132124] ? dump_stack_print_info.cold+0x20/0x20 [ 2714.137210] dump_header+0x1e6/0x116c [ 2714.141030] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2714.145805] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2714.150546] ? retint_kernel+0x2d/0x2d [ 2714.154482] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2714.159432] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2714.164373] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2714.169903] ? ___ratelimit+0x37c/0x686 [ 2714.173905] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2714.178684] ? retint_kernel+0x2d/0x2d [ 2714.182603] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2714.187726] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2714.192847] ? ___ratelimit+0xac/0x686 [ 2714.196759] ? idr_get_free+0xee0/0xee0 [ 2714.200823] oom_kill_process.cold+0x10/0x9d4 [ 2714.205342] ? cgroup_procs_next+0x70/0x70 [ 2714.209601] ? _raw_spin_unlock_irq+0x54/0x90 [ 2714.214114] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2714.218627] ? oom_badness+0xa50/0xa50 [ 2714.222532] ? oom_evaluate_task+0x540/0x540 [ 2714.226957] ? mem_cgroup_iter_break+0x30/0x30 [ 2714.231554] ? mutex_trylock+0x2d0/0x2d0 [ 2714.235644] ? cgroup_file_notify+0x217/0x2e0 [ 2714.240183] out_of_memory+0x885/0x1420 [ 2714.244209] ? oom_killer_disable+0x340/0x340 [ 2714.248725] ? preempt_schedule+0x4b/0x60 [ 2714.252887] ? ___preempt_schedule+0x16/0x18 [ 2714.257321] mem_cgroup_out_of_memory+0x160/0x210 [ 2714.262206] ? memcg_memory_event+0x40/0x40 [ 2714.266567] memory_max_write+0x1b0/0x3e0 [ 2714.270723] ? lock_acquire+0x1db/0x570 [ 2714.274729] ? mem_cgroup_write+0x440/0x440 [ 2714.279061] ? lock_release+0xc40/0xc40 [ 2714.283052] ? add_lock_to_list.isra.0+0x450/0x450 [ 2714.287993] ? lock_downgrade+0x910/0x910 [ 2714.292184] cgroup_file_write+0x252/0x830 [ 2714.296441] ? mem_cgroup_write+0x440/0x440 [ 2714.300783] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2714.305738] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2714.310686] kernfs_fop_write+0x2ba/0x480 [ 2714.314845] __vfs_write+0x116/0xb40 [ 2714.318556] ? check_preemption_disabled+0x48/0x290 [ 2714.323580] ? kernfs_fop_open+0x1030/0x1030 [ 2714.327999] ? kernel_read+0x120/0x120 [ 2714.331895] ? __lock_is_held+0xb6/0x140 [ 2714.335966] ? rcu_read_lock_sched_held+0x110/0x130 [ 2714.341040] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2714.345793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2714.351335] ? __sb_start_write+0x1ac/0x360 [ 2714.355663] vfs_write+0x20c/0x580 [ 2714.359227] ksys_write+0x105/0x260 [ 2714.362861] ? __ia32_sys_read+0xb0/0xb0 [ 2714.366931] ? trace_hardirqs_off_caller+0x300/0x300 [ 2714.372056] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2714.376814] __x64_sys_write+0x73/0xb0 [ 2714.380700] do_syscall_64+0x1a3/0x800 [ 2714.384596] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2714.389549] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2714.394572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2714.399431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2714.404633] RIP: 0033:0x458099 [ 2714.407832] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2714.426735] RSP: 002b:00007f0270701c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2714.434452] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2714.441730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2714.449004] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2714.456280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02707026d4 [ 2714.463608] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2714.473048] memory: usage 3992kB, limit 0kB, failcnt 1444251 [ 2714.479507] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2714.486690] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2714.493362] Memory cgroup stats for /syz0: cache:24KB rss:2200KB rss_huge:2048KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2168KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2714.515309] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22094,uid=0 [ 2714.530696] Memory cgroup out of memory: Kill process 22094 (syz-executor0) score 9272000 or sacrifice child [ 2714.541511] Killed process 22094 (syz-executor0) total-vm:72448kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 2714.555678] oom_reaper: reaped process 22094 (syz-executor0), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 2714.623816] device hsr_slave_1 left promiscuous mode [ 2714.684331] device hsr_slave_0 left promiscuous mode [ 2714.733140] team0 (unregistering): Port device team_slave_1 removed [ 2714.745595] team0 (unregistering): Port device team_slave_0 removed [ 2714.757378] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2714.803983] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2714.898493] bond0 (unregistering): Released all slaves 18:09:50 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:09:50 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2715.070791] IPVS: ftp: loaded support on port[0] = 21 [ 2715.147860] chnl_net:caif_netlink_parms(): no params data found [ 2715.367588] bridge0: port 1(bridge_slave_0) entered blocking state [ 2715.392431] bridge0: port 1(bridge_slave_0) entered disabled state [ 2715.404537] device bridge_slave_0 entered promiscuous mode [ 2715.469486] bridge0: port 2(bridge_slave_1) entered blocking state [ 2715.475941] bridge0: port 2(bridge_slave_1) entered disabled state [ 2715.502341] device bridge_slave_1 entered promiscuous mode [ 2715.535684] IPVS: ftp: loaded support on port[0] = 21 [ 2715.627429] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2715.684954] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2715.775131] chnl_net:caif_netlink_parms(): no params data found [ 2715.816365] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2715.824220] team0: Port device team_slave_0 added [ 2715.939482] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2715.946988] team0: Port device team_slave_1 added [ 2715.984609] chnl_net:caif_netlink_parms(): no params data found [ 2716.002969] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2716.019306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2716.105918] bridge0: port 1(bridge_slave_0) entered blocking state [ 2716.122277] bridge0: port 1(bridge_slave_0) entered disabled state [ 2716.143495] device bridge_slave_0 entered promiscuous mode [ 2716.183805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2716.194194] bridge0: port 2(bridge_slave_1) entered disabled state [ 2716.210416] device bridge_slave_1 entered promiscuous mode [ 2716.276464] device hsr_slave_0 entered promiscuous mode [ 2716.329413] device hsr_slave_1 entered promiscuous mode [ 2716.373987] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2716.382842] bridge0: port 1(bridge_slave_0) entered blocking state [ 2716.390434] bridge0: port 1(bridge_slave_0) entered disabled state [ 2716.397993] device bridge_slave_0 entered promiscuous mode [ 2716.432452] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2716.443454] bridge0: port 2(bridge_slave_1) entered blocking state [ 2716.450381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2716.458057] device bridge_slave_1 entered promiscuous mode [ 2716.500641] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2716.510370] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2716.538538] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2716.563913] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2716.626341] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2716.691885] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2716.719690] team0: Port device team_slave_0 added [ 2716.725521] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2716.755083] team0: Port device team_slave_1 added [ 2716.761903] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2716.777291] team0: Port device team_slave_0 added [ 2716.797101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2716.823229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2716.846227] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2716.854196] team0: Port device team_slave_1 added [ 2716.877813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2716.905880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2716.972519] device hsr_slave_0 entered promiscuous mode [ 2717.009350] device hsr_slave_1 entered promiscuous mode [ 2717.059756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2717.067548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2717.080786] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2717.118746] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2717.202450] device hsr_slave_0 entered promiscuous mode [ 2717.239391] device hsr_slave_1 entered promiscuous mode [ 2717.309494] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2717.332763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2717.339998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2717.359495] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2717.368339] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2717.383760] 8021q: adding VLAN 0 to HW filter on device team0 [ 2717.406897] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2717.431984] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2717.450665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2717.468146] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2717.481319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2717.490259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2717.497975] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.504407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2717.515270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2717.569674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2717.577007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2717.600026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2717.607757] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.614226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2717.642452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2717.669179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2717.680314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2717.701823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2717.729437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2717.740127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2717.748294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2717.769878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2717.782392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2717.808454] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2717.818666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2717.826961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2717.837276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2717.849384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2717.861336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2717.874573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2717.883467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2717.892059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2717.907482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2717.915690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2717.932806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2717.949204] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2717.955292] 8021q: adding VLAN 0 to HW filter on device team0 [ 2717.973532] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2717.991600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2718.012231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2718.039617] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2718.045719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2718.079652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2718.096410] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2718.117140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2718.126310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2718.155733] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.162201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.195648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2718.216075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2718.236438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2718.268144] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2718.284608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2718.302817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2718.314440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2718.326335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2718.337460] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.343879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.359530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2718.369962] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2718.376064] 8021q: adding VLAN 0 to HW filter on device team0 [ 2718.387754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2718.406680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2718.417333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2718.436218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2718.450737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2718.466790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2718.479713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2718.506509] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.513012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.539408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2718.547579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2718.564695] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2718.578968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2718.586307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2718.601464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2718.608732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2718.622797] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2718.624100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2718.635118] CPU: 0 PID: 22110 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2718.642320] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.646967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2718.653375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.662629] Call Trace: [ 2718.662654] dump_stack+0x1db/0x2d0 [ 2718.662671] ? dump_stack_print_info.cold+0x20/0x20 [ 2718.662698] dump_header+0x1e6/0x116c [ 2718.669978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2718.671771] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2718.676353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2718.680392] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2718.680409] ? retint_kernel+0x2d/0x2d [ 2718.680423] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2718.680443] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2718.680459] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2718.726966] ? ___ratelimit+0x37c/0x686 [ 2718.730953] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2718.735701] ? retint_kernel+0x2d/0x2d [ 2718.739583] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2718.744679] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2718.749775] ? ___ratelimit+0xac/0x686 [ 2718.753651] ? idr_get_free+0xee0/0xee0 [ 2718.757623] oom_kill_process.cold+0x10/0x9d4 [ 2718.762112] ? cgroup_procs_next+0x70/0x70 [ 2718.766338] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2718.770824] ? oom_badness+0xa50/0xa50 [ 2718.774698] ? oom_evaluate_task+0x540/0x540 [ 2718.779097] ? mem_cgroup_iter_break+0x30/0x30 [ 2718.783679] ? out_of_memory+0x6c5/0x1420 [ 2718.787847] out_of_memory+0x885/0x1420 [ 2718.791815] ? oom_killer_disable+0x340/0x340 [ 2718.796300] ? preempt_schedule+0x4b/0x60 [ 2718.800436] ? ___preempt_schedule+0x16/0x18 [ 2718.804837] mem_cgroup_out_of_memory+0x160/0x210 [ 2718.809671] ? memcg_memory_event+0x40/0x40 [ 2718.814049] ? memory_max_write+0x10c/0x3e0 [ 2718.818371] memory_max_write+0x1b0/0x3e0 [ 2718.822505] ? lock_acquire+0x1db/0x570 [ 2718.826474] ? mem_cgroup_write+0x440/0x440 [ 2718.830780] ? lock_release+0xc40/0xc40 [ 2718.834743] ? add_lock_to_list.isra.0+0x450/0x450 [ 2718.839660] ? kernfs_get_active+0xa3/0x340 [ 2718.843972] cgroup_file_write+0x252/0x830 [ 2718.848207] ? mem_cgroup_write+0x440/0x440 [ 2718.852529] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2718.857457] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2718.862476] kernfs_fop_write+0x2ba/0x480 [ 2718.866612] __vfs_write+0x116/0xb40 [ 2718.870314] ? check_preemption_disabled+0x48/0x290 [ 2718.875319] ? kernfs_fop_open+0x1030/0x1030 [ 2718.879717] ? kernel_read+0x120/0x120 [ 2718.883589] ? __lock_is_held+0xb6/0x140 [ 2718.887655] ? rcu_read_lock_sched_held+0x110/0x130 [ 2718.892661] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2718.897409] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2718.902949] ? __sb_start_write+0x1ac/0x360 [ 2718.907259] vfs_write+0x20c/0x580 [ 2718.910792] ksys_write+0x105/0x260 [ 2718.914408] ? __ia32_sys_read+0xb0/0xb0 [ 2718.918459] ? trace_hardirqs_off_caller+0x300/0x300 [ 2718.923548] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2718.928308] __x64_sys_write+0x73/0xb0 [ 2718.932191] do_syscall_64+0x1a3/0x800 [ 2718.936067] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2718.940986] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2718.946012] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2718.950850] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2718.956024] RIP: 0033:0x458099 [ 2718.959202] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2718.978095] RSP: 002b:00007f9e4eb81c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2718.985794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2718.993053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2719.000336] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2719.007593] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e4eb826d4 [ 2719.014847] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2719.043230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2719.049026] memory: usage 3168kB, limit 0kB, failcnt 312450 [ 2719.055974] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2719.060825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2719.082193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2719.098362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2719.115893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2719.115950] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2719.127603] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2719.142487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2719.150061] Memory cgroup stats for /syz5: cache:148KB rss:2116KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2164KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2719.155754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2719.179034] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22109,uid=0 [ 2719.196139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2719.200123] Memory cgroup out of memory: Kill process 22109 (syz-executor5) score 9270000 or sacrifice child [ 2719.204754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2719.218149] Killed process 22109 (syz-executor5) total-vm:72584kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 2719.234725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2719.243713] oom_reaper: reaped process 22109 (syz-executor5), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2719.245820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2719.274213] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2719.289424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2719.304227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2719.336555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2719.361269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2719.383930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2719.399006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2719.423189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2719.455416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2719.482295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2719.500749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2719.527291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2719.552645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2719.561574] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2719.578743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2719.590531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2719.599248] CPU: 0 PID: 22082 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2719.606368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2719.606754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2719.615720] Call Trace: [ 2719.615743] dump_stack+0x1db/0x2d0 [ 2719.615759] ? dump_stack_print_info.cold+0x20/0x20 [ 2719.615783] dump_header+0x1e6/0x116c [ 2719.615798] ? add_lock_to_list.isra.0+0x450/0x450 [ 2719.615814] ? print_usage_bug+0xd0/0xd0 [ 2719.615831] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2719.615845] ? ___ratelimit+0x37c/0x686 [ 2719.615864] ? mark_held_locks+0xb1/0x100 [ 2719.615880] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2719.615894] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2719.615906] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2719.615922] ? trace_hardirqs_on+0xbd/0x310 [ 2719.626641] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2719.628130] ? kasan_check_read+0x11/0x20 [ 2719.632825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2719.636748] ? ___ratelimit+0x37c/0x686 [ 2719.654677] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2719.658395] ? trace_hardirqs_off_caller+0x300/0x300 [ 2719.675572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2719.677292] ? do_raw_spin_trylock+0x270/0x270 [ 2719.687565] ? trace_hardirqs_on_caller+0x310/0x310 [ 2719.708211] ? lock_acquire+0x1db/0x570 [ 2719.719377] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2719.719395] ? ___ratelimit+0xac/0x686 [ 2719.719412] ? idr_get_free+0xee0/0xee0 [ 2719.719428] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2719.719456] oom_kill_process.cold+0x10/0x9d4 [ 2719.755142] ? cgroup_procs_next+0x70/0x70 [ 2719.759410] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2719.763917] ? oom_badness+0xa50/0xa50 [ 2719.767817] ? oom_evaluate_task+0x540/0x540 [ 2719.772237] ? mem_cgroup_iter_break+0x30/0x30 [ 2719.776825] ? mutex_trylock+0x2d0/0x2d0 [ 2719.780891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2719.786451] ? rcu_read_unlock_special+0x380/0x380 [ 2719.791398] out_of_memory+0x885/0x1420 [ 2719.795385] ? mem_cgroup_iter+0x508/0xf30 [ 2719.799636] ? oom_killer_disable+0x340/0x340 [ 2719.804143] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2719.809286] ? lock_acquire+0x1db/0x570 [ 2719.813283] mem_cgroup_out_of_memory+0x160/0x210 [ 2719.818135] ? do_raw_spin_unlock+0xa0/0x330 [ 2719.822574] ? memcg_memory_event+0x40/0x40 [ 2719.826911] ? do_raw_spin_trylock+0x270/0x270 [ 2719.831516] ? _raw_spin_unlock+0x2d/0x50 [ 2719.835667] try_charge+0x12a9/0x19b0 [ 2719.839476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2719.845028] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2719.849888] ? rcu_read_unlock_special+0x380/0x380 [ 2719.854834] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2719.859685] ? get_mem_cgroup_from_page+0x190/0x190 [ 2719.864747] ? rcu_read_lock_sched_held+0x110/0x130 [ 2719.869756] mem_cgroup_try_charge+0x43a/0xdb0 [ 2719.874331] ? mem_cgroup_protected+0xa10/0xa10 [ 2719.879033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2719.884581] ? print_usage_bug+0xd0/0xd0 [ 2719.888632] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2719.894164] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2719.899702] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2719.904646] wp_page_copy+0x45a/0x1c30 [ 2719.908520] ? swp_swapcount+0x540/0x540 [ 2719.912574] ? pmd_pfn+0x1d0/0x1d0 [ 2719.916100] ? find_held_lock+0x35/0x120 [ 2719.920149] ? do_wp_page+0x70d/0x16b0 [ 2719.924067] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2719.929638] ? kasan_check_read+0x11/0x20 [ 2719.933790] ? do_raw_spin_unlock+0xa0/0x330 [ 2719.938193] ? do_raw_spin_trylock+0x270/0x270 [ 2719.942785] ? __lock_acquire+0x572/0x4a30 [ 2719.947012] do_wp_page+0x715/0x16b0 [ 2719.950732] ? finish_mkwrite_fault+0x540/0x540 [ 2719.955388] ? kasan_check_read+0x11/0x20 [ 2719.959524] ? do_raw_spin_lock+0x156/0x360 [ 2719.963873] ? rwlock_bug.part.0+0x90/0x90 [ 2719.968143] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2719.973263] __handle_mm_fault+0x2c8e/0x55a0 [ 2719.977715] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2719.982546] ? check_preemption_disabled+0x48/0x290 [ 2719.987552] ? handle_mm_fault+0x3cc/0xc80 [ 2719.991799] ? lock_downgrade+0x910/0x910 [ 2719.995942] ? kasan_check_read+0x11/0x20 [ 2720.000088] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2720.005372] ? rcu_read_unlock_special+0x380/0x380 [ 2720.010300] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2720.015904] ? check_preemption_disabled+0x48/0x290 [ 2720.020956] handle_mm_fault+0x4ec/0xc80 [ 2720.025008] ? __handle_mm_fault+0x55a0/0x55a0 [ 2720.029575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2720.035098] ? vmacache_update+0x114/0x140 [ 2720.039338] __do_page_fault+0x5da/0xd60 [ 2720.043409] do_page_fault+0xe6/0x7d8 [ 2720.047214] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2720.052132] ? vmalloc_sync_all+0x30/0x30 [ 2720.056274] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2720.061712] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2720.066626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2720.072153] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2720.077196] ? page_fault+0x8/0x30 [ 2720.080732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2720.085566] ? page_fault+0x8/0x30 [ 2720.089091] page_fault+0x1e/0x30 [ 2720.092541] RIP: 0033:0x42f226 [ 2720.095728] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2720.114621] RSP: 002b:00007ffff2810470 EFLAGS: 00010206 [ 2720.119984] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2720.127264] RDX: 0000000001e74930 RSI: 0000000001e7c970 RDI: 0000000000000003 [ 2720.134533] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001e73940 [ 2720.141816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2720.149089] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2720.161263] memory: usage 808kB, limit 0kB, failcnt 312458 [ 2720.166918] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.175170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2720.183177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2720.187370] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.200944] Memory cgroup stats for /syz5: cache:148KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2720.221521] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22082,uid=0 [ 2720.236295] Memory cgroup out of memory: Kill process 22082 (syz-executor5) score 8756000 or sacrifice child [ 2720.246401] Killed process 22082 (syz-executor5) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2720.257868] oom_reaper: reaped process 22082 (syz-executor5), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2720.268382] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2720.284105] CPU: 1 PID: 22115 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2720.291236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2720.300620] Call Trace: [ 2720.303199] dump_stack+0x1db/0x2d0 [ 2720.306819] ? dump_stack_print_info.cold+0x20/0x20 [ 2720.311847] dump_header+0x1e6/0x116c [ 2720.315683] ? add_lock_to_list.isra.0+0x450/0x450 [ 2720.320601] ? print_usage_bug+0xd0/0xd0 [ 2720.324651] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2720.329587] ? ___ratelimit+0x37c/0x686 [ 2720.333574] ? mark_held_locks+0xb1/0x100 [ 2720.337733] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2720.342841] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2720.347929] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2720.352511] ? trace_hardirqs_on+0xbd/0x310 [ 2720.356829] ? kasan_check_read+0x11/0x20 [ 2720.360980] ? ___ratelimit+0x37c/0x686 [ 2720.364957] ? trace_hardirqs_off_caller+0x300/0x300 [ 2720.370077] ? do_raw_spin_trylock+0x270/0x270 [ 2720.374696] ? trace_hardirqs_on_caller+0x310/0x310 [ 2720.379719] ? lock_acquire+0x1db/0x570 [ 2720.383700] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2720.388788] ? ___ratelimit+0xac/0x686 [ 2720.392682] ? idr_get_free+0xee0/0xee0 [ 2720.396651] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2720.401247] oom_kill_process.cold+0x10/0x9d4 [ 2720.405729] ? cgroup_procs_next+0x70/0x70 [ 2720.409966] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2720.414458] ? oom_badness+0xa50/0xa50 [ 2720.418337] ? oom_evaluate_task+0x540/0x540 [ 2720.422736] ? mem_cgroup_iter_break+0x30/0x30 [ 2720.427306] ? mutex_trylock+0x2d0/0x2d0 [ 2720.431379] ? cgroup_file_notify+0x217/0x2e0 [ 2720.435872] out_of_memory+0x885/0x1420 [ 2720.439832] ? mark_held_locks+0xb1/0x100 [ 2720.443964] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2720.449082] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2720.454199] ? oom_killer_disable+0x340/0x340 [ 2720.458684] ? preempt_schedule+0x4b/0x60 [ 2720.462823] ? ___preempt_schedule+0x16/0x18 [ 2720.467240] mem_cgroup_out_of_memory+0x160/0x210 [ 2720.472089] ? memcg_memory_event+0x40/0x40 [ 2720.476434] memory_max_write+0x1b0/0x3e0 [ 2720.480569] ? lock_acquire+0x1db/0x570 [ 2720.484534] ? mem_cgroup_write+0x440/0x440 [ 2720.488859] ? lock_release+0xc40/0xc40 [ 2720.492847] ? add_lock_to_list.isra.0+0x450/0x450 [ 2720.497803] ? lock_downgrade+0x910/0x910 [ 2720.501941] cgroup_file_write+0x252/0x830 [ 2720.506184] ? mem_cgroup_write+0x440/0x440 [ 2720.510502] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2720.515452] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2720.520369] kernfs_fop_write+0x2ba/0x480 [ 2720.524505] __vfs_write+0x116/0xb40 [ 2720.528204] ? check_preemption_disabled+0x48/0x290 [ 2720.533235] ? kernfs_fop_open+0x1030/0x1030 [ 2720.537815] ? kernel_read+0x120/0x120 [ 2720.541705] ? __lock_is_held+0xb6/0x140 [ 2720.545755] ? rcu_read_lock_sched_held+0x110/0x130 [ 2720.550766] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2720.555519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2720.561060] ? __sb_start_write+0x1ac/0x360 [ 2720.565369] vfs_write+0x20c/0x580 [ 2720.568910] ksys_write+0x105/0x260 [ 2720.572552] ? __ia32_sys_read+0xb0/0xb0 [ 2720.576612] ? trace_hardirqs_off_caller+0x300/0x300 [ 2720.581716] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2720.586474] __x64_sys_write+0x73/0xb0 [ 2720.590363] do_syscall_64+0x1a3/0x800 [ 2720.594250] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2720.599177] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2720.604187] ? __switch_to_asm+0x34/0x70 [ 2720.608254] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2720.613107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2720.618295] RIP: 0033:0x458099 [ 2720.621473] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2720.640359] RSP: 002b:00007f046c965c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2720.648057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2720.655309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2720.662598] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.669895] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f046c9666d4 [ 2720.677165] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2720.686864] memory: usage 3456kB, limit 0kB, failcnt 433602 [ 2720.698975] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.705735] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.711976] Memory cgroup stats for /syz3: cache:12KB rss:2104KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2720.732839] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22113,uid=0 [ 2720.747427] Memory cgroup out of memory: Kill process 22113 (syz-executor3) score 9271000 or sacrifice child [ 2720.757717] Killed process 22115 (syz-executor3) total-vm:72584kB, anon-rss:2188kB, file-rss:35804kB, shmem-rss:0kB [ 2720.770028] oom_reaper: reaped process 22115 (syz-executor3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 2720.808736] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2720.825220] CPU: 1 PID: 22105 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2720.832327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2720.841665] Call Trace: [ 2720.844246] dump_stack+0x1db/0x2d0 [ 2720.847860] ? dump_stack_print_info.cold+0x20/0x20 [ 2720.852868] dump_header+0x1e6/0x116c [ 2720.856656] ? add_lock_to_list.isra.0+0x450/0x450 [ 2720.861573] ? print_usage_bug+0xd0/0xd0 [ 2720.865623] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2720.870540] ? ___ratelimit+0x37c/0x686 [ 2720.874518] ? mark_held_locks+0xb1/0x100 [ 2720.878665] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2720.883775] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2720.888874] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2720.893455] ? trace_hardirqs_on+0xbd/0x310 [ 2720.897758] ? kasan_check_read+0x11/0x20 [ 2720.901892] ? ___ratelimit+0x37c/0x686 [ 2720.905891] ? trace_hardirqs_off_caller+0x300/0x300 [ 2720.910978] ? do_raw_spin_trylock+0x270/0x270 [ 2720.915562] ? trace_hardirqs_on_caller+0x310/0x310 [ 2720.920621] ? lock_acquire+0x1db/0x570 [ 2720.924604] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2720.929707] ? ___ratelimit+0xac/0x686 [ 2720.933582] ? idr_get_free+0xee0/0xee0 [ 2720.937541] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2720.942130] oom_kill_process.cold+0x10/0x9d4 [ 2720.946629] ? cgroup_procs_next+0x70/0x70 [ 2720.950853] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2720.955336] ? oom_badness+0xa50/0xa50 [ 2720.959221] ? oom_evaluate_task+0x540/0x540 [ 2720.963648] ? mem_cgroup_iter_break+0x30/0x30 [ 2720.968216] ? mutex_trylock+0x2d0/0x2d0 [ 2720.972262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2720.977789] ? rcu_read_unlock_special+0x380/0x380 [ 2720.982706] out_of_memory+0x885/0x1420 [ 2720.986664] ? mem_cgroup_iter+0x508/0xf30 [ 2720.990892] ? oom_killer_disable+0x340/0x340 [ 2720.995372] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2721.000460] ? lock_acquire+0x1db/0x570 [ 2721.004428] mem_cgroup_out_of_memory+0x160/0x210 [ 2721.009256] ? do_raw_spin_unlock+0xa0/0x330 [ 2721.013681] ? memcg_memory_event+0x40/0x40 [ 2721.017985] ? do_raw_spin_trylock+0x270/0x270 [ 2721.022558] ? _raw_spin_unlock+0x2d/0x50 [ 2721.026692] try_charge+0x12a9/0x19b0 [ 2721.030481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.036007] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2721.040850] ? rcu_read_unlock_special+0x380/0x380 [ 2721.045787] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2721.050616] ? get_mem_cgroup_from_page+0x190/0x190 [ 2721.055635] ? rcu_read_lock_sched_held+0x110/0x130 [ 2721.060679] mem_cgroup_try_charge+0x43a/0xdb0 [ 2721.065282] ? mem_cgroup_protected+0xa10/0xa10 [ 2721.069945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.075466] ? print_usage_bug+0xd0/0xd0 [ 2721.079515] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2721.085192] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2721.090723] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2721.095656] wp_page_copy+0x45a/0x1c30 [ 2721.099549] ? swp_swapcount+0x540/0x540 [ 2721.103601] ? pmd_pfn+0x1d0/0x1d0 [ 2721.107122] ? find_held_lock+0x35/0x120 [ 2721.111175] ? do_wp_page+0x70d/0x16b0 [ 2721.115048] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2721.120596] ? kasan_check_read+0x11/0x20 [ 2721.124746] ? do_raw_spin_unlock+0xa0/0x330 [ 2721.129166] ? do_raw_spin_trylock+0x270/0x270 [ 2721.133769] ? __lock_acquire+0x572/0x4a30 [ 2721.137992] do_wp_page+0x715/0x16b0 [ 2721.141701] ? finish_mkwrite_fault+0x540/0x540 [ 2721.146354] ? kasan_check_read+0x11/0x20 [ 2721.150489] ? do_raw_spin_lock+0x156/0x360 [ 2721.154796] ? rwlock_bug.part.0+0x90/0x90 [ 2721.159015] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2721.164108] __handle_mm_fault+0x2c8e/0x55a0 [ 2721.168506] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2721.173335] ? check_preemption_disabled+0x48/0x290 [ 2721.178339] ? handle_mm_fault+0x3cc/0xc80 [ 2721.182568] ? lock_downgrade+0x910/0x910 [ 2721.186700] ? kasan_check_read+0x11/0x20 [ 2721.190836] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2721.196111] ? rcu_read_unlock_special+0x380/0x380 [ 2721.201028] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2721.206551] ? check_preemption_disabled+0x48/0x290 [ 2721.211556] handle_mm_fault+0x4ec/0xc80 [ 2721.215755] ? __handle_mm_fault+0x55a0/0x55a0 [ 2721.220333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.225876] ? vmacache_update+0x114/0x140 [ 2721.230131] __do_page_fault+0x5da/0xd60 [ 2721.234216] do_page_fault+0xe6/0x7d8 [ 2721.238004] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2721.242920] ? vmalloc_sync_all+0x30/0x30 [ 2721.247051] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2721.252489] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2721.257419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.262941] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2721.267957] ? page_fault+0x8/0x30 [ 2721.271484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2721.276313] ? page_fault+0x8/0x30 [ 2721.279838] page_fault+0x1e/0x30 [ 2721.283289] RIP: 0033:0x42f226 [ 2721.286464] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2721.305368] RSP: 002b:00007fff27ccbac0 EFLAGS: 00010206 18:09:56 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:09:56 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2721.310718] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2721.317987] RDX: 0000000001f3c930 RSI: 0000000001f44970 RDI: 0000000000000003 [ 2721.325242] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001f3b940 [ 2721.332495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2721.339747] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 18:09:56 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:09:56 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:09:56 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r3, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 2721.361539] memory: usage 904kB, limit 0kB, failcnt 965251 [ 2721.370345] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.377124] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.393706] Memory cgroup stats for /syz2: cache:4KB rss:92KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB 18:09:56 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:09:56 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2721.442380] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22105,uid=0 [ 2721.464874] Memory cgroup out of memory: Kill process 22105 (syz-executor2) score 8756000 or sacrifice child [ 2721.477412] Killed process 22105 (syz-executor2) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2721.501622] oom_reaper: reaped process 22105 (syz-executor2), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2721.508996] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2721.588347] CPU: 0 PID: 22097 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2721.595469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2721.604822] Call Trace: [ 2721.607414] dump_stack+0x1db/0x2d0 [ 2721.611067] ? dump_stack_print_info.cold+0x20/0x20 [ 2721.616155] dump_header+0x1e6/0x116c [ 2721.619985] ? add_lock_to_list.isra.0+0x450/0x450 [ 2721.624953] ? print_usage_bug+0xd0/0xd0 [ 2721.629053] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2721.633997] ? ___ratelimit+0x37c/0x686 [ 2721.637995] ? mark_held_locks+0xb1/0x100 [ 2721.642181] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2721.647310] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2721.652422] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2721.657028] ? trace_hardirqs_on+0xbd/0x310 [ 2721.661356] ? kasan_check_read+0x11/0x20 [ 2721.665510] ? ___ratelimit+0x37c/0x686 [ 2721.669507] ? trace_hardirqs_off_caller+0x300/0x300 [ 2721.674630] ? do_raw_spin_trylock+0x270/0x270 [ 2721.679242] ? trace_hardirqs_on_caller+0x310/0x310 [ 2721.684271] ? lock_acquire+0x1db/0x570 [ 2721.688287] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2721.693400] ? ___ratelimit+0xac/0x686 [ 2721.697299] ? idr_get_free+0xee0/0xee0 [ 2721.701317] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2721.702389] IPVS: ftp: loaded support on port[0] = 21 [ 2721.705918] oom_kill_process.cold+0x10/0x9d4 [ 2721.715600] ? cgroup_procs_next+0x70/0x70 [ 2721.719862] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2721.724377] ? oom_badness+0xa50/0xa50 [ 2721.728278] ? oom_evaluate_task+0x540/0x540 [ 2721.732697] ? mem_cgroup_iter_break+0x30/0x30 [ 2721.737286] ? mutex_trylock+0x2d0/0x2d0 [ 2721.737302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.746913] ? rcu_read_unlock_special+0x380/0x380 [ 2721.751860] out_of_memory+0x885/0x1420 [ 2721.755853] ? mem_cgroup_iter+0x508/0xf30 [ 2721.760094] ? oom_killer_disable+0x340/0x340 [ 2721.760110] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2721.760124] ? lock_acquire+0x1db/0x570 [ 2721.769728] mem_cgroup_out_of_memory+0x160/0x210 [ 2721.769743] ? do_raw_spin_unlock+0xa0/0x330 [ 2721.769758] ? memcg_memory_event+0x40/0x40 [ 2721.782947] ? do_raw_spin_trylock+0x270/0x270 [ 2721.782974] ? _raw_spin_unlock+0x2d/0x50 [ 2721.782991] try_charge+0x12a9/0x19b0 [ 2721.791872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.791900] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2721.791917] ? rcu_read_unlock_special+0x380/0x380 [ 2721.791956] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2721.799898] ? get_mem_cgroup_from_page+0x190/0x190 [ 2721.799920] ? rcu_read_lock_sched_held+0x110/0x130 [ 2721.799952] mem_cgroup_try_charge+0x43a/0xdb0 [ 2721.799972] ? mem_cgroup_protected+0xa10/0xa10 [ 2721.810339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.810355] ? print_usage_bug+0xd0/0xd0 [ 2721.810374] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2721.810388] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2721.820188] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2721.820208] wp_page_copy+0x45a/0x1c30 [ 2721.820223] ? swp_swapcount+0x540/0x540 [ 2721.830241] ? pmd_pfn+0x1d0/0x1d0 [ 2721.830256] ? find_held_lock+0x35/0x120 [ 2721.830272] ? do_wp_page+0x70d/0x16b0 18:09:56 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:09:56 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2721.830288] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2721.830310] ? kasan_check_read+0x11/0x20 [ 2721.839543] ? do_raw_spin_unlock+0xa0/0x330 [ 2721.839561] ? do_raw_spin_trylock+0x270/0x270 [ 2721.839577] ? __lock_acquire+0x572/0x4a30 [ 2721.839599] do_wp_page+0x715/0x16b0 [ 2721.839619] ? finish_mkwrite_fault+0x540/0x540 [ 2721.849223] ? kasan_check_read+0x11/0x20 [ 2721.849238] ? do_raw_spin_lock+0x156/0x360 [ 2721.849255] ? rwlock_bug.part.0+0x90/0x90 [ 2721.849271] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2721.849295] __handle_mm_fault+0x2c8e/0x55a0 [ 2721.860415] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2721.860431] ? check_preemption_disabled+0x48/0x290 [ 2721.860448] ? handle_mm_fault+0x3cc/0xc80 [ 2721.869258] ? lock_downgrade+0x910/0x910 [ 2721.869273] ? kasan_check_read+0x11/0x20 [ 2721.869289] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2721.876867] ? rcu_read_unlock_special+0x380/0x380 [ 2721.876882] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2721.876895] ? check_preemption_disabled+0x48/0x290 [ 2721.876914] handle_mm_fault+0x4ec/0xc80 [ 2721.884832] ? __handle_mm_fault+0x55a0/0x55a0 [ 2721.884847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.884860] ? vmacache_update+0x114/0x140 [ 2721.884884] __do_page_fault+0x5da/0xd60 [ 2721.894557] do_page_fault+0xe6/0x7d8 [ 2721.894571] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2721.894588] ? vmalloc_sync_all+0x30/0x30 [ 2721.903555] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2721.903574] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2721.903588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2721.903604] ? prepare_exit_to_usermode+0x232/0x3b0 18:09:57 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2721.911544] ? page_fault+0x8/0x30 [ 2721.911563] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2721.911582] ? page_fault+0x8/0x30 [ 2721.911598] page_fault+0x1e/0x30 [ 2721.911612] RIP: 0033:0x42f226 [ 2721.920430] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2721.920438] RSP: 002b:00007ffce5ad1930 EFLAGS: 00010206 [ 2721.920451] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2721.920460] RDX: 0000000001c6f930 RSI: 0000000001c77970 RDI: 0000000000000003 [ 2721.920468] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001c6e940 [ 2721.920477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2721.920500] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2721.944201] memory: usage 1088kB, limit 0kB, failcnt 433610 [ 2721.962465] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.978985] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.992401] Memory cgroup stats for /syz3: cache:12KB rss:112KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2722.002412] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22097,uid=0 [ 2722.044890] Memory cgroup out of memory: Kill process 22097 (syz-executor3) score 8757000 or sacrifice child [ 2722.083372] Killed process 22097 (syz-executor3) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2722.194824] oom_reaper: reaped process 22097 (syz-executor3), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB 18:09:57 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2722.619049] chnl_net:caif_netlink_parms(): no params data found [ 2722.738119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2722.745943] bridge0: port 1(bridge_slave_0) entered disabled state [ 2722.753686] device bridge_slave_0 entered promiscuous mode [ 2722.763371] bridge0: port 2(bridge_slave_1) entered blocking state [ 2722.770238] bridge0: port 2(bridge_slave_1) entered disabled state [ 2722.777629] device bridge_slave_1 entered promiscuous mode [ 2722.785129] device bridge_slave_1 left promiscuous mode [ 2722.791411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2722.839926] device bridge_slave_0 left promiscuous mode [ 2722.845410] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.062380] device hsr_slave_1 left promiscuous mode [ 2723.105175] device hsr_slave_0 left promiscuous mode [ 2723.164435] team0 (unregistering): Port device team_slave_1 removed [ 2723.187770] team0 (unregistering): Port device team_slave_0 removed [ 2723.217060] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2723.318937] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2723.485694] bond0 (unregistering): Released all slaves [ 2723.626023] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2723.635926] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2723.674987] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2723.686865] team0: Port device team_slave_0 added [ 2723.711855] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2723.724360] team0: Port device team_slave_1 added [ 2723.730198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2723.737733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2723.802367] device hsr_slave_0 entered promiscuous mode [ 2723.842396] device hsr_slave_1 entered promiscuous mode [ 2723.919795] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2723.926832] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2723.958453] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2724.053270] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2724.059431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2724.068659] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2724.079735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2724.085928] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2724.108579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2724.129886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2724.140535] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2724.146650] 8021q: adding VLAN 0 to HW filter on device team0 [ 2724.173262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2724.189023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2724.196963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2724.219623] bridge0: port 1(bridge_slave_0) entered blocking state [ 2724.226012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2724.242057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2724.265391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2724.279523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2724.287465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2724.309724] bridge0: port 2(bridge_slave_1) entered blocking state [ 2724.316077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2724.343592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2724.351083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2724.371618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2724.389427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2724.410368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2724.418399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2724.429121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2724.440540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2724.451306] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2724.457344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2724.465193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2724.473065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2724.487547] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2724.512215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2726.730355] device bridge_slave_1 left promiscuous mode [ 2726.735926] bridge0: port 2(bridge_slave_1) entered disabled state [ 2726.790152] device bridge_slave_0 left promiscuous mode [ 2726.795689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2726.871239] device bridge_slave_1 left promiscuous mode [ 2726.876769] bridge0: port 2(bridge_slave_1) entered disabled state [ 2726.923931] device bridge_slave_0 left promiscuous mode [ 2726.933147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2727.243043] device hsr_slave_1 left promiscuous mode [ 2727.285411] device hsr_slave_0 left promiscuous mode [ 2727.354706] team0 (unregistering): Port device team_slave_1 removed [ 2727.387199] team0 (unregistering): Port device team_slave_0 removed [ 2727.412205] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2727.481309] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2727.638574] bond0 (unregistering): Released all slaves [ 2727.813072] device hsr_slave_1 left promiscuous mode [ 2727.864947] device hsr_slave_0 left promiscuous mode [ 2727.915249] team0 (unregistering): Port device team_slave_1 removed [ 2727.940463] team0 (unregistering): Port device team_slave_0 removed [ 2727.962903] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2728.021130] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2728.188608] bond0 (unregistering): Released all slaves 18:10:50 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:10:50 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r3, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 18:10:50 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:10:50 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:10:50 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:10:50 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:10:50 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x0, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:10:50 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:10:50 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x0, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:10:50 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2775.685163] IPVS: ftp: loaded support on port[0] = 21 [ 2775.775919] IPVS: ftp: loaded support on port[0] = 21 [ 2775.822368] device bridge_slave_1 left promiscuous mode [ 2775.828083] bridge0: port 2(bridge_slave_1) entered disabled state 18:10:50 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x0, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2775.900643] device bridge_slave_0 left promiscuous mode [ 2775.906194] bridge0: port 1(bridge_slave_0) entered disabled state [ 2775.911289] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2775.933392] CPU: 1 PID: 22170 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2775.940531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2775.949896] Call Trace: [ 2775.952497] dump_stack+0x1db/0x2d0 [ 2775.956141] ? dump_stack_print_info.cold+0x20/0x20 [ 2775.961207] dump_header+0x1e6/0x116c [ 2775.965021] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2775.969792] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2775.974394] ? retint_kernel+0x2d/0x2d [ 2775.978294] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2775.983224] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2775.983240] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2775.983257] ? ___ratelimit+0x37c/0x686 [ 2775.983283] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2775.993856] ? retint_kernel+0x2d/0x2d [ 2775.993884] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2775.993901] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2775.993919] ? ___ratelimit+0xac/0x686 [ 2776.002628] ? idr_get_free+0xee0/0xee0 [ 2776.002658] oom_kill_process.cold+0x10/0x9d4 [ 2776.002685] ? cgroup_procs_next+0x70/0x70 [ 2776.033279] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2776.037769] ? oom_badness+0xa50/0xa50 [ 2776.041696] ? oom_evaluate_task+0x540/0x540 [ 2776.046096] ? mem_cgroup_iter_break+0x30/0x30 [ 2776.050675] ? mutex_trylock+0x2d0/0x2d0 [ 2776.054766] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2776.060213] ? cgroup_file_notify+0x217/0x2e0 [ 2776.064701] out_of_memory+0x885/0x1420 [ 2776.068684] ? oom_killer_disable+0x340/0x340 [ 2776.073189] mem_cgroup_out_of_memory+0x160/0x210 [ 2776.078025] ? memcg_memory_event+0x40/0x40 [ 2776.082359] memory_max_write+0x1b0/0x3e0 [ 2776.086634] ? lock_acquire+0x1db/0x570 [ 2776.090632] ? mem_cgroup_write+0x440/0x440 [ 2776.094947] ? lock_release+0xc40/0xc40 [ 2776.099016] ? add_lock_to_list.isra.0+0x450/0x450 [ 2776.103957] ? lock_downgrade+0x910/0x910 [ 2776.108096] cgroup_file_write+0x252/0x830 [ 2776.112332] ? mem_cgroup_write+0x440/0x440 [ 2776.116643] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2776.121570] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2776.126492] kernfs_fop_write+0x2ba/0x480 [ 2776.130651] __vfs_write+0x116/0xb40 [ 2776.134375] ? check_preemption_disabled+0x48/0x290 [ 2776.139397] ? kernfs_fop_open+0x1030/0x1030 [ 2776.143794] ? kernel_read+0x120/0x120 [ 2776.147677] ? __lock_is_held+0xb6/0x140 [ 2776.151734] ? rcu_read_lock_sched_held+0x110/0x130 [ 2776.156740] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2776.161484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2776.167023] ? __sb_start_write+0x1ac/0x360 [ 2776.171360] vfs_write+0x20c/0x580 [ 2776.174907] ksys_write+0x105/0x260 [ 2776.178620] ? __ia32_sys_read+0xb0/0xb0 [ 2776.182713] ? trace_hardirqs_off_caller+0x300/0x300 [ 2776.187870] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2776.192645] __x64_sys_write+0x73/0xb0 [ 2776.196530] do_syscall_64+0x1a3/0x800 [ 2776.200410] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2776.205337] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2776.210366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2776.215209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2776.220384] RIP: 0033:0x458099 [ 2776.223567] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2776.242472] RSP: 002b:00007fb88bae8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2776.250183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2776.257440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2776.264707] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2776.271976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb88bae96d4 [ 2776.279233] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2776.289285] memory: usage 3356kB, limit 0kB, failcnt 312459 [ 2776.295787] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2776.304699] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2776.311705] Memory cgroup stats for /syz5: cache:148KB rss:2072KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2180KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2776.333586] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22169,uid=0 [ 2776.349448] Memory cgroup out of memory: Kill process 22169 (syz-executor5) score 9271000 or sacrifice child [ 2776.360563] Killed process 22169 (syz-executor5) total-vm:72448kB, anon-rss:2184kB, file-rss:35672kB, shmem-rss:0kB [ 2776.382298] oom_reaper: reaped process 22169 (syz-executor5), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2776.559987] device hsr_slave_1 left promiscuous mode [ 2776.614765] device hsr_slave_0 left promiscuous mode [ 2776.663008] team0 (unregistering): Port device team_slave_1 removed [ 2776.676770] team0 (unregistering): Port device team_slave_0 removed [ 2776.688502] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2776.725606] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2776.826873] bond0 (unregistering): Released all slaves 18:10:51 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x0, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2776.960830] syz-executor5 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), order=0, oom_score_adj=0 [ 2777.009374] CPU: 0 PID: 22127 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2777.016531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2777.025894] Call Trace: [ 2777.028494] dump_stack+0x1db/0x2d0 [ 2777.032142] ? dump_stack_print_info.cold+0x20/0x20 [ 2777.037219] dump_header+0x1e6/0x116c [ 2777.041032] ? add_lock_to_list.isra.0+0x450/0x450 [ 2777.041049] ? print_usage_bug+0xd0/0xd0 [ 2777.041067] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2777.041084] ? ___ratelimit+0x37c/0x686 [ 2777.041103] ? mark_held_locks+0xb1/0x100 [ 2777.041119] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2777.041133] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2777.041147] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2777.041181] ? trace_hardirqs_on+0xbd/0x310 [ 2777.041197] ? kasan_check_read+0x11/0x20 [ 2777.055184] ? ___ratelimit+0x37c/0x686 [ 2777.063294] ? trace_hardirqs_off_caller+0x300/0x300 [ 2777.073467] ? do_raw_spin_trylock+0x270/0x270 [ 2777.073483] ? trace_hardirqs_on_caller+0x310/0x310 [ 2777.073494] ? lock_acquire+0x1db/0x570 [ 2777.073516] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2777.073531] ? ___ratelimit+0xac/0x686 [ 2777.073547] ? idr_get_free+0xee0/0xee0 [ 2777.073561] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2777.073609] oom_kill_process.cold+0x10/0x9d4 [ 2777.073626] ? cgroup_procs_next+0x70/0x70 [ 2777.073644] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2777.073659] ? oom_badness+0xa50/0xa50 [ 2777.087170] ? oom_evaluate_task+0x540/0x540 [ 2777.087188] ? mem_cgroup_iter_break+0x30/0x30 [ 2777.096263] ? mutex_trylock+0x2d0/0x2d0 [ 2777.096279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2777.096307] ? rcu_read_unlock_special+0x380/0x380 [ 2777.105894] out_of_memory+0x885/0x1420 [ 2777.131903] ? mem_cgroup_iter+0x508/0xf30 [ 2777.131930] ? oom_killer_disable+0x340/0x340 [ 2777.140684] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2777.140701] ? lock_acquire+0x1db/0x570 [ 2777.140726] mem_cgroup_out_of_memory+0x160/0x210 [ 2777.140739] ? do_raw_spin_unlock+0xa0/0x330 [ 2777.140754] ? memcg_memory_event+0x40/0x40 [ 2777.140767] ? do_raw_spin_trylock+0x270/0x270 [ 2777.140794] ? _raw_spin_unlock+0x2d/0x50 [ 2777.140810] try_charge+0x12a9/0x19b0 [ 2777.157755] ? check_preemption_disabled+0x48/0x290 [ 2777.168310] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2777.176515] ? rcu_read_lock_sched_held+0x110/0x130 [ 2777.176535] ? __alloc_pages_nodemask+0xaca/0xdc0 [ 2777.190102] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2777.190116] ? mark_held_locks+0xb1/0x100 [ 2777.190132] ? cache_grow_begin+0x599/0x8c0 [ 2777.190145] ? cache_grow_begin+0x599/0x8c0 [ 2777.190184] memcg_kmem_charge_memcg+0x7c/0x130 [ 2777.190201] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2777.199455] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2777.199468] ? __cpuset_node_allowed+0x19f/0x640 [ 2777.199487] cache_grow_begin+0x25f/0x8c0 [ 2777.199501] ? kasan_check_read+0x11/0x20 [ 2777.199514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2777.199527] ? mempolicy_slab_node+0x139/0x390 [ 2777.199546] fallback_alloc+0x1fd/0x2d0 [ 2777.199568] ____cache_alloc_node+0x1be/0x1e0 [ 2777.199601] kmem_cache_alloc+0x1f5/0x710 [ 2777.212768] __d_alloc+0xae/0xbe0 [ 2777.212786] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 2777.212798] ? __lock_acquire+0x572/0x4a30 [ 2777.212810] ? print_usage_bug+0xd0/0xd0 [ 2777.212831] ? print_usage_bug+0xd0/0xd0 [ 2777.212851] d_alloc+0x99/0x420 [ 2777.212867] ? __d_alloc+0xbe0/0xbe0 [ 2777.212880] ? __lock_acquire+0x572/0x4a30 [ 2777.221800] ? __lock_acquire+0x572/0x4a30 [ 2777.221829] ? mark_held_locks+0x100/0x100 [ 2777.221880] d_alloc_parallel+0x11b/0x1f10 [ 2777.221895] ? mark_held_locks+0x100/0x100 [ 2777.221911] ? __d_lookup+0x560/0x960 [ 2777.221943] ? __d_lookup_rcu+0x990/0x990 [ 2777.221972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2777.222007] ? lockdep_init_map+0x10c/0x5b0 [ 2777.222022] ? lockdep_init_map+0x10c/0x5b0 [ 2777.222042] ? __init_waitqueue_head+0x92/0x150 [ 2777.222055] ? init_wait_entry+0x1c0/0x1c0 [ 2777.231914] __lookup_slow+0x1fa/0x560 [ 2777.241738] ? vfs_unlink+0x500/0x500 [ 2777.241752] ? lock_release+0xc40/0xc40 [ 2777.241798] ? __down_interruptible+0x740/0x740 [ 2777.241815] ? __d_lookup+0x960/0x960 [ 2777.241835] lookup_slow+0x58/0x80 [ 2777.241865] path_mountpoint+0x6bb/0x21a0 [ 2777.241881] ? kasan_slab_alloc+0xf/0x20 [ 2777.250342] ? kmem_cache_alloc+0x12d/0x710 [ 2777.250354] ? getname_flags+0xd6/0x5b0 [ 2777.250365] ? user_path_mountpoint_at+0x29/0x50 [ 2777.250379] ? ksys_umount+0x198/0x1340 [ 2777.250392] ? __x64_sys_umount+0x54/0x80 [ 2777.250406] ? do_syscall_64+0x1a3/0x800 [ 2777.250421] ? rcu_read_lock_sched_held+0x110/0x130 [ 2777.250442] ? path_openat+0x5650/0x5650 [ 2777.250455] ? find_held_lock+0x35/0x120 [ 2777.250469] ? check_stack_object+0x114/0x160 [ 2777.250485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2777.259450] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2777.259465] ? __phys_addr_symbol+0x30/0x70 [ 2777.259477] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2777.259489] ? __check_object_size+0xa3/0x790 [ 2777.259511] filename_mountpoint+0x258/0x490 [ 2777.259525] ? user_path_at_empty+0x50/0x50 [ 2777.259548] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2777.259567] ? strncpy_from_user+0x3aa/0x4e0 [ 2777.269582] ? digsig_verify.cold+0x32/0x32 [ 2777.269606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2777.269618] ? getname_flags+0x277/0x5b0 [ 2777.269635] user_path_mountpoint_at+0x3a/0x50 [ 2777.269654] ksys_umount+0x198/0x1340 [ 2777.269685] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2777.269701] ? rcu_read_unlock_special+0x380/0x380 [ 2777.269715] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2777.269734] ? __detach_mounts+0x4d0/0x4d0 [ 2777.269750] ? kasan_check_write+0x14/0x20 [ 2777.278645] ? up_read+0x212/0x2b0 [ 2777.278660] ? up_read_non_owner+0x100/0x100 [ 2777.278679] ? do_syscall_64+0x8c/0x800 [ 2777.278693] ? do_syscall_64+0x8c/0x800 [ 2777.278709] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2777.288378] ? trace_hardirqs_on+0xbd/0x310 [ 2777.288395] ? __do_page_fault+0x3f1/0xd60 [ 2777.288412] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2777.288427] ? trace_hardirqs_off_caller+0x300/0x300 [ 2777.301453] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2777.301477] __x64_sys_umount+0x54/0x80 [ 2777.301492] do_syscall_64+0x1a3/0x800 [ 2777.301509] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2777.301524] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2777.301544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2777.301583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2777.301595] RIP: 0033:0x45aae7 [ 2777.301609] Code: 44 00 00 b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ed 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2777.309187] RSP: 002b:00007fffab5f71c8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 2777.309201] RAX: ffffffffffffffda RBX: 00000000002a5b1b RCX: 000000000045aae7 [ 2777.309209] RDX: 0000000000402eb0 RSI: 0000000000000002 RDI: 00007fffab5f7270 [ 2777.309218] RBP: 0000000000000008 R08: 0000000000000000 R09: 000000000000000e [ 2777.309225] R10: 000000000000000a R11: 0000000000000206 R12: 00007fffab5f8300 [ 2777.309232] R13: 0000000001b15940 R14: 0000000000000000 R15: 0000000000000005 [ 2777.312020] memory: usage 1024kB, limit 0kB, failcnt 312471 [ 2777.326950] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2777.336987] IPVS: ftp: loaded support on port[0] = 21 [ 2777.338803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2777.351423] Memory cgroup stats for /syz5: cache:148KB rss:8KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:44KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2777.369004] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22127,uid=0 [ 2777.428912] Memory cgroup out of memory: Kill process 22127 (syz-executor5) score 8981000 or sacrifice child [ 2777.465004] Killed process 22127 (syz-executor5) total-vm:72316kB, anon-rss:92kB, file-rss:35712kB, shmem-rss:0kB [ 2777.956493] chnl_net:caif_netlink_parms(): no params data found [ 2777.993476] chnl_net:caif_netlink_parms(): no params data found [ 2778.138737] chnl_net:caif_netlink_parms(): no params data found [ 2778.161711] bridge0: port 1(bridge_slave_0) entered blocking state [ 2778.168100] bridge0: port 1(bridge_slave_0) entered disabled state [ 2778.176274] device bridge_slave_0 entered promiscuous mode [ 2778.208447] bridge0: port 2(bridge_slave_1) entered blocking state [ 2778.216352] bridge0: port 2(bridge_slave_1) entered disabled state [ 2778.224353] device bridge_slave_1 entered promiscuous mode [ 2778.232265] bridge0: port 1(bridge_slave_0) entered blocking state [ 2778.238638] bridge0: port 1(bridge_slave_0) entered disabled state [ 2778.252776] device bridge_slave_0 entered promiscuous mode [ 2778.287392] bridge0: port 2(bridge_slave_1) entered blocking state [ 2778.297084] bridge0: port 2(bridge_slave_1) entered disabled state [ 2778.308009] device bridge_slave_1 entered promiscuous mode [ 2778.353816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2778.375720] bridge0: port 1(bridge_slave_0) entered blocking state [ 2778.388541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2778.396139] device bridge_slave_0 entered promiscuous mode [ 2778.411533] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2778.429217] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2778.436939] bridge0: port 2(bridge_slave_1) entered blocking state [ 2778.449791] bridge0: port 2(bridge_slave_1) entered disabled state [ 2778.457260] device bridge_slave_1 entered promiscuous mode [ 2778.478978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2778.535654] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2778.549714] team0: Port device team_slave_0 added [ 2778.555091] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2778.562968] team0: Port device team_slave_0 added [ 2778.570507] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2778.578443] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2778.586930] team0: Port device team_slave_1 added [ 2778.598785] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2778.606380] team0: Port device team_slave_1 added [ 2778.613271] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2778.628426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2778.639083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2778.653286] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2778.665972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2778.673769] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2778.688283] team0: Port device team_slave_0 added [ 2778.726975] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2778.736192] team0: Port device team_slave_1 added [ 2778.782114] device hsr_slave_0 entered promiscuous mode [ 2778.849340] device hsr_slave_1 entered promiscuous mode [ 2778.909536] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2778.916555] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2778.930445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2779.002221] device hsr_slave_0 entered promiscuous mode [ 2779.039345] device hsr_slave_1 entered promiscuous mode [ 2779.079606] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2779.091333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2779.125798] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2779.139888] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2779.212695] device hsr_slave_0 entered promiscuous mode [ 2779.279481] device hsr_slave_1 entered promiscuous mode [ 2779.333435] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2779.340961] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2779.364463] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2779.393526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2779.413415] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2779.440766] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2779.448698] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2779.471040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2779.478206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2779.489641] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2779.495722] 8021q: adding VLAN 0 to HW filter on device team0 [ 2779.521941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2779.533705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2779.543106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2779.552368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2779.560147] bridge0: port 1(bridge_slave_0) entered blocking state [ 2779.566514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2779.573913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2779.582317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2779.590514] bridge0: port 2(bridge_slave_1) entered blocking state [ 2779.596856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2779.608295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2779.625743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2779.638360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2779.659845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2779.670914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2779.678794] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2779.697241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2779.712471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2779.722870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2779.730440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2779.744336] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2779.750944] 8021q: adding VLAN 0 to HW filter on device team0 [ 2779.761632] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2779.772857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2779.780019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2779.787907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2779.796055] bridge0: port 1(bridge_slave_0) entered blocking state [ 2779.802449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2779.810043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2779.817812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2779.829208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2779.839771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2779.848367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2779.855639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2779.864132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2779.872687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2779.880874] bridge0: port 2(bridge_slave_1) entered blocking state [ 2779.887201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2779.894858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2779.903191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2779.914391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2779.922335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2779.934339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2779.956282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2779.965546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2779.973955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2779.981779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2779.994730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2780.008371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2780.017097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2780.028402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2780.036371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2780.044878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2780.053368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2780.065650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2780.079765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2780.091337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2780.101965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2780.109803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2780.118548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2780.126989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2780.135121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2780.142865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2780.150740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2780.168751] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2780.175285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2780.184218] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2780.200705] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2780.214518] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2780.228143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2780.235431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2780.247722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2780.260335] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2780.284646] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2780.299414] 8021q: adding VLAN 0 to HW filter on device team0 [ 2780.311104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2780.328443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2780.337440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2780.348790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2780.366108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2780.372549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2780.383499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2780.425300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2780.465643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2780.475440] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2780.486589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2780.494494] bridge0: port 2(bridge_slave_1) entered blocking state [ 2780.500905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2780.507981] CPU: 0 PID: 22188 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2780.515100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2780.515108] Call Trace: [ 2780.515132] dump_stack+0x1db/0x2d0 [ 2780.515171] ? dump_stack_print_info.cold+0x20/0x20 [ 2780.515209] dump_header+0x1e6/0x116c [ 2780.527137] ? add_lock_to_list.isra.0+0x450/0x450 [ 2780.527175] ? print_usage_bug+0xd0/0xd0 [ 2780.527195] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2780.535820] ? ___ratelimit+0x37c/0x686 [ 2780.535844] ? mark_held_locks+0xb1/0x100 [ 2780.535864] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2780.544578] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2780.544596] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2780.544613] ? trace_hardirqs_on+0xbd/0x310 [ 2780.544631] ? kasan_check_read+0x11/0x20 [ 2780.553610] ? ___ratelimit+0x37c/0x686 [ 2780.553627] ? trace_hardirqs_off_caller+0x300/0x300 [ 2780.553641] ? do_raw_spin_trylock+0x270/0x270 [ 2780.553657] ? trace_hardirqs_on_caller+0x310/0x310 [ 2780.553674] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2780.553697] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2780.553713] ? ___ratelimit+0xac/0x686 [ 2780.561824] ? idr_get_free+0xee0/0xee0 [ 2780.561854] oom_kill_process.cold+0x10/0x9d4 [ 2780.561874] ? cgroup_procs_next+0x70/0x70 [ 2780.561891] ? _raw_spin_unlock_irq+0x54/0x90 [ 2780.561908] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2780.561924] ? oom_badness+0xa50/0xa50 [ 2780.642831] ? oom_evaluate_task+0x540/0x540 [ 2780.647240] ? mem_cgroup_iter_break+0x30/0x30 [ 2780.651823] ? mutex_trylock+0x2d0/0x2d0 [ 2780.655878] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2780.661326] ? cgroup_file_notify+0x217/0x2e0 [ 2780.665827] out_of_memory+0x885/0x1420 [ 2780.669914] ? oom_killer_disable+0x340/0x340 [ 2780.674409] mem_cgroup_out_of_memory+0x160/0x210 [ 2780.679240] ? memcg_memory_event+0x40/0x40 [ 2780.683559] memory_max_write+0x1b0/0x3e0 [ 2780.687692] ? lock_acquire+0x1db/0x570 [ 2780.691657] ? mem_cgroup_write+0x440/0x440 [ 2780.695967] ? lock_release+0xc40/0xc40 [ 2780.699930] ? add_lock_to_list.isra.0+0x450/0x450 [ 2780.704858] ? kernfs_get_active+0xa3/0x340 [ 2780.709227] cgroup_file_write+0x252/0x830 [ 2780.713466] ? mem_cgroup_write+0x440/0x440 [ 2780.717805] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2780.722748] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2780.727678] kernfs_fop_write+0x2ba/0x480 [ 2780.731861] __vfs_write+0x116/0xb40 [ 2780.735588] ? check_preemption_disabled+0x48/0x290 [ 2780.740635] ? kernfs_fop_open+0x1030/0x1030 [ 2780.745059] ? kernel_read+0x120/0x120 [ 2780.748943] ? __lock_is_held+0xb6/0x140 [ 2780.753008] ? rcu_read_lock_sched_held+0x110/0x130 [ 2780.758020] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2780.762786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2780.768309] ? __sb_start_write+0x1ac/0x360 [ 2780.772656] vfs_write+0x20c/0x580 [ 2780.776199] ksys_write+0x105/0x260 [ 2780.779815] ? __ia32_sys_read+0xb0/0xb0 [ 2780.783863] ? trace_hardirqs_off_caller+0x300/0x300 [ 2780.788973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2780.793722] __x64_sys_write+0x73/0xb0 [ 2780.797617] do_syscall_64+0x1a3/0x800 [ 2780.801521] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2780.806438] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2780.811443] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2780.816278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2780.821456] RIP: 0033:0x458099 [ 2780.824644] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2780.843571] RSP: 002b:00007fa1d0b01c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2780.851274] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2780.858539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2780.865809] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2780.873068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1d0b026d4 [ 2780.880328] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2780.911886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2780.919578] memory: usage 3356kB, limit 0kB, failcnt 433611 [ 2780.925894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2780.933886] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2780.943644] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2780.955685] Memory cgroup stats for /syz3: cache:12KB rss:2140KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2780.985439] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22187,uid=0 [ 2781.005648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2781.019728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2781.022416] Memory cgroup out of memory: Kill process 22187 (syz-executor3) score 9269000 or sacrifice child [ 2781.038224] Killed process 22187 (syz-executor3) total-vm:72452kB, anon-rss:2132kB, file-rss:34816kB, shmem-rss:0kB [ 2781.038469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2781.057518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2781.068299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2781.070073] oom_reaper: reaped process 22187 (syz-executor3), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2781.076709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2781.103182] device bridge_slave_1 left promiscuous mode [ 2781.114858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2781.182641] device bridge_slave_0 left promiscuous mode [ 2781.188297] bridge0: port 1(bridge_slave_0) entered disabled state [ 2781.383605] device hsr_slave_1 left promiscuous mode [ 2781.425224] device hsr_slave_0 left promiscuous mode [ 2781.485234] team0 (unregistering): Port device team_slave_1 removed [ 2781.496834] team0 (unregistering): Port device team_slave_0 removed [ 2781.508307] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2781.566469] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2781.667321] bond0 (unregistering): Released all slaves [ 2781.799872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2781.808138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2781.819624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2781.833176] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2781.846519] CPU: 0 PID: 22163 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2781.850838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2781.853656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2781.861364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2781.869673] Call Trace: [ 2781.869695] dump_stack+0x1db/0x2d0 [ 2781.869712] ? dump_stack_print_info.cold+0x20/0x20 [ 2781.869738] dump_header+0x1e6/0x116c [ 2781.869753] ? add_lock_to_list.isra.0+0x450/0x450 [ 2781.869769] ? print_usage_bug+0xd0/0xd0 [ 2781.869801] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2781.869816] ? ___ratelimit+0x37c/0x686 [ 2781.869836] ? mark_held_locks+0xb1/0x100 [ 2781.869853] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2781.869867] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2781.869879] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2781.869893] ? trace_hardirqs_on+0xbd/0x310 [ 2781.869906] ? kasan_check_read+0x11/0x20 [ 2781.869920] ? ___ratelimit+0x37c/0x686 [ 2781.869948] ? trace_hardirqs_off_caller+0x300/0x300 [ 2781.869962] ? do_raw_spin_trylock+0x270/0x270 [ 2781.869978] ? trace_hardirqs_on_caller+0x310/0x310 [ 2781.878380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2781.879651] ? lock_acquire+0x1db/0x570 [ 2781.879674] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2781.879690] ? ___ratelimit+0xac/0x686 [ 2781.879707] ? idr_get_free+0xee0/0xee0 [ 2781.879723] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2781.886652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2781.888374] oom_kill_process.cold+0x10/0x9d4 [ 2781.892729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2781.897101] ? cgroup_procs_next+0x70/0x70 [ 2781.902340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2781.906101] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2781.912928] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2781.914223] ? oom_badness+0xa50/0xa50 [ 2781.920083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2781.924433] ? oom_evaluate_task+0x540/0x540 [ 2781.939123] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2781.941452] ? mem_cgroup_iter_break+0x30/0x30 [ 2781.952782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2781.956130] ? mutex_trylock+0x2d0/0x2d0 [ 2781.967147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2781.991346] ? rcu_read_unlock_special+0x380/0x380 [ 2781.991371] out_of_memory+0x885/0x1420 [ 2781.991387] ? mem_cgroup_iter+0x508/0xf30 [ 2781.991404] ? oom_killer_disable+0x340/0x340 [ 2781.991420] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2781.991436] ? lock_acquire+0x1db/0x570 [ 2781.991459] mem_cgroup_out_of_memory+0x160/0x210 [ 2782.003051] ? do_raw_spin_unlock+0xa0/0x330 [ 2782.003067] ? memcg_memory_event+0x40/0x40 [ 2782.003080] ? do_raw_spin_trylock+0x270/0x270 [ 2782.003103] ? _raw_spin_unlock+0x2d/0x50 [ 2782.003118] try_charge+0x12a9/0x19b0 [ 2782.003134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2782.003168] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2782.003185] ? rcu_read_unlock_special+0x380/0x380 [ 2782.003207] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2782.003227] ? get_mem_cgroup_from_page+0x190/0x190 [ 2782.003245] ? rcu_read_lock_sched_held+0x110/0x130 [ 2782.003261] mem_cgroup_try_charge+0x43a/0xdb0 [ 2782.003294] ? mem_cgroup_protected+0xa10/0xa10 [ 2782.003314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2782.003327] ? print_usage_bug+0xd0/0xd0 [ 2782.003344] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2782.003355] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2782.003391] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2782.003409] wp_page_copy+0x45a/0x1c30 [ 2782.003420] ? swp_swapcount+0x540/0x540 [ 2782.003442] ? pmd_pfn+0x1d0/0x1d0 [ 2782.195217] ? find_held_lock+0x35/0x120 [ 2782.199273] ? do_wp_page+0x70d/0x16b0 [ 2782.203181] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2782.208714] ? kasan_check_read+0x11/0x20 [ 2782.212870] ? do_raw_spin_unlock+0xa0/0x330 [ 2782.217266] ? do_raw_spin_trylock+0x270/0x270 [ 2782.221850] ? __lock_acquire+0x572/0x4a30 [ 2782.226076] do_wp_page+0x715/0x16b0 [ 2782.229780] ? finish_mkwrite_fault+0x540/0x540 [ 2782.234445] ? kasan_check_read+0x11/0x20 [ 2782.238597] ? do_raw_spin_lock+0x156/0x360 [ 2782.242908] ? rwlock_bug.part.0+0x90/0x90 [ 2782.247131] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2782.252255] __handle_mm_fault+0x2c8e/0x55a0 [ 2782.256658] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2782.261500] ? check_preemption_disabled+0x48/0x290 [ 2782.266532] ? handle_mm_fault+0x3cc/0xc80 [ 2782.270766] ? lock_downgrade+0x910/0x910 [ 2782.274900] ? kasan_check_read+0x11/0x20 [ 2782.279038] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2782.284413] ? rcu_read_unlock_special+0x380/0x380 [ 2782.289335] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2782.294859] ? check_preemption_disabled+0x48/0x290 [ 2782.299878] handle_mm_fault+0x4ec/0xc80 [ 2782.303926] ? __handle_mm_fault+0x55a0/0x55a0 [ 2782.308494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2782.314019] ? vmacache_update+0x114/0x140 [ 2782.318249] __do_page_fault+0x5da/0xd60 [ 2782.322305] do_page_fault+0xe6/0x7d8 [ 2782.326100] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2782.331031] ? vmalloc_sync_all+0x30/0x30 [ 2782.335197] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2782.340662] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2782.345584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2782.351109] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2782.356113] ? page_fault+0x8/0x30 [ 2782.359641] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2782.364481] ? page_fault+0x8/0x30 [ 2782.368021] page_fault+0x1e/0x30 [ 2782.371458] RIP: 0033:0x42f226 [ 2782.374654] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2782.393570] RSP: 002b:00007fff0d6b7470 EFLAGS: 00010206 [ 2782.398940] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2782.406201] RDX: 0000000000e8b930 RSI: 0000000000e93970 RDI: 0000000000000003 [ 2782.413460] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000000e8a940 [ 2782.420734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2782.428022] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2782.446605] memory: usage 1036kB, limit 0kB, failcnt 433619 [ 2782.453329] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2782.453342] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2782.473778] Memory cgroup stats for /syz3: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2782.494223] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22163,uid=0 [ 2782.509233] Memory cgroup out of memory: Kill process 22163 (syz-executor3) score 8755000 or sacrifice child [ 2782.519367] Killed process 22163 (syz-executor3) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2782.531673] oom_reaper: reaped process 22163 (syz-executor3), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2782.533415] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2782.554992] CPU: 0 PID: 22195 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2782.562127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2782.571494] Call Trace: [ 2782.574072] dump_stack+0x1db/0x2d0 [ 2782.577690] ? dump_stack_print_info.cold+0x20/0x20 [ 2782.582708] dump_header+0x1e6/0x116c [ 2782.586500] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2782.591248] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2782.595820] ? retint_kernel+0x2d/0x2d [ 2782.599696] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2782.604660] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2782.609590] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2782.615069] ? ___ratelimit+0x37c/0x686 [ 2782.619037] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2782.623786] ? retint_kernel+0x2d/0x2d [ 2782.627668] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2782.632783] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2782.637876] ? ___ratelimit+0xac/0x686 [ 2782.641766] ? idr_get_free+0xee0/0xee0 [ 2782.645735] oom_kill_process.cold+0x10/0x9d4 [ 2782.650235] ? cgroup_procs_next+0x70/0x70 [ 2782.654487] ? _raw_spin_unlock_irq+0x54/0x90 [ 2782.658986] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2782.663495] ? oom_badness+0xa50/0xa50 [ 2782.667373] ? oom_evaluate_task+0x540/0x540 [ 2782.671767] ? mem_cgroup_iter_break+0x30/0x30 [ 2782.676334] ? mutex_trylock+0x2d0/0x2d0 [ 2782.680389] ? cgroup_file_notify+0x217/0x2e0 [ 2782.684876] out_of_memory+0x885/0x1420 [ 2782.688848] ? oom_killer_disable+0x340/0x340 [ 2782.693342] ? preempt_schedule+0x4b/0x60 [ 2782.697477] ? ___preempt_schedule+0x16/0x18 [ 2782.701878] mem_cgroup_out_of_memory+0x160/0x210 [ 2782.706709] ? memcg_memory_event+0x40/0x40 [ 2782.711029] memory_max_write+0x1b0/0x3e0 [ 2782.715178] ? mem_cgroup_write+0x440/0x440 [ 2782.719497] ? cgroup_file_write+0x92/0x830 [ 2782.723814] cgroup_file_write+0x252/0x830 [ 2782.728089] ? mem_cgroup_write+0x440/0x440 [ 2782.732401] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2782.737338] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2782.742257] kernfs_fop_write+0x2ba/0x480 [ 2782.746399] __vfs_write+0x116/0xb40 [ 2782.750125] ? check_preemption_disabled+0x48/0x290 [ 2782.755132] ? kernfs_fop_open+0x1030/0x1030 [ 2782.759537] ? kernel_read+0x120/0x120 [ 2782.763412] ? __lock_is_held+0xb6/0x140 [ 2782.767466] ? rcu_read_lock_sched_held+0x110/0x130 [ 2782.772470] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2782.777211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2782.782738] ? __sb_start_write+0x1ac/0x360 [ 2782.787045] vfs_write+0x20c/0x580 [ 2782.790575] ksys_write+0x105/0x260 [ 2782.794204] ? __ia32_sys_read+0xb0/0xb0 [ 2782.798255] __x64_sys_write+0x73/0xb0 [ 2782.802131] do_syscall_64+0x1a3/0x800 [ 2782.806058] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2782.811002] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2782.816014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2782.820851] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2782.826023] RIP: 0033:0x458099 [ 2782.829209] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2782.848109] RSP: 002b:00007ff9c0e1dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2782.855809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2782.863072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2782.870328] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2782.877585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9c0e1e6d4 [ 2782.884841] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2782.909523] memory: usage 3712kB, limit 0kB, failcnt 1653229 [ 2782.915650] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2782.932751] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2782.941366] Memory cgroup stats for /syz0: cache:24KB rss:2164KB rss_huge:2048KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2782.962980] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22193,uid=0 [ 2782.978081] Memory cgroup out of memory: Kill process 22193 (syz-executor0) score 9271000 or sacrifice child [ 2782.988847] Killed process 22195 (syz-executor0) total-vm:72452kB, anon-rss:2184kB, file-rss:35720kB, shmem-rss:0kB [ 2783.002561] oom_reaper: reaped process 22195 (syz-executor0), now anon-rss:0kB, file-rss:34760kB, shmem-rss:0kB 18:10:58 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:10:58 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:10:58 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x0, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:10:58 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:10:58 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r3, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 18:10:58 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce04f31b6857381d65f3184d8fd6ded9ae1fdaec890fc9e982703e73bb5804aafab8991a68498d4e57d03a8c9b172fcf671298761634b457028a7bd2a37c6c7e9066fcc68f1e5b0465296d1f61285d867959d621d9fa043d73b6e28a4974240af72aaed41de23237ab801ee6be53a54c5b3542811524f868c71c5148255c7f514c67b87c7679a50098dbd9eebe0d902321f9fefcdb46d66a295b1191df3d31d786b247132e45b477151b3c055c0b89087ab8bd082ea1be6504ad6f9423b364a66255b95d07c272ff30ed6c74ae59d9f20211680b5c6900a4dd9a6a537c34e9df406a7b6c5aea20124d6427ca1b8fa1ef80c7d9c9d054722ef41d6136e99092138c44b4549ff5f0812701997d53c259fd79320fcc41ba1e8f8db9a05fde91f9ef76c77684f8e40d3bb60fa3353f57d409d5d3c7ce2fd0674a5dc3772c4c15a4d05e0d239597dc62d5d588ab0d1a2db2116cc3abd56a8fc9ae7ec2743be749e1ceb7ab3fac29f590762af3b1a2988cc22105bc15d03d4b08395723a431ac9a12f14c45f0a99032375e5ed6147ace036eb496b3fd69b7df8d116218b2c5cb2faf084c60d539dbdd9f73fa0aecd1dfb830c192eb4282e74dd455afd74cbe6b48938f47184d685f51444b2709794806b8629924235a5a2b63a1967e6fd01e74404598f563656532e0b47d81394edc55b1f597028ead149a64c092ae626981bbc01e386a10ea8c09abcd95e4ee2377941c5c4d8b504e8dafb5f2778bf74066440d19fbf56554628be82793487cda9edc676c6a8f03d378e38eb0874d014d729dc35ce3f642fd09e2b64b96961e04b4414555f766c8e620acc84c70e4d5c0d3adbdba80265fdf042c92ad3fa1871ff412c6138fde9297c8bbf3ef22f669676cfaad27bce9aed68e29ca89501991b04f48dc697a13d4bc16de448949d8daa8c7e72a820f1b837a8c7", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2783.036485] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2783.069072] CPU: 0 PID: 22179 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2783.076229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2783.076237] Call Trace: [ 2783.088443] dump_stack+0x1db/0x2d0 [ 2783.092084] ? dump_stack_print_info.cold+0x20/0x20 [ 2783.097126] dump_header+0x1e6/0x116c [ 2783.100974] ? add_lock_to_list.isra.0+0x450/0x450 [ 2783.105919] ? print_usage_bug+0xd0/0xd0 [ 2783.109988] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2783.114940] ? ___ratelimit+0x37c/0x686 [ 2783.118970] ? mark_held_locks+0xb1/0x100 [ 2783.118988] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2783.119002] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2783.119016] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2783.119031] ? trace_hardirqs_on+0xbd/0x310 [ 2783.119045] ? kasan_check_read+0x11/0x20 [ 2783.119060] ? ___ratelimit+0x37c/0x686 [ 2783.119074] ? trace_hardirqs_off_caller+0x300/0x300 [ 2783.119088] ? do_raw_spin_trylock+0x270/0x270 [ 2783.119103] ? trace_hardirqs_on_caller+0x310/0x310 [ 2783.138011] ? lock_acquire+0x1db/0x570 [ 2783.138037] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2783.138054] ? ___ratelimit+0xac/0x686 [ 2783.178179] ? idr_get_free+0xee0/0xee0 [ 2783.182177] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2783.186779] oom_kill_process.cold+0x10/0x9d4 [ 2783.191300] ? cgroup_procs_next+0x70/0x70 [ 2783.195550] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2783.200058] ? oom_badness+0xa50/0xa50 [ 2783.203969] ? oom_evaluate_task+0x540/0x540 [ 2783.208387] ? mem_cgroup_iter_break+0x30/0x30 [ 2783.213201] ? mutex_trylock+0x2d0/0x2d0 [ 2783.217285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2783.222847] ? rcu_read_unlock_special+0x380/0x380 [ 2783.227814] out_of_memory+0x885/0x1420 [ 2783.231796] ? mem_cgroup_iter+0x508/0xf30 [ 2783.236047] ? oom_killer_disable+0x340/0x340 [ 2783.240554] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2783.245666] ? lock_acquire+0x1db/0x570 [ 2783.249661] mem_cgroup_out_of_memory+0x160/0x210 [ 2783.254532] ? do_raw_spin_unlock+0xa0/0x330 [ 2783.258961] ? memcg_memory_event+0x40/0x40 [ 2783.263335] ? do_raw_spin_trylock+0x270/0x270 [ 2783.267944] ? _raw_spin_unlock+0x2d/0x50 [ 2783.272105] try_charge+0x12a9/0x19b0 [ 2783.275930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2783.281486] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2783.286336] ? rcu_read_unlock_special+0x380/0x380 [ 2783.291310] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2783.296184] ? get_mem_cgroup_from_page+0x190/0x190 [ 2783.301221] ? rcu_read_lock_sched_held+0x110/0x130 [ 2783.306260] mem_cgroup_try_charge+0x43a/0xdb0 [ 2783.310859] ? mem_cgroup_protected+0xa10/0xa10 [ 2783.315539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2783.321082] ? print_usage_bug+0xd0/0xd0 [ 2783.325182] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2783.330728] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2783.336294] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2783.341241] wp_page_copy+0x45a/0x1c30 [ 2783.345141] ? swp_swapcount+0x540/0x540 [ 2783.349232] ? pmd_pfn+0x1d0/0x1d0 [ 2783.352773] ? find_held_lock+0x35/0x120 [ 2783.356845] ? do_wp_page+0x70d/0x16b0 [ 2783.360744] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2783.366301] ? kasan_check_read+0x11/0x20 [ 2783.370456] ? do_raw_spin_unlock+0xa0/0x330 [ 2783.374873] ? do_raw_spin_trylock+0x270/0x270 [ 2783.379512] ? __lock_acquire+0x572/0x4a30 [ 2783.383770] do_wp_page+0x715/0x16b0 [ 2783.387496] ? finish_mkwrite_fault+0x540/0x540 [ 2783.392186] ? kasan_check_read+0x11/0x20 [ 2783.396358] ? do_raw_spin_lock+0x156/0x360 [ 2783.400702] ? rwlock_bug.part.0+0x90/0x90 [ 2783.404951] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2783.410069] __handle_mm_fault+0x2c8e/0x55a0 [ 2783.414491] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2783.419367] ? check_preemption_disabled+0x48/0x290 [ 2783.424394] ? handle_mm_fault+0x3cc/0xc80 [ 2783.428658] ? lock_downgrade+0x910/0x910 [ 2783.432815] ? kasan_check_read+0x11/0x20 [ 2783.436970] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2783.442260] ? rcu_read_unlock_special+0x380/0x380 [ 2783.447204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2783.452747] ? check_preemption_disabled+0x48/0x290 [ 2783.457780] handle_mm_fault+0x4ec/0xc80 [ 2783.461855] ? __handle_mm_fault+0x55a0/0x55a0 [ 2783.466481] __do_page_fault+0x5da/0xd60 [ 2783.470564] do_page_fault+0xe6/0x7d8 [ 2783.474369] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2783.479305] ? vmalloc_sync_all+0x30/0x30 [ 2783.483459] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2783.488924] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2783.493856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2783.499399] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2783.504436] ? page_fault+0x8/0x30 [ 2783.507995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2783.512847] ? page_fault+0x8/0x30 [ 2783.516395] page_fault+0x1e/0x30 [ 2783.519852] RIP: 0033:0x42f226 [ 2783.523044] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2783.541963] RSP: 002b:00007fff9c5cef70 EFLAGS: 00010206 [ 2783.547338] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2783.554638] RDX: 00000000029f2930 RSI: 00000000029fa970 RDI: 0000000000000003 [ 2783.561982] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000029f1940 [ 2783.569258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2783.576539] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 18:10:58 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x0, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:10:58 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce04f31b6857381d65f3184d8fd6ded9ae1fdaec890fc9e982703e73bb5804aafab8991a68498d4e57d03a8c9b172fcf671298761634b457028a7bd2a37c6c7e9066fcc68f1e5b0465296d1f61285d867959d621d9fa043d73b6e28a4974240af72aaed41de23237ab801ee6be53a54c5b3542811524f868c71c5148255c7f514c67b87c7679a50098dbd9eebe0d902321f9fefcdb46d66a295b1191df3d31d786b247132e45b477151b3c055c0b89087ab8bd082ea1be6504ad6f9423b364a66255b95d07c272ff30ed6c74ae59d9f20211680b5c6900a4dd9a6a537c34e9df406a7b6c5aea20124d6427ca1b8fa1ef80c7d9c9d054722ef41d6136e99092138c44b4549ff5f0812701997d53c259fd79320fcc41ba1e8f8db9a05fde91f9ef76c77684f8e40d3bb60fa3353f57d409d5d3c7ce2fd0674a5dc3772c4c15a4d05e0d239597dc62d5d588ab0d1a2db2116cc3abd56a8fc9ae7ec2743be749e1ceb7ab3fac29f590762af3b1a2988cc22105bc15d03d4b08395723a431ac9a12f14c45f0a99032375e5ed6147ace036eb496b3fd69b7df8d116218b2c5cb2faf084c60d539dbdd9f73fa0aecd1dfb830c192eb4282e74dd455afd74cbe6b48938f47184d685f51444b2709794806b8629924235a5a2b63a1967e6fd01e74404598f563656532e0b47d81394edc55b1f597028ead149a64c092ae626981bbc01e386a10ea8c09abcd95e4ee2377941c5c4d8b504e8dafb5f2778bf74066440d19fbf56554628be82793487cda9edc676c6a8f03d378e38eb0874d014d729dc35ce3f642fd09e2b64b96961e04b4414555f766c8e620acc84c70e4d5c0d3adbdba80265fdf042c92ad3fa1871ff412c6138fde9297c8bbf3ef22f669676cfaad27bce9aed68e29ca89501991b04f48dc697a13d4bc16de448949d8daa8c7e72a820f1b837a8c7", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2783.725142] memory: usage 1392kB, limit 0kB, failcnt 1653237 [ 2783.735313] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2783.743659] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2783.754899] Memory cgroup stats for /syz0: cache:24KB rss:0KB rss_huge:0KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2783.839372] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22179,uid=0 [ 2783.864458] Memory cgroup out of memory: Kill process 22179 (syz-executor0) score 8756000 or sacrifice child 18:10:58 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2783.893784] Killed process 22179 (syz-executor0) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2783.946673] oom_reaper: reaped process 22179 (syz-executor0), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2783.999130] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2784.029121] CPU: 1 PID: 22208 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2784.036305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2784.045694] Call Trace: [ 2784.048317] dump_stack+0x1db/0x2d0 [ 2784.051964] ? dump_stack_print_info.cold+0x20/0x20 [ 2784.056998] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2784.061854] dump_header+0x1e6/0x116c [ 2784.065716] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2784.070487] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2784.075081] ? retint_kernel+0x2d/0x2d [ 2784.078984] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2784.083923] ? print_usage_bug+0xd0/0xd0 [ 2784.088000] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2784.092946] ? ___ratelimit+0x37c/0x686 [ 2784.096935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2784.101711] ? retint_kernel+0x2d/0x2d [ 2784.105667] ? preempt_count_sub+0x4f/0x160 [ 2784.110001] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2784.115113] ? ___ratelimit+0xac/0x686 [ 2784.119007] ? idr_get_free+0xee0/0xee0 [ 2784.123003] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2784.127600] oom_kill_process.cold+0x10/0x9d4 [ 2784.132108] ? cgroup_procs_next+0x70/0x70 [ 2784.136375] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2784.140883] ? oom_badness+0xa50/0xa50 [ 2784.144780] ? oom_evaluate_task+0x540/0x540 [ 2784.149256] ? mem_cgroup_iter_break+0x30/0x30 [ 2784.153868] ? out_of_memory+0xc7/0x1420 [ 2784.157958] out_of_memory+0x885/0x1420 [ 2784.161950] ? oom_killer_disable+0x340/0x340 [ 2784.166465] ? preempt_schedule+0x4b/0x60 [ 2784.170629] ? ___preempt_schedule+0x16/0x18 [ 2784.175055] mem_cgroup_out_of_memory+0x160/0x210 [ 2784.179911] ? memcg_memory_event+0x40/0x40 [ 2784.184262] ? strim+0x171/0x1d0 [ 2784.187639] memory_max_write+0x1b0/0x3e0 [ 2784.191797] ? lock_acquire+0x259/0x570 [ 2784.195785] ? mem_cgroup_write+0x440/0x440 [ 2784.200108] ? lock_release+0xc40/0xc40 [ 2784.204116] ? add_lock_to_list.isra.0+0x450/0x450 [ 2784.209071] ? lock_downgrade+0x910/0x910 [ 2784.213227] cgroup_file_write+0x252/0x830 [ 2784.217473] ? mem_cgroup_write+0x440/0x440 [ 2784.221804] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2784.226753] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2784.231708] kernfs_fop_write+0x2ba/0x480 [ 2784.235870] __vfs_write+0x116/0xb40 [ 2784.239591] ? check_preemption_disabled+0x48/0x290 [ 2784.244615] ? kernfs_fop_open+0x1030/0x1030 [ 2784.249038] ? kernel_read+0x120/0x120 [ 2784.252931] ? __lock_is_held+0xb6/0x140 [ 2784.257008] ? rcu_read_lock_sched_held+0x110/0x130 [ 2784.262032] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2784.266788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2784.272328] ? __sb_start_write+0x1ac/0x360 [ 2784.276689] vfs_write+0x20c/0x580 [ 2784.280239] ksys_write+0x105/0x260 [ 2784.283884] ? __ia32_sys_read+0xb0/0xb0 [ 2784.287950] ? trace_hardirqs_off_caller+0x300/0x300 [ 2784.293059] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2784.297826] __x64_sys_write+0x73/0xb0 [ 2784.301724] do_syscall_64+0x1a3/0x800 [ 2784.305625] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2784.310562] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2784.315617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2784.320476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2784.325677] RIP: 0033:0x458099 [ 2784.328885] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:10:59 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x0, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2784.347801] RSP: 002b:00007f354fb18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2784.355530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2784.362837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2784.370112] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2784.377397] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f354fb196d4 [ 2784.384681] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff 18:10:59 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2784.406244] memory: usage 3348kB, limit 0kB, failcnt 965252 [ 2784.412504] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2784.478414] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2784.485841] Memory cgroup stats for /syz2: cache:4KB rss:2136KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2180KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2784.517116] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22206,uid=0 [ 2784.539065] Memory cgroup out of memory: Kill process 22206 (syz-executor2) score 9272000 or sacrifice child [ 2784.555497] Killed process 22206 (syz-executor2) total-vm:72448kB, anon-rss:2184kB, file-rss:35672kB, shmem-rss:0kB [ 2784.578038] oom_reaper: reaped process 22206 (syz-executor2), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:10:59 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2784.717740] IPVS: ftp: loaded support on port[0] = 21 18:10:59 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2785.049328] chnl_net:caif_netlink_parms(): no params data found [ 2785.184246] bridge0: port 1(bridge_slave_0) entered blocking state [ 2785.197644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2785.220356] device bridge_slave_0 entered promiscuous mode [ 2785.240081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2785.246536] bridge0: port 2(bridge_slave_1) entered disabled state [ 2785.268787] device bridge_slave_1 entered promiscuous mode [ 2785.357809] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2785.360320] IPVS: ftp: loaded support on port[0] = 21 [ 2785.392728] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2785.496353] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2785.524022] team0: Port device team_slave_0 added [ 2785.540758] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2785.548204] team0: Port device team_slave_1 added [ 2785.575164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2785.589585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2785.718576] device hsr_slave_0 entered promiscuous mode [ 2785.775513] device hsr_slave_1 entered promiscuous mode [ 2785.839637] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2785.859913] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2785.910141] bridge0: port 2(bridge_slave_1) entered blocking state [ 2785.916531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2785.923295] bridge0: port 1(bridge_slave_0) entered blocking state [ 2785.929709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2786.055332] bridge0: port 1(bridge_slave_0) entered disabled state [ 2786.075840] bridge0: port 2(bridge_slave_1) entered disabled state [ 2786.122498] chnl_net:caif_netlink_parms(): no params data found [ 2786.178170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2786.228705] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2786.265904] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2786.276183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2786.288777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2786.315303] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2786.331042] 8021q: adding VLAN 0 to HW filter on device team0 [ 2786.337633] bridge0: port 1(bridge_slave_0) entered blocking state [ 2786.352523] bridge0: port 1(bridge_slave_0) entered disabled state [ 2786.365371] device bridge_slave_0 entered promiscuous mode [ 2786.380145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2786.402299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2786.417135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2786.426271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2786.443136] bridge0: port 1(bridge_slave_0) entered blocking state [ 2786.449615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2786.464769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2786.475217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2786.491681] bridge0: port 2(bridge_slave_1) entered blocking state [ 2786.498087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2786.515683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2786.525384] bridge0: port 2(bridge_slave_1) entered disabled state [ 2786.543111] device bridge_slave_1 entered promiscuous mode [ 2786.558360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2786.569023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2786.595106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2786.603896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2786.615403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2786.626699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2786.647711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2786.658832] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2786.668414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2786.676790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2786.685848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2786.694343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2786.760843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2786.767709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2786.780474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2786.788318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2786.831237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2786.838558] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2786.847012] team0: Port device team_slave_0 added [ 2786.853600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2786.862239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2786.896239] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2786.906571] team0: Port device team_slave_1 added [ 2786.917042] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2786.923896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2786.933023] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2786.974367] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2786.992386] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2787.047665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2787.102425] device hsr_slave_0 entered promiscuous mode [ 2787.159511] device hsr_slave_1 entered promiscuous mode [ 2787.199768] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2787.207071] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2787.307893] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2787.479944] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2787.492858] CPU: 0 PID: 22235 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2787.499984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2787.509341] Call Trace: [ 2787.511933] dump_stack+0x1db/0x2d0 [ 2787.515552] ? dump_stack_print_info.cold+0x20/0x20 [ 2787.520587] dump_header+0x1e6/0x116c [ 2787.524388] ? add_lock_to_list.isra.0+0x450/0x450 [ 2787.529318] ? print_usage_bug+0xd0/0xd0 [ 2787.533381] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2787.538300] ? ___ratelimit+0x37c/0x686 [ 2787.542292] ? mark_held_locks+0xb1/0x100 [ 2787.546439] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2787.551562] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2787.556693] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2787.561285] ? trace_hardirqs_on+0xbd/0x310 [ 2787.565621] ? kasan_check_read+0x11/0x20 [ 2787.569773] ? ___ratelimit+0x37c/0x686 [ 2787.573773] ? trace_hardirqs_off_caller+0x300/0x300 [ 2787.578885] ? do_raw_spin_trylock+0x270/0x270 [ 2787.583481] ? trace_hardirqs_on_caller+0x310/0x310 [ 2787.588492] ? lock_acquire+0x1db/0x570 [ 2787.592459] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2787.597551] ? ___ratelimit+0xac/0x686 [ 2787.601445] ? idr_get_free+0xee0/0xee0 [ 2787.605418] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2787.610038] oom_kill_process.cold+0x10/0x9d4 [ 2787.614534] ? cgroup_procs_next+0x70/0x70 [ 2787.618784] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2787.623283] ? oom_badness+0xa50/0xa50 [ 2787.627181] ? oom_evaluate_task+0x540/0x540 [ 2787.631581] ? mem_cgroup_iter_break+0x30/0x30 [ 2787.636189] ? mutex_trylock+0x2d0/0x2d0 [ 2787.640264] ? cgroup_file_notify+0x217/0x2e0 [ 2787.644761] out_of_memory+0x885/0x1420 [ 2787.648749] ? mark_held_locks+0xb1/0x100 [ 2787.652903] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2787.657994] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2787.663101] ? oom_killer_disable+0x340/0x340 [ 2787.667598] ? preempt_schedule+0x4b/0x60 [ 2787.671748] ? ___preempt_schedule+0x16/0x18 [ 2787.676212] mem_cgroup_out_of_memory+0x160/0x210 [ 2787.681071] ? memcg_memory_event+0x40/0x40 [ 2787.685401] memory_max_write+0x1b0/0x3e0 [ 2787.689546] ? lock_acquire+0x1db/0x570 [ 2787.693519] ? mem_cgroup_write+0x440/0x440 [ 2787.697828] ? lock_release+0xc40/0xc40 [ 2787.701827] ? add_lock_to_list.isra.0+0x450/0x450 [ 2787.706755] ? lock_downgrade+0x910/0x910 [ 2787.710905] cgroup_file_write+0x252/0x830 [ 2787.715226] ? mem_cgroup_write+0x440/0x440 [ 2787.719547] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2787.724481] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2787.729412] kernfs_fop_write+0x2ba/0x480 [ 2787.733568] __vfs_write+0x116/0xb40 [ 2787.737287] ? check_preemption_disabled+0x48/0x290 [ 2787.742313] ? kernfs_fop_open+0x1030/0x1030 [ 2787.746722] ? kernel_read+0x120/0x120 [ 2787.750609] ? __lock_is_held+0xb6/0x140 [ 2787.754675] ? rcu_read_lock_sched_held+0x110/0x130 [ 2787.759692] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2787.764452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2787.769991] ? __sb_start_write+0x1ac/0x360 [ 2787.774318] vfs_write+0x20c/0x580 [ 2787.777850] ksys_write+0x105/0x260 [ 2787.781484] ? __ia32_sys_read+0xb0/0xb0 [ 2787.785546] ? trace_hardirqs_off_caller+0x300/0x300 [ 2787.790649] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2787.795438] __x64_sys_write+0x73/0xb0 [ 2787.799335] do_syscall_64+0x1a3/0x800 [ 2787.803240] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2787.808208] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2787.813222] ? __switch_to_asm+0x34/0x70 [ 2787.817286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2787.822186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2787.827383] RIP: 0033:0x458099 [ 2787.830573] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2787.849491] RSP: 002b:00007fe84a7abc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2787.857223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2787.864496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2787.871767] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2787.879048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe84a7ac6d4 [ 2787.886323] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2787.899080] memory: usage 3416kB, limit 0kB, failcnt 433620 [ 2787.904840] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2787.912563] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2787.918729] Memory cgroup stats for /syz3: cache:12KB rss:2084KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2176KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2787.940595] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22231,uid=0 [ 2787.956907] Memory cgroup out of memory: Kill process 22231 (syz-executor3) score 9269000 or sacrifice child [ 2787.964907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2787.967717] Killed process 22231 (syz-executor3) total-vm:72584kB, anon-rss:2132kB, file-rss:34816kB, shmem-rss:0kB [ 2787.988138] oom_reaper: reaped process 22231 (syz-executor3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 2788.000952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2788.007912] device bridge_slave_1 left promiscuous mode [ 2788.013847] bridge0: port 2(bridge_slave_1) entered disabled state [ 2788.052918] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2788.062608] CPU: 1 PID: 22216 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2788.069721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.079078] Call Trace: [ 2788.079103] dump_stack+0x1db/0x2d0 [ 2788.079120] ? dump_stack_print_info.cold+0x20/0x20 [ 2788.079159] dump_header+0x1e6/0x116c [ 2788.079190] ? add_lock_to_list.isra.0+0x450/0x450 [ 2788.082753] device bridge_slave_0 left promiscuous mode [ 2788.085398] ? print_usage_bug+0xd0/0xd0 [ 2788.090854] bridge0: port 1(bridge_slave_0) entered disabled state [ 2788.094470] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2788.120059] ? ___ratelimit+0x37c/0x686 [ 2788.124027] ? mark_held_locks+0xb1/0x100 [ 2788.128172] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2788.133280] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2788.138372] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2788.142943] ? trace_hardirqs_on+0xbd/0x310 [ 2788.147345] ? kasan_check_read+0x11/0x20 [ 2788.151482] ? ___ratelimit+0x37c/0x686 [ 2788.155441] ? trace_hardirqs_off_caller+0x300/0x300 [ 2788.160531] ? do_raw_spin_trylock+0x270/0x270 [ 2788.165098] ? trace_hardirqs_on_caller+0x310/0x310 [ 2788.170103] ? lock_acquire+0x1db/0x570 [ 2788.174068] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2788.179180] ? ___ratelimit+0xac/0x686 [ 2788.183056] ? idr_get_free+0xee0/0xee0 [ 2788.187059] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2788.191667] oom_kill_process.cold+0x10/0x9d4 [ 2788.196163] ? cgroup_procs_next+0x70/0x70 [ 2788.200389] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2788.204871] ? oom_badness+0xa50/0xa50 [ 2788.208748] ? oom_evaluate_task+0x540/0x540 [ 2788.213171] ? mem_cgroup_iter_break+0x30/0x30 [ 2788.217743] ? mutex_trylock+0x2d0/0x2d0 [ 2788.221790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2788.227322] ? rcu_read_unlock_special+0x380/0x380 [ 2788.232262] out_of_memory+0x885/0x1420 [ 2788.236224] ? mem_cgroup_iter+0x508/0xf30 [ 2788.240455] ? oom_killer_disable+0x340/0x340 [ 2788.244980] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2788.250087] ? lock_acquire+0x1db/0x570 [ 2788.254055] mem_cgroup_out_of_memory+0x160/0x210 [ 2788.258894] ? do_raw_spin_unlock+0xa0/0x330 [ 2788.263298] ? memcg_memory_event+0x40/0x40 [ 2788.267602] ? do_raw_spin_trylock+0x270/0x270 [ 2788.272247] ? _raw_spin_unlock+0x2d/0x50 [ 2788.276384] try_charge+0x12a9/0x19b0 [ 2788.280232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2788.285760] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2788.290606] ? rcu_read_unlock_special+0x380/0x380 [ 2788.295526] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2788.300356] ? get_mem_cgroup_from_page+0x190/0x190 [ 2788.305363] ? rcu_read_lock_sched_held+0x110/0x130 [ 2788.310371] mem_cgroup_try_charge+0x43a/0xdb0 [ 2788.314956] ? mem_cgroup_protected+0xa10/0xa10 [ 2788.319647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2788.325176] ? print_usage_bug+0xd0/0xd0 [ 2788.329231] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2788.334753] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2788.340284] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2788.345203] wp_page_copy+0x45a/0x1c30 [ 2788.349076] ? swp_swapcount+0x540/0x540 [ 2788.353130] ? pmd_pfn+0x1d0/0x1d0 [ 2788.356668] ? find_held_lock+0x35/0x120 [ 2788.360735] ? do_wp_page+0x70d/0x16b0 [ 2788.364632] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2788.370167] ? kasan_check_read+0x11/0x20 [ 2788.374302] ? do_raw_spin_unlock+0xa0/0x330 [ 2788.378719] ? do_raw_spin_trylock+0x270/0x270 [ 2788.383289] ? __lock_acquire+0x572/0x4a30 [ 2788.387513] do_wp_page+0x715/0x16b0 [ 2788.391234] ? finish_mkwrite_fault+0x540/0x540 [ 2788.395887] ? kasan_check_read+0x11/0x20 [ 2788.400021] ? do_raw_spin_lock+0x156/0x360 [ 2788.404330] ? rwlock_bug.part.0+0x90/0x90 [ 2788.408565] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2788.413677] __handle_mm_fault+0x2c8e/0x55a0 [ 2788.418094] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2788.422924] ? check_preemption_disabled+0x48/0x290 [ 2788.427927] ? handle_mm_fault+0x3cc/0xc80 [ 2788.432166] ? lock_downgrade+0x910/0x910 [ 2788.436305] ? kasan_check_read+0x11/0x20 [ 2788.440442] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2788.445726] ? rcu_read_unlock_special+0x380/0x380 [ 2788.450644] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2788.456205] ? check_preemption_disabled+0x48/0x290 [ 2788.461226] handle_mm_fault+0x4ec/0xc80 [ 2788.465285] ? __handle_mm_fault+0x55a0/0x55a0 [ 2788.469898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2788.475424] ? vmacache_update+0x114/0x140 [ 2788.479670] __do_page_fault+0x5da/0xd60 [ 2788.483768] do_page_fault+0xe6/0x7d8 [ 2788.487561] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2788.492479] ? vmalloc_sync_all+0x30/0x30 [ 2788.496611] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2788.502050] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2788.506967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2788.512493] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2788.517524] ? page_fault+0x8/0x30 [ 2788.521082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2788.525916] ? page_fault+0x8/0x30 [ 2788.529444] page_fault+0x1e/0x30 [ 2788.532899] RIP: 0033:0x42f226 [ 2788.536075] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2788.554969] RSP: 002b:00007fff4f3615d0 EFLAGS: 00010206 [ 2788.560335] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2788.567614] RDX: 0000000002259930 RSI: 0000000002261970 RDI: 0000000000000003 [ 2788.574876] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002258940 [ 2788.582193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2788.589465] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2788.598500] memory: usage 1052kB, limit 0kB, failcnt 433628 [ 2788.604283] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2788.611286] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2788.617440] Memory cgroup stats for /syz3: cache:12KB rss:32KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2788.637396] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22216,uid=0 [ 2788.651983] Memory cgroup out of memory: Kill process 22216 (syz-executor3) score 8755000 or sacrifice child [ 2788.662145] Killed process 22216 (syz-executor3) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2788.673388] oom_reaper: reaped process 22216 (syz-executor3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 2788.686652] device bridge_slave_1 left promiscuous mode [ 2788.699116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2788.750428] device bridge_slave_0 left promiscuous mode [ 2788.755970] bridge0: port 1(bridge_slave_0) entered disabled state [ 2789.121224] device hsr_slave_1 left promiscuous mode [ 2789.181036] device hsr_slave_0 left promiscuous mode [ 2789.234572] team0 (unregistering): Port device team_slave_1 removed [ 2789.266673] team0 (unregistering): Port device team_slave_0 removed [ 2789.288696] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2789.365459] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2789.527945] bond0 (unregistering): Released all slaves [ 2789.702542] device hsr_slave_1 left promiscuous mode [ 2789.744975] device hsr_slave_0 left promiscuous mode [ 2789.811350] team0 (unregistering): Port device team_slave_1 removed [ 2789.833697] team0 (unregistering): Port device team_slave_0 removed [ 2789.856120] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2789.937927] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2790.105670] bond0 (unregistering): Released all slaves [ 2790.250872] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2790.267810] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2790.274145] 8021q: adding VLAN 0 to HW filter on device team0 [ 2790.288103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2790.296345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2790.331753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2790.345121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2790.353707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2790.370196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2790.376561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2790.393567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2790.426783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2790.434568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2790.450031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2790.457684] bridge0: port 2(bridge_slave_1) entered blocking state [ 2790.464094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2790.521532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2790.529137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2790.545026] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2790.551943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2790.569669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2790.577439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2790.578165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2790.601613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2790.616794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2790.624755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2790.639621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2790.649577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2790.670413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2790.677270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2790.692439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2790.703808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2790.714781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2790.727626] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2790.737400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2790.764570] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2790.785190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2790.957142] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2790.967335] CPU: 0 PID: 22238 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2790.974430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2790.983795] Call Trace: [ 2790.986400] dump_stack+0x1db/0x2d0 [ 2790.990018] ? dump_stack_print_info.cold+0x20/0x20 [ 2790.995041] ? mark_held_locks+0xb1/0x100 [ 2790.999187] dump_header+0x1e6/0x116c [ 2791.002977] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2791.007720] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2791.012308] ? retint_kernel+0x2d/0x2d [ 2791.016202] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2791.021220] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2791.026136] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2791.031599] ? ___ratelimit+0x37c/0x686 [ 2791.035577] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2791.040324] ? retint_kernel+0x2d/0x2d [ 2791.044209] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2791.049301] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2791.054391] ? ___ratelimit+0xac/0x686 [ 2791.058268] ? idr_get_free+0xee0/0xee0 [ 2791.062240] oom_kill_process.cold+0x10/0x9d4 [ 2791.066743] ? cgroup_procs_next+0x70/0x70 [ 2791.071027] ? _raw_spin_unlock_irq+0x54/0x90 [ 2791.075519] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2791.079999] ? oom_badness+0xa50/0xa50 [ 2791.083892] ? oom_evaluate_task+0x540/0x540 [ 2791.088288] ? mem_cgroup_iter_break+0x30/0x30 [ 2791.092867] ? out_of_memory+0x184/0x1420 [ 2791.097002] out_of_memory+0x885/0x1420 [ 2791.100970] ? oom_killer_disable+0x340/0x340 [ 2791.105456] ? preempt_schedule+0x4b/0x60 [ 2791.109593] ? ___preempt_schedule+0x16/0x18 [ 2791.114023] mem_cgroup_out_of_memory+0x160/0x210 [ 2791.118870] ? memcg_memory_event+0x40/0x40 [ 2791.123198] memory_max_write+0x1b0/0x3e0 [ 2791.127344] ? lock_acquire+0x1db/0x570 [ 2791.131320] ? mem_cgroup_write+0x440/0x440 [ 2791.135656] ? lock_release+0xc40/0xc40 [ 2791.139634] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2791.144410] ? add_lock_to_list.isra.0+0x450/0x450 [ 2791.149354] cgroup_file_write+0x252/0x830 [ 2791.153585] ? mem_cgroup_write+0x440/0x440 [ 2791.157915] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2791.162858] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2791.167804] kernfs_fop_write+0x2ba/0x480 [ 2791.171980] __vfs_write+0x116/0xb40 [ 2791.175691] ? check_preemption_disabled+0x48/0x290 [ 2791.180703] ? kernfs_fop_open+0x1030/0x1030 [ 2791.185096] ? kernel_read+0x120/0x120 [ 2791.188970] ? __lock_is_held+0xb6/0x140 [ 2791.193034] ? rcu_read_lock_sched_held+0x110/0x130 [ 2791.198036] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2791.202781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2791.208304] ? __sb_start_write+0x1ac/0x360 [ 2791.212828] vfs_write+0x20c/0x580 [ 2791.216360] ksys_write+0x105/0x260 [ 2791.219977] ? __ia32_sys_read+0xb0/0xb0 [ 2791.224031] __x64_sys_write+0x73/0xb0 [ 2791.227919] ? do_syscall_64+0xbc/0x800 [ 2791.231909] do_syscall_64+0x1a3/0x800 [ 2791.235787] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2791.240704] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2791.245724] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2791.250575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2791.255755] RIP: 0033:0x458099 [ 2791.258933] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2791.277833] RSP: 002b:00007f356e6e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2791.285534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2791.292828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2791.300098] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2791.307367] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f356e6e96d4 [ 2791.314638] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2791.361545] memory: usage 3380kB, limit 0kB, failcnt 312474 [ 2791.367579] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2791.375912] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2791.383099] Memory cgroup stats for /syz5: cache:148KB rss:2056KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2791.405019] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22237,uid=0 [ 2791.419990] Memory cgroup out of memory: Kill process 22237 (syz-executor5) score 9272000 or sacrifice child [ 2791.430556] Killed process 22237 (syz-executor5) total-vm:72452kB, anon-rss:2184kB, file-rss:35672kB, shmem-rss:0kB [ 2791.444097] oom_reaper: reaped process 22237 (syz-executor5), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB 18:11:06 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce0", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:11:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:11:06 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:11:06 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:11:06 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x0, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2791.635145] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2791.709120] CPU: 1 PID: 22223 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2791.716276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.725639] Call Trace: [ 2791.728251] dump_stack+0x1db/0x2d0 [ 2791.731893] ? dump_stack_print_info.cold+0x20/0x20 [ 2791.736929] dump_header+0x1e6/0x116c [ 2791.740738] ? add_lock_to_list.isra.0+0x450/0x450 [ 2791.745677] ? print_usage_bug+0xd0/0xd0 [ 2791.749755] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2791.754701] ? ___ratelimit+0x37c/0x686 [ 2791.758691] ? mark_held_locks+0xb1/0x100 [ 2791.762849] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2791.767959] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2791.773069] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2791.777669] ? trace_hardirqs_on+0xbd/0x310 [ 2791.781996] ? kasan_check_read+0x11/0x20 [ 2791.786159] ? ___ratelimit+0x37c/0x686 [ 2791.790143] ? trace_hardirqs_off_caller+0x300/0x300 [ 2791.795297] ? do_raw_spin_trylock+0x270/0x270 [ 2791.799888] ? trace_hardirqs_on_caller+0x310/0x310 [ 2791.804917] ? lock_acquire+0x1db/0x570 [ 2791.808904] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2791.814017] ? ___ratelimit+0xac/0x686 [ 2791.818091] ? idr_get_free+0xee0/0xee0 [ 2791.822076] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2791.826683] oom_kill_process.cold+0x10/0x9d4 [ 2791.831208] ? cgroup_procs_next+0x70/0x70 [ 2791.835461] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2791.839983] ? oom_badness+0xa50/0xa50 [ 2791.843885] ? oom_evaluate_task+0x540/0x540 [ 2791.848318] ? mem_cgroup_iter_break+0x30/0x30 [ 2791.852905] ? mutex_trylock+0x2d0/0x2d0 [ 2791.856977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2791.862574] ? rcu_read_unlock_special+0x380/0x380 [ 2791.867534] out_of_memory+0x885/0x1420 [ 2791.871519] ? mem_cgroup_iter+0x508/0xf30 [ 2791.875770] ? oom_killer_disable+0x340/0x340 [ 2791.880284] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2791.885394] ? lock_acquire+0x1db/0x570 [ 2791.889391] mem_cgroup_out_of_memory+0x160/0x210 [ 2791.894244] ? do_raw_spin_unlock+0xa0/0x330 [ 2791.898688] ? memcg_memory_event+0x40/0x40 [ 2791.903018] ? do_raw_spin_trylock+0x270/0x270 [ 2791.907665] ? _raw_spin_unlock+0x2d/0x50 [ 2791.911866] try_charge+0x12a9/0x19b0 [ 2791.915681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2791.921243] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2791.926105] ? rcu_read_unlock_special+0x380/0x380 [ 2791.931050] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2791.935938] ? get_mem_cgroup_from_page+0x190/0x190 [ 2791.940975] ? rcu_read_lock_sched_held+0x110/0x130 [ 2791.946003] mem_cgroup_try_charge+0x43a/0xdb0 [ 2791.950603] ? mem_cgroup_protected+0xa10/0xa10 [ 2791.955310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2791.960853] ? print_usage_bug+0xd0/0xd0 [ 2791.964926] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2791.970471] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2791.976024] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2791.980965] wp_page_copy+0x45a/0x1c30 [ 2791.984860] ? swp_swapcount+0x540/0x540 [ 2791.988969] ? pmd_pfn+0x1d0/0x1d0 [ 2791.992522] ? find_held_lock+0x35/0x120 [ 2791.996589] ? do_wp_page+0x70d/0x16b0 [ 2792.000498] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2792.006063] ? kasan_check_read+0x11/0x20 [ 2792.010217] ? do_raw_spin_unlock+0xa0/0x330 [ 2792.014704] ? do_raw_spin_trylock+0x270/0x270 [ 2792.019310] ? __lock_acquire+0x572/0x4a30 [ 2792.023564] do_wp_page+0x715/0x16b0 [ 2792.027291] ? finish_mkwrite_fault+0x540/0x540 [ 2792.031969] ? kasan_check_read+0x11/0x20 [ 2792.036125] ? do_raw_spin_lock+0x156/0x360 [ 2792.040465] ? rwlock_bug.part.0+0x90/0x90 [ 2792.044731] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2792.049859] __handle_mm_fault+0x2c8e/0x55a0 [ 2792.054287] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2792.059137] ? check_preemption_disabled+0x48/0x290 [ 2792.064201] ? handle_mm_fault+0x3cc/0xc80 [ 2792.068459] ? lock_downgrade+0x910/0x910 [ 2792.072610] ? kasan_check_read+0x11/0x20 [ 2792.076763] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2792.082047] ? rcu_read_unlock_special+0x380/0x380 [ 2792.086982] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2792.092532] ? check_preemption_disabled+0x48/0x290 [ 2792.097567] handle_mm_fault+0x4ec/0xc80 [ 2792.101639] ? __handle_mm_fault+0x55a0/0x55a0 [ 2792.106247] __do_page_fault+0x5da/0xd60 [ 2792.110343] do_page_fault+0xe6/0x7d8 [ 2792.114164] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2792.119105] ? vmalloc_sync_all+0x30/0x30 [ 2792.123270] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2792.128729] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2792.133693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2792.139244] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2792.144273] ? page_fault+0x8/0x30 [ 2792.147823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2792.152694] ? page_fault+0x8/0x30 [ 2792.156257] page_fault+0x1e/0x30 [ 2792.159727] RIP: 0033:0x42f226 [ 2792.162957] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2792.182133] RSP: 002b:00007ffc23046b70 EFLAGS: 00010206 [ 2792.187530] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2792.194847] RDX: 0000000002403930 RSI: 000000000240b970 RDI: 0000000000000003 [ 2792.202125] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002402940 18:11:07 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2792.209428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2792.216722] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2792.256849] IPVS: ftp: loaded support on port[0] = 21 [ 2792.264507] memory: usage 1060kB, limit 0kB, failcnt 312482 [ 2792.271044] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2792.303520] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2792.329214] Memory cgroup stats for /syz5: cache:148KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2792.361141] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null) [ 2792.361168] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22223,uid=0 18:11:07 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2792.404335] Memory cgroup out of memory: Kill process 22223 (syz-executor5) score 8758000 or sacrifice child [ 2792.455818] Killed process 22223 (syz-executor5) total-vm:72320kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB 18:11:07 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2792.713107] chnl_net:caif_netlink_parms(): no params data found 18:11:07 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:11:07 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2792.897334] bridge0: port 1(bridge_slave_0) entered blocking state [ 2792.915244] bridge0: port 1(bridge_slave_0) entered disabled state [ 2792.947474] device bridge_slave_0 entered promiscuous mode [ 2792.984924] bridge0: port 2(bridge_slave_1) entered blocking state [ 2793.011178] bridge0: port 2(bridge_slave_1) entered disabled state [ 2793.043378] device bridge_slave_1 entered promiscuous mode [ 2793.095402] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2793.111603] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2793.150762] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2793.158250] team0: Port device team_slave_0 added [ 2793.190109] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2793.208397] team0: Port device team_slave_1 added [ 2793.215714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2793.245753] IPVS: ftp: loaded support on port[0] = 21 [ 2793.252669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2793.362106] device hsr_slave_0 entered promiscuous mode [ 2793.399337] device hsr_slave_1 entered promiscuous mode [ 2793.440537] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2793.485861] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2793.543855] IPVS: ftp: loaded support on port[0] = 21 [ 2794.059699] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2794.307649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2794.392513] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2794.430226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2794.447832] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2794.454488] 8021q: adding VLAN 0 to HW filter on device team0 [ 2794.473710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2794.509387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2794.526404] chnl_net:caif_netlink_parms(): no params data found [ 2794.557216] chnl_net:caif_netlink_parms(): no params data found [ 2794.570228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2794.611007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2794.626166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2794.656587] bridge0: port 1(bridge_slave_0) entered blocking state [ 2794.663052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2794.682179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2794.713921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2794.728397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2794.746430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2794.757378] bridge0: port 2(bridge_slave_1) entered blocking state [ 2794.763826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2794.804589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2794.854090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2794.872919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2794.912189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2794.962856] bridge0: port 1(bridge_slave_0) entered blocking state [ 2794.969852] bridge0: port 1(bridge_slave_0) entered disabled state [ 2794.977442] device bridge_slave_0 entered promiscuous mode [ 2795.014811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2795.025988] bridge0: port 1(bridge_slave_0) entered blocking state [ 2795.039048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2795.046697] device bridge_slave_0 entered promiscuous mode [ 2795.070768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2795.097352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2795.118316] bridge0: port 2(bridge_slave_1) entered blocking state [ 2795.125245] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.140775] device bridge_slave_1 entered promiscuous mode [ 2795.160946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2795.168168] bridge0: port 2(bridge_slave_1) entered blocking state [ 2795.179174] bridge0: port 2(bridge_slave_1) entered disabled state [ 2795.186777] device bridge_slave_1 entered promiscuous mode [ 2795.209825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2795.229005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2795.237051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2795.283544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2795.310661] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2795.319179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2795.326854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2795.358672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2795.381855] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2795.410500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2795.418202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2795.442044] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2795.452545] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2795.458584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2795.488715] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2795.512300] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2795.529711] team0: Port device team_slave_0 added [ 2795.535677] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2795.559784] team0: Port device team_slave_1 added [ 2795.569912] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2795.584729] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2795.604602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2795.612619] team0: Port device team_slave_0 added [ 2795.623121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2795.633473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2795.642250] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2795.651303] team0: Port device team_slave_1 added [ 2795.723877] device hsr_slave_0 entered promiscuous mode [ 2795.780565] device hsr_slave_1 entered promiscuous mode [ 2795.802882] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2795.814778] CPU: 1 PID: 22272 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2795.821885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.831233] Call Trace: [ 2795.833838] dump_stack+0x1db/0x2d0 [ 2795.837464] ? dump_stack_print_info.cold+0x20/0x20 [ 2795.842480] dump_header+0x1e6/0x116c [ 2795.846274] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2795.851034] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2795.855616] ? retint_kernel+0x2d/0x2d [ 2795.859508] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2795.864441] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2795.869366] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2795.874828] ? ___ratelimit+0x37c/0x686 [ 2795.878807] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2795.883578] ? retint_kernel+0x2d/0x2d [ 2795.887465] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2795.892574] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2795.897678] ? ___ratelimit+0xac/0x686 [ 2795.901559] ? idr_get_free+0xee0/0xee0 [ 2795.905530] oom_kill_process.cold+0x10/0x9d4 [ 2795.910037] ? retint_kernel+0x2d/0x2d [ 2795.913956] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2795.918917] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2795.923679] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2795.929164] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2795.933678] ? oom_badness+0xa50/0xa50 [ 2795.937596] ? oom_evaluate_task+0x540/0x540 [ 2795.941994] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2795.946742] ? retint_kernel+0x2d/0x2d [ 2795.950657] ? out_of_memory+0x840/0x1420 [ 2795.954829] out_of_memory+0x885/0x1420 [ 2795.958876] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2795.963468] ? oom_killer_disable+0x340/0x340 [ 2795.967971] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2795.973426] ? preempt_schedule+0x4b/0x60 [ 2795.977586] ? ___preempt_schedule+0x16/0x18 [ 2795.981998] mem_cgroup_out_of_memory+0x160/0x210 [ 2795.986843] ? memcg_memory_event+0x40/0x40 [ 2795.991190] memory_max_write+0x1b0/0x3e0 [ 2795.995350] ? lock_acquire+0x1db/0x570 [ 2795.999340] ? mem_cgroup_write+0x440/0x440 [ 2796.003656] ? lock_release+0xc40/0xc40 [ 2796.007627] ? add_lock_to_list.isra.0+0x450/0x450 [ 2796.012559] ? kernfs_get_active+0x8d/0x340 [ 2796.016891] cgroup_file_write+0x252/0x830 [ 2796.021159] ? mem_cgroup_write+0x440/0x440 [ 2796.025475] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2796.030415] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2796.035351] kernfs_fop_write+0x2ba/0x480 [ 2796.039517] __vfs_write+0x116/0xb40 [ 2796.043229] ? check_preemption_disabled+0x48/0x290 [ 2796.048234] ? kernfs_fop_open+0x1030/0x1030 [ 2796.052643] ? kernel_read+0x120/0x120 [ 2796.056534] ? __lock_is_held+0xb6/0x140 [ 2796.060604] ? rcu_read_lock_sched_held+0x110/0x130 [ 2796.065626] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2796.070400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.075934] ? __sb_start_write+0x1ac/0x360 [ 2796.080259] vfs_write+0x20c/0x580 [ 2796.083802] ksys_write+0x105/0x260 [ 2796.087419] ? __ia32_sys_read+0xb0/0xb0 [ 2796.091515] __x64_sys_write+0x73/0xb0 [ 2796.095410] ? do_syscall_64+0xbc/0x800 [ 2796.099397] do_syscall_64+0x1a3/0x800 [ 2796.103297] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2796.108228] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2796.113252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2796.118126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2796.123317] RIP: 0033:0x458099 [ 2796.126498] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2796.145385] RSP: 002b:00007f98545e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2796.153087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2796.160358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2796.167622] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2796.174887] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f98545e96d4 [ 2796.182169] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2796.197044] memory: usage 3712kB, limit 0kB, failcnt 1653238 [ 2796.203736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2796.204432] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2796.216337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2796.232358] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2796.239212] Memory cgroup stats for /syz0: cache:24KB rss:2116KB rss_huge:2048KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2796.261935] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22271,uid=0 [ 2796.277161] Memory cgroup out of memory: Kill process 22271 (syz-executor0) score 9269000 or sacrifice child [ 2796.277451] Killed process 22271 (syz-executor0) total-vm:72452kB, anon-rss:2132kB, file-rss:34816kB, shmem-rss:0kB [ 2796.303281] oom_reaper: reaped process 22271 (syz-executor0), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2796.408591] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2796.420871] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2796.503516] device hsr_slave_0 entered promiscuous mode [ 2796.559569] device hsr_slave_1 entered promiscuous mode [ 2796.599883] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2796.630369] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2796.632523] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2796.655852] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2796.662449] CPU: 1 PID: 22242 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2796.669565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2796.678916] Call Trace: [ 2796.681516] dump_stack+0x1db/0x2d0 [ 2796.685167] ? dump_stack_print_info.cold+0x20/0x20 [ 2796.690209] dump_header+0x1e6/0x116c [ 2796.694021] ? add_lock_to_list.isra.0+0x450/0x450 [ 2796.698967] ? print_usage_bug+0xd0/0xd0 [ 2796.699949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2796.703037] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2796.712569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2796.713832] ? ___ratelimit+0x37c/0x686 [ 2796.723868] ? mark_held_locks+0xb1/0x100 [ 2796.724979] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2796.728027] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2796.738116] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2796.739173] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2796.739196] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2796.739212] ? trace_hardirqs_on+0xbd/0x310 [ 2796.739226] ? kasan_check_read+0x11/0x20 [ 2796.739241] ? ___ratelimit+0x37c/0x686 [ 2796.739255] ? trace_hardirqs_off_caller+0x300/0x300 [ 2796.739269] ? do_raw_spin_trylock+0x270/0x270 [ 2796.739284] ? trace_hardirqs_on_caller+0x310/0x310 [ 2796.739297] ? lock_acquire+0x1db/0x570 [ 2796.739317] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2796.739338] ? ___ratelimit+0xac/0x686 [ 2796.739354] ? idr_get_free+0xee0/0xee0 [ 2796.739366] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2796.739389] oom_kill_process.cold+0x10/0x9d4 [ 2796.739412] ? cgroup_procs_next+0x70/0x70 [ 2796.739440] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2796.739460] ? oom_badness+0xa50/0xa50 [ 2796.739478] ? oom_evaluate_task+0x540/0x540 [ 2796.739506] ? mem_cgroup_iter_break+0x30/0x30 [ 2796.739519] ? mutex_trylock+0x2d0/0x2d0 [ 2796.739532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.739565] ? rcu_read_unlock_special+0x380/0x380 [ 2796.739587] out_of_memory+0x885/0x1420 [ 2796.748010] 8021q: adding VLAN 0 to HW filter on device team0 [ 2796.750746] ? mem_cgroup_iter+0x508/0xf30 [ 2796.750767] ? oom_killer_disable+0x340/0x340 [ 2796.750784] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2796.750800] ? lock_acquire+0x1db/0x570 [ 2796.750827] mem_cgroup_out_of_memory+0x160/0x210 [ 2796.750841] ? do_raw_spin_unlock+0xa0/0x330 [ 2796.750856] ? memcg_memory_event+0x40/0x40 [ 2796.750870] ? do_raw_spin_trylock+0x270/0x270 [ 2796.750896] ? _raw_spin_unlock+0x2d/0x50 [ 2796.750914] try_charge+0x12a9/0x19b0 [ 2796.750930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.750950] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2796.764473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2796.767962] ? rcu_read_unlock_special+0x380/0x380 [ 2796.776336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2796.777635] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2796.786258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2796.786598] ? get_mem_cgroup_from_page+0x190/0x190 [ 2796.795345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2796.795607] ? rcu_read_lock_sched_held+0x110/0x130 [ 2796.803105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2796.804140] mem_cgroup_try_charge+0x43a/0xdb0 [ 2796.812446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2796.812885] ? mem_cgroup_protected+0xa10/0xa10 [ 2796.821226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2796.821256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.830499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2796.834309] ? print_usage_bug+0xd0/0xd0 [ 2796.841708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2796.844771] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2796.848812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2796.854696] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2796.854720] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2796.854739] wp_page_copy+0x45a/0x1c30 [ 2796.854754] ? swp_swapcount+0x540/0x540 [ 2796.854774] ? pmd_pfn+0x1d0/0x1d0 [ 2796.854788] ? find_held_lock+0x35/0x120 [ 2796.854802] ? do_wp_page+0x70d/0x16b0 [ 2796.860526] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2796.863534] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2796.877818] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2796.881859] ? kasan_check_read+0x11/0x20 [ 2796.881875] ? do_raw_spin_unlock+0xa0/0x330 [ 2796.881893] ? do_raw_spin_trylock+0x270/0x270 [ 2796.881908] ? __lock_acquire+0x572/0x4a30 [ 2796.892565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2796.894969] do_wp_page+0x715/0x16b0 [ 2796.904278] ? finish_mkwrite_fault+0x540/0x540 [ 2796.904293] ? kasan_check_read+0x11/0x20 [ 2796.904309] ? do_raw_spin_lock+0x156/0x360 [ 2796.904324] ? rwlock_bug.part.0+0x90/0x90 [ 2796.904341] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2796.904366] __handle_mm_fault+0x2c8e/0x55a0 [ 2796.904392] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2796.904407] ? check_preemption_disabled+0x48/0x290 [ 2796.904423] ? handle_mm_fault+0x3cc/0xc80 [ 2796.904452] ? lock_downgrade+0x910/0x910 [ 2796.904464] ? kasan_check_read+0x11/0x20 [ 2796.904479] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2796.904495] ? rcu_read_unlock_special+0x380/0x380 [ 2796.904510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2796.904525] ? check_preemption_disabled+0x48/0x290 [ 2796.904546] handle_mm_fault+0x4ec/0xc80 [ 2796.904565] ? __handle_mm_fault+0x55a0/0x55a0 [ 2796.904594] __do_page_fault+0x5da/0xd60 [ 2796.904622] do_page_fault+0xe6/0x7d8 [ 2796.904635] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2796.904653] ? vmalloc_sync_all+0x30/0x30 [ 2796.904676] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2796.904694] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2796.904708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2796.904724] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2796.904741] ? page_fault+0x8/0x30 [ 2796.904759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2796.904777] ? page_fault+0x8/0x30 [ 2796.904803] page_fault+0x1e/0x30 [ 2796.904815] RIP: 0033:0x42f226 [ 2796.904835] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2796.904843] RSP: 002b:00007ffd38326590 EFLAGS: 00010206 [ 2796.904855] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2796.904863] RDX: 000000000284e930 RSI: 0000000002856970 RDI: 0000000000000003 [ 2796.904874] RBP: 0000000000008041 R08: 0000000000000001 R09: 000000000284d940 [ 2796.963524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2796.963533] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2796.977778] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2797.043620] memory: usage 1392kB, limit 0kB, failcnt 1653246 [ 2797.313054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2797.321260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2797.322739] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2797.328476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2797.339958] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2797.343338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2797.348599] Memory cgroup stats for /syz0: cache:24KB rss:60KB rss_huge:0KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2797.356792] bridge0: port 1(bridge_slave_0) entered blocking state [ 2797.382210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2797.383907] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22242,uid=0 [ 2797.389949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2797.411617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2797.412097] Memory cgroup out of memory: Kill process 22242 (syz-executor0) score 8755000 or sacrifice child [ 2797.419864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2797.435315] Killed process 22242 (syz-executor0) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2797.435521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2797.448761] oom_reaper: reaped process 22242 (syz-executor0), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2797.453943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2797.480018] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2797.486422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2797.498421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2797.498797] CPU: 1 PID: 22278 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2797.506587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2797.512737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2797.512743] Call Trace: [ 2797.512767] dump_stack+0x1db/0x2d0 [ 2797.512785] ? dump_stack_print_info.cold+0x20/0x20 [ 2797.512806] ? vprintk_func+0x86/0x189 [ 2797.512832] dump_header+0x1e6/0x116c [ 2797.520813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2797.529293] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2797.529311] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2797.529327] ? retint_kernel+0x2d/0x2d [ 2797.529341] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2797.529358] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2797.529371] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2797.529389] ? ___ratelimit+0x37c/0x686 [ 2797.532846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2797.535595] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2797.541753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2797.544474] ? retint_kernel+0x2d/0x2d [ 2797.548843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2797.555465] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2797.562868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2797.564782] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2797.569345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2797.573590] ? ___ratelimit+0xac/0x686 [ 2797.579376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2797.583953] ? idr_get_free+0xee0/0xee0 [ 2797.588525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2797.595005] ? oom_kill_process+0xa0/0x270 [ 2797.595028] oom_kill_process.cold+0x10/0x9d4 [ 2797.595047] ? cgroup_procs_next+0x70/0x70 [ 2797.595065] ? _raw_spin_unlock_irq+0x54/0x90 [ 2797.595081] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2797.602028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2797.606933] ? oom_badness+0xa50/0xa50 [ 2797.695007] ? oom_evaluate_task+0x540/0x540 [ 2797.699415] ? mem_cgroup_iter_break+0x30/0x30 [ 2797.703986] ? mutex_trylock+0x2d0/0x2d0 [ 2797.708048] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2797.713489] ? cgroup_file_notify+0x217/0x2e0 [ 2797.717980] out_of_memory+0x885/0x1420 [ 2797.721957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2797.726708] ? oom_killer_disable+0x340/0x340 [ 2797.731209] mem_cgroup_out_of_memory+0x160/0x210 [ 2797.736045] ? memcg_memory_event+0x40/0x40 [ 2797.740377] memory_max_write+0x1b0/0x3e0 [ 2797.744535] ? lock_acquire+0x1db/0x570 [ 2797.748502] ? mem_cgroup_write+0x440/0x440 [ 2797.752811] ? lock_release+0xc40/0xc40 [ 2797.756792] ? add_lock_to_list.isra.0+0x450/0x450 [ 2797.761713] ? lock_downgrade+0x910/0x910 [ 2797.765878] cgroup_file_write+0x252/0x830 [ 2797.770129] ? mem_cgroup_write+0x440/0x440 [ 2797.774457] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2797.779397] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2797.784330] kernfs_fop_write+0x2ba/0x480 [ 2797.788470] __vfs_write+0x116/0xb40 [ 2797.792179] ? check_preemption_disabled+0x48/0x290 [ 2797.797188] ? kernfs_fop_open+0x1030/0x1030 [ 2797.801588] ? kernel_read+0x120/0x120 [ 2797.805468] ? __lock_is_held+0xb6/0x140 [ 2797.809521] ? rcu_read_lock_sched_held+0x110/0x130 [ 2797.814525] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2797.819272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2797.824796] ? __sb_start_write+0x1ac/0x360 [ 2797.829119] vfs_write+0x20c/0x580 [ 2797.832776] ksys_write+0x105/0x260 [ 2797.836390] ? __ia32_sys_read+0xb0/0xb0 [ 2797.840441] ? trace_hardirqs_off_caller+0x300/0x300 [ 2797.845534] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2797.850281] __x64_sys_write+0x73/0xb0 [ 2797.854180] do_syscall_64+0x1a3/0x800 [ 2797.858060] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2797.862979] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2797.867998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2797.872835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2797.878023] RIP: 0033:0x458099 [ 2797.881206] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2797.900099] RSP: 002b:00007f8b85eb3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2797.907801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2797.915067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2797.922329] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2797.929625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8b85eb46d4 [ 2797.936902] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2797.950899] memory: usage 3420kB, limit 0kB, failcnt 312483 [ 2797.958640] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2797.981235] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2797.987418] Memory cgroup stats for /syz5: cache:148KB rss:2024KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2798.008528] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22277,uid=0 [ 2798.025603] Memory cgroup out of memory: Kill process 22277 (syz-executor5) score 9270000 or sacrifice child [ 2798.037253] Killed process 22277 (syz-executor5) total-vm:72452kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 2798.049649] oom_reaper: reaped process 22277 (syz-executor5), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 2798.172784] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2798.188786] CPU: 0 PID: 22262 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2798.195934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2798.205313] Call Trace: [ 2798.207910] dump_stack+0x1db/0x2d0 [ 2798.211549] ? dump_stack_print_info.cold+0x20/0x20 [ 2798.216587] dump_header+0x1e6/0x116c [ 2798.220406] ? add_lock_to_list.isra.0+0x450/0x450 [ 2798.225348] ? print_usage_bug+0xd0/0xd0 [ 2798.229420] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2798.234358] ? ___ratelimit+0x37c/0x686 [ 2798.238348] ? mark_held_locks+0xb1/0x100 [ 2798.242504] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2798.247613] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2798.252718] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2798.257307] ? trace_hardirqs_on+0xbd/0x310 [ 2798.261646] ? kasan_check_read+0x11/0x20 [ 2798.265830] ? ___ratelimit+0x37c/0x686 [ 2798.269812] ? trace_hardirqs_off_caller+0x300/0x300 [ 2798.275007] ? do_raw_spin_trylock+0x270/0x270 [ 2798.279590] ? trace_hardirqs_on_caller+0x310/0x310 [ 2798.284609] ? lock_acquire+0x1db/0x570 [ 2798.288596] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2798.293702] ? ___ratelimit+0xac/0x686 [ 2798.297595] ? idr_get_free+0xee0/0xee0 [ 2798.301571] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2798.306182] oom_kill_process.cold+0x10/0x9d4 [ 2798.310686] ? cgroup_procs_next+0x70/0x70 [ 2798.314927] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2798.319429] ? oom_badness+0xa50/0xa50 [ 2798.323339] ? oom_evaluate_task+0x540/0x540 [ 2798.327755] ? mem_cgroup_iter_break+0x30/0x30 [ 2798.332338] ? mutex_trylock+0x2d0/0x2d0 [ 2798.336401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2798.341957] ? rcu_read_unlock_special+0x380/0x380 [ 2798.346897] out_of_memory+0x885/0x1420 [ 2798.350880] ? mem_cgroup_iter+0x508/0xf30 [ 2798.355125] ? oom_killer_disable+0x340/0x340 [ 2798.359641] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2798.364747] ? lock_acquire+0x1db/0x570 [ 2798.368733] mem_cgroup_out_of_memory+0x160/0x210 [ 2798.373580] ? do_raw_spin_unlock+0xa0/0x330 [ 2798.377994] ? memcg_memory_event+0x40/0x40 [ 2798.382318] ? do_raw_spin_trylock+0x270/0x270 [ 2798.386926] ? _raw_spin_unlock+0x2d/0x50 [ 2798.391082] try_charge+0x12a9/0x19b0 [ 2798.394905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2798.400451] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2798.405303] ? rcu_read_unlock_special+0x380/0x380 [ 2798.410249] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2798.415096] ? get_mem_cgroup_from_page+0x190/0x190 [ 2798.420140] ? rcu_read_lock_sched_held+0x110/0x130 [ 2798.425198] mem_cgroup_try_charge+0x43a/0xdb0 [ 2798.429791] ? mem_cgroup_protected+0xa10/0xa10 [ 2798.434472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2798.440015] ? print_usage_bug+0xd0/0xd0 [ 2798.444080] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2798.449617] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2798.455179] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2798.460118] wp_page_copy+0x45a/0x1c30 [ 2798.464012] ? swp_swapcount+0x540/0x540 [ 2798.468087] ? pmd_pfn+0x1d0/0x1d0 [ 2798.471628] ? find_held_lock+0x35/0x120 [ 2798.475694] ? do_wp_page+0x70d/0x16b0 [ 2798.479589] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2798.485155] ? kasan_check_read+0x11/0x20 [ 2798.489323] ? do_raw_spin_unlock+0xa0/0x330 [ 2798.493735] ? do_raw_spin_trylock+0x270/0x270 [ 2798.498318] ? __lock_acquire+0x572/0x4a30 [ 2798.502563] do_wp_page+0x715/0x16b0 [ 2798.506285] ? finish_mkwrite_fault+0x540/0x540 [ 2798.510962] ? kasan_check_read+0x11/0x20 [ 2798.515112] ? do_raw_spin_lock+0x156/0x360 [ 2798.519443] ? rwlock_bug.part.0+0x90/0x90 [ 2798.523681] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2798.528796] __handle_mm_fault+0x2c8e/0x55a0 [ 2798.533219] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2798.538063] ? check_preemption_disabled+0x48/0x290 [ 2798.543082] ? handle_mm_fault+0x3cc/0xc80 [ 2798.547336] ? lock_downgrade+0x910/0x910 [ 2798.551483] ? kasan_check_read+0x11/0x20 [ 2798.555632] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2798.560974] ? rcu_read_unlock_special+0x380/0x380 [ 2798.565905] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2798.571447] ? check_preemption_disabled+0x48/0x290 [ 2798.576472] handle_mm_fault+0x4ec/0xc80 [ 2798.580557] ? __handle_mm_fault+0x55a0/0x55a0 [ 2798.585139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2798.590702] ? vmacache_update+0x114/0x140 [ 2798.594957] __do_page_fault+0x5da/0xd60 [ 2798.599035] do_page_fault+0xe6/0x7d8 [ 2798.602840] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2798.607774] ? vmalloc_sync_all+0x30/0x30 [ 2798.611922] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2798.617381] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2798.622317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2798.627859] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2798.632883] ? page_fault+0x8/0x30 [ 2798.636429] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2798.641280] ? page_fault+0x8/0x30 [ 2798.644839] page_fault+0x1e/0x30 [ 2798.648294] RIP: 0033:0x42f226 [ 2798.651489] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2798.670390] RSP: 002b:00007ffe98d436f0 EFLAGS: 00010206 [ 2798.675751] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2798.683023] RDX: 00000000026cc930 RSI: 00000000026d4970 RDI: 0000000000000003 [ 2798.690291] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000026cb940 [ 2798.697561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2798.704829] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2798.716607] memory: usage 1096kB, limit 0kB, failcnt 312495 [ 2798.723246] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2798.730089] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2798.730096] Memory cgroup stats for /syz5: cache:148KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2798.757313] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22262,uid=0 [ 2798.771989] Memory cgroup out of memory: Kill process 22262 (syz-executor5) score 8756000 or sacrifice child [ 2798.782049] Killed process 22262 (syz-executor5) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2798.782874] oom_reaper: reaped process 22262 (syz-executor5), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2798.811872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2798.836121] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2798.888588] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2798.895138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2798.903774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2798.947851] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2798.958446] 8021q: adding VLAN 0 to HW filter on device team0 [ 2799.013145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2799.038541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2799.047228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2799.087836] bridge0: port 1(bridge_slave_0) entered blocking state [ 2799.094299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2799.151950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2799.159815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2799.167036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2799.184695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2799.195455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2799.201890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2799.224537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2799.243181] device bridge_slave_1 left promiscuous mode [ 2799.248698] bridge0: port 2(bridge_slave_1) entered disabled state [ 2799.310279] device bridge_slave_0 left promiscuous mode [ 2799.315814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2799.381026] device bridge_slave_1 left promiscuous mode [ 2799.386516] bridge0: port 2(bridge_slave_1) entered disabled state [ 2799.440366] device bridge_slave_0 left promiscuous mode [ 2799.445858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2799.772733] device hsr_slave_1 left promiscuous mode [ 2799.815228] device hsr_slave_0 left promiscuous mode [ 2799.884446] team0 (unregistering): Port device team_slave_1 removed [ 2799.915225] team0 (unregistering): Port device team_slave_0 removed [ 2799.938186] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2800.000980] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2800.160773] bond0 (unregistering): Released all slaves [ 2800.324016] device hsr_slave_1 left promiscuous mode [ 2800.385361] device hsr_slave_0 left promiscuous mode [ 2800.454858] team0 (unregistering): Port device team_slave_1 removed [ 2800.479989] team0 (unregistering): Port device team_slave_0 removed [ 2800.494090] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2800.546430] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2800.717528] bond0 (unregistering): Released all slaves [ 2800.874050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2800.885701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2800.899907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2800.922490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2800.939011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2800.947981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2800.965208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2800.986064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2800.997823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2801.012655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2801.041090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2801.066457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2801.067097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2801.092853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2801.109916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2801.129598] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2801.135752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2801.143646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2801.151975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2801.167941] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2801.187263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2801.380810] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2801.391061] CPU: 1 PID: 22282 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2801.398181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2801.407536] Call Trace: [ 2801.410139] dump_stack+0x1db/0x2d0 [ 2801.413792] ? dump_stack_print_info.cold+0x20/0x20 [ 2801.418805] dump_header+0x1e6/0x116c [ 2801.422595] ? mark_held_locks+0xb1/0x100 [ 2801.426731] ? add_lock_to_list.isra.0+0x450/0x450 [ 2801.431667] ? print_usage_bug+0xd0/0xd0 [ 2801.435722] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2801.440640] ? ___ratelimit+0x37c/0x686 [ 2801.444612] ? mark_held_locks+0xb1/0x100 [ 2801.448749] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2801.453839] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2801.458938] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2801.463520] ? trace_hardirqs_on+0xbd/0x310 [ 2801.467852] ? kasan_check_read+0x11/0x20 [ 2801.472003] ? ___ratelimit+0x37c/0x686 [ 2801.475990] ? trace_hardirqs_off_caller+0x300/0x300 [ 2801.481092] ? do_raw_spin_trylock+0x270/0x270 [ 2801.485679] ? trace_hardirqs_on_caller+0x310/0x310 [ 2801.490694] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2801.495788] ? ___ratelimit+0xac/0x686 [ 2801.499670] ? idr_get_free+0xee0/0xee0 [ 2801.503640] oom_kill_process.cold+0x10/0x9d4 [ 2801.508132] ? cgroup_procs_next+0x70/0x70 [ 2801.512369] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2801.516853] ? oom_badness+0xa50/0xa50 [ 2801.520732] ? oom_evaluate_task+0x540/0x540 [ 2801.525129] ? mem_cgroup_iter_break+0x30/0x30 [ 2801.529723] ? mutex_trylock+0x2d0/0x2d0 [ 2801.533783] ? cgroup_file_notify+0x217/0x2e0 [ 2801.538271] out_of_memory+0x885/0x1420 [ 2801.542239] ? oom_killer_disable+0x340/0x340 [ 2801.546727] ? preempt_schedule+0x4b/0x60 [ 2801.550862] ? ___preempt_schedule+0x16/0x18 [ 2801.555267] mem_cgroup_out_of_memory+0x160/0x210 [ 2801.560100] ? memcg_memory_event+0x40/0x40 [ 2801.564419] memory_max_write+0x1b0/0x3e0 [ 2801.568553] ? lock_acquire+0x259/0x570 [ 2801.572518] ? mem_cgroup_write+0x440/0x440 [ 2801.576838] ? lock_release+0xc40/0xc40 [ 2801.580803] ? add_lock_to_list.isra.0+0x450/0x450 [ 2801.585720] ? lock_downgrade+0x910/0x910 [ 2801.589861] cgroup_file_write+0x252/0x830 [ 2801.594088] ? mem_cgroup_write+0x440/0x440 [ 2801.598397] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2801.603318] ? mlx4_init_hca+0x56e0/0x8240 [ 2801.607549] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2801.612473] kernfs_fop_write+0x2ba/0x480 [ 2801.616616] __vfs_write+0x116/0xb40 [ 2801.620322] ? check_preemption_disabled+0x48/0x290 [ 2801.625328] ? kernfs_fop_open+0x1030/0x1030 [ 2801.629726] ? kernel_read+0x120/0x120 [ 2801.633614] ? __lock_is_held+0xb6/0x140 [ 2801.637693] ? rcu_read_lock_sched_held+0x110/0x130 [ 2801.642726] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2801.647470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2801.653015] ? __sb_start_write+0x1ac/0x360 [ 2801.657326] vfs_write+0x20c/0x580 [ 2801.660860] ksys_write+0x105/0x260 [ 2801.664481] ? __ia32_sys_read+0xb0/0xb0 [ 2801.668534] ? trace_hardirqs_off_caller+0x300/0x300 [ 2801.673625] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2801.678376] __x64_sys_write+0x73/0xb0 [ 2801.682259] do_syscall_64+0x1a3/0x800 [ 2801.686140] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2801.691072] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2801.696080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2801.700920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2801.706110] RIP: 0033:0x458099 [ 2801.709292] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2801.728191] RSP: 002b:00007f973e230c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2801.735907] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2801.743194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2801.750469] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2801.757739] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f973e2316d4 [ 2801.765006] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2801.803823] memory: usage 3380kB, limit 0kB, failcnt 433629 [ 2801.810799] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2801.817762] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2801.825780] Memory cgroup stats for /syz3: cache:12KB rss:2064KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2801.847403] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22281,uid=0 [ 2801.872538] Memory cgroup out of memory: Kill process 22281 (syz-executor3) score 9271000 or sacrifice child [ 2801.890932] Killed process 22281 (syz-executor3) total-vm:72452kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 2801.904622] oom_reaper: reaped process 22281 (syz-executor3), now anon-rss:0kB, file-rss:34708kB, shmem-rss:0kB [ 2801.945061] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2801.957758] CPU: 1 PID: 22264 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2801.964886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2801.974232] Call Trace: [ 2801.976845] dump_stack+0x1db/0x2d0 [ 2801.980482] ? dump_stack_print_info.cold+0x20/0x20 [ 2801.985523] dump_header+0x1e6/0x116c [ 2801.989326] ? add_lock_to_list.isra.0+0x450/0x450 [ 2801.994256] ? print_usage_bug+0xd0/0xd0 [ 2801.998309] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2802.003242] ? ___ratelimit+0x37c/0x686 [ 2802.007238] ? mark_held_locks+0xb1/0x100 [ 2802.011384] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2802.016486] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2802.021584] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2802.026162] ? trace_hardirqs_on+0xbd/0x310 [ 2802.030487] ? kasan_check_read+0x11/0x20 [ 2802.034638] ? ___ratelimit+0x37c/0x686 [ 2802.038622] ? trace_hardirqs_off_caller+0x300/0x300 [ 2802.043713] ? do_raw_spin_trylock+0x270/0x270 [ 2802.048284] ? trace_hardirqs_on_caller+0x310/0x310 [ 2802.053290] ? lock_acquire+0x1db/0x570 [ 2802.057261] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2802.062356] ? ___ratelimit+0xac/0x686 [ 2802.066248] ? idr_get_free+0xee0/0xee0 [ 2802.070250] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2802.074837] oom_kill_process.cold+0x10/0x9d4 [ 2802.079346] ? cgroup_procs_next+0x70/0x70 [ 2802.083579] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2802.088060] ? oom_badness+0xa50/0xa50 [ 2802.091955] ? oom_evaluate_task+0x540/0x540 [ 2802.096361] ? mem_cgroup_iter_break+0x30/0x30 [ 2802.100940] ? mutex_trylock+0x2d0/0x2d0 [ 2802.105002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2802.110558] ? rcu_read_unlock_special+0x380/0x380 [ 2802.115492] out_of_memory+0x885/0x1420 [ 2802.119466] ? mem_cgroup_iter+0x508/0xf30 [ 2802.123704] ? oom_killer_disable+0x340/0x340 [ 2802.128191] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2802.133293] ? lock_acquire+0x1db/0x570 [ 2802.137275] mem_cgroup_out_of_memory+0x160/0x210 [ 2802.142106] ? do_raw_spin_unlock+0xa0/0x330 [ 2802.146506] ? memcg_memory_event+0x40/0x40 [ 2802.150826] ? do_raw_spin_trylock+0x270/0x270 [ 2802.155414] ? _raw_spin_unlock+0x2d/0x50 [ 2802.159563] try_charge+0x12a9/0x19b0 [ 2802.163376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2802.168916] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2802.173763] ? rcu_read_unlock_special+0x380/0x380 [ 2802.178690] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2802.183531] ? get_mem_cgroup_from_page+0x190/0x190 [ 2802.188551] ? rcu_read_lock_sched_held+0x110/0x130 [ 2802.193568] mem_cgroup_try_charge+0x43a/0xdb0 [ 2802.198140] ? mem_cgroup_protected+0xa10/0xa10 [ 2802.202813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2802.208342] ? print_usage_bug+0xd0/0xd0 [ 2802.212430] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2802.217966] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2802.223498] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2802.228420] wp_page_copy+0x45a/0x1c30 [ 2802.232304] ? swp_swapcount+0x540/0x540 [ 2802.236376] ? pmd_pfn+0x1d0/0x1d0 [ 2802.239912] ? find_held_lock+0x35/0x120 [ 2802.243969] ? do_wp_page+0x70d/0x16b0 [ 2802.247844] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2802.253375] ? kasan_check_read+0x11/0x20 [ 2802.257510] ? do_raw_spin_unlock+0xa0/0x330 [ 2802.261920] ? do_raw_spin_trylock+0x270/0x270 [ 2802.266502] ? __lock_acquire+0x572/0x4a30 [ 2802.270744] do_wp_page+0x715/0x16b0 [ 2802.274461] ? finish_mkwrite_fault+0x540/0x540 [ 2802.279124] ? kasan_check_read+0x11/0x20 [ 2802.283278] ? do_raw_spin_lock+0x156/0x360 [ 2802.287587] ? rwlock_bug.part.0+0x90/0x90 [ 2802.291823] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2802.296932] __handle_mm_fault+0x2c8e/0x55a0 [ 2802.301336] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2802.306192] ? check_preemption_disabled+0x48/0x290 [ 2802.311212] ? handle_mm_fault+0x3cc/0xc80 [ 2802.315449] ? lock_downgrade+0x910/0x910 [ 2802.319595] ? kasan_check_read+0x11/0x20 [ 2802.323739] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2802.329019] ? rcu_read_unlock_special+0x380/0x380 [ 2802.333954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2802.339491] ? check_preemption_disabled+0x48/0x290 [ 2802.344512] handle_mm_fault+0x4ec/0xc80 [ 2802.348562] ? __handle_mm_fault+0x55a0/0x55a0 [ 2802.353139] __do_page_fault+0x5da/0xd60 [ 2802.357207] do_page_fault+0xe6/0x7d8 [ 2802.360996] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2802.365915] ? vmalloc_sync_all+0x30/0x30 [ 2802.370062] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2802.375515] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2802.380446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2802.385984] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2802.391003] ? page_fault+0x8/0x30 [ 2802.394554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2802.399403] ? page_fault+0x8/0x30 [ 2802.402943] page_fault+0x1e/0x30 [ 2802.406383] RIP: 0033:0x42f226 [ 2802.409575] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2802.428498] RSP: 002b:00007ffc20ef3ab0 EFLAGS: 00010206 [ 2802.433862] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2802.441140] RDX: 0000000001140930 RSI: 0000000001148970 RDI: 0000000000000003 [ 2802.448441] RBP: 0000000000008041 R08: 0000000000000001 R09: 000000000113f940 [ 2802.455706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2802.462965] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2802.477479] memory: usage 1060kB, limit 0kB, failcnt 433641 [ 2802.485372] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2802.493410] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2802.500795] Memory cgroup stats for /syz3: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2802.521084] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22264,uid=0 [ 2802.536141] Memory cgroup out of memory: Kill process 22264 (syz-executor3) score 8757000 or sacrifice child [ 2802.546693] Killed process 22264 (syz-executor3) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2802.558284] oom_reaper: reaped process 22264 (syz-executor3), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2805.000573] device bridge_slave_1 left promiscuous mode [ 2805.006119] bridge0: port 2(bridge_slave_1) entered disabled state [ 2805.070213] device bridge_slave_0 left promiscuous mode [ 2805.075725] bridge0: port 1(bridge_slave_0) entered disabled state [ 2805.137762] device bridge_slave_1 left promiscuous mode [ 2805.146943] bridge0: port 2(bridge_slave_1) entered disabled state [ 2805.210335] device bridge_slave_0 left promiscuous mode [ 2805.215894] bridge0: port 1(bridge_slave_0) entered disabled state [ 2805.271516] device bridge_slave_1 left promiscuous mode [ 2805.277038] bridge0: port 2(bridge_slave_1) entered disabled state [ 2805.330205] device bridge_slave_0 left promiscuous mode [ 2805.335723] bridge0: port 1(bridge_slave_0) entered disabled state [ 2805.782231] device hsr_slave_1 left promiscuous mode [ 2805.835449] device hsr_slave_0 left promiscuous mode [ 2805.894560] team0 (unregistering): Port device team_slave_1 removed [ 2805.916579] team0 (unregistering): Port device team_slave_0 removed [ 2805.937935] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2806.004749] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2806.135291] bond0 (unregistering): Released all slaves [ 2806.282589] device hsr_slave_1 left promiscuous mode [ 2806.333620] device hsr_slave_0 left promiscuous mode [ 2806.384512] team0 (unregistering): Port device team_slave_1 removed [ 2806.406400] team0 (unregistering): Port device team_slave_0 removed [ 2806.428672] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2806.495671] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2806.638607] bond0 (unregistering): Released all slaves [ 2806.812694] device hsr_slave_1 left promiscuous mode [ 2806.854978] device hsr_slave_0 left promiscuous mode [ 2806.914355] team0 (unregistering): Port device team_slave_1 removed [ 2806.935718] team0 (unregistering): Port device team_slave_0 removed [ 2806.957106] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2807.029613] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2807.187443] bond0 (unregistering): Released all slaves 18:11:59 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:11:59 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:11:59 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:11:59 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:11:59 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce0", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:11:59 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x0, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:11:59 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:00 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:00 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:00 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2845.290060] device bridge_slave_1 left promiscuous mode [ 2845.295575] bridge0: port 2(bridge_slave_1) entered disabled state [ 2845.341019] device bridge_slave_0 left promiscuous mode [ 2845.353391] bridge0: port 1(bridge_slave_0) entered disabled state [ 2845.494498] device hsr_slave_1 left promiscuous mode [ 2845.543504] device hsr_slave_0 left promiscuous mode [ 2845.593805] team0 (unregistering): Port device team_slave_1 removed [ 2845.605706] team0 (unregistering): Port device team_slave_0 removed [ 2845.617243] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2845.656764] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2845.750735] bond0 (unregistering): Released all slaves 18:12:00 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:00 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2846.242609] IPVS: ftp: loaded support on port[0] = 21 [ 2846.384514] chnl_net:caif_netlink_parms(): no params data found [ 2846.452986] bridge0: port 1(bridge_slave_0) entered blocking state [ 2846.481482] bridge0: port 1(bridge_slave_0) entered disabled state [ 2846.501470] device bridge_slave_0 entered promiscuous mode [ 2846.522113] bridge0: port 2(bridge_slave_1) entered blocking state [ 2846.528617] bridge0: port 2(bridge_slave_1) entered disabled state [ 2846.563328] device bridge_slave_1 entered promiscuous mode [ 2846.634218] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2846.656787] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2846.691884] IPVS: ftp: loaded support on port[0] = 21 [ 2846.695089] IPVS: ftp: loaded support on port[0] = 21 [ 2846.714511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2846.730723] team0: Port device team_slave_0 added [ 2846.748533] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2846.761563] team0: Port device team_slave_1 added [ 2846.787779] IPVS: ftp: loaded support on port[0] = 21 [ 2846.803022] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2846.823387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2846.953222] device hsr_slave_0 entered promiscuous mode [ 2846.989399] device hsr_slave_1 entered promiscuous mode [ 2847.064777] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2847.097434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2847.247876] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2847.319377] chnl_net:caif_netlink_parms(): no params data found [ 2847.337080] chnl_net:caif_netlink_parms(): no params data found [ 2847.362309] chnl_net:caif_netlink_parms(): no params data found [ 2847.492221] bridge0: port 1(bridge_slave_0) entered blocking state [ 2847.499298] bridge0: port 1(bridge_slave_0) entered disabled state [ 2847.506901] device bridge_slave_0 entered promiscuous mode [ 2847.532976] bridge0: port 2(bridge_slave_1) entered blocking state [ 2847.540249] bridge0: port 2(bridge_slave_1) entered disabled state [ 2847.547336] device bridge_slave_1 entered promiscuous mode [ 2847.562541] bridge0: port 1(bridge_slave_0) entered blocking state [ 2847.569184] bridge0: port 1(bridge_slave_0) entered disabled state [ 2847.576745] device bridge_slave_0 entered promiscuous mode [ 2847.605232] bridge0: port 1(bridge_slave_0) entered blocking state [ 2847.613791] bridge0: port 1(bridge_slave_0) entered disabled state [ 2847.621749] device bridge_slave_0 entered promiscuous mode [ 2847.628491] bridge0: port 2(bridge_slave_1) entered blocking state [ 2847.636084] bridge0: port 2(bridge_slave_1) entered disabled state [ 2847.643316] device bridge_slave_1 entered promiscuous mode [ 2847.652664] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2847.670538] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2847.689231] bridge0: port 2(bridge_slave_1) entered blocking state [ 2847.695619] bridge0: port 2(bridge_slave_1) entered disabled state [ 2847.703587] device bridge_slave_1 entered promiscuous mode [ 2847.721665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2847.765839] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2847.774866] team0: Port device team_slave_0 added [ 2847.781066] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2847.788541] team0: Port device team_slave_1 added [ 2847.798114] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2847.808580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2847.825135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2847.834053] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2847.843080] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2847.854514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2847.874774] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2847.881389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2847.906754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2847.915331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2847.947067] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2847.953525] 8021q: adding VLAN 0 to HW filter on device team0 [ 2847.960632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2847.967873] team0: Port device team_slave_0 added [ 2847.973839] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2847.984464] team0: Port device team_slave_1 added [ 2848.042616] device hsr_slave_0 entered promiscuous mode [ 2848.079572] device hsr_slave_1 entered promiscuous mode [ 2848.119750] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2848.127462] team0: Port device team_slave_0 added [ 2848.133568] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2848.141510] team0: Port device team_slave_1 added [ 2848.146849] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2848.156756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2848.164464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2848.171896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2848.179687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2848.187097] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2848.195923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2848.224315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2848.232554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2848.240406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2848.246742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2848.254167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2848.310715] device hsr_slave_0 entered promiscuous mode [ 2848.369136] device hsr_slave_1 entered promiscuous mode [ 2848.411532] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2848.420171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2848.472161] device hsr_slave_0 entered promiscuous mode [ 2848.519134] device hsr_slave_1 entered promiscuous mode [ 2848.589528] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2848.596437] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2848.603873] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2848.615714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2848.623693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2848.632345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2848.640108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2848.646443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2848.653460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2848.672668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2848.692047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2848.710932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2848.721320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2848.732068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2848.740518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2848.748115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2848.759102] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2848.766665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2848.775453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2848.783723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2848.793268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2848.801749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2848.820863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2848.828594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2848.839897] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2848.856253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2848.865248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2848.874067] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2848.880321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2848.913743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2848.925277] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2848.940956] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2848.948268] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2848.957674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2848.964860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2848.987347] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2848.995212] 8021q: adding VLAN 0 to HW filter on device team0 [ 2849.007176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2849.017337] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2849.025976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2849.036710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2849.049095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2849.057694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2849.077974] bridge0: port 1(bridge_slave_0) entered blocking state [ 2849.084513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2849.094630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2849.105967] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2849.117658] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2849.124519] 8021q: adding VLAN 0 to HW filter on device team0 [ 2849.131366] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2849.141488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2849.146450] CPU: 0 PID: 22325 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2849.149241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2849.155301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.163563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2849.171996] Call Trace: [ 2849.172037] dump_stack+0x1db/0x2d0 [ 2849.172056] ? dump_stack_print_info.cold+0x20/0x20 [ 2849.172083] dump_header+0x1e6/0x116c [ 2849.172100] ? add_lock_to_list.isra.0+0x450/0x450 [ 2849.172118] ? print_usage_bug+0xd0/0xd0 [ 2849.172136] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2849.172170] ? ___ratelimit+0x37c/0x686 [ 2849.172190] ? mark_held_locks+0xb1/0x100 [ 2849.172219] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2849.172232] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2849.172245] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2849.172261] ? trace_hardirqs_on+0xbd/0x310 [ 2849.172275] ? kasan_check_read+0x11/0x20 [ 2849.172290] ? ___ratelimit+0x37c/0x686 [ 2849.172306] ? trace_hardirqs_off_caller+0x300/0x300 [ 2849.172321] ? do_raw_spin_trylock+0x270/0x270 [ 2849.172336] ? trace_hardirqs_on_caller+0x310/0x310 [ 2849.172349] ? lock_acquire+0x1db/0x570 [ 2849.172372] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2849.172387] ? ___ratelimit+0xac/0x686 [ 2849.172404] ? idr_get_free+0xee0/0xee0 [ 2849.172418] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2849.172443] oom_kill_process.cold+0x10/0x9d4 [ 2849.172463] ? cgroup_procs_next+0x70/0x70 [ 2849.172482] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2849.172499] ? oom_badness+0xa50/0xa50 [ 2849.172519] ? oom_evaluate_task+0x540/0x540 [ 2849.172536] ? mem_cgroup_iter_break+0x30/0x30 [ 2849.172549] ? mutex_trylock+0x2d0/0x2d0 [ 2849.172575] ? cgroup_file_notify+0x217/0x2e0 [ 2849.172595] out_of_memory+0x885/0x1420 [ 2849.172606] ? mark_held_locks+0xb1/0x100 [ 2849.172623] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2849.172653] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2849.172673] ? oom_killer_disable+0x340/0x340 [ 2849.172706] ? preempt_schedule+0x4b/0x60 [ 2849.172722] ? ___preempt_schedule+0x16/0x18 [ 2849.172752] mem_cgroup_out_of_memory+0x160/0x210 [ 2849.172769] ? memcg_memory_event+0x40/0x40 [ 2849.172799] memory_max_write+0x1b0/0x3e0 [ 2849.172811] ? lock_acquire+0x1db/0x570 [ 2849.172833] ? mem_cgroup_write+0x440/0x440 [ 2849.172860] ? lock_release+0xc40/0xc40 [ 2849.172893] ? add_lock_to_list.isra.0+0x450/0x450 [ 2849.172907] ? lock_downgrade+0x910/0x910 [ 2849.172925] cgroup_file_write+0x252/0x830 [ 2849.172954] ? mem_cgroup_write+0x440/0x440 [ 2849.172967] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2849.172992] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2849.173007] kernfs_fop_write+0x2ba/0x480 [ 2849.173026] __vfs_write+0x116/0xb40 [ 2849.173041] ? check_preemption_disabled+0x48/0x290 [ 2849.173055] ? kernfs_fop_open+0x1030/0x1030 [ 2849.173070] ? kernel_read+0x120/0x120 [ 2849.181628] bridge0: port 2(bridge_slave_1) entered blocking state [ 2849.182937] ? __lock_is_held+0xb6/0x140 [ 2849.182962] ? rcu_read_lock_sched_held+0x110/0x130 [ 2849.182977] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2849.186645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2849.191632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2849.191646] ? __sb_start_write+0x1ac/0x360 [ 2849.191665] vfs_write+0x20c/0x580 [ 2849.191686] ksys_write+0x105/0x260 [ 2849.196029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2849.200393] ? __ia32_sys_read+0xb0/0xb0 [ 2849.200412] ? trace_hardirqs_off_caller+0x300/0x300 [ 2849.200426] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2849.200442] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2849.200462] __x64_sys_write+0x73/0xb0 [ 2849.200480] do_syscall_64+0x1a3/0x800 [ 2849.200500] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2849.200518] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2849.200534] ? __switch_to_asm+0x34/0x70 [ 2849.205313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2849.209529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2849.209555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2849.209567] RIP: 0033:0x458099 [ 2849.209583] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2849.209590] RSP: 002b:00007febd10efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2849.209604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2849.209613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2849.209622] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2849.209630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007febd10f06d4 [ 2849.209639] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2849.219401] memory: usage 3304kB, limit 0kB, failcnt 1132454 [ 2849.227155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2849.228711] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2849.257384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2849.320004] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2849.630380] Memory cgroup stats for /syz2: cache:4KB rss:2088KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2144KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2849.634089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2849.659669] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22323,uid=0 [ 2849.669380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2849.674372] Memory cgroup out of memory: Kill process 22323 (syz-executor2) score 9269000 or sacrifice child [ 2849.682845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2849.691758] Killed process 22323 (syz-executor2) total-vm:72584kB, anon-rss:2132kB, file-rss:34816kB, shmem-rss:0kB [ 2849.710905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2849.718378] oom_reaper: reaped process 22323 (syz-executor2), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 18:12:04 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:04 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:04 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2849.729588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2849.737297] bridge0: port 1(bridge_slave_0) entered blocking state [ 2849.743726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2849.754306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2849.771486] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2849.781565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2849.789337] CPU: 1 PID: 22311 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2849.793944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2849.796463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.812285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2849.812722] Call Trace: [ 2849.822069] dump_stack+0x1db/0x2d0 [ 2849.823253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2849.825737] ? dump_stack_print_info.cold+0x20/0x20 [ 2849.835831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2849.837502] dump_header+0x1e6/0x116c [ 2849.847586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2849.848032] ? add_lock_to_list.isra.0+0x450/0x450 [ 2849.858514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2849.859729] ? print_usage_bug+0xd0/0xd0 [ 2849.859761] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2849.859778] ? ___ratelimit+0x37c/0x686 [ 2849.859797] ? mark_held_locks+0xb1/0x100 [ 2849.859814] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2849.871519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2849.875454] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2849.875469] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2849.875486] ? trace_hardirqs_on+0xbd/0x310 [ 2849.881401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2849.883594] ? kasan_check_read+0x11/0x20 [ 2849.883646] ? ___ratelimit+0x37c/0x686 [ 2849.883680] ? trace_hardirqs_off_caller+0x300/0x300 [ 2849.883695] ? do_raw_spin_trylock+0x270/0x270 [ 2849.888823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2849.895446] ? trace_hardirqs_on_caller+0x310/0x310 [ 2849.895460] ? lock_acquire+0x1db/0x570 [ 2849.895483] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2849.895499] ? ___ratelimit+0xac/0x686 [ 2849.895515] ? idr_get_free+0xee0/0xee0 [ 2849.902029] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2849.905206] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2849.905233] oom_kill_process.cold+0x10/0x9d4 [ 2849.905251] ? cgroup_procs_next+0x70/0x70 [ 2849.919184] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2849.923326] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2849.923342] ? oom_badness+0xa50/0xa50 [ 2849.923361] ? oom_evaluate_task+0x540/0x540 [ 2849.934056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2849.937009] ? mem_cgroup_iter_break+0x30/0x30 [ 2849.937022] ? mutex_trylock+0x2d0/0x2d0 [ 2849.937041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2849.951704] ? rcu_read_unlock_special+0x380/0x380 [ 2849.951730] out_of_memory+0x885/0x1420 [ 2849.951746] ? mem_cgroup_iter+0x508/0xf30 [ 2849.951765] ? oom_killer_disable+0x340/0x340 [ 2849.974681] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2849.983740] ? lock_acquire+0x1db/0x570 [ 2849.983767] mem_cgroup_out_of_memory+0x160/0x210 [ 2849.983783] ? do_raw_spin_unlock+0xa0/0x330 [ 2850.063027] ? memcg_memory_event+0x40/0x40 [ 2850.067404] ? do_raw_spin_trylock+0x270/0x270 [ 2850.072031] ? _raw_spin_unlock+0x2d/0x50 [ 2850.076211] try_charge+0x12a9/0x19b0 [ 2850.080033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2850.085583] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2850.090441] ? rcu_read_unlock_special+0x380/0x380 [ 2850.095393] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2850.100247] ? get_mem_cgroup_from_page+0x190/0x190 [ 2850.105302] ? rcu_read_lock_sched_held+0x110/0x130 [ 2850.110323] mem_cgroup_try_charge+0x43a/0xdb0 [ 2850.114897] ? mem_cgroup_protected+0xa10/0xa10 [ 2850.119579] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2850.125120] ? print_usage_bug+0xd0/0xd0 [ 2850.129212] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2850.134747] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2850.140295] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2850.145234] wp_page_copy+0x45a/0x1c30 [ 2850.149119] ? swp_swapcount+0x540/0x540 [ 2850.153267] ? pmd_pfn+0x1d0/0x1d0 [ 2850.156810] ? find_held_lock+0x35/0x120 [ 2850.160907] ? do_wp_page+0x70d/0x16b0 [ 2850.164817] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2850.170345] ? kasan_check_read+0x11/0x20 [ 2850.174482] ? do_raw_spin_unlock+0xa0/0x330 [ 2850.178891] ? do_raw_spin_trylock+0x270/0x270 [ 2850.183481] ? __lock_acquire+0x572/0x4a30 [ 2850.187717] do_wp_page+0x715/0x16b0 [ 2850.191426] ? finish_mkwrite_fault+0x540/0x540 [ 2850.196105] ? kasan_check_read+0x11/0x20 [ 2850.200250] ? do_raw_spin_lock+0x156/0x360 [ 2850.204562] ? rwlock_bug.part.0+0x90/0x90 [ 2850.208784] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2850.213889] __handle_mm_fault+0x2c8e/0x55a0 [ 2850.218288] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2850.223134] ? check_preemption_disabled+0x48/0x290 [ 2850.228160] ? handle_mm_fault+0x3cc/0xc80 [ 2850.232413] ? lock_downgrade+0x910/0x910 [ 2850.236582] ? kasan_check_read+0x11/0x20 [ 2850.240728] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2850.245991] ? rcu_read_unlock_special+0x380/0x380 [ 2850.250911] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2850.256450] ? check_preemption_disabled+0x48/0x290 [ 2850.261457] handle_mm_fault+0x4ec/0xc80 [ 2850.265527] ? __handle_mm_fault+0x55a0/0x55a0 [ 2850.270163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2850.275699] ? vmacache_update+0x114/0x140 [ 2850.279983] __do_page_fault+0x5da/0xd60 [ 2850.284048] do_page_fault+0xe6/0x7d8 [ 2850.287846] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2850.292760] ? vmalloc_sync_all+0x30/0x30 [ 2850.296894] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2850.302337] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2850.307252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2850.312793] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2850.317804] ? page_fault+0x8/0x30 [ 2850.321356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2850.326220] ? page_fault+0x8/0x30 [ 2850.329760] page_fault+0x1e/0x30 [ 2850.333201] RIP: 0033:0x42f226 [ 2850.336379] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2850.355284] RSP: 002b:00007ffda561f3d0 EFLAGS: 00010206 [ 2850.360638] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2850.367918] RDX: 0000000000e9d930 RSI: 0000000000ea5970 RDI: 0000000000000003 [ 2850.375194] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000000e9c940 [ 2850.382449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2850.389737] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2850.399956] memory: usage 968kB, limit 0kB, failcnt 1132462 [ 2850.405780] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2850.412780] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2850.419258] Memory cgroup stats for /syz2: cache:4KB rss:40KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2850.439359] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22311,uid=0 [ 2850.454274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2850.459033] Memory cgroup out of memory: Kill process 22311 (syz-executor2) score 8755000 or sacrifice child [ 2850.461727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2850.471810] Killed process 22311 (syz-executor2) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2850.485499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2850.490276] oom_reaper: reaped process 22311 (syz-executor2), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2850.497161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2850.507123] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2850.520786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2850.524381] CPU: 0 PID: 22333 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2850.535628] bridge0: port 2(bridge_slave_1) entered blocking state [ 2850.537985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.537991] Call Trace: [ 2850.538008] dump_stack+0x1db/0x2d0 [ 2850.538028] ? dump_stack_print_info.cold+0x20/0x20 [ 2850.538100] dump_header+0x1e6/0x116c [ 2850.544456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2850.553749] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2850.553766] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2850.553785] ? retint_kernel+0x2d/0x2d [ 2850.563065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2850.564979] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2850.565000] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2850.565014] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2850.565032] ? ___ratelimit+0x37c/0x686 [ 2850.571940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2850.575328] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2850.575353] ? retint_kernel+0x2d/0x2d [ 2850.585052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2850.588578] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2850.588598] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2850.588617] ? ___ratelimit+0xac/0x686 [ 2850.603257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2850.605673] ? idr_get_free+0xee0/0xee0 [ 2850.605703] oom_kill_process.cold+0x10/0x9d4 [ 2850.605726] ? cgroup_procs_next+0x70/0x70 [ 2850.614579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2850.615190] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2850.615208] ? oom_badness+0xa50/0xa50 [ 2850.615230] ? oom_evaluate_task+0x540/0x540 [ 2850.615251] ? mem_cgroup_iter_break+0x30/0x30 [ 2850.627814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2850.631079] ? out_of_memory+0x6c5/0x1420 [ 2850.631103] out_of_memory+0x885/0x1420 [ 2850.631128] ? oom_killer_disable+0x340/0x340 [ 2850.631198] mem_cgroup_out_of_memory+0x160/0x210 [ 2850.631216] ? memcg_memory_event+0x40/0x40 [ 2850.631247] memory_max_write+0x1b0/0x3e0 [ 2850.645238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2850.648602] ? lock_acquire+0x1db/0x570 [ 2850.648639] ? mem_cgroup_write+0x440/0x440 [ 2850.648654] ? lock_release+0xc40/0xc40 [ 2850.653250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2850.659669] ? add_lock_to_list.isra.0+0x450/0x450 [ 2850.659683] ? lock_downgrade+0x910/0x910 [ 2850.659703] cgroup_file_write+0x252/0x830 [ 2850.659719] ? mem_cgroup_write+0x440/0x440 [ 2850.659732] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2850.659758] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2850.659775] kernfs_fop_write+0x2ba/0x480 [ 2850.659796] __vfs_write+0x116/0xb40 [ 2850.659813] ? check_preemption_disabled+0x48/0x290 [ 2850.659829] ? kernfs_fop_open+0x1030/0x1030 [ 2850.670693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2850.672503] ? kernel_read+0x120/0x120 [ 2850.672520] ? __lock_is_held+0xb6/0x140 [ 2850.672546] ? rcu_read_lock_sched_held+0x110/0x130 [ 2850.686081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2850.688123] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2850.688139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2850.688170] ? __sb_start_write+0x1ac/0x360 [ 2850.688189] vfs_write+0x20c/0x580 [ 2850.694522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2850.697210] ksys_write+0x105/0x260 [ 2850.697246] ? __ia32_sys_read+0xb0/0xb0 [ 2850.697263] ? trace_hardirqs_off_caller+0x300/0x300 [ 2850.697295] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2850.711648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2850.712538] __x64_sys_write+0x73/0xb0 [ 2850.712559] do_syscall_64+0x1a3/0x800 [ 2850.712578] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2850.712596] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2850.717851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2850.721920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2850.721947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2850.721959] RIP: 0033:0x458099 [ 2850.721975] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2850.721983] RSP: 002b:00007f6b24d98c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2850.721998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2850.722007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2850.722016] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2850.722026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6b24d996d4 [ 2850.722051] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2850.981381] memory: usage 3392kB, limit 0kB, failcnt 312496 [ 2850.987301] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2850.997841] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2851.004266] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2851.006816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2851.038349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2851.045433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2851.045777] Memory cgroup stats for /syz5: cache:148KB rss:2116KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2851.062850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2851.076624] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22332,uid=0 [ 2851.089130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2851.111417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2851.114088] Memory cgroup out of memory: Kill process 22332 (syz-executor5) score 9272000 or sacrifice child [ 2851.127450] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2851.134783] Killed process 22333 (syz-executor5) total-vm:72452kB, anon-rss:2184kB, file-rss:35680kB, shmem-rss:0kB [ 2851.147868] oom_reaper: reaped process 22333 (syz-executor5), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 2851.182471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2851.198233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2851.207383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2851.215212] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2851.222557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2851.224896] CPU: 0 PID: 22318 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2851.236702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2851.238777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2851.251106] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2851.255161] Call Trace: [ 2851.263799] dump_stack+0x1db/0x2d0 [ 2851.267434] ? dump_stack_print_info.cold+0x20/0x20 [ 2851.267510] 8021q: adding VLAN 0 to HW filter on device team0 [ 2851.272471] dump_header+0x1e6/0x116c [ 2851.272489] ? add_lock_to_list.isra.0+0x450/0x450 [ 2851.272511] ? print_usage_bug+0xd0/0xd0 [ 2851.288191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2851.291178] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2851.291196] ? ___ratelimit+0x37c/0x686 [ 2851.291218] ? mark_held_locks+0xb1/0x100 [ 2851.291236] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2851.307266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2851.311208] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2851.311223] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2851.311239] ? trace_hardirqs_on+0xbd/0x310 [ 2851.311253] ? kasan_check_read+0x11/0x20 [ 2851.311268] ? ___ratelimit+0x37c/0x686 [ 2851.311283] ? trace_hardirqs_off_caller+0x300/0x300 [ 2851.311297] ? do_raw_spin_trylock+0x270/0x270 [ 2851.311312] ? trace_hardirqs_on_caller+0x310/0x310 [ 2851.311326] ? lock_acquire+0x1db/0x570 [ 2851.311349] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2851.311366] ? ___ratelimit+0xac/0x686 [ 2851.311384] ? idr_get_free+0xee0/0xee0 [ 2851.311398] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2851.311422] oom_kill_process.cold+0x10/0x9d4 [ 2851.325608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2851.328524] ? cgroup_procs_next+0x70/0x70 [ 2851.336364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2851.337405] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2851.350595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2851.355186] ? oom_badness+0xa50/0xa50 [ 2851.369206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2851.369260] ? oom_evaluate_task+0x540/0x540 [ 2851.376315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2851.377111] ? mem_cgroup_iter_break+0x30/0x30 [ 2851.391736] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2851.392960] ? mutex_trylock+0x2d0/0x2d0 [ 2851.405430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2851.408435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2851.415251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2851.419089] ? rcu_read_unlock_special+0x380/0x380 [ 2851.419112] out_of_memory+0x885/0x1420 [ 2851.419129] ? mem_cgroup_iter+0x508/0xf30 [ 2851.419182] ? oom_killer_disable+0x340/0x340 [ 2851.419199] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2851.429866] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2851.430365] ? lock_acquire+0x1db/0x570 [ 2851.452555] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2851.461925] mem_cgroup_out_of_memory+0x160/0x210 [ 2851.461941] ? do_raw_spin_unlock+0xa0/0x330 [ 2851.461957] ? memcg_memory_event+0x40/0x40 [ 2851.461971] ? do_raw_spin_trylock+0x270/0x270 [ 2851.461995] ? _raw_spin_unlock+0x2d/0x50 [ 2851.462014] try_charge+0x12a9/0x19b0 [ 2851.462029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2851.462051] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2851.462068] ? rcu_read_unlock_special+0x380/0x380 [ 2851.462091] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2851.462109] ? get_mem_cgroup_from_page+0x190/0x190 [ 2851.462131] ? rcu_read_lock_sched_held+0x110/0x130 [ 2851.462169] mem_cgroup_try_charge+0x43a/0xdb0 [ 2851.462191] ? mem_cgroup_protected+0xa10/0xa10 [ 2851.462214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2851.462231] ? print_usage_bug+0xd0/0xd0 [ 2851.462249] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2851.462262] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2851.462283] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2851.462302] wp_page_copy+0x45a/0x1c30 [ 2851.462314] ? swp_swapcount+0x540/0x540 [ 2851.462339] ? pmd_pfn+0x1d0/0x1d0 [ 2851.462353] ? find_held_lock+0x35/0x120 [ 2851.462368] ? do_wp_page+0x70d/0x16b0 [ 2851.462386] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2851.462409] ? kasan_check_read+0x11/0x20 [ 2851.480169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2851.482483] ? do_raw_spin_unlock+0xa0/0x330 [ 2851.482499] ? do_raw_spin_trylock+0x270/0x270 [ 2851.482515] ? __lock_acquire+0x572/0x4a30 [ 2851.490713] do_wp_page+0x715/0x16b0 [ 2851.490734] ? finish_mkwrite_fault+0x540/0x540 [ 2851.490747] ? kasan_check_read+0x11/0x20 [ 2851.490763] ? do_raw_spin_lock+0x156/0x360 [ 2851.490781] ? rwlock_bug.part.0+0x90/0x90 [ 2851.490798] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2851.490823] __handle_mm_fault+0x2c8e/0x55a0 [ 2851.490849] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2851.490865] ? check_preemption_disabled+0x48/0x290 [ 2851.490882] ? handle_mm_fault+0x3cc/0xc80 [ 2851.490912] ? lock_downgrade+0x910/0x910 [ 2851.490925] ? kasan_check_read+0x11/0x20 [ 2851.490940] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2851.490956] ? rcu_read_unlock_special+0x380/0x380 [ 2851.490971] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2851.491001] ? check_preemption_disabled+0x48/0x290 [ 2851.491020] handle_mm_fault+0x4ec/0xc80 [ 2851.548234] ? __handle_mm_fault+0x55a0/0x55a0 [ 2851.573042] __do_page_fault+0x5da/0xd60 [ 2851.742289] do_page_fault+0xe6/0x7d8 [ 2851.746088] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2851.751014] ? vmalloc_sync_all+0x30/0x30 [ 2851.755177] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2851.760631] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2851.765558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2851.771102] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2851.776108] ? page_fault+0x8/0x30 [ 2851.779647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2851.784504] ? page_fault+0x8/0x30 [ 2851.788044] page_fault+0x1e/0x30 [ 2851.791483] RIP: 0033:0x42f226 [ 2851.794662] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2851.813575] RSP: 002b:00007ffee52d8db0 EFLAGS: 00010206 [ 2851.818943] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2851.826208] RDX: 0000000000d1f930 RSI: 0000000000d27970 RDI: 0000000000000003 [ 2851.833482] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000000d1e940 [ 2851.840749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2851.848033] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2851.857755] memory: usage 1076kB, limit 0kB, failcnt 312504 [ 2851.873874] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2851.880621] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2851.887589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2851.904010] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2851.910774] Memory cgroup stats for /syz5: cache:148KB rss:40KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2851.934927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2851.937984] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22318,uid=0 [ 2851.946334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2851.964983] Memory cgroup out of memory: Kill process 22318 (syz-executor5) score 8757000 or sacrifice child [ 2851.965528] bridge0: port 1(bridge_slave_0) entered blocking state [ 2851.976893] Killed process 22318 (syz-executor5) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2851.981396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2851.989101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2851.993426] oom_reaper: reaped process 22318 (syz-executor5), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2852.005494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2852.020738] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2852.030311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2852.035389] CPU: 0 PID: 22337 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2852.039565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2852.046583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2852.062411] Call Trace: [ 2852.064157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2852.065006] dump_stack+0x1db/0x2d0 [ 2852.073988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2852.075799] ? dump_stack_print_info.cold+0x20/0x20 [ 2852.087984] ? vprintk_func+0x86/0x189 [ 2852.088651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2852.091891] dump_header+0x1e6/0x116c [ 2852.091911] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2852.091929] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2852.091946] ? retint_kernel+0x2d/0x2d [ 2852.091962] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2852.091981] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2852.091996] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2852.092013] ? ___ratelimit+0x37c/0x686 [ 2852.092038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2852.092060] ? retint_kernel+0x2d/0x2d [ 2852.092090] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2852.092107] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2852.092124] ? ___ratelimit+0xac/0x686 [ 2852.092161] ? idr_get_free+0xee0/0xee0 [ 2852.092178] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2852.105983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2852.107917] oom_kill_process.cold+0x10/0x9d4 [ 2852.113253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2852.116361] ? cgroup_procs_next+0x70/0x70 [ 2852.128177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2852.131634] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2852.131651] ? oom_badness+0xa50/0xa50 [ 2852.131672] ? oom_evaluate_task+0x540/0x540 [ 2852.131690] ? mem_cgroup_iter_break+0x30/0x30 [ 2852.131705] ? mutex_trylock+0x2d0/0x2d0 [ 2852.136273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2852.140442] ? cgroup_file_notify+0x217/0x2e0 [ 2852.140466] out_of_memory+0x885/0x1420 [ 2852.140509] ? oom_killer_disable+0x340/0x340 [ 2852.140544] ? preempt_schedule+0x4b/0x60 [ 2852.140592] ? ___preempt_schedule+0x16/0x18 [ 2852.140617] mem_cgroup_out_of_memory+0x160/0x210 [ 2852.140634] ? memcg_memory_event+0x40/0x40 [ 2852.140679] memory_max_write+0x1b0/0x3e0 [ 2852.140693] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2852.140714] ? mem_cgroup_write+0x440/0x440 [ 2852.140732] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2852.140754] cgroup_file_write+0x252/0x830 [ 2852.151814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2852.154826] ? mem_cgroup_write+0x440/0x440 [ 2852.164362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2852.167269] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2852.177393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2852.178878] ? lock_is_held_type+0x17e/0x210 [ 2852.178901] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2852.178918] kernfs_fop_write+0x2ba/0x480 [ 2852.178954] __vfs_write+0x116/0xb40 [ 2852.178970] ? check_preemption_disabled+0x48/0x290 [ 2852.178984] ? kernfs_fop_open+0x1030/0x1030 [ 2852.178998] ? kernel_read+0x120/0x120 [ 2852.179014] ? __lock_is_held+0xb6/0x140 [ 2852.179037] ? rcu_read_lock_sched_held+0x110/0x130 [ 2852.349162] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2852.353923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2852.359462] ? __sb_start_write+0x1ac/0x360 [ 2852.363788] vfs_write+0x20c/0x580 [ 2852.367334] ksys_write+0x105/0x260 [ 2852.370996] ? __ia32_sys_read+0xb0/0xb0 [ 2852.375073] ? trace_hardirqs_off_caller+0x300/0x300 [ 2852.380216] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2852.385000] __x64_sys_write+0x73/0xb0 [ 2852.388891] do_syscall_64+0x1a3/0x800 [ 2852.392800] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2852.397723] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2852.402759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2852.407617] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2852.412830] RIP: 0033:0x458099 [ 2852.416016] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2852.434922] RSP: 002b:00007fbee1c65c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2852.442666] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2852.449935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2852.457223] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2852.464496] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbee1c666d4 [ 2852.471764] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2852.484435] memory: usage 3424kB, limit 0kB, failcnt 1653247 [ 2852.490562] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2852.497455] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2852.503948] Memory cgroup stats for [ 2852.503960] /syz0: cache:24KB rss:2112KB rss_huge:2048KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2852.527039] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22336,uid=0 [ 2852.541796] Memory cgroup out of memory: Kill process 22336 (syz-executor0) score 9270000 or sacrifice child [ 2852.541858] Killed process 22336 (syz-executor0) total-vm:72452kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 2852.564454] oom_reaper: reaped process 22336 (syz-executor0), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 2852.575647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:12:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb792", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:07 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2852.583749] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2852.591258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2852.631231] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2852.632793] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2852.649511] CPU: 1 PID: 22317 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2852.656593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2852.656634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2852.672046] Call Trace: [ 2852.672070] dump_stack+0x1db/0x2d0 [ 2852.672088] ? dump_stack_print_info.cold+0x20/0x20 [ 2852.672115] dump_header+0x1e6/0x116c [ 2852.672131] ? add_lock_to_list.isra.0+0x450/0x450 [ 2852.678384] ? print_usage_bug+0xd0/0xd0 [ 2852.687208] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2852.701118] ? ___ratelimit+0x37c/0x686 [ 2852.705135] ? mark_held_locks+0xb1/0x100 [ 2852.705178] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2852.714421] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2852.719528] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2852.724115] ? trace_hardirqs_on+0xbd/0x310 [ 2852.728445] ? kasan_check_read+0x11/0x20 [ 2852.732596] ? ___ratelimit+0x37c/0x686 [ 2852.732610] ? trace_hardirqs_off_caller+0x300/0x300 [ 2852.732624] ? do_raw_spin_trylock+0x270/0x270 [ 2852.732636] ? trace_hardirqs_on_caller+0x310/0x310 [ 2852.732648] ? lock_acquire+0x1db/0x570 [ 2852.732677] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2852.751335] ? ___ratelimit+0xac/0x686 [ 2852.751354] ? idr_get_free+0xee0/0xee0 [ 2852.751370] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2852.760451] oom_kill_process.cold+0x10/0x9d4 [ 2852.768288] ? cgroup_procs_next+0x70/0x70 [ 2852.781578] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2852.786087] ? oom_badness+0xa50/0xa50 [ 2852.786108] ? oom_evaluate_task+0x540/0x540 [ 2852.786124] ? mem_cgroup_iter_break+0x30/0x30 [ 2852.798993] ? mutex_trylock+0x2d0/0x2d0 [ 2852.803079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2852.808640] ? rcu_read_unlock_special+0x380/0x380 [ 2852.813595] out_of_memory+0x885/0x1420 [ 2852.817581] ? mem_cgroup_iter+0x508/0xf30 [ 2852.821828] ? oom_killer_disable+0x340/0x340 [ 2852.821847] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2852.821863] ? lock_acquire+0x1db/0x570 [ 2852.831470] mem_cgroup_out_of_memory+0x160/0x210 [ 2852.831485] ? do_raw_spin_unlock+0xa0/0x330 [ 2852.831499] ? memcg_memory_event+0x40/0x40 [ 2852.831513] ? do_raw_spin_trylock+0x270/0x270 [ 2852.831538] ? _raw_spin_unlock+0x2d/0x50 [ 2852.857773] try_charge+0x12a9/0x19b0 [ 2852.861587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2852.867139] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2852.872004] ? rcu_read_unlock_special+0x380/0x380 [ 2852.876965] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2852.881859] ? get_mem_cgroup_from_page+0x190/0x190 [ 2852.886911] ? rcu_read_lock_sched_held+0x110/0x130 [ 2852.891948] mem_cgroup_try_charge+0x43a/0xdb0 [ 2852.896549] ? mem_cgroup_protected+0xa10/0xa10 [ 2852.901231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2852.906789] ? print_usage_bug+0xd0/0xd0 [ 2852.910841] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2852.916366] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2852.921901] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2852.926824] wp_page_copy+0x45a/0x1c30 [ 2852.930709] ? swp_swapcount+0x540/0x540 [ 2852.934802] ? pmd_pfn+0x1d0/0x1d0 [ 2852.938370] ? find_held_lock+0x35/0x120 [ 2852.942432] ? do_wp_page+0x70d/0x16b0 [ 2852.946324] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2852.951871] ? kasan_check_read+0x11/0x20 [ 2852.956033] ? do_raw_spin_unlock+0xa0/0x330 [ 2852.960434] ? do_raw_spin_trylock+0x270/0x270 [ 2852.965003] ? __lock_acquire+0x572/0x4a30 [ 2852.969242] do_wp_page+0x715/0x16b0 [ 2852.972964] ? finish_mkwrite_fault+0x540/0x540 [ 2852.977625] ? kasan_check_read+0x11/0x20 [ 2852.981778] ? do_raw_spin_lock+0x156/0x360 [ 2852.986114] ? rwlock_bug.part.0+0x90/0x90 [ 2852.990342] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2852.995437] __handle_mm_fault+0x2c8e/0x55a0 [ 2852.999839] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2853.004674] ? check_preemption_disabled+0x48/0x290 [ 2853.009689] ? handle_mm_fault+0x3cc/0xc80 [ 2853.013946] ? lock_downgrade+0x910/0x910 [ 2853.018080] ? kasan_check_read+0x11/0x20 [ 2853.022219] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2853.027499] ? rcu_read_unlock_special+0x380/0x380 [ 2853.032595] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2853.038118] ? check_preemption_disabled+0x48/0x290 [ 2853.043178] handle_mm_fault+0x4ec/0xc80 [ 2853.047233] ? __handle_mm_fault+0x55a0/0x55a0 [ 2853.051862] __do_page_fault+0x5da/0xd60 [ 2853.055943] do_page_fault+0xe6/0x7d8 [ 2853.059743] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2853.064694] ? vmalloc_sync_all+0x30/0x30 [ 2853.068826] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2853.074277] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2853.079215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2853.084862] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2853.089886] ? page_fault+0x8/0x30 [ 2853.093418] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2853.098250] ? page_fault+0x8/0x30 [ 2853.101788] page_fault+0x1e/0x30 [ 2853.105257] RIP: 0033:0x42f226 [ 2853.108449] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2853.127353] RSP: 002b:00007ffceeebc9b0 EFLAGS: 00010206 [ 2853.132719] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2853.139992] RDX: 00000000021f2930 RSI: 00000000021fa970 RDI: 0000000000000003 [ 2853.147249] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000021f1940 [ 2853.154504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2853.161766] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2853.177431] memory: usage 1108kB, limit 0kB, failcnt 1653259 [ 2853.183991] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2853.190970] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2853.197262] Memory cgroup stats for /syz0: cache:24KB rss:0KB rss_huge:0KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2853.217810] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22317,uid=0 [ 2853.232771] Memory cgroup out of memory: Kill process 22317 (syz-executor0) score 8756000 or sacrifice child [ 2853.243201] Killed process 22317 (syz-executor0) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2853.254801] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2853.295202] CPU: 0 PID: 22342 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2853.302380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.311733] Call Trace: [ 2853.314342] dump_stack+0x1db/0x2d0 [ 2853.317999] ? dump_stack_print_info.cold+0x20/0x20 [ 2853.323047] dump_header+0x1e6/0x116c [ 2853.326864] ? add_lock_to_list.isra.0+0x450/0x450 [ 2853.331799] ? print_usage_bug+0xd0/0xd0 [ 2853.335890] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2853.340847] ? ___ratelimit+0x37c/0x686 [ 2853.344831] ? mark_held_locks+0xb1/0x100 [ 2853.349001] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2853.354119] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2853.359263] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2853.363858] ? trace_hardirqs_on+0xbd/0x310 [ 2853.368209] ? kasan_check_read+0x11/0x20 [ 2853.372373] ? ___ratelimit+0x37c/0x686 [ 2853.372390] ? trace_hardirqs_off_caller+0x300/0x300 [ 2853.372405] ? do_raw_spin_trylock+0x270/0x270 [ 2853.372420] ? trace_hardirqs_on_caller+0x310/0x310 [ 2853.372433] ? lock_acquire+0x1db/0x570 [ 2853.372455] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2853.372471] ? ___ratelimit+0xac/0x686 [ 2853.372490] ? idr_get_free+0xee0/0xee0 [ 2853.372518] oom_kill_process.cold+0x10/0x9d4 [ 2853.372538] ? cgroup_procs_next+0x70/0x70 [ 2853.372553] ? _raw_spin_unlock_irq+0x54/0x90 [ 2853.372571] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2853.372587] ? oom_badness+0xa50/0xa50 [ 2853.372608] ? oom_evaluate_task+0x540/0x540 [ 2853.372626] ? mem_cgroup_iter_break+0x30/0x30 [ 2853.372640] ? mutex_trylock+0x2d0/0x2d0 [ 2853.372669] ? cgroup_file_notify+0x217/0x2e0 [ 2853.372689] out_of_memory+0x885/0x1420 [ 2853.451178] ? oom_killer_disable+0x340/0x340 [ 2853.455668] ? preempt_schedule+0x4b/0x60 [ 2853.459805] ? ___preempt_schedule+0x16/0x18 [ 2853.464207] mem_cgroup_out_of_memory+0x160/0x210 [ 2853.469050] ? memcg_memory_event+0x40/0x40 [ 2853.473375] ? try_to_free_mem_cgroup_pages+0x597/0xcd0 [ 2853.478726] memory_max_write+0x1b0/0x3e0 [ 2853.482912] ? mem_cgroup_write+0x440/0x440 [ 2853.487224] ? cgroup_file_write+0x92/0x830 [ 2853.491532] cgroup_file_write+0x252/0x830 [ 2853.495766] ? mem_cgroup_write+0x440/0x440 [ 2853.500085] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2853.505006] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2853.509931] kernfs_fop_write+0x2ba/0x480 [ 2853.514068] __vfs_write+0x116/0xb40 [ 2853.517769] ? check_preemption_disabled+0x48/0x290 [ 2853.522773] ? kernfs_fop_open+0x1030/0x1030 [ 2853.527171] ? kernel_read+0x120/0x120 [ 2853.531064] ? __lock_is_held+0xb6/0x140 [ 2853.535116] ? rcu_read_lock_sched_held+0x110/0x130 [ 2853.540128] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2853.544896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2853.550420] ? __sb_start_write+0x1ac/0x360 [ 2853.554727] vfs_write+0x20c/0x580 [ 2853.558254] ksys_write+0x105/0x260 [ 2853.561869] ? __ia32_sys_read+0xb0/0xb0 [ 2853.565918] ? trace_hardirqs_off_caller+0x300/0x300 [ 2853.571011] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2853.575756] __x64_sys_write+0x73/0xb0 [ 2853.579632] do_syscall_64+0x1a3/0x800 [ 2853.583530] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2853.588469] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2853.593478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2853.598313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2853.603490] RIP: 0033:0x458099 [ 2853.606668] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2853.625569] RSP: 002b:00007f6a3cefac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2853.633261] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2853.640517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2853.647770] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2853.655035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a3cefb6d4 [ 2853.662299] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2853.677776] memory: usage 3236kB, limit 0kB, failcnt 433642 [ 2853.683653] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2853.690851] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2853.697171] Memory cgroup stats for /syz3: cache:12KB rss:2148KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2853.717879] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22341,uid=0 [ 2853.732553] Memory cgroup out of memory: Kill process 22341 (syz-executor3) score 9271000 or sacrifice child 18:12:08 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:08 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:08 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858bd4ecb0eb11fa41b32c2d6de4d0f045ad4f30456c61d6127f0e69a584e6d87f79b616ef38daa095b42698dade8be0fbe67e6702bbd718edd3144f7b84d8effe29bc499817c9f7ec0ac61b85873f7323022ef7103219ea0c5a64349b5b4e5ec330bfa0eb9effd81b1f81f6c12886004e8237e941cbaafbdd035080700f4aea9ba9339c1cdfc0e40f3b097f657acbb9e557d18341121c90b0486e469f3a7c6989b5acda539f02475d39b52f6a08e21b76ef97d1fab51cd0b8f8a4c7104c7d1bce2febf253b2b0952b8a7b3e632038ad37f7da65e081cfed6249ce14f4fd34ef3e38079a136348f8f435973fccc9d334abb61c8d6a4a9b84abfbb5b9071362afb9b97499ed5edee25363acb3f81c60513c4dbbc966d2ea8afe056b1a753ec2242780bef6e998b89b9aa2dad0773b6aa31891e0927d9446651b45f8cf348ba8f601f3a06410e602591644b466d4675f9dbef4ee7b17c70ea267eddb0496b8bc7ed4cb7125d9888ee157698536d0a4bf22de9b6f8f950b6e38a6d1ba9b959ec63fad92641c7476043bd37811223109d1966aa0c5b0d71dc7d22f6cbac8bf53ae91f3515681dbd1f7b96e1bf8a9da08ea6010d11b63e118e862081378a45a4ee2334d89400bb536a6d4aded7d8b9613131e5d6082b9671fd7ffab01e434e0d0ab4fb31593d26072f881422c5dbbf5c0feabb670f1d1265f60f081975de1245356795a14b69036c618fd6ebdc71a178293edb3aeef258ad9fd191c03dd8f39fcb64904bd42f9e9138c2217265fc87f64ead94ab4722928cc204dbd87294bf347dc104a0de5bef138f3ef2a1ffa1fbcf0361440d37944b6cec6ba471f245b0ad234e42992e19e6729c150559e1a48e867a8012b24fcb7923b5ea06066d32bbbb77d3f9c95b15fc770ac04eccd6a9479207ec1252cfa67d74c8ef20ee8c88ca609f8d0c026e95dc7a014b4ddf6883f50fec7d293214966b3f5bb0414d25093042967ad90d0720701e1f003828a0a39cce04f31b6857381d65f3184d8fd6ded9ae1fdaec890fc9e982703e73bb5804aafab8991a68498d4e57d03a8c9b172fcf671298761634b457028a7bd2a37c6c7e9066fcc68f1e5b0465296d1f61285d867959d621d9fa043d73b6e28a4974240af72aaed41de23237ab801ee6be53a54c5b3542811524f868c71c5148255c7f514c67b87c7679a50098dbd9eebe0d902321f9fefcdb46d66a295b1191df3d31d786b247132e45b477151b3c055c0b89087ab8bd082ea1be6504ad6f9423b364a66255b95d07c272ff30ed6c74ae59d9f20211680b5c6900a4dd9a6a537c34e9df406a7b6c5aea20124d6427ca1b8fa1ef80c7d9c9d054722ef41d6136e99092138c44b4549ff5f0812701997d53c259fd79320fcc41ba1e8f8db9a05fde91f9ef76c77684f8e40d3bb60fa3353f57d409d5d3c7ce2fd0674a5dc3772c4c15a4d05e0d239597dc62d5d588ab0d1a2db2116cc3abd56a8fc9ae7ec2743be749e1ceb7ab3fac29f590762af3b1a2988cc22105bc15d03d4b08395723a431ac9a12f14c45f0a99032375e5ed6147ace036eb496b3fd69b7df8d116218b2c5cb2faf084c60d539dbdd9f73fa0aecd1dfb830c192eb4282e74dd455afd74cbe6b48938f47184d685f51444b2709794806b8629924235a5a2b63a1967e6fd01e74404598f563656532e0b47d81394edc55b1f597028ead149a64c092ae626981bbc01e386a10ea8c09abcd95e4ee2377941c5c4d8b504e8dafb5f2778bf74066440d19fbf56554628be82793487cda9edc676c6a8f03d378e38eb0874d014d729dc35ce3f642fd09e2b64b96961e04b4414555f766c8e620acc84c70e4d5c0d3adbdba80265fdf042c92ad3fa1871ff412c6138fde9297c8bbf3ef22f669676cfaad27bce9aed68e29ca89501991b04f48dc697a13d4bc16de448949d8daa8c7e72a820f1b837a8c7", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:08 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:12:08 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2853.742773] Killed process 22342 (syz-executor3) total-vm:72584kB, anon-rss:2184kB, file-rss:35672kB, shmem-rss:0kB [ 2853.744473] oom_reaper: reaped process 22342 (syz-executor3), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2853.784817] syz-executor3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 2853.820130] CPU: 1 PID: 22316 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2853.827277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.836718] Call Trace: [ 2853.839316] dump_stack+0x1db/0x2d0 [ 2853.842955] ? dump_stack_print_info.cold+0x20/0x20 [ 2853.847995] dump_header+0x1e6/0x116c [ 2853.851810] ? add_lock_to_list.isra.0+0x450/0x450 [ 2853.856772] ? print_usage_bug+0xd0/0xd0 [ 2853.860842] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2853.865779] ? ___ratelimit+0x37c/0x686 [ 2853.869766] ? mark_held_locks+0xb1/0x100 [ 2853.873921] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2853.879031] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2853.884137] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2853.888732] ? trace_hardirqs_on+0xbd/0x310 [ 2853.893056] ? kasan_check_read+0x11/0x20 [ 2853.897210] ? ___ratelimit+0x37c/0x686 [ 2853.901213] ? trace_hardirqs_off_caller+0x300/0x300 [ 2853.906321] ? do_raw_spin_trylock+0x270/0x270 [ 2853.910910] ? trace_hardirqs_on_caller+0x310/0x310 [ 2853.915934] ? lock_acquire+0x1db/0x570 [ 2853.919932] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2853.925041] ? ___ratelimit+0xac/0x686 [ 2853.928932] ? idr_get_free+0xee0/0xee0 [ 2853.932923] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2853.937517] oom_kill_process.cold+0x10/0x9d4 [ 2853.942021] ? cgroup_procs_next+0x70/0x70 [ 2853.946264] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2853.950761] ? oom_badness+0xa50/0xa50 [ 2853.954659] ? oom_evaluate_task+0x540/0x540 [ 2853.959075] ? mem_cgroup_iter_break+0x30/0x30 [ 2853.963675] ? mutex_trylock+0x2d0/0x2d0 [ 2853.967739] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2853.973296] ? rcu_read_unlock_special+0x380/0x380 [ 2853.978236] out_of_memory+0x885/0x1420 [ 2853.982219] ? mem_cgroup_iter+0x508/0xf30 [ 2853.986466] ? oom_killer_disable+0x340/0x340 [ 2853.990983] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2853.996087] ? lock_acquire+0x1db/0x570 [ 2854.000114] mem_cgroup_out_of_memory+0x160/0x210 [ 2854.004996] ? do_raw_spin_unlock+0xa0/0x330 [ 2854.009408] ? memcg_memory_event+0x40/0x40 [ 2854.013729] ? do_raw_spin_trylock+0x270/0x270 [ 2854.018330] ? _raw_spin_unlock+0x2d/0x50 [ 2854.022487] try_charge+0x12a9/0x19b0 [ 2854.026294] ? check_preemption_disabled+0x48/0x290 [ 2854.031321] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2854.036183] ? rcu_read_lock_sched_held+0x110/0x130 [ 2854.041207] ? __alloc_pages_nodemask+0xaca/0xdc0 [ 2854.046067] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2854.051092] ? ____cache_alloc_node+0x1be/0x1e0 [ 2854.055773] ? cache_grow_begin+0x599/0x8c0 [ 2854.060116] ? cache_grow_begin+0x599/0x8c0 [ 2854.064467] memcg_kmem_charge_memcg+0x7c/0x130 [ 2854.069192] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2854.073712] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2854.079253] ? __cpuset_node_allowed+0x19f/0x640 [ 2854.084014] cache_grow_begin+0x25f/0x8c0 [ 2854.088169] ? kasan_check_read+0x11/0x20 [ 2854.092322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2854.097862] ? mempolicy_slab_node+0x139/0x390 [ 2854.102450] fallback_alloc+0x1fd/0x2d0 [ 2854.106434] ____cache_alloc_node+0x1be/0x1e0 [ 2854.110940] kmem_cache_alloc+0x1f5/0x710 [ 2854.115093] ? __lock_acquire+0x572/0x4a30 [ 2854.119346] __alloc_file+0x93/0x480 [ 2854.123067] ? file_free_rcu+0xe0/0xe0 [ 2854.126976] ? mark_held_locks+0x100/0x100 [ 2854.131234] alloc_empty_file+0x72/0x170 [ 2854.135306] path_openat+0x112/0x5650 [ 2854.139121] ? add_lock_to_list.isra.0+0x450/0x450 [ 2854.144084] ? __alloc_fd+0x549/0x700 [ 2854.147893] ? find_held_lock+0x35/0x120 [ 2854.151979] ? path_lookupat.isra.0+0xba0/0xba0 [ 2854.156671] ? do_dup2+0x580/0x580 [ 2854.160228] ? kasan_check_read+0x11/0x20 [ 2854.164382] ? do_raw_spin_unlock+0xa0/0x330 [ 2854.168806] ? do_raw_spin_trylock+0x270/0x270 [ 2854.173434] ? __phys_addr_symbol+0x30/0x70 [ 2854.177773] do_filp_open+0x26f/0x370 [ 2854.181581] ? may_open_dev+0x100/0x100 [ 2854.185564] ? exit_files+0xb0/0xb0 [ 2854.189219] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2854.194785] ? digsig_verify.cold+0x32/0x32 [ 2854.199114] ? get_unused_fd_flags+0x122/0x1a0 [ 2854.203714] ? __alloc_fd+0x700/0x700 [ 2854.207516] ? getname_flags+0x277/0x5b0 [ 2854.211606] do_sys_open+0x59a/0x7c0 [ 2854.215342] ? filp_open+0x80/0x80 [ 2854.218893] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2854.224262] ? trace_hardirqs_off_caller+0x300/0x300 [ 2854.229372] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2854.234136] __x64_sys_open+0x7e/0xc0 [ 2854.237954] do_syscall_64+0x1a3/0x800 [ 2854.241847] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2854.246830] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2854.251859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2854.256713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2854.261902] RIP: 0033:0x4560c0 [ 2854.265098] Code: 31 c0 e9 45 ff ff ff 0f 1f 00 80 3f 00 0f 84 f7 00 00 00 55 53 b9 02 00 00 00 be 00 08 09 00 89 c8 48 81 ec 98 00 00 00 0f 05 <48> 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 [ 2854.284018] RSP: 002b:00007ffc2b7fe5e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 2854.291729] RAX: ffffffffffffffda RBX: 00000000002b8b26 RCX: 00000000004560c0 [ 2854.299002] RDX: 000000000000000c RSI: 0000000000090800 RDI: 00007ffc2b7ff7c0 [ 2854.306273] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000164a940 [ 2854.313559] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc2b7ff7c0 [ 2854.320830] R13: 00000000002b877c R14: 0000000000000000 R15: 0000000000000003 18:12:09 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2854.460154] memory: usage 864kB, limit 0kB, failcnt 433654 [ 2854.468711] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 18:12:09 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2854.518966] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2854.525181] Memory cgroup stats for /syz3: cache:12KB rss:100KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2854.612918] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22316,uid=0 [ 2854.660679] IPVS: ftp: loaded support on port[0] = 21 18:12:09 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2854.689989] device bridge_slave_1 left promiscuous mode [ 2854.695525] bridge0: port 2(bridge_slave_1) entered disabled state [ 2854.714795] Memory cgroup out of memory: Kill process 22316 (syz-executor3) score 8757000 or sacrifice child [ 2854.749288] Killed process 22316 (syz-executor3) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2854.797243] device bridge_slave_0 left promiscuous mode [ 2854.802916] bridge0: port 1(bridge_slave_0) entered disabled state [ 2854.955470] device hsr_slave_1 left promiscuous mode [ 2855.003691] device hsr_slave_0 left promiscuous mode [ 2855.045266] team0 (unregistering): Port device team_slave_1 removed [ 2855.058363] team0 (unregistering): Port device team_slave_0 removed [ 2855.072271] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2855.114376] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2855.194306] bond0 (unregistering): Released all slaves 18:12:10 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2855.315918] IPVS: ftp: loaded support on port[0] = 21 18:12:10 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:10 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:10 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2855.623607] chnl_net:caif_netlink_parms(): no params data found 18:12:10 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x0, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2855.747333] IPVS: ftp: loaded support on port[0] = 21 [ 2855.841484] chnl_net:caif_netlink_parms(): no params data found [ 2855.863693] bridge0: port 1(bridge_slave_0) entered blocking state [ 2855.872751] bridge0: port 1(bridge_slave_0) entered disabled state [ 2855.888200] device bridge_slave_0 entered promiscuous mode [ 2855.920264] bridge0: port 2(bridge_slave_1) entered blocking state [ 2855.926718] bridge0: port 2(bridge_slave_1) entered disabled state [ 2855.950298] device bridge_slave_1 entered promiscuous mode [ 2856.043191] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.050601] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.058240] device bridge_slave_0 entered promiscuous mode [ 2856.068635] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2856.087557] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2856.112921] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2856.121061] team0: Port device team_slave_0 added [ 2856.129710] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.136120] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.145454] device bridge_slave_1 entered promiscuous mode [ 2856.159632] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2856.167214] team0: Port device team_slave_1 added [ 2856.173455] IPVS: ftp: loaded support on port[0] = 21 [ 2856.202687] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2856.217702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2856.227293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2856.246839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2856.382626] device hsr_slave_0 entered promiscuous mode [ 2856.429864] device hsr_slave_1 entered promiscuous mode [ 2856.499872] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2856.556926] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2856.574077] team0: Port device team_slave_0 added [ 2856.595538] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2856.640589] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2856.648103] team0: Port device team_slave_1 added [ 2856.684244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2856.702936] chnl_net:caif_netlink_parms(): no params data found [ 2856.721358] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2856.728137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2856.921291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.927801] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.937112] device bridge_slave_0 entered promiscuous mode [ 2857.062395] device hsr_slave_0 entered promiscuous mode [ 2857.109464] device hsr_slave_1 entered promiscuous mode [ 2857.169833] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2857.177071] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2857.184267] bridge0: port 2(bridge_slave_1) entered blocking state [ 2857.190970] bridge0: port 2(bridge_slave_1) entered disabled state [ 2857.198338] device bridge_slave_1 entered promiscuous mode [ 2857.240801] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2857.251069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2857.268077] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2857.283726] chnl_net:caif_netlink_parms(): no params data found [ 2857.317682] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2857.326922] team0: Port device team_slave_0 added [ 2857.333121] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2857.341322] team0: Port device team_slave_1 added [ 2857.365389] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2857.374529] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2857.386700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2857.421321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2857.446955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2857.453739] bridge0: port 1(bridge_slave_0) entered disabled state [ 2857.462355] device bridge_slave_0 entered promiscuous mode [ 2857.532524] device hsr_slave_0 entered promiscuous mode [ 2857.579546] device hsr_slave_1 entered promiscuous mode [ 2857.610904] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2857.617411] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2857.628528] bridge0: port 2(bridge_slave_1) entered blocking state [ 2857.636299] bridge0: port 2(bridge_slave_1) entered disabled state [ 2857.644070] device bridge_slave_1 entered promiscuous mode [ 2857.654839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2857.662211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2857.670249] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2857.718459] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2857.738067] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2857.744722] 8021q: adding VLAN 0 to HW filter on device team0 [ 2857.763499] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2857.789646] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2857.820296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2857.843474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2857.851692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2857.859815] bridge0: port 1(bridge_slave_0) entered blocking state [ 2857.866166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2857.883926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2857.897991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2857.905273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2857.913658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2857.921809] bridge0: port 2(bridge_slave_1) entered blocking state [ 2857.928161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2857.936238] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2857.944273] team0: Port device team_slave_0 added [ 2857.950868] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2857.958450] team0: Port device team_slave_1 added [ 2857.972508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2857.981751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2857.989680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2857.997631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2858.008431] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2858.022971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2858.045599] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2858.087198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2858.097771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2858.117200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2858.124329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2858.131753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2858.139891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2858.147867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2858.202157] device hsr_slave_0 entered promiscuous mode [ 2858.249204] device hsr_slave_1 entered promiscuous mode [ 2858.309751] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2858.316814] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2858.325467] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2858.332532] 8021q: adding VLAN 0 to HW filter on device team0 [ 2858.339160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2858.348118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2858.379522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2858.388516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2858.396442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2858.410006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2858.417753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2858.426685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2858.434643] bridge0: port 1(bridge_slave_0) entered blocking state [ 2858.441065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2858.447872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2858.455849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2858.463525] bridge0: port 2(bridge_slave_1) entered blocking state [ 2858.469955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2858.487782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2858.497721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2858.506828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2858.514282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2858.521925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2858.534204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2858.545431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2858.568725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2858.577586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2858.586732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2858.596088] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2858.607521] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2858.618097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2858.640381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2858.650364] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2858.656925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2858.672972] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2858.686483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2858.701024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2858.707966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2858.715725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2858.724002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2858.732271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2858.745720] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2858.755358] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2858.766162] 8021q: adding VLAN 0 to HW filter on device team0 [ 2858.775510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2858.789243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2858.800294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2858.808274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2858.822188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2858.831581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2858.861564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2858.871384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2858.879087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2858.885471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2858.893844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2858.901991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2858.909707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2858.919789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2858.932289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2858.960828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2858.968779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2858.976615] bridge0: port 2(bridge_slave_1) entered blocking state [ 2858.983033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2858.991171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2859.012245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2859.045510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2859.058697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2859.068376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2859.076212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2859.125115] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2859.138557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2859.152283] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2859.164713] CPU: 0 PID: 22392 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2859.171830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2859.181189] Call Trace: [ 2859.183796] dump_stack+0x1db/0x2d0 [ 2859.186915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2859.187434] ? dump_stack_print_info.cold+0x20/0x20 [ 2859.198339] dump_header+0x1e6/0x116c [ 2859.202163] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2859.206207] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2859.206932] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2859.218041] ? retint_kernel+0x2d/0x2d [ 2859.221942] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2859.225834] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2859.226881] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2859.237854] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2859.243319] ? ___ratelimit+0x37c/0x686 [ 2859.245239] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2859.247309] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2859.257216] 8021q: adding VLAN 0 to HW filter on device team0 [ 2859.258104] ? retint_kernel+0x2d/0x2d [ 2859.267859] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2859.272972] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2859.276611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2859.278086] ? ___ratelimit+0xac/0x686 [ 2859.288900] ? idr_get_free+0xee0/0xee0 [ 2859.292900] oom_kill_process.cold+0x10/0x9d4 [ 2859.297403] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2859.297409] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2859.304347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2859.308910] ? retint_kernel+0x2d/0x2d [ 2859.308926] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2859.308940] ? cgroup_procs_next+0x70/0x70 [ 2859.308957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2859.308974] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2859.308990] ? _raw_spin_unlock_irq+0x74/0x90 [ 2859.309006] ? oom_badness+0xa50/0xa50 [ 2859.309027] ? oom_evaluate_task+0x540/0x540 [ 2859.309044] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2859.309066] ? retint_kernel+0x2d/0x2d [ 2859.309094] ? out_of_memory+0x79b/0x1420 [ 2859.309114] out_of_memory+0x885/0x1420 [ 2859.309160] ? oom_killer_disable+0x340/0x340 [ 2859.309182] ? preempt_schedule+0x4b/0x60 [ 2859.309200] ? ___preempt_schedule+0x16/0x18 [ 2859.322493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2859.324771] mem_cgroup_out_of_memory+0x160/0x210 [ 2859.340414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2859.343680] ? memcg_memory_event+0x40/0x40 [ 2859.359640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2859.360585] memory_max_write+0x1b0/0x3e0 [ 2859.367954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2859.368672] ? lock_acquire+0x1db/0x570 [ 2859.368694] ? mem_cgroup_write+0x440/0x440 [ 2859.387559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2859.388634] ? lock_release+0xc40/0xc40 [ 2859.404667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2859.411277] ? add_lock_to_list.isra.0+0x450/0x450 [ 2859.411293] ? lock_downgrade+0x910/0x910 [ 2859.411314] cgroup_file_write+0x252/0x830 [ 2859.411331] ? mem_cgroup_write+0x440/0x440 [ 2859.411347] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2859.411374] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2859.411389] kernfs_fop_write+0x2ba/0x480 [ 2859.411411] __vfs_write+0x116/0xb40 [ 2859.411428] ? check_preemption_disabled+0x48/0x290 [ 2859.411444] ? kernfs_fop_open+0x1030/0x1030 [ 2859.411464] ? kernel_read+0x120/0x120 [ 2859.427386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2859.430538] ? __lock_is_held+0xb6/0x140 [ 2859.430587] ? rcu_read_lock_sched_held+0x110/0x130 [ 2859.430601] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2859.430616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2859.430629] ? __sb_start_write+0x1ac/0x360 [ 2859.430648] vfs_write+0x20c/0x580 [ 2859.430667] ksys_write+0x105/0x260 [ 2859.430701] ? __ia32_sys_read+0xb0/0xb0 [ 2859.447167] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2859.450938] ? trace_hardirqs_off_caller+0x300/0x300 [ 2859.450955] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2859.450976] __x64_sys_write+0x73/0xb0 [ 2859.450994] do_syscall_64+0x1a3/0x800 [ 2859.451014] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2859.451031] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2859.451053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2859.451079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2859.451091] RIP: 0033:0x458099 [ 2859.451107] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2859.451115] RSP: 002b:00007ffb3f7bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2859.451130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2859.451138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2859.451165] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2859.451174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffb3f7bc6d4 [ 2859.451184] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2859.666610] memory: usage 3380kB, limit 0kB, failcnt 1653260 [ 2859.674512] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2859.682233] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2859.688515] Memory cgroup stats for /syz0: cache:24KB rss:2084KB rss_huge:2048KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2859.711391] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22391,uid=0 [ 2859.728252] Memory cgroup out of memory: Kill process 22391 (syz-executor0) score 9270000 or sacrifice child [ 2859.739312] Killed process 22391 (syz-executor0) total-vm:72452kB, anon-rss:2132kB, file-rss:34816kB, shmem-rss:0kB [ 2859.758407] oom_reaper: reaped process 22391 (syz-executor0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 2859.781461] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2859.798754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2859.807061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2859.823607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2859.838317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2859.846479] bridge0: port 1(bridge_slave_0) entered blocking state [ 2859.852945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2859.867077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2859.887079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2859.897347] bridge0: port 2(bridge_slave_1) entered blocking state [ 2859.903804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2859.920424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2859.936039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2859.946989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2859.962197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2859.977421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2859.987704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2860.004929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2860.012907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2860.021082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2860.028623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2860.045191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2860.054482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2860.070356] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2860.080184] CPU: 0 PID: 22358 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2860.087287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.096634] Call Trace: [ 2860.096656] dump_stack+0x1db/0x2d0 [ 2860.096675] ? dump_stack_print_info.cold+0x20/0x20 [ 2860.096704] dump_header+0x1e6/0x116c [ 2860.096722] ? add_lock_to_list.isra.0+0x450/0x450 [ 2860.096741] ? print_usage_bug+0xd0/0xd0 [ 2860.096760] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2860.096777] ? ___ratelimit+0x37c/0x686 [ 2860.096798] ? mark_held_locks+0xb1/0x100 [ 2860.096816] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2860.096832] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2860.096846] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2860.096862] ? trace_hardirqs_on+0xbd/0x310 [ 2860.096877] ? kasan_check_read+0x11/0x20 [ 2860.096892] ? ___ratelimit+0x37c/0x686 [ 2860.096907] ? trace_hardirqs_off_caller+0x300/0x300 [ 2860.096921] ? do_raw_spin_trylock+0x270/0x270 [ 2860.096936] ? trace_hardirqs_on_caller+0x310/0x310 [ 2860.096950] ? lock_acquire+0x1db/0x570 [ 2860.111986] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2860.120946] ? ___ratelimit+0xac/0x686 [ 2860.120965] ? idr_get_free+0xee0/0xee0 [ 2860.120980] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2860.121006] oom_kill_process.cold+0x10/0x9d4 [ 2860.121025] ? cgroup_procs_next+0x70/0x70 [ 2860.121044] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2860.121061] ? oom_badness+0xa50/0xa50 [ 2860.121082] ? oom_evaluate_task+0x540/0x540 [ 2860.121097] ? mem_cgroup_iter_break+0x30/0x30 [ 2860.139206] ? mutex_trylock+0x2d0/0x2d0 [ 2860.139223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.139251] ? rcu_read_unlock_special+0x380/0x380 [ 2860.139276] out_of_memory+0x885/0x1420 [ 2860.139293] ? mem_cgroup_iter+0x508/0xf30 [ 2860.139312] ? oom_killer_disable+0x340/0x340 [ 2860.148985] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2860.149002] ? lock_acquire+0x1db/0x570 [ 2860.149028] mem_cgroup_out_of_memory+0x160/0x210 [ 2860.149043] ? do_raw_spin_unlock+0xa0/0x330 [ 2860.149060] ? memcg_memory_event+0x40/0x40 [ 2860.149074] ? do_raw_spin_trylock+0x270/0x270 [ 2860.149100] ? _raw_spin_unlock+0x2d/0x50 [ 2860.149116] try_charge+0x12a9/0x19b0 [ 2860.166635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.180225] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2860.189195] ? rcu_read_unlock_special+0x380/0x380 [ 2860.189222] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2860.189240] ? get_mem_cgroup_from_page+0x190/0x190 [ 2860.189263] ? rcu_read_lock_sched_held+0x110/0x130 [ 2860.189283] mem_cgroup_try_charge+0x43a/0xdb0 [ 2860.189305] ? mem_cgroup_protected+0xa10/0xa10 [ 2860.189329] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.189345] ? print_usage_bug+0xd0/0xd0 [ 2860.189362] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2860.206593] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2860.219364] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2860.219384] wp_page_copy+0x45a/0x1c30 [ 2860.219396] ? swp_swapcount+0x540/0x540 [ 2860.219422] ? pmd_pfn+0x1d0/0x1d0 [ 2860.219437] ? find_held_lock+0x35/0x120 [ 2860.219453] ? do_wp_page+0x70d/0x16b0 [ 2860.219470] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2860.219493] ? kasan_check_read+0x11/0x20 [ 2860.233636] ? do_raw_spin_unlock+0xa0/0x330 [ 2860.242517] ? do_raw_spin_trylock+0x270/0x270 [ 2860.242534] ? __lock_acquire+0x572/0x4a30 [ 2860.242557] do_wp_page+0x715/0x16b0 [ 2860.242579] ? finish_mkwrite_fault+0x540/0x540 [ 2860.242593] ? kasan_check_read+0x11/0x20 [ 2860.242608] ? do_raw_spin_lock+0x156/0x360 [ 2860.242623] ? rwlock_bug.part.0+0x90/0x90 [ 2860.242639] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2860.242664] __handle_mm_fault+0x2c8e/0x55a0 [ 2860.242687] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2860.242701] ? check_preemption_disabled+0x48/0x290 [ 2860.242717] ? handle_mm_fault+0x3cc/0xc80 [ 2860.242746] ? lock_downgrade+0x910/0x910 [ 2860.242760] ? kasan_check_read+0x11/0x20 [ 2860.242776] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2860.242792] ? rcu_read_unlock_special+0x380/0x380 [ 2860.260572] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2860.260588] ? check_preemption_disabled+0x48/0x290 [ 2860.260611] handle_mm_fault+0x4ec/0xc80 [ 2860.260629] ? __handle_mm_fault+0x55a0/0x55a0 [ 2860.260643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.260655] ? vmacache_update+0x114/0x140 [ 2860.260679] __do_page_fault+0x5da/0xd60 [ 2860.260704] do_page_fault+0xe6/0x7d8 [ 2860.269938] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2860.269957] ? vmalloc_sync_all+0x30/0x30 [ 2860.269971] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2860.269988] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2860.270003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2860.270019] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2860.270037] ? page_fault+0x8/0x30 [ 2860.270056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2860.270075] ? page_fault+0x8/0x30 [ 2860.270090] page_fault+0x1e/0x30 [ 2860.283121] RIP: 0033:0x42f226 [ 2860.292441] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2860.292451] RSP: 002b:00007fffba9ad310 EFLAGS: 00010206 [ 2860.292463] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2860.292472] RDX: 000000000163a930 RSI: 0000000001642970 RDI: 0000000000000003 [ 2860.292481] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001639940 [ 2860.292489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2860.292498] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2860.302848] memory: usage 1060kB, limit 0kB, failcnt 1653268 [ 2860.312696] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2860.326596] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2860.344734] Memory cgroup stats for /syz0: cache:24KB rss:0KB rss_huge:0KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2860.360471] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22358,uid=0 [ 2860.367987] Memory cgroup out of memory: Kill process 22358 (syz-executor0) score 8756000 or sacrifice child [ 2860.381693] Killed process 22358 (syz-executor0) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2860.684365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2860.691802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2860.698747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2860.705683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2860.713436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2860.723017] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2860.735074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2860.743325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2860.756108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2860.765520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2860.788396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2860.800723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2860.810198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2860.818651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2860.836890] device bridge_slave_1 left promiscuous mode [ 2860.859021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.890774] device bridge_slave_0 left promiscuous mode [ 2860.896279] bridge0: port 1(bridge_slave_0) entered disabled state [ 2860.919978] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2860.933352] device bridge_slave_1 left promiscuous mode [ 2860.938843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.939461] CPU: 1 PID: 22397 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2860.952319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2860.961674] Call Trace: [ 2860.964248] dump_stack+0x1db/0x2d0 [ 2860.967861] ? dump_stack_print_info.cold+0x20/0x20 [ 2860.972869] dump_header+0x1e6/0x116c [ 2860.976695] ? add_lock_to_list.isra.0+0x450/0x450 [ 2860.981628] ? print_usage_bug+0xd0/0xd0 [ 2860.985682] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2860.990597] ? ___ratelimit+0x37c/0x686 [ 2860.994560] ? mark_held_locks+0xb1/0x100 [ 2860.998708] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2861.003811] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2861.008930] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2861.013495] ? trace_hardirqs_on+0xbd/0x310 [ 2861.017802] ? kasan_check_read+0x11/0x20 [ 2861.021935] ? ___ratelimit+0x37c/0x686 [ 2861.025896] ? trace_hardirqs_off_caller+0x300/0x300 [ 2861.031027] ? do_raw_spin_trylock+0x270/0x270 [ 2861.035622] ? trace_hardirqs_on_caller+0x310/0x310 [ 2861.040641] ? lock_acquire+0x1db/0x570 [ 2861.044608] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2861.049699] ? ___ratelimit+0xac/0x686 [ 2861.053578] ? idr_get_free+0xee0/0xee0 [ 2861.057545] oom_kill_process.cold+0x10/0x9d4 [ 2861.062032] ? cgroup_procs_next+0x70/0x70 [ 2861.066255] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2861.070736] ? oom_badness+0xa50/0xa50 [ 2861.074625] ? oom_evaluate_task+0x540/0x540 [ 2861.079020] ? mem_cgroup_iter_break+0x30/0x30 [ 2861.083598] ? out_of_memory+0x11b/0x1420 [ 2861.087936] out_of_memory+0x885/0x1420 [ 2861.091902] ? oom_killer_disable+0x340/0x340 [ 2861.096396] mem_cgroup_out_of_memory+0x160/0x210 [ 2861.101226] ? memcg_memory_event+0x40/0x40 [ 2861.105554] ? check_memory_region+0x112/0x190 [ 2861.110125] memory_max_write+0x1b0/0x3e0 [ 2861.114280] ? lock_acquire+0x1db/0x570 [ 2861.118244] ? mem_cgroup_write+0x440/0x440 [ 2861.122548] ? lock_release+0xc40/0xc40 [ 2861.126516] ? add_lock_to_list.isra.0+0x450/0x450 [ 2861.131429] ? lock_downgrade+0x910/0x910 [ 2861.135566] cgroup_file_write+0x252/0x830 [ 2861.139792] ? mem_cgroup_write+0x440/0x440 [ 2861.144124] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2861.149058] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2861.153991] kernfs_fop_write+0x2ba/0x480 [ 2861.158155] __vfs_write+0x116/0xb40 [ 2861.161864] ? check_preemption_disabled+0x48/0x290 [ 2861.166875] ? kernfs_fop_open+0x1030/0x1030 [ 2861.171275] ? kernel_read+0x120/0x120 [ 2861.175160] ? __lock_is_held+0xb6/0x140 [ 2861.179219] ? rcu_read_lock_sched_held+0x110/0x130 [ 2861.184224] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2861.188970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2861.194495] ? __sb_start_write+0x1ac/0x360 [ 2861.198810] vfs_write+0x20c/0x580 [ 2861.202346] ksys_write+0x105/0x260 [ 2861.205962] ? __ia32_sys_read+0xb0/0xb0 [ 2861.210017] ? trace_hardirqs_off_caller+0x300/0x300 [ 2861.215118] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2861.219905] __x64_sys_write+0x73/0xb0 [ 2861.223783] do_syscall_64+0x1a3/0x800 [ 2861.227666] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2861.232587] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2861.237594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2861.242432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2861.247609] RIP: 0033:0x458099 [ 2861.250787] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2861.269679] RSP: 002b:00007fb0c9781c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2861.277379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2861.284637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2861.291898] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2861.299161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0c97826d4 [ 2861.306432] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2861.325312] memory: usage 3240kB, limit 0kB, failcnt 1132463 [ 2861.331459] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2861.342975] device bridge_slave_0 left promiscuous mode [ 2861.348530] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2861.349191] bridge0: port 1(bridge_slave_0) entered disabled state [ 2861.356561] Memory cgroup stats for /syz2: cache:4KB rss:2120KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2861.385394] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22396,uid=0 [ 2861.400807] Memory cgroup out of memory: Kill process 22396 (syz-executor2) score 9271000 or sacrifice child [ 2861.412530] Killed process 22396 (syz-executor2) total-vm:72452kB, anon-rss:2184kB, file-rss:35672kB, shmem-rss:0kB [ 2861.426054] oom_reaper: reaped process 22396 (syz-executor2), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2861.453547] device bridge_slave_1 left promiscuous mode [ 2861.460273] bridge0: port 2(bridge_slave_1) entered disabled state [ 2861.533350] device bridge_slave_0 left promiscuous mode [ 2861.540907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2861.862420] device hsr_slave_1 left promiscuous mode [ 2861.926928] device hsr_slave_0 left promiscuous mode [ 2861.965123] team0 (unregistering): Port device team_slave_1 removed [ 2861.977372] team0 (unregistering): Port device team_slave_0 removed [ 2861.988503] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2862.026826] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2862.135811] bond0 (unregistering): Released all slaves [ 2862.262896] device hsr_slave_1 left promiscuous mode [ 2862.326887] device hsr_slave_0 left promiscuous mode [ 2862.384751] team0 (unregistering): Port device team_slave_1 removed [ 2862.396291] team0 (unregistering): Port device team_slave_0 removed [ 2862.407669] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2862.447328] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2862.526528] bond0 (unregistering): Released all slaves [ 2862.671618] device hsr_slave_1 left promiscuous mode [ 2862.713024] device hsr_slave_0 left promiscuous mode [ 2862.763302] team0 (unregistering): Port device team_slave_1 removed [ 2862.778216] team0 (unregistering): Port device team_slave_0 removed [ 2862.789515] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2862.844203] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2862.945823] bond0 (unregistering): Released all slaves [ 2863.036129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2863.063418] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2863.074822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2863.093711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2863.106736] CPU: 1 PID: 22359 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2863.113848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2863.123202] Call Trace: [ 2863.125806] dump_stack+0x1db/0x2d0 [ 2863.129466] ? dump_stack_print_info.cold+0x20/0x20 [ 2863.134509] dump_header+0x1e6/0x116c [ 2863.138335] ? add_lock_to_list.isra.0+0x450/0x450 [ 2863.143274] ? print_usage_bug+0xd0/0xd0 [ 2863.147336] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2863.152255] ? ___ratelimit+0x37c/0x686 [ 2863.156220] ? mark_held_locks+0xb1/0x100 [ 2863.160356] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2863.165446] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2863.170533] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2863.175101] ? trace_hardirqs_on+0xbd/0x310 [ 2863.179422] ? kasan_check_read+0x11/0x20 [ 2863.183603] ? ___ratelimit+0x37c/0x686 [ 2863.187561] ? trace_hardirqs_off_caller+0x300/0x300 [ 2863.192649] ? do_raw_spin_trylock+0x270/0x270 [ 2863.197221] ? trace_hardirqs_on_caller+0x310/0x310 [ 2863.202224] ? lock_acquire+0x1db/0x570 [ 2863.206189] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2863.211281] ? ___ratelimit+0xac/0x686 [ 2863.215300] ? idr_get_free+0xee0/0xee0 [ 2863.219276] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2863.223854] oom_kill_process.cold+0x10/0x9d4 [ 2863.228362] ? cgroup_procs_next+0x70/0x70 [ 2863.232586] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2863.237078] ? oom_badness+0xa50/0xa50 [ 2863.240953] ? oom_evaluate_task+0x540/0x540 [ 2863.245348] ? mem_cgroup_iter_break+0x30/0x30 [ 2863.249916] ? mutex_trylock+0x2d0/0x2d0 [ 2863.253961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2863.259524] ? rcu_read_unlock_special+0x380/0x380 [ 2863.264442] out_of_memory+0x885/0x1420 [ 2863.268402] ? mem_cgroup_iter+0x508/0xf30 [ 2863.272627] ? oom_killer_disable+0x340/0x340 [ 2863.277108] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2863.282215] ? lock_acquire+0x1db/0x570 [ 2863.286198] mem_cgroup_out_of_memory+0x160/0x210 [ 2863.291038] ? do_raw_spin_unlock+0xa0/0x330 [ 2863.295431] ? memcg_memory_event+0x40/0x40 [ 2863.299736] ? do_raw_spin_trylock+0x270/0x270 [ 2863.304309] ? _raw_spin_unlock+0x2d/0x50 [ 2863.308532] try_charge+0x12a9/0x19b0 [ 2863.312323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2863.317850] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2863.322727] ? rcu_read_unlock_special+0x380/0x380 [ 2863.327646] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2863.332495] ? get_mem_cgroup_from_page+0x190/0x190 [ 2863.337498] ? rcu_read_lock_sched_held+0x110/0x130 [ 2863.342524] mem_cgroup_try_charge+0x43a/0xdb0 [ 2863.347112] ? mem_cgroup_protected+0xa10/0xa10 [ 2863.351789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2863.357314] ? print_usage_bug+0xd0/0xd0 [ 2863.361364] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2863.366892] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2863.372435] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2863.377353] wp_page_copy+0x45a/0x1c30 [ 2863.381240] ? swp_swapcount+0x540/0x540 [ 2863.385292] ? pmd_pfn+0x1d0/0x1d0 [ 2863.388817] ? find_held_lock+0x35/0x120 [ 2863.392868] ? do_wp_page+0x70d/0x16b0 [ 2863.396796] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2863.402326] ? kasan_check_read+0x11/0x20 [ 2863.406459] ? do_raw_spin_unlock+0xa0/0x330 [ 2863.410856] ? do_raw_spin_trylock+0x270/0x270 [ 2863.415425] ? __lock_acquire+0x572/0x4a30 [ 2863.419676] do_wp_page+0x715/0x16b0 [ 2863.423381] ? finish_mkwrite_fault+0x540/0x540 [ 2863.428033] ? kasan_check_read+0x11/0x20 [ 2863.432169] ? do_raw_spin_lock+0x156/0x360 [ 2863.436478] ? rwlock_bug.part.0+0x90/0x90 [ 2863.440736] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2863.445833] __handle_mm_fault+0x2c8e/0x55a0 [ 2863.450236] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2863.455077] ? check_preemption_disabled+0x48/0x290 [ 2863.460082] ? handle_mm_fault+0x3cc/0xc80 [ 2863.464415] ? lock_downgrade+0x910/0x910 [ 2863.468545] ? kasan_check_read+0x11/0x20 [ 2863.472683] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2863.477946] ? rcu_read_unlock_special+0x380/0x380 [ 2863.482861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2863.488385] ? check_preemption_disabled+0x48/0x290 [ 2863.493391] handle_mm_fault+0x4ec/0xc80 [ 2863.497441] ? __handle_mm_fault+0x55a0/0x55a0 [ 2863.502021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2863.507544] ? vmacache_update+0x114/0x140 [ 2863.511785] __do_page_fault+0x5da/0xd60 [ 2863.515883] do_page_fault+0xe6/0x7d8 [ 2863.519706] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2863.524622] ? vmalloc_sync_all+0x30/0x30 [ 2863.528751] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2863.534204] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2863.539128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2863.544675] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2863.549681] ? page_fault+0x8/0x30 [ 2863.553206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2863.558036] ? page_fault+0x8/0x30 [ 2863.561563] page_fault+0x1e/0x30 [ 2863.565018] RIP: 0033:0x42f226 [ 2863.568196] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2863.587099] RSP: 002b:00007ffddc1e8e10 EFLAGS: 00010206 [ 2863.592445] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2863.599699] RDX: 00000000027a0930 RSI: 00000000027a8970 RDI: 0000000000000003 [ 2863.606972] RBP: 0000000000008041 R08: 0000000000000001 R09: 000000000279f940 [ 2863.614227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2863.621482] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2863.632075] memory: usage 924kB, limit 0kB, failcnt 1132471 [ 2863.637806] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2863.648397] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2863.655024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2863.657052] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2863.670343] Memory cgroup stats for /syz2: cache:4KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2863.710502] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22359,uid=0 [ 2863.716895] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2863.734961] Memory cgroup out of memory: Kill process 22359 (syz-executor2) score 8756000 or sacrifice child [ 2863.748688] Killed process 22359 (syz-executor2) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2863.783330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2863.789673] oom_reaper: reaped process 22359 (syz-executor2), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2863.885229] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2863.902947] CPU: 0 PID: 22402 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2863.910063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2863.919418] Call Trace: [ 2863.922014] dump_stack+0x1db/0x2d0 [ 2863.925658] ? dump_stack_print_info.cold+0x20/0x20 [ 2863.930693] ? mark_held_locks+0xb1/0x100 [ 2863.934865] dump_header+0x1e6/0x116c [ 2863.938674] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2863.943632] ? add_lock_to_list.isra.0+0x450/0x450 [ 2863.948576] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2863.954035] ? print_usage_bug+0xd0/0xd0 [ 2863.958109] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2863.963067] ? ___ratelimit+0x37c/0x686 [ 2863.967061] ? mark_held_locks+0xb1/0x100 [ 2863.971224] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2863.976360] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2863.981473] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2863.986067] ? trace_hardirqs_on+0xbd/0x310 [ 2863.990389] ? kasan_check_read+0x11/0x20 [ 2863.994531] ? ___ratelimit+0x37c/0x686 [ 2863.998523] ? trace_hardirqs_off_caller+0x300/0x300 [ 2864.003627] ? do_raw_spin_trylock+0x270/0x270 [ 2864.008223] ? trace_hardirqs_on_caller+0x310/0x310 [ 2864.013272] ? lock_acquire+0x1db/0x570 [ 2864.017242] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2864.022352] ? ___ratelimit+0xac/0x686 [ 2864.026232] ? idr_get_free+0xee0/0xee0 [ 2864.030196] ? mark_held_locks+0xb1/0x100 [ 2864.034338] oom_kill_process.cold+0x10/0x9d4 [ 2864.038822] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2864.043596] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2864.049061] ? cgroup_procs_next+0x70/0x70 [ 2864.053298] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2864.057810] ? calibrate_delay.cold+0x47a/0x539 [ 2864.062483] ? oom_evaluate_task+0x540/0x540 [ 2864.066894] ? retint_kernel+0x2d/0x2d [ 2864.070777] ? oom_kill_process+0x1e/0x270 [ 2864.075008] out_of_memory+0x885/0x1420 [ 2864.078976] ? oom_killer_disable+0x340/0x340 [ 2864.083511] mem_cgroup_out_of_memory+0x160/0x210 [ 2864.089667] ? memcg_memory_event+0x40/0x40 [ 2864.094006] memory_max_write+0x1b0/0x3e0 [ 2864.098163] ? lock_acquire+0x1db/0x570 [ 2864.102161] ? mem_cgroup_write+0x440/0x440 [ 2864.106484] ? lock_release+0xc40/0xc40 [ 2864.110461] ? add_lock_to_list.isra.0+0x450/0x450 [ 2864.115379] ? kernfs_get_active+0x225/0x340 [ 2864.119788] cgroup_file_write+0x252/0x830 [ 2864.124011] ? mem_cgroup_write+0x440/0x440 [ 2864.128335] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2864.133259] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2864.138190] kernfs_fop_write+0x2ba/0x480 [ 2864.142332] __vfs_write+0x116/0xb40 [ 2864.146048] ? check_preemption_disabled+0x48/0x290 [ 2864.151085] ? kernfs_fop_open+0x1030/0x1030 [ 2864.155495] ? kernel_read+0x120/0x120 [ 2864.159392] ? __lock_is_held+0xb6/0x140 [ 2864.163460] ? rcu_read_lock_sched_held+0x110/0x130 [ 2864.168485] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2864.173243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2864.178784] ? __sb_start_write+0x1ac/0x360 [ 2864.183106] vfs_write+0x20c/0x580 [ 2864.186666] ksys_write+0x105/0x260 [ 2864.190287] ? __ia32_sys_read+0xb0/0xb0 [ 2864.194358] __x64_sys_write+0x73/0xb0 [ 2864.198248] ? do_syscall_64+0xbc/0x800 [ 2864.202231] do_syscall_64+0x1a3/0x800 [ 2864.206121] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2864.211050] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2864.216074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2864.220910] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2864.226088] RIP: 0033:0x458099 [ 2864.229293] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2864.248194] RSP: 002b:00007fc1dd34dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2864.255887] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2864.263161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2864.270428] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2864.277685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1dd34e6d4 [ 2864.284953] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2864.306598] memory: usage 3380kB, limit 0kB, failcnt 312505 [ 2864.312589] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2864.319597] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2864.325959] Memory cgroup stats for /syz5: cache:148KB rss:2068KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2864.348294] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22401,uid=0 [ 2864.363389] Memory cgroup out of memory: Kill process 22401 (syz-executor5) score 9270000 or sacrifice child [ 2864.373780] Killed process 22401 (syz-executor5) total-vm:72452kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 2864.387308] oom_reaper: reaped process 22401 (syz-executor5), now anon-rss:0kB, file-rss:34712kB, shmem-rss:0kB [ 2864.398372] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2864.427746] CPU: 1 PID: 22409 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2864.434870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.444230] Call Trace: [ 2864.446833] dump_stack+0x1db/0x2d0 [ 2864.450475] ? dump_stack_print_info.cold+0x20/0x20 [ 2864.455512] dump_header+0x1e6/0x116c [ 2864.459324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2864.464092] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2864.468686] ? retint_kernel+0x2d/0x2d [ 2864.472583] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2864.477525] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2864.482460] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2864.487949] ? ___ratelimit+0x37c/0x686 [ 2864.491937] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2864.496724] ? retint_kernel+0x2d/0x2d [ 2864.500631] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2864.505779] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2864.510890] ? ___ratelimit+0xac/0x686 [ 2864.514790] ? idr_get_free+0xee0/0xee0 [ 2864.518785] oom_kill_process.cold+0x10/0x9d4 [ 2864.523293] ? cgroup_procs_next+0x70/0x70 [ 2864.527537] ? _raw_spin_unlock_irq+0x54/0x90 [ 2864.532041] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2864.536546] ? oom_badness+0xa50/0xa50 [ 2864.540445] ? oom_evaluate_task+0x540/0x540 [ 2864.544865] ? mem_cgroup_iter_break+0x30/0x30 [ 2864.549453] ? mutex_trylock+0x2d0/0x2d0 [ 2864.553535] ? cgroup_file_notify+0x217/0x2e0 [ 2864.558049] out_of_memory+0x885/0x1420 [ 2864.562042] ? oom_killer_disable+0x340/0x340 [ 2864.566546] ? preempt_schedule+0x4b/0x60 [ 2864.570704] ? ___preempt_schedule+0x16/0x18 [ 2864.575160] mem_cgroup_out_of_memory+0x160/0x210 [ 2864.580019] ? memcg_memory_event+0x40/0x40 [ 2864.584371] memory_max_write+0x1b0/0x3e0 [ 2864.588525] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2864.593130] ? mem_cgroup_write+0x440/0x440 [ 2864.597463] ? lock_release+0xc40/0xc40 [ 2864.601461] cgroup_file_write+0x252/0x830 [ 2864.605703] ? mem_cgroup_write+0x440/0x440 [ 2864.610029] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2864.614979] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2864.619929] kernfs_fop_write+0x2ba/0x480 [ 2864.624087] __vfs_write+0x116/0xb40 [ 2864.627826] ? kernfs_fop_open+0x1030/0x1030 [ 2864.632241] ? kernel_read+0x120/0x120 [ 2864.636155] ? lock_is_held_type+0x17e/0x210 [ 2864.640579] ? rcu_read_lock_sched_held+0x110/0x130 [ 2864.645606] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2864.650366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2864.655905] ? __sb_start_write+0x1ac/0x360 [ 2864.660239] vfs_write+0x20c/0x580 [ 2864.663789] ksys_write+0x105/0x260 [ 2864.667423] ? __ia32_sys_read+0xb0/0xb0 [ 2864.671498] __x64_sys_write+0x73/0xb0 [ 2864.675389] ? do_syscall_64+0xbc/0x800 [ 2864.679367] do_syscall_64+0x1a3/0x800 [ 2864.683262] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2864.688232] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2864.693264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2864.698116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2864.703310] RIP: 0033:0x458099 [ 2864.706507] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2864.725408] RSP: 002b:00007f3cbdfc5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2864.733114] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2864.740391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2864.747663] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2864.754935] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3cbdfc66d4 [ 2864.762207] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2864.796766] memory: usage 3168kB, limit 0kB, failcnt 433655 [ 2864.803816] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2864.815906] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2864.824523] Memory cgroup stats for /syz3: cache:12KB rss:2160KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB 18:12:19 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:19 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x0, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:19 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:12:19 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:19 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2864.847063] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22408,uid=0 [ 2864.867796] Memory cgroup out of memory: Kill process 22408 (syz-executor3) score 9272000 or sacrifice child [ 2864.885918] Killed process 22409 (syz-executor3) total-vm:72452kB, anon-rss:2180kB, file-rss:35680kB, shmem-rss:0kB [ 2864.925758] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2864.927033] oom_reaper: reaped process 22409 (syz-executor3), now anon-rss:0kB, file-rss:34720kB, shmem-rss:0kB [ 2864.941979] CPU: 1 PID: 22382 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2864.952693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2864.962067] Call Trace: [ 2864.964665] dump_stack+0x1db/0x2d0 [ 2864.968302] ? dump_stack_print_info.cold+0x20/0x20 [ 2864.973337] dump_header+0x1e6/0x116c [ 2864.977159] ? add_lock_to_list.isra.0+0x450/0x450 [ 2864.982101] ? print_usage_bug+0xd0/0xd0 [ 2864.986179] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2864.991115] ? ___ratelimit+0x37c/0x686 [ 2864.995107] ? mark_held_locks+0xb1/0x100 [ 2864.999274] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2865.004382] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2865.009489] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2865.014106] ? trace_hardirqs_on+0xbd/0x310 [ 2865.018439] ? kasan_check_read+0x11/0x20 [ 2865.022596] ? ___ratelimit+0x37c/0x686 [ 2865.026591] ? trace_hardirqs_off_caller+0x300/0x300 [ 2865.031700] ? do_raw_spin_trylock+0x270/0x270 [ 2865.036286] ? trace_hardirqs_on_caller+0x310/0x310 [ 2865.041309] ? lock_acquire+0x1db/0x570 [ 2865.045296] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2865.050405] ? ___ratelimit+0xac/0x686 [ 2865.054306] ? idr_get_free+0xee0/0xee0 [ 2865.058287] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2865.062882] oom_kill_process.cold+0x10/0x9d4 [ 2865.067386] ? cgroup_procs_next+0x70/0x70 [ 2865.071631] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2865.076151] ? oom_badness+0xa50/0xa50 [ 2865.080277] ? oom_evaluate_task+0x540/0x540 [ 2865.084700] ? mem_cgroup_iter_break+0x30/0x30 [ 2865.089284] ? mutex_trylock+0x2d0/0x2d0 [ 2865.093351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.098918] ? rcu_read_unlock_special+0x380/0x380 [ 2865.103862] out_of_memory+0x885/0x1420 [ 2865.107842] ? mem_cgroup_iter+0x508/0xf30 [ 2865.112111] ? oom_killer_disable+0x340/0x340 [ 2865.116622] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2865.121774] ? lock_acquire+0x1db/0x570 [ 2865.125764] mem_cgroup_out_of_memory+0x160/0x210 [ 2865.130610] ? do_raw_spin_unlock+0xa0/0x330 [ 2865.135038] ? memcg_memory_event+0x40/0x40 [ 2865.139365] ? do_raw_spin_trylock+0x270/0x270 [ 2865.143966] ? _raw_spin_unlock+0x2d/0x50 [ 2865.148120] try_charge+0x12a9/0x19b0 [ 2865.151940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.157484] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2865.162340] ? rcu_read_unlock_special+0x380/0x380 [ 2865.167284] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2865.172136] ? get_mem_cgroup_from_page+0x190/0x190 18:12:20 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2865.177193] ? rcu_read_lock_sched_held+0x110/0x130 [ 2865.182226] mem_cgroup_try_charge+0x43a/0xdb0 [ 2865.186843] ? mem_cgroup_protected+0xa10/0xa10 [ 2865.191525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.197084] ? print_usage_bug+0xd0/0xd0 [ 2865.201161] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2865.206705] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2865.212794] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2865.217737] wp_page_copy+0x45a/0x1c30 [ 2865.221631] ? swp_swapcount+0x540/0x540 [ 2865.225727] ? pmd_pfn+0x1d0/0x1d0 [ 2865.229300] ? find_held_lock+0x35/0x120 [ 2865.233371] ? do_wp_page+0x70d/0x16b0 [ 2865.237268] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2865.242869] ? kasan_check_read+0x11/0x20 [ 2865.247042] ? do_raw_spin_unlock+0xa0/0x330 [ 2865.251469] ? do_raw_spin_trylock+0x270/0x270 [ 2865.256062] ? __lock_acquire+0x572/0x4a30 [ 2865.260314] do_wp_page+0x715/0x16b0 [ 2865.264041] ? finish_mkwrite_fault+0x540/0x540 [ 2865.268716] ? kasan_check_read+0x11/0x20 [ 2865.272869] ? do_raw_spin_lock+0x156/0x360 [ 2865.277196] ? rwlock_bug.part.0+0x90/0x90 [ 2865.281439] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2865.286556] __handle_mm_fault+0x2c8e/0x55a0 [ 2865.290981] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2865.295829] ? check_preemption_disabled+0x48/0x290 [ 2865.300855] ? handle_mm_fault+0x3cc/0xc80 [ 2865.305132] ? lock_downgrade+0x910/0x910 [ 2865.309296] ? kasan_check_read+0x11/0x20 [ 2865.313452] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2865.318734] ? rcu_read_unlock_special+0x380/0x380 [ 2865.323674] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2865.329217] ? check_preemption_disabled+0x48/0x290 [ 2865.334245] handle_mm_fault+0x4ec/0xc80 [ 2865.338340] ? __handle_mm_fault+0x55a0/0x55a0 [ 2865.342926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.348475] ? vmacache_update+0x114/0x140 [ 2865.352725] __do_page_fault+0x5da/0xd60 [ 2865.356803] do_page_fault+0xe6/0x7d8 [ 2865.360607] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2865.365589] ? vmalloc_sync_all+0x30/0x30 [ 2865.369738] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2865.375201] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2865.380137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.385716] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2865.390736] ? page_fault+0x8/0x30 [ 2865.394294] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2865.399156] ? page_fault+0x8/0x30 [ 2865.402705] page_fault+0x1e/0x30 [ 2865.406166] RIP: 0033:0x42f226 [ 2865.409364] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2865.428362] RSP: 002b:00007ffeab89cfa0 EFLAGS: 00010206 [ 2865.433727] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2865.440996] RDX: 00000000021d9930 RSI: 00000000021e1970 RDI: 0000000000000003 [ 2865.448264] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000021d8940 [ 2865.455532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2865.462804] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2865.478577] memory: usage 1060kB, limit 0kB, failcnt 312513 [ 2865.484589] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2865.491897] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2865.498212] Memory cgroup stats for /syz5: cache:148KB rss:12KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2865.518527] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22382,uid=0 [ 2865.534639] Memory cgroup out of memory: Kill process 22382 (syz-executor5) score 8755000 or sacrifice child [ 2865.546051] Killed process 22382 (syz-executor5) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2865.574948] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2865.585377] CPU: 0 PID: 22372 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #6 [ 2865.592484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.601837] Call Trace: [ 2865.604451] dump_stack+0x1db/0x2d0 [ 2865.608092] ? dump_stack_print_info.cold+0x20/0x20 [ 2865.613161] dump_header+0x1e6/0x116c [ 2865.616991] ? add_lock_to_list.isra.0+0x450/0x450 [ 2865.621930] ? print_usage_bug+0xd0/0xd0 18:12:20 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x0, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2865.626020] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2865.630975] ? ___ratelimit+0x37c/0x686 [ 2865.634993] ? mark_held_locks+0xb1/0x100 [ 2865.639169] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2865.644285] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2865.649393] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2865.653985] ? trace_hardirqs_on+0xbd/0x310 [ 2865.658316] ? kasan_check_read+0x11/0x20 [ 2865.662475] ? ___ratelimit+0x37c/0x686 [ 2865.666459] ? trace_hardirqs_off_caller+0x300/0x300 [ 2865.671573] ? do_raw_spin_trylock+0x270/0x270 [ 2865.676169] ? trace_hardirqs_on_caller+0x310/0x310 [ 2865.681177] ? lock_acquire+0x1db/0x570 [ 2865.685157] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2865.690253] ? ___ratelimit+0xac/0x686 [ 2865.694130] ? idr_get_free+0xee0/0xee0 [ 2865.698105] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2865.702700] oom_kill_process.cold+0x10/0x9d4 [ 2865.707200] ? cgroup_procs_next+0x70/0x70 [ 2865.711438] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2865.715929] ? oom_badness+0xa50/0xa50 [ 2865.719824] ? oom_evaluate_task+0x540/0x540 [ 2865.724233] ? mem_cgroup_iter_break+0x30/0x30 [ 2865.728803] ? mutex_trylock+0x2d0/0x2d0 [ 2865.732851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.738401] ? rcu_read_unlock_special+0x380/0x380 [ 2865.743335] out_of_memory+0x885/0x1420 [ 2865.747311] ? mem_cgroup_iter+0x508/0xf30 [ 2865.751536] ? oom_killer_disable+0x340/0x340 [ 2865.756026] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2865.761132] ? lock_acquire+0x1db/0x570 [ 2865.765120] mem_cgroup_out_of_memory+0x160/0x210 [ 2865.769964] ? do_raw_spin_unlock+0xa0/0x330 [ 2865.774360] ? memcg_memory_event+0x40/0x40 [ 2865.778670] ? do_raw_spin_trylock+0x270/0x270 [ 2865.783249] ? _raw_spin_unlock+0x2d/0x50 [ 2865.787396] try_charge+0x12a9/0x19b0 [ 2865.791203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.796750] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2865.801583] ? rcu_read_unlock_special+0x380/0x380 [ 2865.806518] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2865.811362] ? get_mem_cgroup_from_page+0x190/0x190 [ 2865.816370] ? rcu_read_lock_sched_held+0x110/0x130 [ 2865.821375] mem_cgroup_try_charge+0x43a/0xdb0 [ 2865.825950] ? mem_cgroup_protected+0xa10/0xa10 [ 2865.830609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.836135] ? print_usage_bug+0xd0/0xd0 [ 2865.840221] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2865.845748] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2865.851276] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2865.856205] wp_page_copy+0x45a/0x1c30 [ 2865.860086] ? swp_swapcount+0x540/0x540 [ 2865.864189] ? pmd_pfn+0x1d0/0x1d0 [ 2865.867747] ? find_held_lock+0x35/0x120 [ 2865.871825] ? do_wp_page+0x70d/0x16b0 [ 2865.875700] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2865.881231] ? kasan_check_read+0x11/0x20 [ 2865.885365] ? do_raw_spin_unlock+0xa0/0x330 [ 2865.889762] ? do_raw_spin_trylock+0x270/0x270 [ 2865.894333] ? __lock_acquire+0x572/0x4a30 [ 2865.898573] do_wp_page+0x715/0x16b0 [ 2865.902298] ? finish_mkwrite_fault+0x540/0x540 [ 2865.906976] ? kasan_check_read+0x11/0x20 [ 2865.911121] ? do_raw_spin_lock+0x156/0x360 [ 2865.915473] ? rwlock_bug.part.0+0x90/0x90 [ 2865.919722] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2865.924826] __handle_mm_fault+0x2c8e/0x55a0 [ 2865.929227] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2865.934057] ? check_preemption_disabled+0x48/0x290 [ 2865.939060] ? handle_mm_fault+0x3cc/0xc80 [ 2865.943292] ? lock_downgrade+0x910/0x910 [ 2865.947427] ? kasan_check_read+0x11/0x20 [ 2865.951581] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2865.956875] ? rcu_read_unlock_special+0x380/0x380 [ 2865.961797] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2865.967332] ? check_preemption_disabled+0x48/0x290 [ 2865.972371] handle_mm_fault+0x4ec/0xc80 [ 2865.976440] ? __handle_mm_fault+0x55a0/0x55a0 [ 2865.981033] __do_page_fault+0x5da/0xd60 [ 2865.985114] do_page_fault+0xe6/0x7d8 [ 2865.988904] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2865.993822] ? vmalloc_sync_all+0x30/0x30 [ 2865.997957] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2866.003396] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2866.008325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2866.013882] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2866.018900] ? page_fault+0x8/0x30 [ 2866.022454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2866.027286] ? page_fault+0x8/0x30 [ 2866.030816] page_fault+0x1e/0x30 [ 2866.034262] RIP: 0033:0x42f226 [ 2866.037457] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2866.056344] RSP: 002b:00007ffe03026eb0 EFLAGS: 00010206 [ 2866.061692] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2866.068948] RDX: 0000000002546930 RSI: 000000000254e970 RDI: 0000000000000003 [ 2866.076205] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002545940 [ 2866.083460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2866.090734] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2866.100050] memory: usage 868kB, limit 0kB, failcnt 433663 [ 2866.105689] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2866.112540] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2866.118685] Memory cgroup stats for /syz3: cache:12KB rss:0KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2866.138551] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor3,pid=22372,uid=0 [ 2866.153218] Memory cgroup out of memory: Kill process 22372 (syz-executor3) score 8757000 or sacrifice child [ 2866.163625] Killed process 22372 (syz-executor3) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2866.175226] oom_reaper: reaped process 22372 (syz-executor3), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB 18:12:21 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0x0, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:21 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0x0, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:21 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:21 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, 0x0, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:21 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0x0, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2866.621913] IPVS: ftp: loaded support on port[0] = 21 18:12:21 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x0, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:21 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') [ 2866.868209] IPVS: ftp: loaded support on port[0] = 21 18:12:21 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x0, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') [ 2867.037822] chnl_net:caif_netlink_parms(): no params data found [ 2867.095402] IPVS: ftp: loaded support on port[0] = 21 [ 2867.104439] IPVS: ftp: loaded support on port[0] = 21 [ 2867.224753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2867.231644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2867.239442] device bridge_slave_0 entered promiscuous mode [ 2867.275297] bridge0: port 2(bridge_slave_1) entered blocking state [ 2867.282845] bridge0: port 2(bridge_slave_1) entered disabled state [ 2867.297881] device bridge_slave_1 entered promiscuous mode [ 2867.338719] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2867.440370] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2867.594123] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2867.602232] team0: Port device team_slave_0 added [ 2867.608541] chnl_net:caif_netlink_parms(): no params data found [ 2867.632476] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2867.641370] team0: Port device team_slave_1 added [ 2867.671545] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2867.678798] chnl_net:caif_netlink_parms(): no params data found [ 2867.738229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2867.877456] chnl_net:caif_netlink_parms(): no params data found [ 2867.962535] device hsr_slave_0 entered promiscuous mode [ 2867.999399] device hsr_slave_1 entered promiscuous mode [ 2868.056449] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2868.098179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2868.106139] bridge0: port 1(bridge_slave_0) entered blocking state [ 2868.114559] bridge0: port 1(bridge_slave_0) entered disabled state [ 2868.127770] device bridge_slave_0 entered promiscuous mode [ 2868.146558] bridge0: port 1(bridge_slave_0) entered blocking state [ 2868.153918] bridge0: port 1(bridge_slave_0) entered disabled state [ 2868.161958] device bridge_slave_0 entered promiscuous mode [ 2868.185357] bridge0: port 2(bridge_slave_1) entered blocking state [ 2868.192600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2868.200819] device bridge_slave_1 entered promiscuous mode [ 2868.207409] bridge0: port 2(bridge_slave_1) entered blocking state [ 2868.214012] bridge0: port 2(bridge_slave_1) entered disabled state [ 2868.222344] device bridge_slave_1 entered promiscuous mode [ 2868.288708] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2868.297525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2868.310354] bridge0: port 1(bridge_slave_0) entered disabled state [ 2868.318031] device bridge_slave_0 entered promiscuous mode [ 2868.340778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2868.354965] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2868.376113] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2868.396571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2868.403970] bridge0: port 2(bridge_slave_1) entered disabled state [ 2868.421970] device bridge_slave_1 entered promiscuous mode [ 2868.441726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2868.506971] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2868.526865] team0: Port device team_slave_0 added [ 2868.564062] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2868.582786] team0: Port device team_slave_1 added [ 2868.588373] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2868.596423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2868.605243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2868.614018] team0: Port device team_slave_0 added [ 2868.627093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2868.638013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2868.662285] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2868.669970] team0: Port device team_slave_1 added [ 2868.732588] device hsr_slave_0 entered promiscuous mode [ 2868.769416] device hsr_slave_1 entered promiscuous mode [ 2868.829846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2868.855736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2868.863514] team0: Port device team_slave_0 added [ 2868.869549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2868.877132] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2868.889803] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2868.897393] team0: Port device team_slave_1 added [ 2868.903007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2868.945605] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2869.022868] device hsr_slave_0 entered promiscuous mode [ 2869.059468] device hsr_slave_1 entered promiscuous mode [ 2869.106003] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2869.117746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2869.124976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2869.142271] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2869.154479] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2869.169078] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2869.223888] device hsr_slave_0 entered promiscuous mode [ 2869.279533] device hsr_slave_1 entered promiscuous mode [ 2869.331825] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2869.380796] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2869.389097] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2869.402114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2869.409572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2869.420249] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2869.431616] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2869.437714] 8021q: adding VLAN 0 to HW filter on device team0 [ 2869.477399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2869.487733] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2869.498751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2869.507501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2869.515359] bridge0: port 1(bridge_slave_0) entered blocking state [ 2869.521762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2869.529292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2869.541035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2869.584901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2869.594055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2869.602061] bridge0: port 2(bridge_slave_1) entered blocking state [ 2869.608419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2869.617743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2869.631779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2869.642481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2869.651199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2869.695798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2869.716225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2869.726181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2869.735316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2869.778107] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2869.788407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2869.796121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2869.804771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2869.813859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2869.827978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2869.867521] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2869.881134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2869.889028] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2869.901458] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2869.908590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2869.916034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2869.923620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2869.930834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2869.940551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2869.949790] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2869.955873] 8021q: adding VLAN 0 to HW filter on device team0 [ 2869.970465] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2869.977769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2869.985888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2869.997504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2870.007924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2870.040285] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2870.046377] 8021q: adding VLAN 0 to HW filter on device team0 [ 2870.055050] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2870.062331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2870.069583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2870.076474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2870.084411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2870.092207] bridge0: port 1(bridge_slave_0) entered blocking state [ 2870.098559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2870.106487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2870.114199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2870.125466] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2870.132057] 8021q: adding VLAN 0 to HW filter on device team0 [ 2870.142796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2870.154010] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2870.160878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2870.168761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2870.176495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2870.185489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2870.193306] bridge0: port 1(bridge_slave_0) entered blocking state [ 2870.199724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2870.208731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2870.219899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2870.230808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2870.256578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2870.267476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2870.275624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2870.285063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2870.291489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2870.298544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2870.307213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2870.314976] bridge0: port 1(bridge_slave_0) entered blocking state [ 2870.321371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2870.328177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2870.336449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2870.344421] bridge0: port 2(bridge_slave_1) entered blocking state [ 2870.350883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2870.360843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2870.370165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2870.383417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2870.391451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2870.398758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2870.407385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2870.415210] bridge0: port 2(bridge_slave_1) entered blocking state [ 2870.421607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2870.429725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2870.437507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2870.450961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2870.479856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2870.491340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2870.499993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2870.510624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2870.519025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2870.525909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2870.534095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2870.542558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2870.552915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2870.560857] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2870.569814] device bridge_slave_1 left promiscuous mode [ 2870.575330] bridge0: port 2(bridge_slave_1) entered disabled state [ 2870.639710] device bridge_slave_0 left promiscuous mode [ 2870.645133] bridge0: port 1(bridge_slave_0) entered disabled state [ 2870.691304] device bridge_slave_1 left promiscuous mode [ 2870.696797] bridge0: port 2(bridge_slave_1) entered disabled state [ 2870.760021] device bridge_slave_0 left promiscuous mode [ 2870.765503] bridge0: port 1(bridge_slave_0) entered disabled state [ 2870.801086] device bridge_slave_1 left promiscuous mode [ 2870.806576] bridge0: port 2(bridge_slave_1) entered disabled state [ 2870.860625] device bridge_slave_0 left promiscuous mode [ 2870.866130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2870.910864] device bridge_slave_1 left promiscuous mode [ 2870.916283] bridge0: port 2(bridge_slave_1) entered disabled state [ 2870.970045] device bridge_slave_0 left promiscuous mode [ 2870.975493] bridge0: port 1(bridge_slave_0) entered disabled state [ 2871.271824] device hsr_slave_1 left promiscuous mode [ 2871.323258] device hsr_slave_0 left promiscuous mode [ 2871.383732] team0 (unregistering): Port device team_slave_1 removed [ 2871.399988] team0 (unregistering): Port device team_slave_0 removed [ 2871.411283] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2871.464507] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2871.566587] bond0 (unregistering): Released all slaves [ 2871.733448] device hsr_slave_1 left promiscuous mode [ 2871.803358] device hsr_slave_0 left promiscuous mode [ 2871.865199] team0 (unregistering): Port device team_slave_1 removed [ 2871.881089] team0 (unregistering): Port device team_slave_0 removed [ 2871.893099] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2871.964841] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2872.055806] bond0 (unregistering): Released all slaves [ 2872.232761] device hsr_slave_1 left promiscuous mode [ 2872.285151] device hsr_slave_0 left promiscuous mode [ 2872.315688] team0 (unregistering): Port device team_slave_1 removed [ 2872.328796] team0 (unregistering): Port device team_slave_0 removed [ 2872.341780] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2872.364879] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2872.467519] bond0 (unregistering): Released all slaves [ 2872.643113] device hsr_slave_1 left promiscuous mode [ 2872.705730] device hsr_slave_0 left promiscuous mode [ 2872.764710] team0 (unregistering): Port device team_slave_1 removed [ 2872.776307] team0 (unregistering): Port device team_slave_0 removed [ 2872.787944] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2872.855400] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2872.952605] bond0 (unregistering): Released all slaves [ 2873.062113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2873.071046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2873.082872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2873.092795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2873.101639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2873.109799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2873.118282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2873.126705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2873.134872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2873.143783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2873.152007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2873.160840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2873.168126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2873.177589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2873.187326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2873.204015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2873.213612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2873.222157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2873.230327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2873.238334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2873.249921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2873.259808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2873.269841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2873.279607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2873.290113] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2873.298730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2873.306899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2873.315859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2873.323663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2873.331447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2873.338960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2873.346533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2873.356087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2873.373653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2873.394074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2873.411337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2873.422788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2873.431425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2873.440746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2873.451811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2873.466888] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2873.472667] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2873.477300] CPU: 1 PID: 22456 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2873.489628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2873.493648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2873.498985] Call Trace: [ 2873.499009] dump_stack+0x1db/0x2d0 [ 2873.499027] ? dump_stack_print_info.cold+0x20/0x20 [ 2873.499057] dump_header+0x1e6/0x116c [ 2873.499074] ? add_lock_to_list.isra.0+0x450/0x450 [ 2873.499093] ? print_usage_bug+0xd0/0xd0 [ 2873.499112] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2873.499128] ? ___ratelimit+0x37c/0x686 [ 2873.499161] ? mark_held_locks+0xb1/0x100 [ 2873.499181] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2873.499195] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2873.499209] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2873.499226] ? trace_hardirqs_on+0xbd/0x310 [ 2873.499240] ? kasan_check_read+0x11/0x20 [ 2873.499254] ? ___ratelimit+0x37c/0x686 [ 2873.499268] ? trace_hardirqs_off_caller+0x300/0x300 [ 2873.499281] ? do_raw_spin_trylock+0x270/0x270 [ 2873.499295] ? trace_hardirqs_on_caller+0x310/0x310 [ 2873.499307] ? lock_acquire+0x1db/0x570 [ 2873.499328] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2873.499345] ? ___ratelimit+0xac/0x686 [ 2873.499363] ? idr_get_free+0xee0/0xee0 [ 2873.499379] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2873.499404] oom_kill_process.cold+0x10/0x9d4 [ 2873.499423] ? cgroup_procs_next+0x70/0x70 [ 2873.499443] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2873.499458] ? oom_badness+0xa50/0xa50 [ 2873.499478] ? oom_evaluate_task+0x540/0x540 [ 2873.499496] ? mem_cgroup_iter_break+0x30/0x30 [ 2873.499509] ? mutex_trylock+0x2d0/0x2d0 [ 2873.499536] ? cgroup_file_notify+0x217/0x2e0 [ 2873.521329] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2873.525910] out_of_memory+0x885/0x1420 [ 2873.556329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2873.557758] ? mark_held_locks+0xb1/0x100 [ 2873.575292] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2873.575309] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2873.575330] ? oom_killer_disable+0x340/0x340 [ 2873.619614] ? preempt_schedule+0x4b/0x60 [ 2873.619630] ? ___preempt_schedule+0x16/0x18 [ 2873.619666] mem_cgroup_out_of_memory+0x160/0x210 [ 2873.619685] ? memcg_memory_event+0x40/0x40 [ 2873.619716] memory_max_write+0x1b0/0x3e0 [ 2873.619730] ? lock_acquire+0x1db/0x570 [ 2873.619748] ? mem_cgroup_write+0x440/0x440 [ 2873.619759] ? lock_release+0xc40/0xc40 [ 2873.619777] ? add_lock_to_list.isra.0+0x450/0x450 [ 2873.619792] ? lock_downgrade+0x910/0x910 [ 2873.619827] cgroup_file_write+0x252/0x830 [ 2873.619858] ? mem_cgroup_write+0x440/0x440 [ 2873.619873] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2873.619900] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2873.619917] kernfs_fop_write+0x2ba/0x480 [ 2873.619939] __vfs_write+0x116/0xb40 [ 2873.619956] ? check_preemption_disabled+0x48/0x290 [ 2873.619972] ? kernfs_fop_open+0x1030/0x1030 [ 2873.619988] ? kernel_read+0x120/0x120 [ 2873.620004] ? __lock_is_held+0xb6/0x140 [ 2873.620031] ? rcu_read_lock_sched_held+0x110/0x130 [ 2873.620046] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2873.620059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2873.620072] ? __sb_start_write+0x1ac/0x360 [ 2873.620089] vfs_write+0x20c/0x580 [ 2873.620111] ksys_write+0x105/0x260 [ 2873.620130] ? __ia32_sys_read+0xb0/0xb0 [ 2873.620162] ? trace_hardirqs_off_caller+0x300/0x300 [ 2873.620177] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2873.620193] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2873.620213] __x64_sys_write+0x73/0xb0 [ 2873.620231] do_syscall_64+0x1a3/0x800 [ 2873.620251] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2873.620269] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2873.620284] ? __switch_to_asm+0x34/0x70 [ 2873.620305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2873.620328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2873.620341] RIP: 0033:0x458099 [ 2873.620357] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2873.620365] RSP: 002b:00007fe547c7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2873.620380] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2873.620388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2873.620400] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.628699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe547c7b6d4 [ 2873.628709] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2873.650350] memory: usage 3284kB, limit 0kB, failcnt 1653269 [ 2873.659724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2873.689167] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2873.708279] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2873.735615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2873.789054] Memory cgroup stats for /syz0: cache:24KB rss:2076KB rss_huge:2048KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2873.844407] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22454,uid=0 [ 2873.881266] Memory cgroup out of memory: Kill process 22454 (syz-executor0) score 9270000 or sacrifice child [ 2873.900745] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2873.937218] Killed process 22454 (syz-executor0) total-vm:72584kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 2873.962390] oom_reaper: reaped process 22454 (syz-executor0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 2873.984737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2873.991384] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2874.035965] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2874.047394] CPU: 1 PID: 22458 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2874.054516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2874.063895] Call Trace: [ 2874.066494] dump_stack+0x1db/0x2d0 [ 2874.070150] ? dump_stack_print_info.cold+0x20/0x20 [ 2874.075205] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2874.079969] dump_header+0x1e6/0x116c [ 2874.083804] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2874.088578] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2874.093171] ? retint_kernel+0x2d/0x2d [ 2874.097090] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2874.102051] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2874.106979] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2874.112434] ? ___ratelimit+0x37c/0x686 [ 2874.116439] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2874.121225] ? retint_kernel+0x2d/0x2d [ 2874.125118] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2874.130231] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2874.135348] ? ___ratelimit+0xac/0x686 [ 2874.139293] ? idr_get_free+0xee0/0xee0 [ 2874.143295] oom_kill_process.cold+0x10/0x9d4 [ 2874.147805] ? cgroup_procs_next+0x70/0x70 [ 2874.152055] ? _raw_spin_unlock_irq+0x54/0x90 [ 2874.156549] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2874.161045] ? oom_badness+0xa50/0xa50 [ 2874.164933] ? oom_evaluate_task+0x540/0x540 [ 2874.169341] ? mem_cgroup_iter_break+0x30/0x30 [ 2874.173946] ? out_of_memory+0x1bf/0x1420 [ 2874.178093] out_of_memory+0x885/0x1420 [ 2874.182080] ? oom_killer_disable+0x340/0x340 [ 2874.186599] mem_cgroup_out_of_memory+0x160/0x210 [ 2874.191458] ? memcg_memory_event+0x40/0x40 [ 2874.195793] ? strim+0x171/0x1d0 [ 2874.199183] memory_max_write+0x1b0/0x3e0 [ 2874.203341] ? lock_acquire+0x1db/0x570 [ 2874.207326] ? mem_cgroup_write+0x440/0x440 [ 2874.211664] ? lock_release+0xc40/0xc40 [ 2874.215648] ? add_lock_to_list.isra.0+0x450/0x450 [ 2874.220590] ? lock_downgrade+0x910/0x910 [ 2874.224750] cgroup_file_write+0x252/0x830 [ 2874.228992] ? mem_cgroup_write+0x440/0x440 [ 2874.233327] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2874.238260] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2874.243186] kernfs_fop_write+0x2ba/0x480 [ 2874.247336] __vfs_write+0x116/0xb40 [ 2874.251050] ? check_preemption_disabled+0x48/0x290 [ 2874.256080] ? kernfs_fop_open+0x1030/0x1030 [ 2874.260503] ? kernel_read+0x120/0x120 [ 2874.264408] ? __lock_is_held+0xb6/0x140 [ 2874.268482] ? rcu_read_lock_sched_held+0x110/0x130 [ 2874.273510] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2874.278262] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2874.283795] ? __sb_start_write+0x1ac/0x360 [ 2874.288123] vfs_write+0x20c/0x580 [ 2874.291699] ksys_write+0x105/0x260 [ 2874.295345] ? __ia32_sys_read+0xb0/0xb0 [ 2874.299426] __x64_sys_write+0x73/0xb0 [ 2874.303321] ? do_syscall_64+0xbc/0x800 [ 2874.307306] do_syscall_64+0x1a3/0x800 [ 2874.311205] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2874.316206] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2874.321231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2874.326081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2874.331284] RIP: 0033:0x458099 [ 2874.334491] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2874.353396] RSP: 002b:00007faf79b8bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2874.361110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2874.368386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2874.375656] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2874.382929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf79b8c6d4 [ 2874.390212] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2874.414575] memory: usage 3320kB, limit 0kB, failcnt 312514 [ 2874.430034] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2874.440434] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2874.447322] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 18:12:29 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2874.461303] Memory cgroup stats for /syz5: cache:148KB rss:2080KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2152KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2874.465689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2874.489467] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22457,uid=0 [ 2874.513929] Memory cgroup out of memory: Kill process 22457 (syz-executor5) score 9269000 or sacrifice child [ 2874.526380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2874.531801] Killed process 22457 (syz-executor5) total-vm:72584kB, anon-rss:2132kB, file-rss:34816kB, shmem-rss:0kB [ 2874.567026] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2874.568327] oom_reaper: reaped process 22457 (syz-executor5), now anon-rss:0kB, file-rss:34720kB, shmem-rss:0kB [ 2874.587094] CPU: 0 PID: 22428 Comm: syz-executor0 Not tainted 5.0.0-rc2+ #6 [ 2874.594227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2874.603583] Call Trace: [ 2874.606193] dump_stack+0x1db/0x2d0 [ 2874.609829] ? dump_stack_print_info.cold+0x20/0x20 [ 2874.614862] dump_header+0x1e6/0x116c [ 2874.618676] ? add_lock_to_list.isra.0+0x450/0x450 [ 2874.623648] ? print_usage_bug+0xd0/0xd0 [ 2874.627734] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2874.632698] ? ___ratelimit+0x37c/0x686 [ 2874.636688] ? mark_held_locks+0xb1/0x100 [ 2874.640845] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2874.645960] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2874.651073] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2874.655702] ? trace_hardirqs_on+0xbd/0x310 [ 2874.660058] ? kasan_check_read+0x11/0x20 [ 2874.664219] ? ___ratelimit+0x37c/0x686 [ 2874.668208] ? trace_hardirqs_off_caller+0x300/0x300 [ 2874.673319] ? do_raw_spin_trylock+0x270/0x270 [ 2874.677907] ? trace_hardirqs_on_caller+0x310/0x310 [ 2874.682925] ? lock_acquire+0x1db/0x570 [ 2874.686916] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2874.692047] ? ___ratelimit+0xac/0x686 [ 2874.695956] ? idr_get_free+0xee0/0xee0 [ 2874.699967] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2874.704586] oom_kill_process.cold+0x10/0x9d4 [ 2874.709092] ? cgroup_procs_next+0x70/0x70 [ 2874.713340] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2874.717843] ? oom_badness+0xa50/0xa50 [ 2874.721761] ? oom_evaluate_task+0x540/0x540 [ 2874.726208] ? mem_cgroup_iter_break+0x30/0x30 [ 2874.730794] ? mutex_trylock+0x2d0/0x2d0 [ 2874.734861] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2874.740419] ? rcu_read_unlock_special+0x380/0x380 [ 2874.745365] out_of_memory+0x885/0x1420 [ 2874.749351] ? mem_cgroup_iter+0x508/0xf30 [ 2874.753597] ? oom_killer_disable+0x340/0x340 [ 2874.758106] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2874.763246] ? lock_acquire+0x1db/0x570 [ 2874.767258] mem_cgroup_out_of_memory+0x160/0x210 [ 2874.772108] ? do_raw_spin_unlock+0xa0/0x330 [ 2874.776572] ? memcg_memory_event+0x40/0x40 [ 2874.780918] ? do_raw_spin_trylock+0x270/0x270 [ 2874.785516] ? _raw_spin_unlock+0x2d/0x50 [ 2874.789674] try_charge+0x12a9/0x19b0 [ 2874.793484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2874.799033] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2874.799052] ? rcu_read_unlock_special+0x380/0x380 [ 2874.799076] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2874.808842] ? get_mem_cgroup_from_page+0x190/0x190 [ 2874.808865] ? rcu_read_lock_sched_held+0x110/0x130 [ 2874.808885] mem_cgroup_try_charge+0x43a/0xdb0 [ 2874.808906] ? mem_cgroup_protected+0xa10/0xa10 [ 2874.808928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2874.838522] ? print_usage_bug+0xd0/0xd0 [ 2874.842582] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2874.848104] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2874.853630] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2874.858549] wp_page_copy+0x45a/0x1c30 [ 2874.862422] ? swp_swapcount+0x540/0x540 [ 2874.866510] ? pmd_pfn+0x1d0/0x1d0 [ 2874.870068] ? find_held_lock+0x35/0x120 [ 2874.874122] ? do_wp_page+0x70d/0x16b0 [ 2874.878010] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2874.883537] ? kasan_check_read+0x11/0x20 [ 2874.887670] ? do_raw_spin_unlock+0xa0/0x330 [ 2874.892097] ? do_raw_spin_trylock+0x270/0x270 [ 2874.896690] ? __lock_acquire+0x572/0x4a30 [ 2874.900938] do_wp_page+0x715/0x16b0 [ 2874.904664] ? finish_mkwrite_fault+0x540/0x540 [ 2874.909320] ? kasan_check_read+0x11/0x20 [ 2874.913461] ? do_raw_spin_lock+0x156/0x360 [ 2874.917772] ? rwlock_bug.part.0+0x90/0x90 [ 2874.921993] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2874.927103] __handle_mm_fault+0x2c8e/0x55a0 [ 2874.931541] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2874.936383] ? check_preemption_disabled+0x48/0x290 [ 2874.941387] ? handle_mm_fault+0x3cc/0xc80 [ 2874.945631] ? lock_downgrade+0x910/0x910 [ 2874.949792] ? kasan_check_read+0x11/0x20 [ 2874.953953] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2874.959238] ? rcu_read_unlock_special+0x380/0x380 [ 2874.964171] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2874.969697] ? check_preemption_disabled+0x48/0x290 [ 2874.974701] handle_mm_fault+0x4ec/0xc80 [ 2874.978758] ? __handle_mm_fault+0x55a0/0x55a0 [ 2874.983326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2874.988855] ? vmacache_update+0x114/0x140 [ 2874.993105] __do_page_fault+0x5da/0xd60 [ 2874.997186] do_page_fault+0xe6/0x7d8 [ 2875.000975] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2875.005912] ? vmalloc_sync_all+0x30/0x30 [ 2875.010073] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2875.015515] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2875.020438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2875.026027] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2875.031042] ? page_fault+0x8/0x30 [ 2875.034569] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2875.039402] ? page_fault+0x8/0x30 [ 2875.042934] page_fault+0x1e/0x30 [ 2875.046379] RIP: 0033:0x42f226 [ 2875.049578] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2875.068496] RSP: 002b:00007ffdaca30c70 EFLAGS: 00010206 [ 2875.073874] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2875.081170] RDX: 0000000001e3a930 RSI: 0000000001e42970 RDI: 0000000000000003 [ 2875.088438] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001e39940 [ 2875.095690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2875.102960] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2875.127095] memory: usage 920kB, limit 0kB, failcnt 1653277 [ 2875.132915] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2875.140648] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2875.146803] Memory cgroup stats for /syz0: cache:24KB rss:0KB rss_huge:0KB shmem:96KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2875.167584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor0,pid=22428,uid=0 [ 2875.182225] Memory cgroup out of memory: Kill process 22428 (syz-executor0) score 8756000 or sacrifice child [ 2875.182282] Killed process 22428 (syz-executor0) total-vm:72320kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB [ 2875.182518] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2875.182535] CPU: 0 PID: 22437 Comm: syz-executor5 Not tainted 5.0.0-rc2+ #6 [ 2875.182543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2875.182548] Call Trace: [ 2875.182564] dump_stack+0x1db/0x2d0 [ 2875.182581] ? dump_stack_print_info.cold+0x20/0x20 [ 2875.193271] oom_reaper: reaped process 22428 (syz-executor0), now anon-rss:0kB, file-rss:34000kB, shmem-rss:0kB [ 2875.203004] dump_header+0x1e6/0x116c [ 2875.203021] ? add_lock_to_list.isra.0+0x450/0x450 [ 2875.203038] ? print_usage_bug+0xd0/0xd0 [ 2875.203055] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2875.229374] ? ___ratelimit+0x37c/0x686 [ 2875.229397] ? mark_held_locks+0xb1/0x100 [ 2875.229415] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2875.229430] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2875.229446] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2875.229461] ? trace_hardirqs_on+0xbd/0x310 [ 2875.229475] ? kasan_check_read+0x11/0x20 [ 2875.229491] ? ___ratelimit+0x37c/0x686 [ 2875.235683] ? trace_hardirqs_off_caller+0x300/0x300 [ 2875.235698] ? do_raw_spin_trylock+0x270/0x270 [ 2875.235714] ? trace_hardirqs_on_caller+0x310/0x310 [ 2875.235728] ? lock_acquire+0x1db/0x570 [ 2875.235750] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2875.235766] ? ___ratelimit+0xac/0x686 [ 2875.250985] ? idr_get_free+0xee0/0xee0 [ 2875.251001] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2875.251026] oom_kill_process.cold+0x10/0x9d4 [ 2875.251045] ? cgroup_procs_next+0x70/0x70 [ 2875.251064] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2875.251078] ? oom_badness+0xa50/0xa50 [ 2875.251097] ? oom_evaluate_task+0x540/0x540 [ 2875.259819] ? mem_cgroup_iter_break+0x30/0x30 [ 2875.259833] ? mutex_trylock+0x2d0/0x2d0 [ 2875.259848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2875.259877] ? rcu_read_unlock_special+0x380/0x380 [ 2875.259902] out_of_memory+0x885/0x1420 [ 2875.259918] ? mem_cgroup_iter+0x508/0xf30 [ 2875.259938] ? oom_killer_disable+0x340/0x340 [ 2875.268910] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2875.268926] ? lock_acquire+0x1db/0x570 [ 2875.268953] mem_cgroup_out_of_memory+0x160/0x210 [ 2875.268967] ? do_raw_spin_unlock+0xa0/0x330 [ 2875.269002] ? memcg_memory_event+0x40/0x40 [ 2875.269016] ? do_raw_spin_trylock+0x270/0x270 [ 2875.269040] ? _raw_spin_unlock+0x2d/0x50 [ 2875.277157] try_charge+0x12a9/0x19b0 [ 2875.277176] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2875.277199] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2875.277217] ? rcu_read_unlock_special+0x380/0x380 [ 2875.277241] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2875.287424] ? get_mem_cgroup_from_page+0x190/0x190 [ 2875.287448] ? rcu_read_lock_sched_held+0x110/0x130 [ 2875.287468] mem_cgroup_try_charge+0x43a/0xdb0 [ 2875.287489] ? mem_cgroup_protected+0xa10/0xa10 [ 2875.287511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2875.296422] ? print_usage_bug+0xd0/0xd0 [ 2875.296441] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2875.296455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2875.296478] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2875.296511] wp_page_copy+0x45a/0x1c30 [ 2875.304624] ? swp_swapcount+0x540/0x540 [ 2875.304650] ? pmd_pfn+0x1d0/0x1d0 [ 2875.304663] ? find_held_lock+0x35/0x120 [ 2875.304679] ? do_wp_page+0x70d/0x16b0 [ 2875.304696] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2875.304717] ? kasan_check_read+0x11/0x20 [ 2875.314406] ? do_raw_spin_unlock+0xa0/0x330 [ 2875.314424] ? do_raw_spin_trylock+0x270/0x270 [ 2875.314441] ? __lock_acquire+0x572/0x4a30 [ 2875.314464] do_wp_page+0x715/0x16b0 [ 2875.314484] ? finish_mkwrite_fault+0x540/0x540 [ 2875.323458] ? kasan_check_read+0x11/0x20 [ 2875.323475] ? do_raw_spin_lock+0x156/0x360 [ 2875.323493] ? rwlock_bug.part.0+0x90/0x90 [ 2875.323511] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2875.323535] __handle_mm_fault+0x2c8e/0x55a0 [ 2875.332553] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2875.332569] ? check_preemption_disabled+0x48/0x290 [ 2875.332586] ? handle_mm_fault+0x3cc/0xc80 [ 2875.332617] ? lock_downgrade+0x910/0x910 [ 2875.332630] ? kasan_check_read+0x11/0x20 [ 2875.332645] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2875.332666] ? rcu_read_unlock_special+0x380/0x380 [ 2875.341235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2875.349938] ? check_preemption_disabled+0x48/0x290 [ 2875.349961] handle_mm_fault+0x4ec/0xc80 [ 2875.349980] ? __handle_mm_fault+0x55a0/0x55a0 [ 2875.349993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2875.350006] ? vmacache_update+0x114/0x140 [ 2875.350031] __do_page_fault+0x5da/0xd60 [ 2875.350055] do_page_fault+0xe6/0x7d8 [ 2875.358458] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2875.358478] ? vmalloc_sync_all+0x30/0x30 [ 2875.358492] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2875.358510] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2875.358524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2875.358541] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2875.367509] ? page_fault+0x8/0x30 [ 2875.367528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2875.367548] ? page_fault+0x8/0x30 [ 2875.367564] page_fault+0x1e/0x30 [ 2875.367580] RIP: 0033:0x42f226 [ 2875.377183] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2875.377192] RSP: 002b:00007fffe76d7370 EFLAGS: 00010206 [ 2875.377203] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2875.377212] RDX: 0000000001a79930 RSI: 0000000001a81970 RDI: 0000000000000003 [ 2875.377221] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a78940 [ 2875.377229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2875.377238] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2875.393583] memory: usage 956kB, limit 0kB, failcnt 312526 [ 2875.414503] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2875.423328] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2875.437043] Memory cgroup stats for /syz5: cache:148KB rss:32KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2875.447072] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=22437,uid=0 [ 2875.457758] Memory cgroup out of memory: Kill process 22437 (syz-executor5) score 8755000 or sacrifice child [ 2875.477899] Killed process 22437 (syz-executor5) total-vm:72320kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB [ 2875.826208] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2875.854440] CPU: 0 PID: 22469 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2875.861586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2875.870939] Call Trace: [ 2875.873517] dump_stack+0x1db/0x2d0 [ 2875.877131] ? dump_stack_print_info.cold+0x20/0x20 [ 2875.882179] dump_header+0x1e6/0x116c [ 2875.885971] ? add_lock_to_list.isra.0+0x450/0x450 [ 2875.890890] ? print_usage_bug+0xd0/0xd0 [ 2875.894937] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2875.899854] ? ___ratelimit+0x37c/0x686 [ 2875.903832] ? mark_held_locks+0xb1/0x100 [ 2875.907985] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2875.913073] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2875.918168] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2875.922739] ? trace_hardirqs_on+0xbd/0x310 [ 2875.927062] ? kasan_check_read+0x11/0x20 [ 2875.931226] ? ___ratelimit+0x37c/0x686 [ 2875.935199] ? trace_hardirqs_off_caller+0x300/0x300 [ 2875.940301] ? do_raw_spin_trylock+0x270/0x270 [ 2875.944868] ? trace_hardirqs_on_caller+0x310/0x310 [ 2875.949869] ? lock_acquire+0x1db/0x570 [ 2875.953851] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2875.958942] ? ___ratelimit+0xac/0x686 [ 2875.962817] ? idr_get_free+0xee0/0xee0 [ 2875.966775] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2875.971351] oom_kill_process.cold+0x10/0x9d4 [ 2875.975837] ? cgroup_procs_next+0x70/0x70 [ 2875.980063] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2875.984542] ? oom_badness+0xa50/0xa50 [ 2875.988418] ? oom_evaluate_task+0x540/0x540 [ 2875.992813] ? mem_cgroup_iter_break+0x30/0x30 [ 2875.997396] ? mutex_trylock+0x2d0/0x2d0 [ 2876.001450] ? cgroup_file_notify+0x217/0x2e0 [ 2876.005933] out_of_memory+0x885/0x1420 [ 2876.009899] ? oom_killer_disable+0x340/0x340 [ 2876.014383] ? preempt_schedule+0x4b/0x60 [ 2876.018534] ? ___preempt_schedule+0x16/0x18 [ 2876.022934] mem_cgroup_out_of_memory+0x160/0x210 [ 2876.027764] ? memcg_memory_event+0x40/0x40 [ 2876.032095] memory_max_write+0x1b0/0x3e0 [ 2876.036227] ? lock_acquire+0x1db/0x570 [ 2876.040191] ? mem_cgroup_write+0x440/0x440 [ 2876.044497] ? lock_release+0xc40/0xc40 [ 2876.048457] ? add_lock_to_list.isra.0+0x450/0x450 [ 2876.053370] ? lock_downgrade+0x910/0x910 [ 2876.057519] cgroup_file_write+0x252/0x830 [ 2876.061742] ? mem_cgroup_write+0x440/0x440 [ 2876.066047] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2876.070981] ? cgroup_migrate_add_task+0xcb0/0xcb0 [ 2876.075895] kernfs_fop_write+0x2ba/0x480 [ 2876.080033] __vfs_write+0x116/0xb40 [ 2876.083733] ? check_preemption_disabled+0x48/0x290 [ 2876.088737] ? kernfs_fop_open+0x1030/0x1030 [ 2876.093132] ? kernel_read+0x120/0x120 [ 2876.097016] ? __lock_is_held+0xb6/0x140 [ 2876.101071] ? rcu_read_lock_sched_held+0x110/0x130 [ 2876.106076] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2876.110821] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.116360] ? __sb_start_write+0x1ac/0x360 [ 2876.120679] vfs_write+0x20c/0x580 [ 2876.124217] ksys_write+0x105/0x260 [ 2876.127839] ? __ia32_sys_read+0xb0/0xb0 [ 2876.131908] __x64_sys_write+0x73/0xb0 [ 2876.135789] ? do_syscall_64+0xbc/0x800 [ 2876.139756] do_syscall_64+0x1a3/0x800 [ 2876.143644] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2876.148564] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2876.153574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2876.158413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2876.163591] RIP: 0033:0x458099 [ 2876.166771] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2876.185677] RSP: 002b:00007f2586252c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2876.193377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2876.200630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2876.207884] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2876.215135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25862536d4 [ 2876.222413] R13: 00000000004c73ca R14: 00000000004dccd0 R15: 00000000ffffffff [ 2876.232304] memory: usage 3176kB, limit 0kB, failcnt 1132472 [ 2876.238162] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2876.263196] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2876.286095] Memory cgroup stats for /syz2: cache:4KB rss:2152KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2876.315032] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=22468,uid=0 [ 2876.341781] Memory cgroup out of memory: Kill process 22468 (syz-executor2) score 9270000 or sacrifice child [ 2876.352281] Killed process 22469 (syz-executor2) total-vm:72452kB, anon-rss:2176kB, file-rss:35676kB, shmem-rss:0kB 18:12:31 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x573}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x0, 0x0}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:31 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x0, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') 18:12:31 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x2d0}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) 18:12:31 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000940)={0x0, 0x70, 0x100000000, 0x9, 0x0, 0x4, 0x0, 0x17, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x400, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x84, 0x6, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x40, 0x5, 0xffffffffffffffaf, 0x3, 0x0, 0x90, 0x3ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffe0f) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='\x04p\xb6.{\x06\x11\xe4\xb7\x98U\v\xa6tat\x00', 0x0, 0x0) socketpair(0x9, 0x17, 0x6, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r1, r2, 0x0, 0x1f, &(0x7f0000000500)='nodev&systemvmnet1em0-\'#em0/]\xd7\x00'}, 0xfffffffffffffcbe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x14, &(0x7f0000000280)='lo\x00\x96\x00\x01\x00\x00Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r'}, 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, 0x0, 0x289, &(0x7f00000009c0)=""/230, 0xe6, 0x10000}, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000040)=r6) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x80, @mcast1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x4001) r7 = gettid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'vy\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\xea\x00', 0x8003}) socketpair(0x9, 0x0, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x10, r3, 0x800004) recvmsg$kcm(r0, 0x0, 0x2002) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000cc0)={r0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000580)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x94e, 0x1ff, 0x1, 0x0, 0x46, 0x0, 0x0, 0x4000, 0x1b957c4a, 0x0, 0x8, 0x0, 0x400, 0x100, 0x0, 0x1, 0x7, 0x5, 0x0, 0x8, 0x0, 0x22700000000000, 0x7ff, 0x0, 0xdabc, 0x0, 0x80000000000000, 0x0, 0x8, 0x0, 0x80000001, 0x8, 0x0, 0x9, 0xce0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1000, 0x0, 0x400, 0x0, 0x1000, 0x0, 0x7}, r7, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0x0, 0x3, 0x0, 0x3, 0x4, 0x2, 0x7fffffff, 0x7, 0x80000001, 0x1000, 0x100000001, 0x0, 0x9, 0xfffffffffffffc78, 0x5, 0xe6, 0xb7, 0x5, 0x800, 0x80, 0x87a, 0x8, 0x9, 0x1, 0x7, 0x8000, 0x7, 0x7ff800000000, 0x5, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x400, 0x1, @perf_config_ext, 0x0, 0x4, 0xf, 0x1, 0x1, 0x7, 0x7}, 0x0, 0xd, r5, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\xfa\xab^`<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 18:12:31 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x5, 0x7e, &(0x7f0000000240)=""/126, 0x3}, 0x48) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="00d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x277}], 0x1}, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000400000027d9446ebd9ddffe12e66000000161c00000000004c92df1d00"]) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0xc, &(0x7f00000002c0)='cgroup.type\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r0, 0x0, 0x9, &(0x7f0000000200)='./cgroup\x00'}, 0x30) write$cgroup_int(r3, 0x0, 0x0) [ 2876.364036] oom_reaper: reaped process 22464 (syz-executor3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 2876.386349] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2876.409558] ------------[ cut here ]------------ [ 2876.416764] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 2876.418404] CPU: 0 PID: 22441 Comm: syz-executor2 Not tainted 5.0.0-rc2+ #6 [ 2876.427158] WARNING: CPU: 1 PID: 21 at lib/debugobjects.c:325 debug_print_object+0x16a/0x250 [ 2876.433918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2876.442479] Kernel panic - not syncing: panic_on_warn set ... [ 2876.451832] Call Trace: [ 2876.460313] dump_stack+0x1db/0x2d0 [ 2876.463943] ? dump_stack_print_info.cold+0x20/0x20 [ 2876.468968] dump_header+0x1e6/0x116c [ 2876.472769] ? add_lock_to_list.isra.0+0x450/0x450 [ 2876.477710] ? print_usage_bug+0xd0/0xd0 [ 2876.481778] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2876.486705] ? ___ratelimit+0x37c/0x686 [ 2876.490685] ? mark_held_locks+0xb1/0x100 [ 2876.494842] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2876.499947] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2876.505051] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2876.509633] ? trace_hardirqs_on+0xbd/0x310 [ 2876.513974] ? kasan_check_read+0x11/0x20 [ 2876.518121] ? ___ratelimit+0x37c/0x686 [ 2876.522109] ? trace_hardirqs_off_caller+0x300/0x300 [ 2876.527227] ? do_raw_spin_trylock+0x270/0x270 [ 2876.531807] ? trace_hardirqs_on_caller+0x310/0x310 [ 2876.536821] ? lock_acquire+0x1db/0x570 [ 2876.540805] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2876.545927] ? ___ratelimit+0xac/0x686 [ 2876.549815] ? idr_get_free+0xee0/0xee0 [ 2876.553791] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2876.558382] oom_kill_process.cold+0x10/0x9d4 [ 2876.562878] ? cgroup_procs_next+0x70/0x70 [ 2876.567117] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2876.571647] ? oom_badness+0xa50/0xa50 [ 2876.575536] ? oom_evaluate_task+0x540/0x540 [ 2876.579945] ? mem_cgroup_iter_break+0x30/0x30 [ 2876.584522] ? mutex_trylock+0x2d0/0x2d0 [ 2876.588585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.594130] ? rcu_read_unlock_special+0x380/0x380 [ 2876.599108] out_of_memory+0x885/0x1420 [ 2876.603078] ? mem_cgroup_iter+0x508/0xf30 [ 2876.607327] ? oom_killer_disable+0x340/0x340 [ 2876.611825] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2876.616930] ? lock_acquire+0x1db/0x570 [ 2876.620910] mem_cgroup_out_of_memory+0x160/0x210 [ 2876.625752] ? do_raw_spin_unlock+0xa0/0x330 [ 2876.630168] ? memcg_memory_event+0x40/0x40 [ 2876.634488] ? do_raw_spin_trylock+0x270/0x270 [ 2876.639091] ? _raw_spin_unlock+0x2d/0x50 [ 2876.643252] try_charge+0x12a9/0x19b0 [ 2876.647065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.652710] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2876.657549] ? rcu_read_unlock_special+0x380/0x380 [ 2876.662484] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2876.667327] ? get_mem_cgroup_from_page+0x190/0x190 [ 2876.672347] ? rcu_read_lock_sched_held+0x110/0x130 [ 2876.677365] mem_cgroup_try_charge+0x43a/0xdb0 [ 2876.681949] ? mem_cgroup_protected+0xa10/0xa10 [ 2876.686634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.692198] ? print_usage_bug+0xd0/0xd0 [ 2876.696315] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2876.701848] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2876.707392] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2876.712342] wp_page_copy+0x45a/0x1c30 [ 2876.716227] ? swp_swapcount+0x540/0x540 [ 2876.720297] ? pmd_pfn+0x1d0/0x1d0 [ 2876.723834] ? find_held_lock+0x35/0x120 [ 2876.727895] ? do_wp_page+0x70d/0x16b0 [ 2876.731781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2876.737336] ? kasan_check_read+0x11/0x20 [ 2876.741481] ? do_raw_spin_unlock+0xa0/0x330 [ 2876.745905] ? do_raw_spin_trylock+0x270/0x270 [ 2876.750487] ? __lock_acquire+0x572/0x4a30 [ 2876.754741] do_wp_page+0x715/0x16b0 [ 2876.758472] ? finish_mkwrite_fault+0x540/0x540 [ 2876.763167] ? kasan_check_read+0x11/0x20 [ 2876.767318] ? do_raw_spin_lock+0x156/0x360 [ 2876.771638] ? rwlock_bug.part.0+0x90/0x90 [ 2876.775869] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2876.780985] __handle_mm_fault+0x2c8e/0x55a0 [ 2876.785402] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2876.790273] ? check_preemption_disabled+0x48/0x290 [ 2876.795301] ? handle_mm_fault+0x3cc/0xc80 [ 2876.799544] ? lock_downgrade+0x910/0x910 [ 2876.803693] ? kasan_check_read+0x11/0x20 [ 2876.807840] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2876.813116] ? rcu_read_unlock_special+0x380/0x380 [ 2876.818061] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2876.823605] ? check_preemption_disabled+0x48/0x290 [ 2876.828683] handle_mm_fault+0x4ec/0xc80 [ 2876.832745] ? __handle_mm_fault+0x55a0/0x55a0 [ 2876.837327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.842866] ? vmacache_update+0x114/0x140 [ 2876.847118] __do_page_fault+0x5da/0xd60 [ 2876.851198] do_page_fault+0xe6/0x7d8 [ 2876.854995] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2876.859927] ? vmalloc_sync_all+0x30/0x30 [ 2876.864076] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2876.869527] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2876.874494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.880032] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2876.885066] ? page_fault+0x8/0x30 [ 2876.888610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2876.893456] ? page_fault+0x8/0x30 [ 2876.897009] page_fault+0x1e/0x30 [ 2876.900471] RIP: 0033:0x42f226 [ 2876.903664] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 06 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 3c 5d 62 00 85 c0 0f 84 [ 2876.922563] RSP: 002b:00007fff5f5a5100 EFLAGS: 00010206 [ 2876.927925] RAX: 0000000000019691 RBX: 0000000000710640 RCX: 0000000000008041 [ 2876.935190] RDX: 0000000002a44930 RSI: 0000000002a4c970 RDI: 0000000000000003 [ 2876.942455] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002a43940 [ 2876.949747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000710698 [ 2876.957013] R13: 0000000000710698 R14: 0000000000000000 R15: 0000000000002710 [ 2876.964311] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.0.0-rc2+ #6 [ 2876.971061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2876.980442] Workqueue: netns cleanup_net [ 2876.984546] Call Trace: [ 2876.987132] dump_stack+0x1db/0x2d0 [ 2876.990769] ? dump_stack_print_info.cold+0x20/0x20 [ 2876.995789] ? debug_print_object+0xb0/0x250 [ 2877.000207] panic+0x2cb/0x65c [ 2877.003399] ? add_taint.cold+0x16/0x16 [ 2877.007385] ? debug_print_object+0x16a/0x250 [ 2877.011875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2877.017408] ? __probe_kernel_read+0x1f4/0x250 [ 2877.021987] ? __warn.cold+0x5/0x48 [ 2877.025613] ? __warn+0xe8/0x1d0 [ 2877.028981] ? debug_print_object+0x16a/0x250 [ 2877.033480] __warn.cold+0x20/0x48 [ 2877.037024] ? debug_print_object+0x16a/0x250 [ 2877.041515] report_bug+0x263/0x2b0 [ 2877.045166] do_error_trap+0x11b/0x200 [ 2877.049060] do_invalid_op+0x37/0x50 [ 2877.052773] ? debug_print_object+0x16a/0x250 [ 2877.057268] invalid_op+0x14/0x20 [ 2877.060722] RIP: 0010:debug_print_object+0x16a/0x250 [ 2877.065820] Code: dd 20 c0 81 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 20 c0 81 88 48 c7 c7 c0 b5 81 88 e8 f6 50 ba fd <0f> 0b 83 05 d1 e2 ca 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 2877.084900] RSP: 0018:ffff8880a95bf270 EFLAGS: 00010086 [ 2877.090256] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2877.097520] RDX: 0000000000000000 RSI: ffffffff81685456 RDI: 0000000000000005 [ 2877.104794] RBP: ffff8880a95bf2b0 R08: ffff8880a95b4580 R09: ffffed1015ce3ef9 [ 2877.112057] R10: ffffed1015ce3ef8 R11: ffff8880ae71f7c7 R12: 0000000000000001 [ 2877.119320] R13: ffffffff899ad9e0 R14: ffffffff816ea710 R15: dffffc0000000000 [ 2877.126595] ? __internal_add_timer+0x2f0/0x2f0 [ 2877.131327] ? vprintk_func+0x86/0x189 [ 2877.135227] debug_check_no_obj_freed+0x39d/0x588 [ 2877.140077] ? free_obj_work+0x890/0x890 [ 2877.144152] kfree+0xbd/0x230 [ 2877.147278] kvfree+0x61/0x70 [ 2877.150384] netdev_freemem+0x4c/0x60 [ 2877.154202] netdev_release+0x119/0x180 [ 2877.158191] ? xps_cpus_store+0x2b0/0x2b0 [ 2877.162342] ? xps_cpus_store+0x2b0/0x2b0 [ 2877.166489] device_release+0x7d/0x210 [ 2877.170856] kobject_put.cold+0x28f/0x2ec [ 2877.175009] netdev_run_todo+0x704/0xae0 [ 2877.179084] ? rtnl_is_locked+0xb8/0xf0 [ 2877.183068] ? batadv_get_drvinfo+0xf1/0x140 [ 2877.187480] ? register_netdev+0x50/0x50 [ 2877.191565] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2877.197127] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2877.202706] ? unregister_netdevice_many.part.0+0x2e6/0x470 [ 2877.208452] ? br_dev_delete+0x145/0x1a0 [ 2877.213043] rtnl_unlock+0xe/0x10 [ 2877.216499] default_device_exit_batch+0x4d3/0x5f0 [ 2877.221433] ? unregister_netdevice_many+0x120/0x120 [ 2877.226540] ? rtnl_unlock+0xe/0x10 [ 2877.230175] ? __init_waitqueue_head+0x150/0x150 [ 2877.234932] ? dev_change_net_namespace+0xdc0/0xdc0 [ 2877.239963] ? rtnl_unlock+0xe/0x10 [ 2877.243607] ? unregister_netdevice_many+0x120/0x120 [ 2877.248717] ? dev_change_net_namespace+0xdc0/0xdc0 [ 2877.253736] ops_exit_list.isra.0+0x105/0x160 [ 2877.258235] cleanup_net+0x51d/0xb10 [ 2877.261948] ? find_held_lock+0x35/0x120 [ 2877.266012] ? netns_install+0x1d0/0x1d0 [ 2877.270104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2877.275642] ? check_preemption_disabled+0x48/0x290 [ 2877.280707] ? __lock_is_held+0xb6/0x140 [ 2877.284776] process_one_work+0xd0c/0x1ce0 [ 2877.289013] ? preempt_notifier_register+0x200/0x200 [ 2877.294132] ? __switch_to_asm+0x34/0x70 [ 2877.298244] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 2877.302919] ? __schedule+0x89f/0x1e60 [ 2877.306809] ? pci_mmcfg_check_reserved+0x170/0x170 [ 2877.311823] ? pci_mmcfg_check_reserved+0x170/0x170 [ 2877.316839] ? worker_thread+0x3b7/0x14a0 [ 2877.320994] ? find_held_lock+0x35/0x120 [ 2877.325069] ? lock_acquire+0x1db/0x570 [ 2877.329040] ? worker_thread+0x3cd/0x14a0 [ 2877.333191] ? kasan_check_read+0x11/0x20 [ 2877.337339] ? do_raw_spin_lock+0x156/0x360 [ 2877.341663] ? lock_release+0xc40/0xc40 [ 2877.345641] ? rwlock_bug.part.0+0x90/0x90 [ 2877.349899] ? trace_hardirqs_on_caller+0x310/0x310 [ 2877.354925] worker_thread+0x143/0x14a0 [ 2877.358907] ? process_one_work+0x1ce0/0x1ce0 [ 2877.363401] ? __kthread_parkme+0xc3/0x1b0 [ 2877.367638] ? lock_acquire+0x1db/0x570 [ 2877.371639] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2877.376773] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2877.381358] ? trace_hardirqs_on+0xbd/0x310 [ 2877.385679] ? __kthread_parkme+0xc3/0x1b0 [ 2877.389917] ? trace_hardirqs_off_caller+0x300/0x300 [ 2877.395019] ? do_raw_spin_trylock+0x270/0x270 [ 2877.399611] ? schedule+0x108/0x350 [ 2877.403287] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2877.408393] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2877.413928] ? __kthread_parkme+0xfb/0x1b0 [ 2877.418181] kthread+0x357/0x430 [ 2877.421548] ? process_one_work+0x1ce0/0x1ce0 [ 2877.426038] ? kthread_stop+0x920/0x920 [ 2877.430039] ret_from_fork+0x3a/0x50 [ 2877.433754] [ 2877.433761] ====================================================== [ 2877.433766] WARNING: possible circular locking dependency detected [ 2877.433770] 5.0.0-rc2+ #6 Not tainted [ 2877.433776] ------------------------------------------------------ [ 2877.433781] kworker/u4:1/21 is trying to acquire lock: [ 2877.433785] 00000000ccb8e7fa ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 2877.433801] [ 2877.433805] but task is already holding lock: [ 2877.433808] 0000000063a3139e (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0x170/0x588 [ 2877.433824] [ 2877.433830] which lock already depends on the new lock. [ 2877.433832] [ 2877.433835] [ 2877.433840] the existing dependency chain (in reverse order) is: [ 2877.433843] [ 2877.433845] -> #3 (&obj_hash[i].lock){-.-.}: [ 2877.433875] _raw_spin_lock_irqsave+0x95/0xcd [ 2877.433880] __debug_object_init+0xf6/0x12d0 [ 2877.433884] debug_object_init+0x16/0x20 [ 2877.433888] hrtimer_init+0x97/0x480 [ 2877.433892] init_dl_task_timer+0x1b/0x50 [ 2877.433896] __sched_fork+0x2bf/0x5b0 [ 2877.433914] init_idle+0x75/0x670 [ 2877.433918] sched_init+0xb10/0xbe8 [ 2877.433922] start_kernel+0x442/0x8b7 [ 2877.433941] x86_64_start_reservations+0x29/0x2b [ 2877.433946] x86_64_start_kernel+0x77/0x7b [ 2877.433950] secondary_startup_64+0xa4/0xb0 [ 2877.433952] [ 2877.433955] -> #2 (&rq->lock){-.-.}: [ 2877.433969] _raw_spin_lock+0x2f/0x40 [ 2877.433973] task_fork_fair+0xb5/0x7a0 [ 2877.433977] sched_fork+0x437/0xb90 [ 2877.433981] copy_process+0x1f95/0x8710 [ 2877.433985] _do_fork+0x1a9/0x1170 [ 2877.433989] kernel_thread+0x34/0x40 [ 2877.433993] rest_init+0x28/0x37b [ 2877.433997] arch_call_rest_init+0xe/0x1b [ 2877.434001] start_kernel+0x87c/0x8b7 [ 2877.434005] x86_64_start_reservations+0x29/0x2b [ 2877.434010] x86_64_start_kernel+0x77/0x7b [ 2877.434014] secondary_startup_64+0xa4/0xb0 [ 2877.434017] [ 2877.434019] -> #1 (&p->pi_lock){-.-.}: [ 2877.434048] _raw_spin_lock_irqsave+0x95/0xcd [ 2877.434053] try_to_wake_up+0xb9/0x1480 [ 2877.434057] wake_up_process+0x10/0x20 [ 2877.434061] __up.isra.0+0x1c0/0x2a0 [ 2877.434065] up+0x13e/0x1c0 [ 2877.434069] __up_console_sem+0xb7/0x1c0 [ 2877.434073] console_unlock+0x778/0x11e0 [ 2877.434078] vprintk_emit+0x370/0x960 [ 2877.434082] vprintk_default+0x28/0x30 [ 2877.434086] vprintk_func+0x7e/0x189 [ 2877.434090] printk+0xba/0xed [ 2877.434094] do_exit.cold+0x57/0x16a [ 2877.434098] do_group_exit+0x177/0x430 [ 2877.434103] __x64_sys_exit_group+0x44/0x50 [ 2877.434107] do_syscall_64+0x1a3/0x800 [ 2877.434112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2877.434114] [ 2877.434117] -> #0 ((console_sem).lock){-.-.}: [ 2877.434132] lock_acquire+0x1db/0x570 [ 2877.434137] _raw_spin_lock_irqsave+0x95/0xcd [ 2877.434149] down_trylock+0x13/0x70 [ 2877.434154] __down_trylock_console_sem+0xa8/0x210 [ 2877.434158] console_trylock+0x15/0xa0 [ 2877.434162] vprintk_emit+0x351/0x960 [ 2877.434166] vprintk_default+0x28/0x30 [ 2877.434170] vprintk_func+0x7e/0x189 [ 2877.434174] printk+0xba/0xed [ 2877.434178] __warn_printk+0x9c/0x100 [ 2877.434183] debug_print_object+0x16a/0x250 [ 2877.434188] debug_check_no_obj_freed+0x39d/0x588 [ 2877.434192] kfree+0xbd/0x230 [ 2877.434196] kvfree+0x61/0x70 [ 2877.434200] netdev_freemem+0x4c/0x60 [ 2877.434204] netdev_release+0x119/0x180 [ 2877.434208] device_release+0x7d/0x210 [ 2877.434213] kobject_put.cold+0x28f/0x2ec [ 2877.434217] netdev_run_todo+0x704/0xae0 [ 2877.434221] rtnl_unlock+0xe/0x10 [ 2877.434226] default_device_exit_batch+0x4d3/0x5f0 [ 2877.434231] ops_exit_list.isra.0+0x105/0x160 [ 2877.434235] cleanup_net+0x51d/0xb10 [ 2877.434239] process_one_work+0xd0c/0x1ce0 [ 2877.434244] worker_thread+0x143/0x14a0 [ 2877.434248] kthread+0x357/0x430 [ 2877.434252] ret_from_fork+0x3a/0x50 [ 2877.434254] [ 2877.434259] other info that might help us debug this: [ 2877.434262] [ 2877.434265] Chain exists of: [ 2877.434267] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 2877.434286] [ 2877.434291] Possible unsafe locking scenario: [ 2877.434293] [ 2877.434298] CPU0 CPU1 [ 2877.434302] ---- ---- [ 2877.434305] lock(&obj_hash[i].lock); [ 2877.434315] lock(&rq->lock); [ 2877.434324] lock(&obj_hash[i].lock); [ 2877.434333] lock((console_sem).lock); [ 2877.434341] [ 2877.434345] *** DEADLOCK *** [ 2877.434347] [ 2877.434352] 4 locks held by kworker/u4:1/21: [ 2877.434354] #0: 000000009f2d61fe ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0xbc7/0x1ce0 [ 2877.434373] #1: 000000000116b8cd (net_cleanup_work){+.+.}, at: process_one_work+0xc1d/0x1ce0 [ 2877.434391] #2: 0000000020fc7ff6 (pernet_ops_rwsem){++++}, at: cleanup_net+0x126/0xb10 [ 2877.434408] #3: 0000000063a3139e (&obj_hash[i].lock){-.-.}, at: debug_check_no_obj_freed+0x170/0x588 [ 2877.434427] [ 2877.434430] stack backtrace: [ 2877.434436] CPU: 1 PID: 21 Comm: kworker/u4:1 Not tainted 5.0.0-rc2+ #6 [ 2877.434458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2877.434462] Workqueue: netns cleanup_net [ 2877.434468] Call Trace: [ 2877.434472] dump_stack+0x1db/0x2d0 [ 2877.434477] ? dump_stack_print_info.cold+0x20/0x20 [ 2877.434481] ? print_stack_trace+0x77/0xb0 [ 2877.434485] ? vprintk_func+0x86/0x189 [ 2877.434505] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 2877.434509] __lock_acquire+0x3014/0x4a30 [ 2877.434514] ? mark_held_locks+0x100/0x100 [ 2877.434519] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2877.434523] ? __lock_acquire+0x572/0x4a30 [ 2877.434528] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2877.434533] ? add_lock_to_list.isra.0+0x450/0x450 [ 2877.434538] ? pvclock_read_flags+0x160/0x160 [ 2877.434542] lock_acquire+0x1db/0x570 [ 2877.434546] ? down_trylock+0x13/0x70 [ 2877.434551] ? lock_release+0xc40/0xc40 [ 2877.434556] ? trace_hardirqs_on_caller+0x310/0x310 [ 2877.434560] ? trace_hardirqs_off+0xb8/0x310 [ 2877.434565] _raw_spin_lock_irqsave+0x95/0xcd [ 2877.434569] ? down_trylock+0x13/0x70 [ 2877.434573] ? vprintk_emit+0x351/0x960 [ 2877.434577] down_trylock+0x13/0x70 [ 2877.434581] ? vprintk_emit+0x351/0x960 [ 2877.434586] __down_trylock_console_sem+0xa8/0x210 [ 2877.434590] console_trylock+0x15/0xa0 [ 2877.434595] vprintk_emit+0x351/0x960 [ 2877.434599] ? wake_up_klogd+0x180/0x180 [ 2877.434604] ? add_lock_to_list.isra.0+0x450/0x450 [ 2877.434608] ? console_unlock+0x79e/0x11e0 [ 2877.434613] ? print_usage_bug+0xd0/0xd0 [ 2877.434617] ? __internal_add_timer+0x2f0/0x2f0 [ 2877.434621] vprintk_default+0x28/0x30 [ 2877.434626] vprintk_func+0x7e/0x189 [ 2877.434630] ? __free_object+0x16c/0x350 [ 2877.434634] printk+0xba/0xed [ 2877.434638] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 2877.434643] ? trace_hardirqs_off+0xb8/0x310 [ 2877.434647] ? kasan_check_read+0x11/0x20 [ 2877.434658] ? do_raw_spin_unlock+0xa0/0x330 [ 2877.434662] ? trace_hardirqs_on_caller+0x310/0x310 [ 2877.434667] ? __warn_printk+0x90/0x100 [ 2877.434671] ? work_on_cpu_safe+0x90/0x90 [ 2877.434675] __warn_printk+0x9c/0x100 [ 2877.434679] ? test_taint+0x20/0x20 [ 2877.434684] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2877.434689] ? __free_object+0x16c/0x350 [ 2877.434693] ? work_on_cpu_safe+0x90/0x90 [ 2877.434698] debug_print_object+0x16a/0x250 [ 2877.434702] debug_check_no_obj_freed+0x39d/0x588 [ 2877.434707] ? free_obj_work+0x890/0x890 [ 2877.434710] kfree+0xbd/0x230 [ 2877.434714] kvfree+0x61/0x70 [ 2877.434718] netdev_freemem+0x4c/0x60 [ 2877.434722] netdev_release+0x119/0x180 [ 2877.434727] ? xps_cpus_store+0x2b0/0x2b0 [ 2877.434731] ? xps_cpus_store+0x2b0/0x2b0 [ 2877.434735] device_release+0x7d/0x210 [ 2877.434740] kobject_put.cold+0x28f/0x2ec [ 2877.434744] netdev_run_todo+0x704/0xae0 [ 2877.434748] ? rtnl_is_locked+0xb8/0xf0 [ 2877.434753] ? batadv_get_drvinfo+0xf1/0x140 [ 2877.434757] ? register_netdev+0x50/0x50 [ 2877.434762] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2877.434767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2877.434773] ? unregister_netdevice_many.part.0+0x2e6/0x470 [ 2877.434777] ? br_dev_delete+0x145/0x1a0 [ 2877.434781] rtnl_unlock+0xe/0x10 [ 2877.434786] default_device_exit_batch+0x4d3/0x5f0 [ 2877.434791] ? unregister_netdevice_many+0x120/0x120 [ 2877.434795] ? rtnl_unlock+0xe/0x10 [ 2877.434800] ? __init_waitqueue_head+0x150/0x150 [ 2877.434804] ? dev_change_net_namespace+0xdc0/0xdc0 [ 2877.434808] ? rtnl_unlock+0xe/0x10 [ 2877.434813] ? unregister_netdevice_many+0x120/0x120 [ 2877.434818] ? dev_change_net_namespace+0xdc0/0xdc0 [ 2877.434823] ops_exit_list.isra.0+0x105/0x160 [ 2877.434827] cleanup_net+0x51d/0xb10 [ 2877.434831] ? find_held_lock+0x35/0x120 [ 2877.434835] ? netns_install+0x1d0/0x1d0 [ 2877.434841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2877.434845] ? check_preemption_disabled+0x48/0x290 [ 2877.434850] ? __lock_is_held+0xb6/0x140 [ 2877.434854] process_one_work+0xd0c/0x1ce0 [ 2877.434859] ? preempt_notifier_register+0x200/0x200 [ 2877.434863] ? __switch_to_asm+0x34/0x70 [ 2877.434868] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 2877.434872] ? __schedule+0x89f/0x1e60 [ 2877.434877] ? pci_mmcfg_check_reserved+0x170/0x170 [ 2877.434882] ? pci_mmcfg_check_reserved+0x170/0x170 [ 2877.434887] ? worker_thread+0x3b7/0x14a0 [ 2877.434891] ? find_held_lock+0x35/0x120 [ 2877.434895] ? lock_acquire+0x1db/0x570 [ 2877.434899] ? worker_thread+0x3cd/0x14a0 [ 2877.434904] ? kasan_check_read+0x11/0x20 [ 2877.434908] ? do_raw_spin_lock+0x156/0x360 [ 2877.434912] ? lock_release+0xc40/0xc40 [ 2877.434917] ? rwlock_bug.part.0+0x90/0x90 [ 2877.434922] ? trace_hardirqs_on_caller+0x310/0x310 [ 2877.434926] worker_thread+0x143/0x14a0 [ 2877.434931] ? process_one_work+0x1ce0/0x1ce0 [ 2877.434935] ? __kthread_parkme+0xc3/0x1b0 [ 2877.434939] ? lock_acquire+0x1db/0x570 [ 2877.434944] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2877.434949] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2877.434953] ? trace_hardirqs_on+0xbd/0x310 [ 2877.434958] ? __kthread_parkme+0xc3/0x1b0 [ 2877.434963] ? trace_hardirqs_off_caller+0x300/0x300 [ 2877.434967] ? do_raw_spin_trylock+0x270/0x270 [ 2877.434971] ? schedule+0x108/0x350 [ 2877.434976] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2877.434981] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2877.434986] ? __kthread_parkme+0xfb/0x1b0 [ 2877.434990] kthread+0x357/0x430 [ 2877.434994] ? process_one_work+0x1ce0/0x1ce0 [ 2877.434998] ? kthread_stop+0x920/0x920 [ 2877.435003] ret_from_fork+0x3a/0x50 [ 2877.436076] Kernel Offset: disabled [ 2878.452684] Rebooting in 86400 seconds..