0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2fdffff00000000fd0000f1850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x5, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xa, 0xc, 0xfffffffffffffffc, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0x8b, &(0x7f0000000140)=""/139, 0x41100, 0x8, '\x00', r1, 0x18, r2, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0x6, 0x6}, 0x10, 0x0, r3}, 0x80) (async) syz_clone(0x50142000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) (async) 03:11:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 520.120253][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 520.128655][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 520.137475][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 520.145282][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 520.153007][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.079319][T11479] chnl_net:caif_netlink_parms(): no params data found [ 521.589344][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.609745][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.651547][T11479] device bridge_slave_0 entered promiscuous mode [ 521.700928][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.713231][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.752444][T11479] device bridge_slave_1 entered promiscuous mode [ 521.902856][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.972735][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.219973][ T5114] Bluetooth: hci2: command 0x0409 tx timeout [ 522.235542][T11479] team0: Port device team_slave_0 added [ 522.263066][T11479] team0: Port device team_slave_1 added [ 522.460292][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.467472][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.550058][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.562897][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.569936][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.595895][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.723442][T11479] device hsr_slave_0 entered promiscuous mode [ 522.770174][T11479] device hsr_slave_1 entered promiscuous mode [ 522.789782][T11479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.797383][T11479] Cannot create hsr debugfs directory [ 524.036977][T11479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.068816][T11479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.111393][T11479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 524.150948][T11479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 524.299719][ T5114] Bluetooth: hci2: command 0x041b tx timeout [ 524.384772][T11479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.442496][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 524.458991][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.494532][T11479] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.530176][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.538993][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.583447][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.590648][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.648943][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.673064][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.690990][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.706712][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.713894][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.732530][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.748269][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.837445][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.851542][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.887778][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.913090][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.936464][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.968363][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.988072][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.013796][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.693856][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.710514][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.730376][T11479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.773729][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.807389][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.862172][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.871471][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.902642][T11479] device veth0_vlan entered promiscuous mode [ 525.923338][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.947781][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.983351][T11479] device veth1_vlan entered promiscuous mode [ 526.103634][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 526.252826][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.277796][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.302848][T11479] device veth0_macvtap entered promiscuous mode [ 526.333336][T11479] device veth1_macvtap entered promiscuous mode [ 526.380630][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 526.394956][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.417647][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.438624][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.458639][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.497707][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.524839][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.546043][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.575470][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.602424][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.642272][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.679135][T11479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.723459][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.756433][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.782361][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.795420][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.805413][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.821625][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.831553][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.843111][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.853027][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.864062][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.891096][T11479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.902258][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.946002][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.030977][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.120325][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.129274][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.330534][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.341943][T11479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.376782][T11479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.409599][T11479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.418347][T11479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.709237][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.726957][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.767750][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 527.803367][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.831132][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.883315][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 528.222046][T11550] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 528.250658][T11550] CPU: 0 PID: 11550 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 528.261145][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 528.271229][T11550] Call Trace: [ 528.274526][T11550] [ 528.277473][T11550] dump_stack_lvl+0xd1/0x138 [ 528.282101][T11550] dump_header+0x10b/0x85f [ 528.286562][T11550] oom_kill_process.cold+0x10/0x15 [ 528.291719][T11550] out_of_memory+0x35c/0x14a0 [ 528.296453][T11550] ? oom_killer_disable+0x280/0x280 [ 528.301705][T11550] mem_cgroup_out_of_memory+0x206/0x270 [ 528.307297][T11550] ? mem_cgroup_margin+0x130/0x130 [ 528.312470][T11550] memory_max_write+0x2f9/0x3c0 [ 528.317360][T11550] ? mem_cgroup_force_empty_write+0x160/0x160 [ 528.323472][T11550] ? lock_release+0x810/0x810 [ 528.328181][T11550] cgroup_file_write+0x1e2/0x770 [ 528.333153][T11550] ? mem_cgroup_force_empty_write+0x160/0x160 [ 528.339249][T11550] ? kill_css+0x370/0x370 [ 528.343608][T11550] ? __virt_addr_valid+0x61/0x2e0 [ 528.348680][T11550] ? kill_css+0x370/0x370 [ 528.353041][T11550] kernfs_fop_write_iter+0x3f1/0x600 [ 528.358373][T11550] vfs_write+0x9ed/0xdd0 [ 528.362661][T11550] ? kernel_write+0x630/0x630 [ 528.367376][T11550] ? __fget_files+0x26a/0x440 [ 528.372111][T11550] ksys_write+0x12b/0x250 [ 528.376470][T11550] ? __ia32_sys_read+0xb0/0xb0 [ 528.381264][T11550] ? syscall_enter_from_user_mode+0x26/0xb0 [ 528.387193][T11550] do_syscall_64+0x39/0xb0 [ 528.391644][T11550] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 528.397564][T11550] RIP: 0033:0x7f0b2688c0c9 [ 528.402001][T11550] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 528.421638][T11550] RSP: 002b:00007f0b27602168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 528.430079][T11550] RAX: ffffffffffffffda RBX: 00007f0b269abf80 RCX: 00007f0b2688c0c9 [ 528.438075][T11550] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 528.446068][T11550] RBP: 00007f0b268e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 528.454067][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.462060][T11550] R13: 00007fff5045ba9f R14: 00007f0b27602300 R15: 0000000000022000 [ 528.470099][T11550] [ 528.483363][ T5114] Bluetooth: hci2: command 0x0419 tx timeout [ 528.545936][T11550] memory: usage 608kB, limit 0kB, failcnt 218 [ 528.559723][T11550] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 528.577794][T11550] Memory cgroup stats for /syz2: [ 528.578790][T11550] anon 110592 [ 528.578790][T11550] file 225280 [ 528.578790][T11550] kernel 270336 [ 528.578790][T11550] kernel_stack 65536 [ 528.578790][T11550] pagetables 81920 [ 528.578790][T11550] sec_pagetables 0 [ 528.578790][T11550] percpu 64 [ 528.578790][T11550] sock 0 [ 528.578790][T11550] vmalloc 0 [ 528.578790][T11550] shmem 221184 [ 528.578790][T11550] zswap 0 [ 528.578790][T11550] zswapped 0 [ 528.578790][T11550] file_mapped 221184 [ 528.578790][T11550] file_dirty 0 [ 528.578790][T11550] file_writeback 0 [ 528.578790][T11550] swapcached 0 [ 528.578790][T11550] anon_thp 0 [ 528.578790][T11550] file_thp 0 [ 528.578790][T11550] shmem_thp 0 [ 528.578790][T11550] inactive_anon 131072 [ 528.578790][T11550] active_anon 200704 [ 528.578790][T11550] inactive_file 0 [ 528.578790][T11550] active_file 4096 [ 528.578790][T11550] unevictable 0 [ 528.578790][T11550] slab_reclaimable 17528 [ 528.578790][T11550] slab_unreclaimable 74400 [ 528.578790][T11550] slab 91928 [ 528.824925][T11550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11549,uid=0 [ 528.845550][T11550] Memory cgroup out of memory: Killed process 11550 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 03:11:32 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0x6c77, 0xd304, 0xc, 0xffffffffffffffff, 0xffff8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2fdffff00000000fd0000f1850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x5, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xa, 0xc, 0xfffffffffffffffc, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0x8b, &(0x7f0000000140)=""/139, 0x41100, 0x8, '\x00', r1, 0x18, r2, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0x6, 0x6}, 0x10, 0x0, r3}, 0x80) syz_clone(0x50142000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0x6c77, 0xd304, 0xc, 0xffffffffffffffff, 0xffff8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2fdffff00000000fd0000f1850000002a000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x5, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xa, 0xc, 0xfffffffffffffffc, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x10001, 0x8b, &(0x7f0000000140)=""/139, 0x41100, 0x8, '\x00', r1, 0x18, r2, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0x6, 0x6}, 0x10, 0x0, r3}, 0x80) (async) syz_clone(0x50142000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) (async) 03:11:32 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='devlink_trap_report\x00'}, 0x10) (async, rerun: 64) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x58, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @fwd={0x7fff}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x61, 0x2e, 0x2e, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000300)=""/19, 0x4b, 0x13}, 0x20) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000068b98178e3cc48b63a630000df21abcc7ec27b8921065e1810202695cb975556888efba5398e2d"], &(0x7f0000000480)='GPL\x00', 0x0, 0x32, &(0x7f00000004c0)=""/50, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r0, r4, r0]}, 0x80) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x401, 0x9, 0x200, r4, 0x8001, '\x00', 0x0, r4, 0x1, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0x6, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffc00}, @alu={0x3, 0x0, 0x9, 0x3, 0x2, 0x4, 0x10}], &(0x7f0000000240)='GPL\x00', 0x3f, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x28, r6, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x0, 0x2}, 0x10, 0x0, r7, 0x0, &(0x7f00000006c0)=[r8]}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0) (async) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x9, 0x0, 0xb75, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a1b73ce, 0x0, @perf_bp={&(0x7f0000000780), 0x1}, 0x0, 0x6, 0x5, 0x0, 0x7, 0x1f, 0x7f, 0x0, 0x80, 0x0, 0x200}, 0xffffffffffffffff, 0xa, r5, 0x9) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) 03:11:32 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x212002, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x7) 03:11:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:11:32 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:11:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 535.914955][T11479] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 535.949743][T11479] CPU: 0 PID: 11479 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 535.960321][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 535.970409][T11479] Call Trace: [ 535.973709][T11479] [ 535.976666][T11479] dump_stack_lvl+0xd1/0x138 [ 535.981300][T11479] dump_header+0x10b/0x85f [ 535.985763][T11479] oom_kill_process.cold+0x10/0x15 [ 535.990919][T11479] out_of_memory+0x35c/0x14a0 [ 535.995656][T11479] ? find_held_lock+0x2d/0x110 [ 536.000459][T11479] ? oom_killer_disable+0x280/0x280 [ 536.005704][T11479] ? find_held_lock+0x2d/0x110 [ 536.010512][T11479] mem_cgroup_out_of_memory+0x206/0x270 [ 536.016105][T11479] ? mem_cgroup_margin+0x130/0x130 [ 536.021262][T11479] ? lock_downgrade+0x6e0/0x6e0 [ 536.026161][T11479] try_charge_memcg+0xefb/0x12f0 [ 536.031142][T11479] ? mem_cgroup_handle_over_high+0x520/0x520 [ 536.037160][T11479] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 536.042926][T11479] ? lock_downgrade+0x6e0/0x6e0 [ 536.047810][T11479] ? lock_downgrade+0x6e0/0x6e0 [ 536.052697][T11479] ? rcu_read_unlock+0x9/0x60 [ 536.057418][T11479] obj_cgroup_charge+0x2af/0x5e0 [ 536.062393][T11479] ? copy_process+0x3aa/0x7520 [ 536.067191][T11479] kmem_cache_alloc_node+0xb7/0x460 [ 536.072433][T11479] copy_process+0x3aa/0x7520 [ 536.077059][T11479] ? _raw_spin_unlock+0x28/0x40 [ 536.081939][T11479] ? wp_page_reuse+0x197/0x570 [ 536.086743][T11479] ? do_wp_page+0x844/0x3370 [ 536.091379][T11479] ? __cleanup_sighand+0xb0/0xb0 [ 536.096343][T11479] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 536.101757][T11479] ? rwlock_bug.part.0+0x90/0x90 [ 536.106734][T11479] ? lock_chain_count+0x20/0x20 [ 536.111619][T11479] kernel_clone+0xeb/0x990 [ 536.116073][T11479] ? create_io_thread+0xf0/0xf0 [ 536.120962][T11479] ? find_held_lock+0x2d/0x110 [ 536.125777][T11479] __do_sys_clone+0xba/0x100 [ 536.130408][T11479] ? kernel_clone+0x990/0x990 [ 536.135139][T11479] ? syscall_enter_from_user_mode+0x26/0xb0 [ 536.141077][T11479] do_syscall_64+0x39/0xb0 [ 536.145531][T11479] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 536.151455][T11479] RIP: 0033:0x7f0b26889dfb [ 536.155893][T11479] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 536.175532][T11479] RSP: 002b:00007fff5045bce0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 536.183983][T11479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0b26889dfb [ 536.191986][T11479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 536.199988][T11479] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555563b2400 [ 536.207989][T11479] R10: 00005555563b26d0 R11: 0000000000000246 R12: 0000000000000001 [ 536.215988][T11479] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff5045bdc0 [ 536.224013][T11479] 03:11:33 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x212002, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x20000000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x212002, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x7) (async) 03:11:33 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='devlink_trap_report\x00'}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x58, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @fwd={0x7fff}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x61, 0x2e, 0x2e, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000300)=""/19, 0x4b, 0x13}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000068b98178e3cc48b63a630000df21abcc7ec27b8921065e1810202695cb975556888efba5398e2d"], &(0x7f0000000480)='GPL\x00', 0x0, 0x32, &(0x7f00000004c0)=""/50, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r0, r4, r0]}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x401, 0x9, 0x200, r4, 0x8001, '\x00', 0x0, r4, 0x1, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0x6, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffc00}, @alu={0x3, 0x0, 0x9, 0x3, 0x2, 0x4, 0x10}], &(0x7f0000000240)='GPL\x00', 0x3f, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x28, r6, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x0, 0x2}, 0x10, 0x0, r7, 0x0, &(0x7f00000006c0)=[r8]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x9, 0x0, 0xb75, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a1b73ce, 0x0, @perf_bp={&(0x7f0000000780), 0x1}, 0x0, 0x6, 0x5, 0x0, 0x7, 0x1f, 0x7f, 0x0, 0x80, 0x0, 0x200}, 0xffffffffffffffff, 0xa, r5, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='devlink_trap_report\x00'}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x58, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @fwd={0x7fff}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x61, 0x2e, 0x2e, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000300)=""/19, 0x4b, 0x13}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000000068b98178e3cc48b63a630000df21abcc7ec27b8921065e1810202695cb975556888efba5398e2d"], &(0x7f0000000480)='GPL\x00', 0x0, 0x32, &(0x7f00000004c0)=""/50, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, r0, r4, r0]}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x401, 0x9, 0x200, r4, 0x8001, '\x00', 0x0, r4, 0x1, 0x0, 0x2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0x6, &(0x7f0000000200)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffc00}, @alu={0x3, 0x0, 0x9, 0x3, 0x2, 0x4, 0x10}], &(0x7f0000000240)='GPL\x00', 0x3f, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x28, r6, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x0, 0x2}, 0x10, 0x0, r7, 0x0, &(0x7f00000006c0)=[r8]}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0) (async) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x9, 0x0, 0xb75, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3a1b73ce, 0x0, @perf_bp={&(0x7f0000000780), 0x1}, 0x0, 0x6, 0x5, 0x0, 0x7, 0x1f, 0x7f, 0x0, 0x80, 0x0, 0x200}, 0xffffffffffffffff, 0xa, r5, 0x9) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) [ 536.419231][T11479] memory: usage 316kB, limit 0kB, failcnt 237 [ 536.432845][T11479] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 536.447800][T11479] Memory cgroup stats for /syz2: [ 536.448015][T11479] anon 40960 [ 536.448015][T11479] file 225280 [ 536.448015][T11479] kernel 57344 [ 536.448015][T11479] kernel_stack 0 [ 536.448015][T11479] pagetables 8192 [ 536.448015][T11479] sec_pagetables 0 [ 536.448015][T11479] percpu 0 [ 536.448015][T11479] sock 0 [ 536.448015][T11479] vmalloc 0 [ 536.448015][T11479] shmem 221184 [ 536.448015][T11479] zswap 0 [ 536.448015][T11479] zswapped 0 [ 536.448015][T11479] file_mapped 221184 [ 536.448015][T11479] file_dirty 0 [ 536.448015][T11479] file_writeback 0 [ 536.448015][T11479] swapcached 0 [ 536.448015][T11479] anon_thp 0 [ 536.448015][T11479] file_thp 0 [ 536.448015][T11479] shmem_thp 0 [ 536.448015][T11479] inactive_anon 61440 [ 536.448015][T11479] active_anon 200704 [ 536.448015][T11479] inactive_file 0 [ 536.448015][T11479] active_file 4096 [ 536.448015][T11479] unevictable 0 [ 536.448015][T11479] slab_reclaimable 7704 [ 536.448015][T11479] slab_unreclaimable 32296 [ 536.448015][T11479] slab 40000 [ 536.563692][T11479] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11479,uid=0 [ 536.580016][T11479] Memory cgroup out of memory: Killed process 11479 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 536.609060][T11663] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 536.629839][T11663] CPU: 1 PID: 11663 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 536.640321][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 536.650416][T11663] Call Trace: [ 536.653728][T11663] [ 536.656688][T11663] dump_stack_lvl+0xd1/0x138 [ 536.661334][T11663] dump_header+0x10b/0x85f [ 536.665805][T11663] oom_kill_process.cold+0x10/0x15 [ 536.670971][T11663] out_of_memory+0x35c/0x14a0 [ 536.675711][T11663] ? lockdep_hardirqs_on+0x7d/0x100 [ 536.680959][T11663] ? oom_killer_disable+0x280/0x280 [ 536.686225][T11663] mem_cgroup_out_of_memory+0x206/0x270 [ 536.691823][T11663] ? mem_cgroup_margin+0x130/0x130 [ 536.697002][T11663] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 536.702871][T11663] memory_max_write+0x2f9/0x3c0 [ 536.707798][T11663] ? mem_cgroup_force_empty_write+0x160/0x160 [ 536.713913][T11663] ? lock_release+0x810/0x810 [ 536.718636][T11663] cgroup_file_write+0x1e2/0x770 [ 536.723632][T11663] ? mem_cgroup_force_empty_write+0x160/0x160 [ 536.730090][T11663] ? kill_css+0x370/0x370 [ 536.734477][T11663] ? kill_css+0x370/0x370 [ 536.738853][T11663] kernfs_fop_write_iter+0x3f1/0x600 [ 536.744196][T11663] vfs_write+0x9ed/0xdd0 [ 536.748481][T11663] ? kernel_write+0x630/0x630 [ 536.753196][T11663] ? __fget_files+0x26a/0x440 [ 536.757935][T11663] ksys_write+0x12b/0x250 [ 536.762312][T11663] ? __ia32_sys_read+0xb0/0xb0 [ 536.767114][T11663] ? syscall_enter_from_user_mode+0x26/0xb0 [ 536.773065][T11663] do_syscall_64+0x39/0xb0 [ 536.777535][T11663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 536.783467][T11663] RIP: 0033:0x7f3e14e8c0c9 [ 536.787910][T11663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 536.807556][T11663] RSP: 002b:00007f3e15c88168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.816010][T11663] RAX: ffffffffffffffda RBX: 00007f3e14fabf80 RCX: 00007f3e14e8c0c9 [ 536.824019][T11663] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 536.832028][T11663] RBP: 00007f3e14ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 536.840037][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.848044][T11663] R13: 00007ffc0ec5834f R14: 00007f3e15c88300 R15: 0000000000022000 [ 536.856074][T11663] 03:11:33 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x212002, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x20000000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x212002, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x7) (async) 03:11:33 executing program 4: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.freeze\x00', 0x0, 0x0) socketpair(0x8, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={0xffffffffffffffff, r1}) write$cgroup_subtree(r1, &(0x7f0000000300)={[{0x2b, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'cpuacct'}, {0x2d, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'blkio'}, {0x2b, 'rdma'}, {0xabd66085d436c221, 'net_prio'}, {0x2b, 'net_prio'}]}, 0x4b) bpf$LINK_DETACH(0x22, &(0x7f00000011c0)=r1, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={r1}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0, r1}) syz_clone(0x60007100, &(0x7f0000000640), 0x0, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000200)="757f9720dfa81113c368a0bc033c4a4085437fb0cccaf6490d76c41be29f48ceda89c00489fec642c417e7c0f1d77cb0f99cc576fdc40829405f9e966eb926b21b8b8a521f6561e4d012317733a2870fa8c1f8d058199ed44bbf829454dde67af2f1967e80ff832a006ad77cc6f951099e168d366db125ac1feda83684f9b97b7acb358b095ba3d5f9033298b99c8dc3dcd9a194a7b9119e3cee1bf910400822aff8eeb12d5f9cd67ee8967c6090c2da03fc0a225d59e4c131e889fb05c2d94823f56d8760a78a6c44ee03") socketpair(0x23, 0x2, 0x3, &(0x7f0000000100)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x84000, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) socketpair(0x21, 0x5, 0x56, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000000c0)={r5}) [ 536.939749][T11663] memory: usage 10644kB, limit 0kB, failcnt 123 [ 536.966897][T11663] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 537.020379][T11663] Memory cgroup stats for /syz0: [ 537.020618][T11663] anon 139264 [ 537.020618][T11663] file 10457088 [ 537.020618][T11663] kernel 299008 [ 537.020618][T11663] kernel_stack 32768 [ 537.020618][T11663] pagetables 81920 [ 537.020618][T11663] sec_pagetables 0 [ 537.020618][T11663] percpu 64 [ 537.020618][T11663] sock 0 [ 537.020618][T11663] vmalloc 0 [ 537.020618][T11663] shmem 10457088 [ 537.020618][T11663] zswap 0 [ 537.020618][T11663] zswapped 0 [ 537.020618][T11663] file_mapped 274432 [ 537.020618][T11663] file_dirty 0 [ 537.020618][T11663] file_writeback 0 [ 537.020618][T11663] swapcached 0 [ 537.020618][T11663] anon_thp 0 [ 537.020618][T11663] file_thp 0 [ 537.020618][T11663] shmem_thp 0 [ 537.020618][T11663] inactive_anon 139264 [ 537.020618][T11663] active_anon 10457088 [ 537.020618][T11663] inactive_file 0 [ 537.020618][T11663] active_file 0 [ 537.020618][T11663] unevictable 0 [ 537.020618][T11663] slab_reclaimable 39344 [ 537.020618][T11663] slab_unreclaimable 115200 [ 537.020618][T11663] slab 154544 03:11:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:11:34 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100003, 0x100000000000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x82987d09287e02db}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x1c1}, 0xc) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x6f, 0x7f, 0x1, 0x0, 0x1c6, 0x20a00, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f00000001c0), 0xb}, 0x80204, 0x3, 0x40, 0xa, 0x4, 0x8, 0x40, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xc, 0xfff, 0x8598, 0x6, 0x1a53, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000780)=0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r1, 0x20, &(0x7f0000000600)={&(0x7f0000000540)=""/104, 0x68, 0x0, &(0x7f00000005c0)=""/27, 0x1b}}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x4}, 0x890c, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7b, 0x3f, 0x41, 0xff, 0x0, 0x7fff, 0x854, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3ffc, 0x1, @perf_bp, 0x8200, 0x0, 0x6, 0x2, 0x7, 0x8, 0x0, 0x0, 0x3c543fb0, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x1) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000c481dad3b8e825da3b1be696c62e7e42e55715a4fa5469d941bf1ba4535f361e23629cc654e9cb505da91d79f50657eea3169285d971b9c8a6ec002f42"], 0x18}, 0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x1, 0x4, 0xc1, 0x1, 0x0, 0x100000001, 0x40000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffd422, 0x2, @perf_config_ext={0x208}, 0x200, 0x9, 0x0, 0x3, 0x5, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x40, 0x1, 0x0, 0x0, 0x301, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffff, 0x3}, 0x1480, 0x3, 0x200, 0x5, 0x6, 0x8, 0x1000, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x7, 0x1f, 0x80, 0x8, 0x0, 0xffffffff, 0x4080, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000300), 0xf}, 0x401, 0x10001, 0x1, 0x7, 0x1, 0x9ef, 0x8, 0x0, 0xbd0d, 0x0, 0xda}, 0x0, 0xb, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb79b1111175f37538e686dd0000000004100001fe80000027e80195451d234a48080e020000000000b8a8079e060000000000000000020000040000000000ce45792f7fd26303ff3e2b92cb136cc8fb8bfe3b1b0b2b29770dea70bae2f3803e5653b56ca9eb7ad44403"], 0xfdef) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 537.360846][T11663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11662,uid=0 [ 537.416011][ T27] audit: type=1804 audit(1673147494.121:8): pid=11712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2713576659/syzkaller.zw0mS3/78/memory.events" dev="sda1" ino=1175 res=1 errno=0 [ 537.571751][T11663] Memory cgroup out of memory: Killed process 11663 (syz-executor.0) total-vm:56588kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 537.606891][T10918] syz-executor.0 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 537.659890][T10918] CPU: 1 PID: 10918 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 537.670374][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 537.680434][T10918] Call Trace: [ 537.683713][T10918] [ 537.686647][T10918] dump_stack_lvl+0xd1/0x138 [ 537.691256][T10918] dump_header+0x10b/0x85f [ 537.695696][T10918] oom_kill_process.cold+0x10/0x15 [ 537.700827][T10918] out_of_memory+0x35c/0x14a0 [ 537.705523][T10918] ? find_held_lock+0x2d/0x110 [ 537.710307][T10918] ? oom_killer_disable+0x280/0x280 [ 537.715525][T10918] ? find_held_lock+0x2d/0x110 [ 537.720307][T10918] mem_cgroup_out_of_memory+0x206/0x270 [ 537.725869][T10918] ? mem_cgroup_margin+0x130/0x130 [ 537.730994][T10918] ? lock_downgrade+0x6e0/0x6e0 [ 537.735882][T10918] try_charge_memcg+0xefb/0x12f0 [ 537.740836][T10918] ? mem_cgroup_handle_over_high+0x520/0x520 [ 537.746827][T10918] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 537.752563][T10918] ? lock_downgrade+0x6e0/0x6e0 [ 537.757437][T10918] obj_cgroup_charge+0x2af/0x5e0 [ 537.762386][T10918] kmem_cache_alloc_lru+0x145/0x760 [ 537.767587][T10918] ? ext4_alloc_inode+0x28/0x680 [ 537.772535][T10918] ? ext4_free_in_core_inode+0x70/0x70 [ 537.778005][T10918] ext4_alloc_inode+0x28/0x680 [ 537.782778][T10918] ? ext4_free_in_core_inode+0x70/0x70 [ 537.788241][T10918] alloc_inode+0x61/0x230 [ 537.792588][T10918] iget_locked+0x1bb/0x700 [ 537.797022][T10918] __ext4_iget+0x3af/0x4230 [ 537.801550][T10918] ? ext4_get_projid+0x190/0x190 [ 537.806499][T10918] ? ext4_fname_prepare_lookup+0x163/0x200 [ 537.812312][T10918] ? ext4_fname_setup_filename+0x110/0x110 [ 537.818139][T10918] ? rcu_read_lock_sched_held+0x3e/0x70 [ 537.823705][T10918] ext4_lookup+0x387/0x700 [ 537.828134][T10918] ? ext4_resetent+0x2d0/0x2d0 [ 537.832932][T10918] __lookup_slow+0x24c/0x460 [ 537.837536][T10918] ? __lookup_hash+0x180/0x180 [ 537.842316][T10918] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 537.847798][T10918] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 537.853275][T10918] ? lookup_fast+0x14e/0x520 [ 537.857883][T10918] walk_component+0x33f/0x5a0 [ 537.862576][T10918] path_lookupat+0x1ba/0x840 [ 537.867184][T10918] filename_lookup+0x1d2/0x590 [ 537.871962][T10918] ? may_linkat+0x500/0x500 [ 537.876475][T10918] ? __might_fault+0xd9/0x180 [ 537.881262][T10918] ? __phys_addr_symbol+0x30/0x70 [ 537.886299][T10918] ? __check_object_size+0x2e2/0x5a0 [ 537.891605][T10918] ? strncpy_from_user+0x28b/0x3c0 [ 537.896738][T10918] ? getname_flags.part.0+0x1dd/0x4f0 [ 537.902140][T10918] user_path_at_empty+0x46/0x60 [ 537.907011][T10918] __x64_sys_umount+0xfc/0x190 [ 537.911789][T10918] ? path_umount+0x10b0/0x10b0 [ 537.916584][T10918] ? syscall_enter_from_user_mode+0x26/0xb0 [ 537.922498][T10918] do_syscall_64+0x39/0xb0 [ 537.926949][T10918] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 537.932850][T10918] RIP: 0033:0x7f3e14e8d537 [ 537.937268][T10918] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 537.956883][T10918] RSP: 002b:00007ffc0ec574a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 537.965306][T10918] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00007f3e14e8d537 [ 537.973283][T10918] RDX: 00007ffc0ec5757c RSI: 000000000000000a RDI: 00007ffc0ec57570 [ 537.981259][T10918] RBP: 00007ffc0ec57570 R08: 00000000ffffffff R09: 00007ffc0ec57340 [ 537.989232][T10918] R10: 0000555555d65853 R11: 0000000000000246 R12: 00007f3e14ee6b24 [ 537.997203][T10918] R13: 00007ffc0ec58630 R14: 0000555555d65810 R15: 00007ffc0ec58670 [ 538.005193][T10918] [ 538.118709][T10918] memory: usage 10368kB, limit 0kB, failcnt 142 [ 538.134502][T10918] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 538.145338][T10918] Memory cgroup stats for /syz0: [ 538.145554][T10918] anon 45056 [ 538.145554][T10918] file 10457088 [ 538.145554][T10918] kernel 114688 [ 538.145554][T10918] kernel_stack 0 [ 538.145554][T10918] pagetables 8192 [ 538.145554][T10918] sec_pagetables 0 [ 538.145554][T10918] percpu 64 [ 538.145554][T10918] sock 0 [ 538.145554][T10918] vmalloc 0 [ 538.145554][T10918] shmem 10457088 [ 538.145554][T10918] zswap 0 [ 538.145554][T10918] zswapped 0 [ 538.145554][T10918] file_mapped 253952 [ 538.145554][T10918] file_dirty 0 [ 538.145554][T10918] file_writeback 0 [ 538.145554][T10918] swapcached 0 [ 538.145554][T10918] anon_thp 0 [ 538.145554][T10918] file_thp 0 [ 538.145554][T10918] shmem_thp 0 [ 538.145554][T10918] inactive_anon 45056 [ 538.145554][T10918] active_anon 10457088 [ 538.145554][T10918] inactive_file 0 [ 538.145554][T10918] active_file 0 [ 538.145554][T10918] unevictable 0 [ 538.145554][T10918] slab_reclaimable 36208 [ 538.145554][T10918] slab_unreclaimable 56592 [ 538.145554][T10918] slab 92800 [ 538.253979][T10918] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10918,uid=0 [ 538.278120][T10918] Memory cgroup out of memory: Killed process 10918 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 539.660791][ T999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.861039][ T999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.980804][ T999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.278311][ T999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.631042][ T999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.790455][ T999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.010432][ T999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.139274][ T999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:11:38 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000bc0)) r0 = gettid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x2, 0x7, 0x0, 0x2, 0x18000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x5, @perf_bp={0x0, 0x6}, 0x3, 0xfff, 0x6, 0x4, 0x20000000000, 0xfffffff8, 0x100, 0x0, 0x4, 0x0, 0x1}, r0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x40000f0, 0xe, 0x0, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a", 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000bf7af0060180004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) 03:11:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:11:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:11:38 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100003, 0x100000000000000) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x82987d09287e02db}, 0x10) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x1c1}, 0xc) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x6f, 0x7f, 0x1, 0x0, 0x1c6, 0x20a00, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f00000001c0), 0xb}, 0x80204, 0x3, 0x40, 0xa, 0x4, 0x8, 0x40, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xc, 0xfff, 0x8598, 0x6, 0x1a53, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000780)=0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r1, 0x20, &(0x7f0000000600)={&(0x7f0000000540)=""/104, 0x68, 0x0, &(0x7f00000005c0)=""/27, 0x1b}}, 0x10) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x4}, 0x890c, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7b, 0x3f, 0x41, 0xff, 0x0, 0x7fff, 0x854, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3ffc, 0x1, @perf_bp, 0x8200, 0x0, 0x6, 0x2, 0x7, 0x8, 0x0, 0x0, 0x3c543fb0, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x1) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000c481dad3b8e825da3b1be696c62e7e42e55715a4fa5469d941bf1ba4535f361e23629cc654e9cb505da91d79f50657eea3169285d971b9c8a6ec002f42"], 0x18}, 0x0) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x1, 0x4, 0xc1, 0x1, 0x0, 0x100000001, 0x40000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffd422, 0x2, @perf_config_ext={0x208}, 0x200, 0x9, 0x0, 0x3, 0x5, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x40, 0x1, 0x0, 0x0, 0x301, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffff, 0x3}, 0x1480, 0x3, 0x200, 0x5, 0x6, 0x8, 0x1000, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x7, 0x1f, 0x80, 0x8, 0x0, 0xffffffff, 0x4080, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000300), 0xf}, 0x401, 0x10001, 0x1, 0x7, 0x1, 0x9ef, 0x8, 0x0, 0xbd0d, 0x0, 0xda}, 0x0, 0xb, 0xffffffffffffffff, 0x8) (async) write$cgroup_subtree(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb79b1111175f37538e686dd0000000004100001fe80000027e80195451d234a48080e020000000000b8a8079e060000000000000000020000040000000000ce45792f7fd26303ff3e2b92cb136cc8fb8bfe3b1b0b2b29770dea70bae2f3803e5653b56ca9eb7ad44403"], 0xfdef) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 542.942380][ T999] device hsr_slave_0 left promiscuous mode [ 542.957812][ T999] device hsr_slave_1 left promiscuous mode [ 542.970858][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.978452][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.997001][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.007589][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.024838][ T999] device bridge_slave_1 left promiscuous mode [ 543.036930][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.048134][ T999] device bridge_slave_0 left promiscuous mode [ 543.055665][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.072439][ T999] device hsr_slave_0 left promiscuous mode [ 543.079094][ T999] device hsr_slave_1 left promiscuous mode [ 543.086278][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 03:11:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:11:39 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100003, 0x100000000000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x82987d09287e02db}, 0x10) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x1c1}, 0xc) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x6f, 0x7f, 0x1, 0x0, 0x1c6, 0x20a00, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f00000001c0), 0xb}, 0x80204, 0x3, 0x40, 0xa, 0x4, 0x8, 0x40, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xc, 0xfff, 0x8598, 0x6, 0x1a53, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000780)=0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r1, 0x20, &(0x7f0000000600)={&(0x7f0000000540)=""/104, 0x68, 0x0, &(0x7f00000005c0)=""/27, 0x1b}}, 0x10) (async, rerun: 32) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x4}, 0x890c, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7b, 0x3f, 0x41, 0xff, 0x0, 0x7fff, 0x854, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3ffc, 0x1, @perf_bp, 0x8200, 0x0, 0x6, 0x2, 0x7, 0x8, 0x0, 0x0, 0x3c543fb0, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x1) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000c481dad3b8e825da3b1be696c62e7e42e55715a4fa5469d941bf1ba4535f361e23629cc654e9cb505da91d79f50657eea3169285d971b9c8a6ec002f42"], 0x18}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x1, 0x4, 0xc1, 0x1, 0x0, 0x100000001, 0x40000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffd422, 0x2, @perf_config_ext={0x208}, 0x200, 0x9, 0x0, 0x3, 0x5, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async, rerun: 32) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x40, 0x1, 0x0, 0x0, 0x301, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffff, 0x3}, 0x1480, 0x3, 0x200, 0x5, 0x6, 0x8, 0x1000, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0x7, 0x1f, 0x80, 0x8, 0x0, 0xffffffff, 0x4080, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000300), 0xf}, 0x401, 0x10001, 0x1, 0x7, 0x1, 0x9ef, 0x8, 0x0, 0xbd0d, 0x0, 0xda}, 0x0, 0xb, 0xffffffffffffffff, 0x8) (async) write$cgroup_subtree(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb79b1111175f37538e686dd0000000004100001fe80000027e80195451d234a48080e020000000000b8a8079e060000000000000000020000040000000000ce45792f7fd26303ff3e2b92cb136cc8fb8bfe3b1b0b2b29770dea70bae2f3803e5653b56ca9eb7ad44403"], 0xfdef) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:11:39 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000bc0)) (async) r0 = gettid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x2, 0x7, 0x0, 0x2, 0x18000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x5, @perf_bp={0x0, 0x6}, 0x3, 0xfff, 0x6, 0x4, 0x20000000000, 0xfffffff8, 0x100, 0x0, 0x4, 0x0, 0x1}, r0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x40000f0, 0xe, 0x0, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a", 0x0}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000bf7af0060180004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) 03:11:39 executing program 4: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.freeze\x00', 0x0, 0x0) (async) socketpair(0x8, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={0xffffffffffffffff, r1}) (async) write$cgroup_subtree(r1, &(0x7f0000000300)={[{0x2b, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'cpuacct'}, {0x2d, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'blkio'}, {0x2b, 'rdma'}, {0xabd66085d436c221, 'net_prio'}, {0x2b, 'net_prio'}]}, 0x4b) bpf$LINK_DETACH(0x22, &(0x7f00000011c0)=r1, 0x4) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={r1}, 0x10) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0, r1}) (async) syz_clone(0x60007100, &(0x7f0000000640), 0x0, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000200)="757f9720dfa81113c368a0bc033c4a4085437fb0cccaf6490d76c41be29f48ceda89c00489fec642c417e7c0f1d77cb0f99cc576fdc40829405f9e966eb926b21b8b8a521f6561e4d012317733a2870fa8c1f8d058199ed44bbf829454dde67af2f1967e80ff832a006ad77cc6f951099e168d366db125ac1feda83684f9b97b7acb358b095ba3d5f9033298b99c8dc3dcd9a194a7b9119e3cee1bf910400822aff8eeb12d5f9cd67ee8967c6090c2da03fc0a225d59e4c131e889fb05c2d94823f56d8760a78a6c44ee03") (async) socketpair(0x23, 0x2, 0x3, &(0x7f0000000100)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x84000, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) socketpair(0x21, 0x5, 0x56, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) (async) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000000c0)={r5}) [ 543.094308][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.104537][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.112319][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.129194][ T999] device bridge_slave_1 left promiscuous mode [ 543.136479][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.191536][ T999] device bridge_slave_0 left promiscuous mode [ 543.197836][ T999] bridge0: port 1(bridge_slave_0) entered disabled state 03:11:39 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0506617, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x2, 0x4}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x842, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0x74, r4}, 0x38) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0x3, 0xf, 0xe, 0x20, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xa, &(0x7f0000000180)=""/10, 0x40f00, 0x0, '\x00', 0x0, 0x16, r2, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xe, 0xa54, 0x3ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, r0, r1, r4, r0, r0]}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x20, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a8862004dffd00139fb7a884bdfc14f4870800", 0x0, 0xeb7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:11:39 executing program 4: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.freeze\x00', 0x0, 0x0) socketpair(0x8, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={0xffffffffffffffff, r1}) write$cgroup_subtree(r1, &(0x7f0000000300)={[{0x2b, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'cpuacct'}, {0x2d, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'blkio'}, {0x2b, 'rdma'}, {0xabd66085d436c221, 'net_prio'}, {0x2b, 'net_prio'}]}, 0x4b) bpf$LINK_DETACH(0x22, &(0x7f00000011c0)=r1, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={r1}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0, r1}) syz_clone(0x60007100, &(0x7f0000000640), 0x0, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000200)="757f9720dfa81113c368a0bc033c4a4085437fb0cccaf6490d76c41be29f48ceda89c00489fec642c417e7c0f1d77cb0f99cc576fdc40829405f9e966eb926b21b8b8a521f6561e4d012317733a2870fa8c1f8d058199ed44bbf829454dde67af2f1967e80ff832a006ad77cc6f951099e168d366db125ac1feda83684f9b97b7acb358b095ba3d5f9033298b99c8dc3dcd9a194a7b9119e3cee1bf910400822aff8eeb12d5f9cd67ee8967c6090c2da03fc0a225d59e4c131e889fb05c2d94823f56d8760a78a6c44ee03") socketpair(0x23, 0x2, 0x3, &(0x7f0000000100)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x84000, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) socketpair(0x21, 0x5, 0x56, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000000c0)={r5}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.freeze\x00', 0x0, 0x0) (async) socketpair(0x8, 0x5, 0x0, &(0x7f00000003c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000440)={0xffffffffffffffff, r1}) (async) write$cgroup_subtree(r1, &(0x7f0000000300)={[{0x2b, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'cpuacct'}, {0x2d, 'rdma'}, {0x2b, 'memory'}, {0x2b, 'blkio'}, {0x2b, 'rdma'}, {0xabd66085d436c221, 'net_prio'}, {0x2b, 'net_prio'}]}, 0x4b) (async) bpf$LINK_DETACH(0x22, &(0x7f00000011c0)=r1, 0x4) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000018c0)={r1}, 0x10) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r0, r1}) (async) syz_clone(0x60007100, &(0x7f0000000640), 0x0, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000200)="757f9720dfa81113c368a0bc033c4a4085437fb0cccaf6490d76c41be29f48ceda89c00489fec642c417e7c0f1d77cb0f99cc576fdc40829405f9e966eb926b21b8b8a521f6561e4d012317733a2870fa8c1f8d058199ed44bbf829454dde67af2f1967e80ff832a006ad77cc6f951099e168d366db125ac1feda83684f9b97b7acb358b095ba3d5f9033298b99c8dc3dcd9a194a7b9119e3cee1bf910400822aff8eeb12d5f9cd67ee8967c6090c2da03fc0a225d59e4c131e889fb05c2d94823f56d8760a78a6c44ee03") (async) socketpair(0x23, 0x2, 0x3, &(0x7f0000000100)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x84000, 0x0) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) socketpair(0x21, 0x5, 0x56, &(0x7f0000000080)) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) (async) close(r5) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000000c0)={r5}) (async) [ 543.566612][ T999] device veth1_macvtap left promiscuous mode [ 543.630881][ T999] device veth0_macvtap left promiscuous mode [ 543.651721][ T999] device veth1_vlan left promiscuous mode [ 543.735760][ T999] device veth0_vlan left promiscuous mode [ 543.795120][ T999] device veth1_macvtap left promiscuous mode [ 543.845037][ T999] device veth0_macvtap left promiscuous mode [ 543.870684][ T999] device veth1_vlan left promiscuous mode [ 543.892554][ T999] device veth0_vlan left promiscuous mode 03:11:40 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) socketpair(0x0, 0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0506617, 0x0) (async) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x2, 0x4}, 0xc) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x842, 0x40, 0x0, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0x74, r4}, 0x38) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0x3, 0xf, 0xe, 0x20, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xa, &(0x7f0000000180)=""/10, 0x40f00, 0x0, '\x00', 0x0, 0x16, r2, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xe, 0xa54, 0x3ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, r0, r1, r4, r0, r0]}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x20, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a8862004dffd00139fb7a884bdfc14f4870800", 0x0, 0xeb7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 544.452930][ T4388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.463973][ T4388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.475701][ T4388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.483809][ T4388] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 544.496156][ T4388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 03:11:41 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) socketpair(0x0, 0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0506617, 0x0) (async) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x2, 0x4}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x842, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000140), 0x74, r4}, 0x38) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0x3, 0xf, 0xe, 0x20, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xa, &(0x7f0000000180)=""/10, 0x40f00, 0x0, '\x00', 0x0, 0x16, r2, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xe, 0xa54, 0x3ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r3, r0, r1, r4, r0, r0]}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x20, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a8862004dffd00139fb7a884bdfc14f4870800", 0x0, 0xeb7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:11:41 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x43, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000740), 0x8}, 0x90050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1d1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='/.]\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1664}, 0x4000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x673cb6fb}, 0x0, 0x0, r0, 0x2) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x4, 0x68, &(0x7f00000003c0)=""/104, 0x0, 0x5, '\x00', r4, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x0, 0x4, 0x81}, 0x10, 0xffffffffffffffff}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000680)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x1, 0x4, 0x43, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x800001}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x8, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC], &(0x7f0000000380)='GPL\x00', 0x8, 0xf0, &(0x7f00000003c0)=""/240, 0x41100, 0x5, '\x00', r4, 0x10, r1, 0x8, &(0x7f00000004c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x4, 0xffffffff, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r3, r6, r3]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x9, 0x1c, 0x9, 0x40, r3, 0x8, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) [ 544.968979][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.978990][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.987719][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.996211][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 545.004028][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 545.322227][ T999] team0 (unregistering): Port device team_slave_1 removed [ 545.346762][ T999] team0 (unregistering): Port device team_slave_0 removed [ 545.380975][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.413577][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.598412][ T999] bond0 (unregistering): Released all slaves [ 545.897926][ T999] team0 (unregistering): Port device team_slave_1 removed [ 545.929270][ T999] team0 (unregistering): Port device team_slave_0 removed [ 545.976048][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.990503][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.058194][ T999] bond0 (unregistering): Released all slaves [ 546.539758][ T5114] Bluetooth: hci0: command 0x0409 tx timeout [ 547.024585][ T5114] Bluetooth: hci2: command 0x0409 tx timeout [ 547.381256][T11824] chnl_net:caif_netlink_parms(): no params data found [ 547.692913][T11837] chnl_net:caif_netlink_parms(): no params data found [ 547.752689][T11824] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.760467][T11824] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.779772][T11824] device bridge_slave_0 entered promiscuous mode [ 547.914880][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.931624][T11824] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.961079][T11824] device bridge_slave_1 entered promiscuous mode [ 548.303233][T11824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.375257][T11837] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.389751][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.398005][T11837] device bridge_slave_0 entered promiscuous mode [ 548.473051][T11824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.510251][T11837] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.517398][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.561974][T11837] device bridge_slave_1 entered promiscuous mode [ 548.619616][ T5114] Bluetooth: hci0: command 0x041b tx timeout [ 548.794210][T11824] team0: Port device team_slave_0 added [ 548.870807][T11837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.939486][T11824] team0: Port device team_slave_1 added [ 549.080104][T11837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.099761][ T5114] Bluetooth: hci2: command 0x041b tx timeout [ 549.261229][T11824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.268234][T11824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.465289][T11824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.534355][T11837] team0: Port device team_slave_0 added [ 549.556199][T11824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.599576][T11824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.729879][T11824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.784585][T11837] team0: Port device team_slave_1 added [ 549.980717][T11837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.987737][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.134874][T11837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.339154][T11837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.349753][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.499592][T11837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.572792][T11824] device hsr_slave_0 entered promiscuous mode [ 550.609930][T11824] device hsr_slave_1 entered promiscuous mode [ 550.699708][ T5114] Bluetooth: hci0: command 0x040f tx timeout [ 550.830128][T11837] device hsr_slave_0 entered promiscuous mode [ 550.900830][T11837] device hsr_slave_1 entered promiscuous mode [ 550.960727][T11837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.968363][T11837] Cannot create hsr debugfs directory [ 551.179739][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 552.779742][ T5114] Bluetooth: hci0: command 0x0419 tx timeout [ 552.977070][T11824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 553.017611][T11824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 553.107892][T11824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 553.230864][T11824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 553.260135][ T5114] Bluetooth: hci2: command 0x0419 tx timeout [ 553.941395][T11824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.948369][T11837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 553.975756][T11837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.008531][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.026196][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.040810][T11824] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.049813][T11837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.079356][T11837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.152069][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.170075][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.208273][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.215469][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.246268][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.263716][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.294409][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.301615][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.329106][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.384736][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.398763][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.455115][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.492240][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.529972][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.538664][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.643866][T11824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.676044][T11824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.722635][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.734200][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.770775][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.808464][T11837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.959002][T11837] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.081573][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.151313][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.179625][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.188507][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.231174][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.238313][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.300328][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.340142][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.350735][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.357855][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.469182][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 556.501539][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 556.509067][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 556.572238][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.699667][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.708622][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.726888][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 556.742849][T11824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.777865][T11837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.829707][T11837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.879246][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 556.918107][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 556.952099][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.990800][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 556.999342][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.102181][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.171546][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.191755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.299212][T11824] device veth0_vlan entered promiscuous mode [ 557.346005][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 557.361040][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 557.427009][T11824] device veth1_vlan entered promiscuous mode [ 557.501004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.509027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.560464][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 557.675565][T11824] device veth0_macvtap entered promiscuous mode [ 557.722865][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 557.740731][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 557.790206][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 557.801340][T11824] device veth1_macvtap entered promiscuous mode [ 557.871557][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 557.929040][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 558.002628][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.053191][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.137535][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.213236][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.269614][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.329923][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.369765][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.429610][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.492283][T11824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.540305][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 558.581205][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.600261][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 558.607779][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.691144][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.728797][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.778070][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.847483][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.889020][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.960016][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.018790][T11824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.079670][T11824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.163010][T11824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.187412][T11837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.227882][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 559.250518][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 559.262053][T11824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.290348][T11824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.329653][T11824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.338406][T11824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.471532][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 559.490490][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 559.642750][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 559.670454][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 559.681934][T11837] device veth0_vlan entered promiscuous mode [ 559.794845][T11837] device veth1_vlan entered promiscuous mode [ 559.887047][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 559.931493][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 559.939370][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 560.180799][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.188897][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.205338][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 560.230504][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 560.282916][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.341601][T11837] device veth0_macvtap entered promiscuous mode [ 560.376237][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.389132][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 560.446318][T11837] device veth1_macvtap entered promiscuous mode [ 560.480710][ T5178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.488814][ T5178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.560157][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.620107][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.682601][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.729648][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.764602][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.805849][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.842785][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.879185][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.934703][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.987505][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.056160][T11837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.088040][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 561.101893][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 561.135352][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 561.199856][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.229831][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.268710][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.331954][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.369559][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.420327][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.468217][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.517622][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.548098][T11837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.609626][T11837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.681844][T11837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.695749][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 561.711073][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 561.782807][T11837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.829562][T11837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.838319][T11837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.898625][T11837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.295795][T11971] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 562.313113][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.350140][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.360311][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 562.383392][T11971] CPU: 1 PID: 11971 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 562.393874][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 562.403960][T11971] Call Trace: [ 562.407261][T11971] [ 562.410216][T11971] dump_stack_lvl+0xd1/0x138 [ 562.414853][T11971] dump_header+0x10b/0x85f [ 562.419316][T11971] oom_kill_process.cold+0x10/0x15 [ 562.424474][T11971] out_of_memory+0x35c/0x14a0 [ 562.429201][T11971] ? oom_killer_disable+0x280/0x280 [ 562.434448][T11971] ? mark_held_locks+0x9f/0xe0 [ 562.439254][T11971] mem_cgroup_out_of_memory+0x206/0x270 [ 562.444841][T11971] ? mem_cgroup_margin+0x130/0x130 [ 562.450015][T11971] memory_max_write+0x2f9/0x3c0 [ 562.454899][T11971] ? mem_cgroup_force_empty_write+0x160/0x160 [ 562.460999][T11971] ? lock_release+0x810/0x810 [ 562.465710][T11971] cgroup_file_write+0x1e2/0x770 [ 562.470689][T11971] ? mem_cgroup_force_empty_write+0x160/0x160 [ 562.476785][T11971] ? kill_css+0x370/0x370 [ 562.481142][T11971] ? __virt_addr_valid+0x61/0x2e0 [ 562.486216][T11971] ? kill_css+0x370/0x370 [ 562.490572][T11971] kernfs_fop_write_iter+0x3f1/0x600 [ 562.495901][T11971] vfs_write+0x9ed/0xdd0 [ 562.500188][T11971] ? kernel_write+0x630/0x630 [ 562.504901][T11971] ? __fget_files+0x26a/0x440 [ 562.509625][T11971] ksys_write+0x12b/0x250 [ 562.513981][T11971] ? __ia32_sys_read+0xb0/0xb0 [ 562.518780][T11971] ? syscall_enter_from_user_mode+0x26/0xb0 [ 562.524709][T11971] do_syscall_64+0x39/0xb0 [ 562.529164][T11971] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 562.535081][T11971] RIP: 0033:0x7f8e6728c0c9 [ 562.539516][T11971] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 562.559154][T11971] RSP: 002b:00007f8e68074168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 562.567602][T11971] RAX: ffffffffffffffda RBX: 00007f8e673abf80 RCX: 00007f8e6728c0c9 [ 562.575596][T11971] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 562.583590][T11971] RBP: 00007f8e672e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 562.591578][T11971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.599569][T11971] R13: 00007ffe0cccf56f R14: 00007f8e68074300 R15: 0000000000022000 [ 562.607590][T11971] [ 562.674991][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.701924][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.743125][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 562.781603][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.787958][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.824182][T11971] memory: usage 604kB, limit 0kB, failcnt 254 [ 563.578333][T11971] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 563.611042][T11971] Memory cgroup stats for /syz2: [ 563.611266][T11971] anon 114688 [ 563.611266][T11971] file 225280 [ 563.611266][T11971] kernel 233472 [ 563.611266][T11971] kernel_stack 32768 [ 563.611266][T11971] pagetables 81920 [ 563.611266][T11971] sec_pagetables 0 [ 563.611266][T11971] percpu 64 [ 563.611266][T11971] sock 0 [ 563.611266][T11971] vmalloc 0 [ 563.611266][T11971] shmem 221184 [ 563.611266][T11971] zswap 0 [ 563.611266][T11971] zswapped 0 [ 563.611266][T11971] file_mapped 221184 [ 563.611266][T11971] file_dirty 0 [ 563.611266][T11971] file_writeback 0 [ 563.611266][T11971] swapcached 0 [ 563.611266][T11971] anon_thp 0 [ 563.611266][T11971] file_thp 0 [ 563.611266][T11971] shmem_thp 0 [ 563.611266][T11971] inactive_anon 135168 [ 563.611266][T11971] active_anon 200704 [ 563.611266][T11971] inactive_file 4096 [ 563.611266][T11971] active_file 0 [ 563.611266][T11971] unevictable 0 [ 563.611266][T11971] slab_reclaimable 17528 [ 563.611266][T11971] slab_unreclaimable 73104 [ 563.611266][T11971] slab 90632 03:12:00 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x43, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000740), 0x8}, 0x90050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1d1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='/.]\x00') (rerun: 64) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1664}, 0x4000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x673cb6fb}, 0x0, 0x0, r0, 0x2) close(r0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x4, 0x68, &(0x7f00000003c0)=""/104, 0x0, 0x5, '\x00', r4, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x0, 0x4, 0x81}, 0x10, 0xffffffffffffffff}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000680)={r2}, 0xc) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x1, 0x4, 0x43, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x800001}, 0x48) (rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x8, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC], &(0x7f0000000380)='GPL\x00', 0x8, 0xf0, &(0x7f00000003c0)=""/240, 0x41100, 0x5, '\x00', r4, 0x10, r1, 0x8, &(0x7f00000004c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x4, 0xffffffff, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r3, r6, r3]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x9, 0x1c, 0x9, 0x40, r3, 0x8, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) [ 563.827684][T11971] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11824,uid=0 [ 563.889679][T11971] Memory cgroup out of memory: Killed process 11824 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 563.948220][T11837] syz-executor.0 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 563.973162][T11837] CPU: 0 PID: 11837 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 563.983650][T11837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 563.993723][T11837] Call Trace: [ 563.997014][T11837] [ 563.999960][T11837] dump_stack_lvl+0xd1/0x138 [ 564.004587][T11837] dump_header+0x10b/0x85f [ 564.009046][T11837] oom_kill_process.cold+0x10/0x15 [ 564.014200][T11837] out_of_memory+0x35c/0x14a0 [ 564.018933][T11837] ? oom_killer_disable+0x280/0x280 [ 564.024174][T11837] ? find_held_lock+0x2d/0x110 [ 564.028982][T11837] mem_cgroup_out_of_memory+0x206/0x270 [ 564.034570][T11837] ? mem_cgroup_margin+0x130/0x130 [ 564.039721][T11837] ? lock_downgrade+0x6e0/0x6e0 [ 564.044616][T11837] try_charge_memcg+0xefb/0x12f0 [ 564.049595][T11837] ? mem_cgroup_handle_over_high+0x520/0x520 [ 564.055613][T11837] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 564.061374][T11837] ? lock_downgrade+0x6e0/0x6e0 [ 564.066282][T11837] obj_cgroup_charge+0x2af/0x5e0 [ 564.071264][T11837] kmem_cache_alloc_lru+0x145/0x760 [ 564.076492][T11837] ? ext4_alloc_inode+0x28/0x680 [ 564.081484][T11837] ? ext4_free_in_core_inode+0x70/0x70 [ 564.086989][T11837] ext4_alloc_inode+0x28/0x680 [ 564.091788][T11837] ? ext4_free_in_core_inode+0x70/0x70 [ 564.097274][T11837] alloc_inode+0x61/0x230 [ 564.101652][T11837] iget_locked+0x1bb/0x700 [ 564.106111][T11837] __ext4_iget+0x3af/0x4230 [ 564.110667][T11837] ? ext4_get_projid+0x190/0x190 [ 564.115636][T11837] ? ext4_fname_prepare_lookup+0x163/0x200 [ 564.121484][T11837] ? ext4_fname_setup_filename+0x110/0x110 [ 564.127346][T11837] ? rcu_read_lock_sched_held+0x3e/0x70 [ 564.132948][T11837] ext4_lookup+0x387/0x700 [ 564.137399][T11837] ? ext4_resetent+0x2d0/0x2d0 [ 564.142220][T11837] __lookup_slow+0x24c/0x460 [ 564.146843][T11837] ? __lookup_hash+0x180/0x180 [ 564.151641][T11837] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 564.157142][T11837] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 564.162641][T11837] ? lookup_fast+0x14e/0x520 [ 564.167267][T11837] walk_component+0x33f/0x5a0 [ 564.171986][T11837] path_lookupat+0x1ba/0x840 [ 564.176611][T11837] filename_lookup+0x1d2/0x590 [ 564.181412][T11837] ? may_linkat+0x500/0x500 [ 564.185971][T11837] ? __might_fault+0xd9/0x180 [ 564.190698][T11837] ? __phys_addr_symbol+0x30/0x70 [ 564.195779][T11837] ? __check_object_size+0x2e2/0x5a0 [ 564.201111][T11837] ? strncpy_from_user+0x28b/0x3c0 [ 564.206260][T11837] ? getname_flags.part.0+0x1dd/0x4f0 [ 564.211688][T11837] user_path_at_empty+0x46/0x60 [ 564.216577][T11837] __x64_sys_umount+0xfc/0x190 [ 564.221377][T11837] ? path_umount+0x10b0/0x10b0 [ 564.226175][T11837] ? syscall_enter_from_user_mode+0x26/0xb0 [ 564.232111][T11837] do_syscall_64+0x39/0xb0 [ 564.236565][T11837] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 564.242488][T11837] RIP: 0033:0x7fd62b68d537 [ 564.246933][T11837] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 564.266578][T11837] RSP: 002b:00007fff24b16578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 564.275022][T11837] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd62b68d537 [ 564.283012][T11837] RDX: 00007fff24b1664e RSI: 000000000000000a RDI: 00007fff24b16640 [ 564.291002][T11837] RBP: 00007fff24b16640 R08: 00000000ffffffff R09: 00007fff24b16410 [ 564.298993][T11837] R10: 0000555556c3b8bb R11: 0000000000000246 R12: 00007fd62b6e6b24 [ 564.306984][T11837] R13: 00007fff24b17700 R14: 0000555556c3b810 R15: 00007fff24b17740 [ 564.314997][T11837] [ 564.595360][T11837] memory: usage 10344kB, limit 0kB, failcnt 188 [ 564.608347][T11837] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 564.617004][T11837] Memory cgroup stats for /syz0: [ 564.617220][T11837] anon 45056 [ 564.617220][T11837] file 10457088 [ 564.617220][T11837] kernel 90112 [ 564.617220][T11837] kernel_stack 0 [ 564.617220][T11837] pagetables 8192 [ 564.617220][T11837] sec_pagetables 0 [ 564.617220][T11837] percpu 0 [ 564.617220][T11837] sock 0 [ 564.617220][T11837] vmalloc 0 [ 564.617220][T11837] shmem 10457088 [ 564.617220][T11837] zswap 0 [ 564.617220][T11837] zswapped 0 [ 564.617220][T11837] file_mapped 253952 [ 564.617220][T11837] file_dirty 0 [ 564.617220][T11837] file_writeback 0 [ 564.617220][T11837] swapcached 0 [ 564.617220][T11837] anon_thp 0 [ 564.617220][T11837] file_thp 0 [ 564.617220][T11837] shmem_thp 0 [ 564.617220][T11837] inactive_anon 45056 [ 564.617220][T11837] active_anon 10457088 [ 564.617220][T11837] inactive_file 0 03:12:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:12:01 executing program 4: r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) close(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="5bc9269d8b3c22938897bc217d941eaa03d3372372dee6f15414f1f517adb4eb8566f87a61cb7896e69ad3684ae97990ff3f", 0x32}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb0}, 0x11) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="16", 0x1}], 0x1}, 0x0) 03:12:01 executing program 0: socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r2, 0x1f}, 0x10) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, &(0x7f00000002c0)=""/120, 0x78}, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x52612282) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b1a, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00\x03 \x00\x00\x00\x00!\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oO\x8dArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xd52\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2r\xc9\xcbVq\x01') 03:12:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 564.617220][T11837] active_file 0 [ 564.617220][T11837] unevictable 0 [ 564.617220][T11837] slab_reclaimable 37776 [ 564.617220][T11837] slab_unreclaimable 32944 [ 564.617220][T11837] slab 70720 [ 565.056956][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.169660][T11837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11837,uid=0 [ 565.209614][T11837] Memory cgroup out of memory: Killed process 11837 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 565.804709][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.343579][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.720432][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.721521][ T33] device hsr_slave_0 left promiscuous mode [ 568.737857][ T33] device hsr_slave_1 left promiscuous mode [ 568.798438][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.806165][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.841878][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.849340][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.859402][ T33] device bridge_slave_1 left promiscuous mode [ 568.868314][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.887530][ T33] device bridge_slave_0 left promiscuous mode [ 568.897204][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.935657][ T33] device veth1_macvtap left promiscuous mode [ 568.949738][ T33] device veth0_macvtap left promiscuous mode [ 568.955928][ T33] device veth1_vlan left promiscuous mode [ 568.968987][ T33] device veth0_vlan left promiscuous mode [ 569.210202][ T33] team0 (unregistering): Port device team_slave_1 removed [ 569.225820][ T33] team0 (unregistering): Port device team_slave_0 removed [ 569.243236][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.260633][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.331149][ T33] bond0 (unregistering): Released all slaves 03:12:06 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000bc0)) (async) r0 = gettid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x2, 0x7, 0x0, 0x2, 0x18000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x5, @perf_bp={0x0, 0x6}, 0x3, 0xfff, 0x6, 0x4, 0x20000000000, 0xfffffff8, 0x100, 0x0, 0x4, 0x0, 0x1}, r0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x40000f0, 0xe, 0x0, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a", 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000bf7af0060180004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) 03:12:06 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x43, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000740), 0x8}, 0x90050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1d1c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='/.]\x00') (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1664}, 0x4000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x673cb6fb}, 0x0, 0x0, r0, 0x2) (async) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x4, 0x68, &(0x7f00000003c0)=""/104, 0x0, 0x5, '\x00', r4, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x0, 0x4, 0x81}, 0x10, 0xffffffffffffffff}, 0x80) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000680)={r2}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x1, 0x4, 0x43, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x800001}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000017c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r5, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x8, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC], &(0x7f0000000380)='GPL\x00', 0x8, 0xf0, &(0x7f00000003c0)=""/240, 0x41100, 0x5, '\x00', r4, 0x10, r1, 0x8, &(0x7f00000004c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x4, 0xffffffff, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[r3, r6, r3]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x660c, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x660c, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x9, 0x1c, 0x9, 0x40, r3, 0x8, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) 03:12:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:12:06 executing program 0: socket$kcm(0x29, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r2, 0x1f}, 0x10) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, &(0x7f00000002c0)=""/120, 0x78}, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x52612282) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b1a, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00\x03 \x00\x00\x00\x00!\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oO\x8dArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xd52\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2r\xc9\xcbVq\x01') socket$kcm(0x29, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r2, 0x1f}, 0x10) (async) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, &(0x7f00000002c0)=""/120, 0x78}, 0x1) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x52612282) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b1a, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00\x03 \x00\x00\x00\x00!\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oO\x8dArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xd52\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2r\xc9\xcbVq\x01') (async) 03:12:06 executing program 4: r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) close(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="5bc9269d8b3c22938897bc217d941eaa03d3372372dee6f15414f1f517adb4eb8566f87a61cb7896e69ad3684ae97990ff3f", 0x32}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb0}, 0x11) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="16", 0x1}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) (async) close(r1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="5bc9269d8b3c22938897bc217d941eaa03d3372372dee6f15414f1f517adb4eb8566f87a61cb7896e69ad3684ae97990ff3f", 0x32}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb0}, 0x11) (async) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="16", 0x1}], 0x1}, 0x0) (async) 03:12:06 executing program 5: r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) close(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="5bc9269d8b3c22938897bc217d941eaa03d3372372dee6f15414f1f517adb4eb8566f87a61cb7896e69ad3684ae97990ff3f", 0x32}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb0}, 0x11) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="16", 0x1}], 0x1}, 0x0) 03:12:06 executing program 1: unlink(&(0x7f00000007c0)='./file0\x00') perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10003ffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='spi_set_cs\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='freezer.state\x00') syz_clone(0x40140200, &(0x7f0000000080)="26133271fc8449ca34b8cdd734c682647ab5cbaf021bab7195f3480d5b36565ed8eaf78b2279b910ab820181eca1ca5fe8094ff7f99356e3772a8e2eae6504c41bb4654d41bdd82daa8da54f1ec3c1b6d81d4eba0a60c11547d49af9eb69fa0a1e6e5d947dc1a9138efa84bdde679c92c0849b1be5f1fce1709d45d614b0b6db38c046a2007d69e6eafe75121be17e908305c363f6bd87b130630ca30d65048e9686247f9c6c33e1b2c253a98b319ea8d183cb9d587e1471ce3b61cbd1e2d72784a888d37b8aec13a452907d98d23fa2c7d7971145483ed2ab99a2c3c2978a69da8e6f7a53b7abc21d3dfb52b1e88f", 0xef, 0x0, &(0x7f00000001c0), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x8}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={0x0, 0x0, 0x8}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x43, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x422, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3fd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='freezer.state\x00', 0x0, 0x0) 03:12:06 executing program 4: r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) close(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="5bc9269d8b3c22938897bc217d941eaa03d3372372dee6f15414f1f517adb4eb8566f87a61cb7896e69ad3684ae97990ff3f", 0x32}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb0}, 0x11) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="16", 0x1}], 0x1}, 0x0) socket$kcm(0x2, 0x1, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) (async) close(r1) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="5bc9269d8b3c22938897bc217d941eaa03d3372372dee6f15414f1f517adb4eb8566f87a61cb7896e69ad3684ae97990ff3f", 0x32}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xb0}, 0x11) (async) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="16", 0x1}], 0x1}, 0x0) (async) 03:12:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700) socketpair(0x28, 0x3, 0x1ff, &(0x7f0000000180)) 03:12:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) socket$kcm(0x2, 0x1000000000000002, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) socketpair(0x9, 0x3, 0x0, &(0x7f0000000100)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x17da) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) close(r5) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000002c0)={r5}) close(0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000300)='memory.swap.events\x00', 0x0, 0x0) 03:12:07 executing program 1: unlink(&(0x7f00000007c0)='./file0\x00') perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x10003ffffffffe, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='spi_set_cs\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='freezer.state\x00') syz_clone(0x40140200, &(0x7f0000000080)="26133271fc8449ca34b8cdd734c682647ab5cbaf021bab7195f3480d5b36565ed8eaf78b2279b910ab820181eca1ca5fe8094ff7f99356e3772a8e2eae6504c41bb4654d41bdd82daa8da54f1ec3c1b6d81d4eba0a60c11547d49af9eb69fa0a1e6e5d947dc1a9138efa84bdde679c92c0849b1be5f1fce1709d45d614b0b6db38c046a2007d69e6eafe75121be17e908305c363f6bd87b130630ca30d65048e9686247f9c6c33e1b2c253a98b319ea8d183cb9d587e1471ce3b61cbd1e2d72784a888d37b8aec13a452907d98d23fa2c7d7971145483ed2ab99a2c3c2978a69da8e6f7a53b7abc21d3dfb52b1e88f", 0xef, 0x0, &(0x7f00000001c0), 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x8}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={0x0, 0x0, 0x8}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x8}, 0xc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x43, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x422, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3fd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x2) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='freezer.state\x00', 0x0, 0x0) 03:12:07 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:12:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) (async) close(r1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700) (async) socketpair(0x28, 0x3, 0x1ff, &(0x7f0000000180)) [ 571.167269][ T27] audit: type=1804 audit(1673147527.871:9): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3030322823/syzkaller.pDRrPL/54/memory.events" dev="sda1" ino=1163 res=1 errno=0 [ 571.336432][ T27] audit: type=1800 audit(1673147527.911:10): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1163 res=0 errno=0 03:12:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) socket$kcm(0x2, 0x1000000000000002, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) (async) socketpair(0x9, 0x3, 0x0, &(0x7f0000000100)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x1) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x17da) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) close(r5) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000002c0)={r5}) (async, rerun: 64) close(0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000300)='memory.swap.events\x00', 0x0, 0x0) [ 572.051055][ T27] audit: type=1804 audit(1673147528.761:11): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3030322823/syzkaller.pDRrPL/55/memory.events" dev="sda1" ino=1154 res=1 errno=0 [ 572.163847][ T27] audit: type=1800 audit(1673147528.791:12): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1154 res=0 errno=0 [ 572.788027][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 572.797182][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 572.808916][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 572.818738][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 572.826548][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 572.845324][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 573.287058][T12118] chnl_net:caif_netlink_parms(): no params data found [ 573.591403][T12118] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.598625][T12118] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.620965][T12118] device bridge_slave_0 entered promiscuous mode [ 573.640858][T12118] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.648100][T12118] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.663615][T12118] device bridge_slave_1 entered promiscuous mode [ 573.743904][T12118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.788109][T12118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.818707][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 573.832106][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 573.848779][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 573.860850][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 573.868395][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 573.876236][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.960297][T12118] team0: Port device team_slave_0 added [ 573.968579][T12118] team0: Port device team_slave_1 added [ 574.061738][T12118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.068739][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.111362][T12118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.152573][T12118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.159954][T12118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.194689][T12118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.248925][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.369405][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.432724][T12118] device hsr_slave_0 entered promiscuous mode [ 574.442855][T12118] device hsr_slave_1 entered promiscuous mode [ 574.481236][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.620240][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.647527][T12138] chnl_net:caif_netlink_parms(): no params data found [ 574.810764][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.818809][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.827347][T12138] device bridge_slave_0 entered promiscuous mode [ 574.906352][T12138] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.937862][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.945313][ T5114] Bluetooth: hci0: command 0x0409 tx timeout [ 574.979737][T12138] device bridge_slave_1 entered promiscuous mode [ 575.099788][ T4388] Bluetooth: hci5: command 0x0406 tx timeout [ 575.208670][T12138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.259432][T12138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.555625][T12138] team0: Port device team_slave_0 added [ 575.612376][T12138] team0: Port device team_slave_1 added [ 575.691242][T12138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.698234][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.749647][T12138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.820348][T12138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.827369][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.889565][T12138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.900288][ T4388] Bluetooth: hci2: command 0x0409 tx timeout [ 576.035867][T12138] device hsr_slave_0 entered promiscuous mode [ 576.053221][T12138] device hsr_slave_1 entered promiscuous mode [ 576.076207][T12138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.095266][T12138] Cannot create hsr debugfs directory [ 576.300556][T12118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 576.328272][T12118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 576.361663][T12118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 576.384133][T12118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 576.754480][ T33] device hsr_slave_0 left promiscuous mode [ 576.770601][ T33] device hsr_slave_1 left promiscuous mode [ 576.781303][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.788759][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.835645][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.852065][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.874229][ T33] device bridge_slave_1 left promiscuous mode [ 576.895295][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.915550][ T33] device bridge_slave_0 left promiscuous mode [ 576.926149][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.947201][ T33] device veth1_macvtap left promiscuous mode [ 576.964195][ T33] device veth0_macvtap left promiscuous mode [ 576.977979][ T33] device veth1_vlan left promiscuous mode [ 576.987039][ T33] device veth0_vlan left promiscuous mode [ 577.019729][ T5114] Bluetooth: hci0: command 0x041b tx timeout [ 577.554886][ T33] team0 (unregistering): Port device team_slave_1 removed [ 577.571591][ T33] team0 (unregistering): Port device team_slave_0 removed [ 577.586970][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.604085][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.704656][ T33] bond0 (unregistering): Released all slaves [ 577.808389][T12118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.858799][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.867972][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.888862][T12118] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.953221][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.971706][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.989399][ T5114] Bluetooth: hci2: command 0x041b tx timeout [ 577.997089][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.004262][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.028067][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.062758][T12138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 578.107543][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.118255][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.138512][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.145729][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.167827][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 578.178268][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.197204][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 578.217126][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 578.231201][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 578.249719][T12138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 578.272050][T12138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 578.295886][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.305512][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.330104][T12138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 578.346207][T12118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.368061][T12118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 578.378296][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.388301][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 578.580629][T12138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.607620][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.616249][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.643587][T12138] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.670649][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.687844][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.709059][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.716408][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.770806][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.778933][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.810305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.818840][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.826005][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.856258][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 578.880693][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.900279][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 578.910711][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 578.943487][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 578.966932][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.976376][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.986923][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.995867][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.005653][T12138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.041384][T12118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.067621][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 579.077010][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.099716][ T5114] Bluetooth: hci0: command 0x040f tx timeout [ 579.125061][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 579.135073][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 579.174551][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 579.183754][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.198330][T12118] device veth0_vlan entered promiscuous mode [ 579.232220][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.250266][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 579.272089][T12118] device veth1_vlan entered promiscuous mode [ 579.363261][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 579.380516][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 579.392473][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 579.410662][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 579.442487][T12118] device veth0_macvtap entered promiscuous mode [ 579.469113][T12118] device veth1_macvtap entered promiscuous mode [ 579.529250][T12118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.561271][T12118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.580071][T12118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.599780][T12118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.616934][T12118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.627799][T12118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.638118][T12118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.659839][T12118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.681270][T12118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.692693][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 579.710631][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 579.718781][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 579.740870][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 579.767840][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 579.787979][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.800329][T12118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.811414][T12118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.821941][T12118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.839738][T12118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.869945][T12118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.899061][T12118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.919627][T12118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.938023][T12118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.950409][T12118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.963454][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 579.980751][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 580.004904][T12138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.042974][T12118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.060378][T12118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.069123][T12118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.069839][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 580.088491][T12118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.152035][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 580.162540][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 580.249797][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 580.258236][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 580.289324][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 580.308281][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 580.319244][T12138] device veth0_vlan entered promiscuous mode [ 580.353932][T12138] device veth1_vlan entered promiscuous mode [ 580.380263][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.388398][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.424777][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 580.435974][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 580.444796][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 580.468727][T12138] device veth0_macvtap entered promiscuous mode [ 580.485384][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 580.495333][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 580.521110][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 580.522248][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.542828][T12138] device veth1_macvtap entered promiscuous mode [ 580.569949][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.591744][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.641037][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.651620][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.669562][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.679427][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.720052][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.739848][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.760249][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.771819][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.789637][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.811301][T12138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.818850][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 580.830401][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 580.851875][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 580.870376][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 580.887406][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.898642][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.920154][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.935731][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.946618][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.957414][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.967731][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.978593][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.988856][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.999701][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.019114][T12138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.054743][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.076374][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.095710][T12138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.119554][T12138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.140369][T12138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.149132][T12138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.180600][ T5114] Bluetooth: hci0: command 0x0419 tx timeout [ 581.459392][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.479692][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.506324][T12247] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 581.521653][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 581.531067][T12247] CPU: 0 PID: 12247 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 581.541534][T12247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 581.551598][T12247] Call Trace: [ 581.554882][T12247] [ 581.557820][T12247] dump_stack_lvl+0xd1/0x138 [ 581.562437][T12247] dump_header+0x10b/0x85f [ 581.566882][T12247] oom_kill_process.cold+0x10/0x15 [ 581.572018][T12247] out_of_memory+0x35c/0x14a0 [ 581.576727][T12247] ? oom_killer_disable+0x280/0x280 [ 581.581944][T12247] ? mark_held_locks+0x9f/0xe0 [ 581.586724][T12247] mem_cgroup_out_of_memory+0x206/0x270 [ 581.592292][T12247] ? mem_cgroup_margin+0x130/0x130 [ 581.597438][T12247] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 581.603275][T12247] memory_max_write+0x2f9/0x3c0 [ 581.608154][T12247] ? mem_cgroup_force_empty_write+0x160/0x160 [ 581.614244][T12247] ? lock_release+0x810/0x810 [ 581.618940][T12247] cgroup_file_write+0x1e2/0x770 [ 581.623903][T12247] ? mem_cgroup_force_empty_write+0x160/0x160 [ 581.629985][T12247] ? kill_css+0x370/0x370 [ 581.634331][T12247] ? kernfs_get_active+0xdc/0x150 [ 581.639386][T12247] ? kill_css+0x370/0x370 [ 581.643730][T12247] kernfs_fop_write_iter+0x3f1/0x600 [ 581.649040][T12247] vfs_write+0x9ed/0xdd0 [ 581.653303][T12247] ? kernel_write+0x630/0x630 [ 581.658002][T12247] ? __fget_files+0x26a/0x440 [ 581.662703][T12247] ksys_write+0x12b/0x250 [ 581.667047][T12247] ? __ia32_sys_read+0xb0/0xb0 [ 581.671830][T12247] ? syscall_enter_from_user_mode+0x30/0xb0 [ 581.677746][T12247] do_syscall_64+0x39/0xb0 [ 581.682185][T12247] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 581.688091][T12247] RIP: 0033:0x7fae4e28c0c9 [ 581.692514][T12247] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.712131][T12247] RSP: 002b:00007fae4f0bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.720553][T12247] RAX: ffffffffffffffda RBX: 00007fae4e3abf80 RCX: 00007fae4e28c0c9 [ 581.728545][T12247] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 581.736533][T12247] RBP: 00007fae4e2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 581.744512][T12247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.752489][T12247] R13: 00007ffc33852c6f R14: 00007fae4f0bd300 R15: 0000000000022000 [ 581.760487][T12247] [ 581.770575][T12247] memory: usage 588kB, limit 0kB, failcnt 254 [ 581.778161][T12247] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 581.786016][T12247] Memory cgroup stats for /syz2: [ 581.789476][T12247] anon 110592 [ 581.789476][T12247] file 225280 [ 581.789476][T12247] kernel 266240 [ 581.789476][T12247] kernel_stack 65536 [ 581.789476][T12247] pagetables 81920 [ 581.789476][T12247] sec_pagetables 0 [ 581.789476][T12247] percpu 64 [ 581.789476][T12247] sock 0 [ 581.789476][T12247] vmalloc 0 [ 581.789476][T12247] shmem 221184 [ 581.789476][T12247] zswap 0 [ 581.789476][T12247] zswapped 0 [ 581.789476][T12247] file_mapped 221184 [ 581.789476][T12247] file_dirty 0 [ 581.789476][T12247] file_writeback 0 [ 581.789476][T12247] swapcached 0 [ 581.789476][T12247] anon_thp 0 [ 581.789476][T12247] file_thp 0 [ 581.789476][T12247] shmem_thp 0 [ 581.789476][T12247] inactive_anon 131072 [ 581.789476][T12247] active_anon 200704 [ 581.789476][T12247] inactive_file 4096 [ 581.789476][T12247] active_file 0 [ 581.789476][T12247] unevictable 0 [ 581.789476][T12247] slab_reclaimable 17528 [ 581.789476][T12247] slab_unreclaimable 73104 [ 581.789476][T12247] slab 90632 [ 581.821896][ T5178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 03:12:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 581.909159][T12247] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12246,uid=0 [ 581.939052][T12247] Memory cgroup out of memory: Killed process 12247 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 582.010491][ T5178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.022035][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 582.038505][T12118] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 582.057041][T12118] CPU: 1 PID: 12118 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 582.067516][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 582.077598][T12118] Call Trace: [ 582.080898][T12118] [ 582.083834][T12118] dump_stack_lvl+0xd1/0x138 [ 582.088444][T12118] dump_header+0x10b/0x85f [ 582.092881][T12118] oom_kill_process.cold+0x10/0x15 [ 582.098010][T12118] out_of_memory+0x35c/0x14a0 [ 582.102706][T12118] ? find_held_lock+0x2d/0x110 [ 582.107484][T12118] ? oom_killer_disable+0x280/0x280 [ 582.112700][T12118] ? find_held_lock+0x2d/0x110 [ 582.117481][T12118] mem_cgroup_out_of_memory+0x206/0x270 [ 582.123043][T12118] ? mem_cgroup_margin+0x130/0x130 [ 582.128168][T12118] ? lock_downgrade+0x6e0/0x6e0 [ 582.133051][T12118] try_charge_memcg+0xefb/0x12f0 [ 582.138020][T12118] ? mem_cgroup_handle_over_high+0x520/0x520 [ 582.144019][T12118] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 582.149761][T12118] ? lock_downgrade+0x6e0/0x6e0 [ 582.154623][T12118] ? lock_downgrade+0x6e0/0x6e0 [ 582.159494][T12118] __memcg_kmem_charge_page+0x16e/0x3b0 [ 582.165058][T12118] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 582.171228][T12118] copy_process+0x4e3/0x7520 [ 582.175827][T12118] ? _raw_spin_unlock+0x28/0x40 [ 582.180688][T12118] ? wp_page_reuse+0x197/0x570 [ 582.185465][T12118] ? do_wp_page+0x844/0x3370 [ 582.190078][T12118] ? __cleanup_sighand+0xb0/0xb0 [ 582.195022][T12118] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 582.200412][T12118] ? rwlock_bug.part.0+0x90/0x90 [ 582.205356][T12118] ? lock_chain_count+0x20/0x20 [ 582.210215][T12118] kernel_clone+0xeb/0x990 [ 582.214644][T12118] ? create_io_thread+0xf0/0xf0 [ 582.219515][T12118] ? find_held_lock+0x2d/0x110 [ 582.224311][T12118] __do_sys_clone+0xba/0x100 [ 582.228910][T12118] ? kernel_clone+0x990/0x990 [ 582.233606][T12118] ? syscall_enter_from_user_mode+0x26/0xb0 [ 582.239519][T12118] do_syscall_64+0x39/0xb0 [ 582.243953][T12118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 582.249854][T12118] RIP: 0033:0x7fae4e289dfb [ 582.254273][T12118] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 582.273890][T12118] RSP: 002b:00007ffc33852eb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 582.282314][T12118] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae4e289dfb [ 582.290285][T12118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 582.298264][T12118] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557013400 [ 582.306239][T12118] R10: 00005555570136d0 R11: 0000000000000246 R12: 0000000000000001 [ 582.314212][T12118] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc33852f90 [ 582.322201][T12118] [ 582.330532][ T4388] Bluetooth: hci2: command 0x0419 tx timeout [ 582.358397][T12118] memory: usage 372kB, limit 0kB, failcnt 273 [ 582.366117][T12118] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 582.373485][T12118] Memory cgroup stats for /syz2: [ 582.373691][T12118] anon 40960 [ 582.373691][T12118] file 225280 [ 582.373691][T12118] kernel 114688 [ 582.373691][T12118] kernel_stack 0 [ 582.373691][T12118] pagetables 8192 [ 582.373691][T12118] sec_pagetables 0 [ 582.373691][T12118] percpu 64 [ 582.373691][T12118] sock 0 [ 582.373691][T12118] vmalloc 0 [ 582.373691][T12118] shmem 221184 [ 582.373691][T12118] zswap 0 [ 582.373691][T12118] zswapped 0 [ 582.373691][T12118] file_mapped 221184 [ 582.373691][T12118] file_dirty 0 [ 582.373691][T12118] file_writeback 0 [ 582.373691][T12118] swapcached 0 [ 582.373691][T12118] anon_thp 0 [ 582.373691][T12118] file_thp 0 [ 582.373691][T12118] shmem_thp 0 [ 582.373691][T12118] inactive_anon 61440 [ 582.373691][T12118] active_anon 200704 [ 582.373691][T12118] inactive_file 4096 [ 582.373691][T12118] active_file 0 [ 582.373691][T12118] unevictable 0 [ 582.373691][T12118] slab_reclaimable 10280 [ 582.373691][T12118] slab_unreclaimable 51576 [ 582.373691][T12118] slab 61856 [ 582.476160][T12118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12118,uid=0 [ 582.495115][T12118] Memory cgroup out of memory: Killed process 12118 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 03:12:19 executing program 0: socket$kcm(0x29, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, r2, 0x1f}, 0x10) (async) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1, &(0x7f00000002c0)=""/120, 0x78}, 0x1) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x52612282) (async) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8b1a, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00\x03 \x00\x00\x00\x00!\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oO\x8dArYZ\xe1\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xd52\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2r\xc9\xcbVq\x01') 03:12:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) (async) socketpair(0x9, 0x3, 0x0, &(0x7f0000000100)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x1) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x17da) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="e7", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80b, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x16fe4}], 0x1, 0x0, 0x0, 0xf00}, 0xfc) (async) close(r5) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000002c0)={r5}) (async) close(0xffffffffffffffff) (async) openat$cgroup_ro(r1, &(0x7f0000000300)='memory.swap.events\x00', 0x0, 0x0) 03:12:19 executing program 1: unlink(&(0x7f00000007c0)='./file0\x00') (async) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x10003ffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='spi_set_cs\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='freezer.state\x00') (async) syz_clone(0x40140200, &(0x7f0000000080)="26133271fc8449ca34b8cdd734c682647ab5cbaf021bab7195f3480d5b36565ed8eaf78b2279b910ab820181eca1ca5fe8094ff7f99356e3772a8e2eae6504c41bb4654d41bdd82daa8da54f1ec3c1b6d81d4eba0a60c11547d49af9eb69fa0a1e6e5d947dc1a9138efa84bdde679c92c0849b1be5f1fce1709d45d614b0b6db38c046a2007d69e6eafe75121be17e908305c363f6bd87b130630ca30d65048e9686247f9c6c33e1b2c253a98b319ea8d183cb9d587e1471ce3b61cbd1e2d72784a888d37b8aec13a452907d98d23fa2c7d7971145483ed2ab99a2c3c2978a69da8e6f7a53b7abc21d3dfb52b1e88f", 0xef, 0x0, &(0x7f00000001c0), 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x8}, 0xc) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={0x0, 0x0, 0x8}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfdef) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x43, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x422, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3fd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x2) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='freezer.state\x00', 0x0, 0x0) 03:12:19 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) close(r1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x700) socketpair(0x28, 0x3, 0x1ff, &(0x7f0000000180)) 03:12:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:12:19 executing program 4: unlink(&(0x7f00000007c0)='./file0\x00') perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10003ffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='spi_set_cs\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000240)='freezer.state\x00') syz_clone(0x40140200, &(0x7f0000000080)="26133271fc8449ca34b8cdd734c682647ab5cbaf021bab7195f3480d5b36565ed8eaf78b2279b910ab820181eca1ca5fe8094ff7f99356e3772a8e2eae6504c41bb4654d41bdd82daa8da54f1ec3c1b6d81d4eba0a60c11547d49af9eb69fa0a1e6e5d947dc1a9138efa84bdde679c92c0849b1be5f1fce1709d45d614b0b6db38c046a2007d69e6eafe75121be17e908305c363f6bd87b130630ca30d65048e9686247f9c6c33e1b2c253a98b319ea8d183cb9d587e1471ce3b61cbd1e2d72784a888d37b8aec13a452907d98d23fa2c7d7971145483ed2ab99a2c3c2978a69da8e6f7a53b7abc21d3dfb52b1e88f", 0xef, 0x0, &(0x7f00000001c0), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x8}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)={0x0, 0x0, 0x8}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfdef) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x43, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x422, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3fd, 0x0, 0x9}, r3, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='freezer.state\x00', 0x0, 0x0) 03:12:19 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map=r1, 0xffffffffffffffff, 0x9}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)={0x0}, 0x10) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000005c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x5, 0x38}, 0xc) syz_clone(0xd0a01080, 0x0, 0x0, 0x0, 0x0, 0x0) 03:12:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 583.461769][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.490078][T12286] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 583.529995][T12286] CPU: 1 PID: 12286 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 583.540480][T12286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 583.550573][T12286] Call Trace: [ 583.553881][T12286] [ 583.556840][T12286] dump_stack_lvl+0xd1/0x138 [ 583.561480][T12286] dump_header+0x10b/0x85f [ 583.565962][T12286] oom_kill_process.cold+0x10/0x15 [ 583.571129][T12286] out_of_memory+0x35c/0x14a0 [ 583.575851][T12286] ? lockdep_hardirqs_on+0x7d/0x100 [ 583.581073][T12286] ? oom_killer_disable+0x280/0x280 [ 583.586294][T12286] ? mem_cgroup_out_of_memory+0x199/0x270 [ 583.592048][T12286] mem_cgroup_out_of_memory+0x206/0x270 [ 583.597614][T12286] ? mem_cgroup_margin+0x130/0x130 [ 583.602752][T12286] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 583.608580][T12286] memory_max_write+0x2f9/0x3c0 [ 583.613443][T12286] ? mem_cgroup_force_empty_write+0x160/0x160 [ 583.619537][T12286] ? lock_release+0x810/0x810 [ 583.624230][T12286] cgroup_file_write+0x1e2/0x770 [ 583.629182][T12286] ? mem_cgroup_force_empty_write+0x160/0x160 [ 583.635256][T12286] ? kill_css+0x370/0x370 [ 583.639596][T12286] ? __virt_addr_valid+0x61/0x2e0 [ 583.644645][T12286] ? kill_css+0x370/0x370 [ 583.648992][T12286] kernfs_fop_write_iter+0x3f1/0x600 [ 583.654301][T12286] vfs_write+0x9ed/0xdd0 [ 583.658560][T12286] ? kernel_write+0x630/0x630 [ 583.663263][T12286] ? __fget_files+0x26a/0x440 [ 583.667968][T12286] ksys_write+0x12b/0x250 [ 583.672312][T12286] ? __ia32_sys_read+0xb0/0xb0 [ 583.677090][T12286] ? syscall_enter_from_user_mode+0x26/0xb0 [ 583.683004][T12286] do_syscall_64+0x39/0xb0 [ 583.687447][T12286] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 583.693362][T12286] RIP: 0033:0x7ff80a28c0c9 [ 583.697792][T12286] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 583.717417][T12286] RSP: 002b:00007ff80afc5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 583.725843][T12286] RAX: ffffffffffffffda RBX: 00007ff80a3abf80 RCX: 00007ff80a28c0c9 [ 583.733826][T12286] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 583.741804][T12286] RBP: 00007ff80a2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 583.749779][T12286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.757751][T12286] R13: 00007ffcbd87a37f R14: 00007ff80afc5300 R15: 0000000000022000 [ 583.765750][T12286] [ 583.897142][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.919631][T12286] memory: usage 724kB, limit 0kB, failcnt 0 [ 583.925803][T12286] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 583.952014][T12286] Memory cgroup stats for /syz5: [ 583.952341][T12286] anon 143360 [ 583.952341][T12286] file 253952 [ 583.952341][T12286] kernel 344064 [ 583.952341][T12286] kernel_stack 32768 [ 583.952341][T12286] pagetables 77824 [ 583.952341][T12286] sec_pagetables 0 [ 583.952341][T12286] percpu 2432 [ 583.952341][T12286] sock 0 [ 583.952341][T12286] vmalloc 0 [ 583.952341][T12286] shmem 221184 [ 583.952341][T12286] zswap 0 [ 583.952341][T12286] zswapped 0 [ 583.952341][T12286] file_mapped 221184 [ 583.952341][T12286] file_dirty 0 [ 583.952341][T12286] file_writeback 0 [ 583.952341][T12286] swapcached 0 [ 583.952341][T12286] anon_thp 0 [ 583.952341][T12286] file_thp 0 [ 583.952341][T12286] shmem_thp 0 [ 583.952341][T12286] inactive_anon 159744 [ 583.952341][T12286] active_anon 204800 [ 583.952341][T12286] inactive_file 20480 [ 583.952341][T12286] active_file 12288 [ 583.952341][T12286] unevictable 0 [ 583.952341][T12286] slab_reclaimable 14440 [ 583.952341][T12286] slab_unreclaimable 189144 [ 583.952341][T12286] slab 203584 [ 584.083006][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.204676][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.305701][T12286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=12285,uid=0 [ 584.330390][T12286] Memory cgroup out of memory: Killed process 12286 (syz-executor.5) total-vm:56588kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 585.554204][ T33] device hsr_slave_0 left promiscuous mode [ 585.570103][ T33] device hsr_slave_1 left promiscuous mode [ 585.588763][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.618196][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.642093][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.660424][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.700290][ T33] device bridge_slave_1 left promiscuous mode [ 585.706571][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.780338][ T33] device bridge_slave_0 left promiscuous mode [ 585.786648][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.895658][ T33] device veth1_macvtap left promiscuous mode [ 585.910063][ T33] device veth0_macvtap left promiscuous mode [ 585.916241][ T33] device veth1_vlan left promiscuous mode [ 585.974099][ T33] device veth0_vlan left promiscuous mode [ 587.090612][ T33] team0 (unregistering): Port device team_slave_1 removed [ 587.154417][ T33] team0 (unregistering): Port device team_slave_0 removed [ 587.210013][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.252829][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.408017][ T33] bond0 (unregistering): Released all slaves 03:12:33 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:12:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:12:33 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map=r1, 0xffffffffffffffff, 0x9}, 0x10) (async, rerun: 32) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)={0x0}, 0x10) (async, rerun: 32) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000005c0)) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x5, 0x38}, 0xc) syz_clone(0xd0a01080, 0x0, 0x0, 0x0, 0x0, 0x0) 03:12:33 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000540)="17eaca86c27e0ad2174fdd53842040692088a8b03b8e7bf5cc926ed0330777e38de1f61a26d08d83037cd968f2dd253e414d6b252315b00cbb7d8f67d48eee3d0996613b3eb6864c65e7f2f7372559f2c2a83302afddd86daaeb86e830933251c1a28222c6a9e53d272d761c722778c3ffd82886a9d99d410bfe888381fba533ac41372f1732b49ae558d29f07cfc17001dc9c6dd3bf5bb0678409bf7f79b133433f1eca3074f06e44a0b61b48c155fa5dbdffb6bfbafe19461a0f9000469ecae5e4b5049517e71779318ec37f6b687cbce6f6750f591a258b94ebd1cdb7f5d256c981c914f29b0aea43e4f6e3c5e815c58c0d37a044edc461d041448d627f751b153685d199b22a3053e14a017209ec124f5e74205467524ea53185201a424ebf6783a5e9e9a9f97f08ce8007615c6c21d175b5c1dd979c1ec274e09102af6b8298ecf8955f1a6652ea5295598bb71a2f447b4acd769ae851c8ae99046d6f0d089b91ed645c8f4492d97a229234cd2676890b6f06bb2ee030e0f57062ce47f628c4734967d83de68f274bc062d6c6e869d938d9006e557e643bd2c5e1fc0a55d42027e2646ba5ad67696b5147a589c300aba0805b6c193a40fcb2e4e39e2490b273245ec789addc09086a400df3ebcae59872cceabc98811eb4b6cddb8483d47135e86977e2fb7a1c4920070ece11a7b89384c845ef82e7474cb394d71bce4a3a417043b211b4aa6a1d1ccbf2655a7541e67c23644a2697a422a10b8059ae53c5564368bd955790c668a0a81c8153623c64ce9f264b5ce6be4b7a9ee059658550c662730d3f3de5249e9608c932e1cb641c716bfcf81a8dd51487869c36d5cf04facb3ec9d749b1382e1c33b945d79095b14ccc7cdf525cd601aaae2a0a175b086da43240943f325c0948e84e880c894393ea975e17e4f9641f8f1f4e5114d07fca15778f87baba66563309ea3aeeccfd0722d6c03cd85099ed529ce47af64b6682ce662940a94167b719240b5b612369dbfacd3765cab8da928beb3bb326980b1cc88aff9e577dd9f053be9c9cf584b00ea3bb29d39363fe25099f80c00155e6d65eb53d355dc788fd67fc552d162b083af730feb02afac579ad1c1191304059f6ea113a4b629fc833e52176e8d66b39bccb52c1d8bbe325b2396e601154a92cbd2de291c1554729a2425e64c86e2b115dfe03b8fa039fb566e3236a48a8fce09aa24205ae234ae1b65e89f9a623e71e636eec92302998566ab43d4dfc9496f7185635b525d9d164a581b20f8776392d7d23650fd8305df4d0eadaeafdf38e22308c80f6797d36e3b6b4e8ab066c4414fb14e2ee29700b8314f037775a48f7688ff5873250806a291310e5d1b1a16dd472f2d4215820da225d277cf2535189e8dc2461a6754c5ae02653eec2019c8f7143f6c8f9541dbbb9acb635bba6f1c9a5d7f10726cf80fbcd6a7651450a8402008657b92156709ec33be14b9a79bdc89f2d99bfb9ac8d34022fbabb0ffd5b15d8ccc3d4ced3cd80537f00c0a5f9bc48a022254234bd53d72c45ba483c71b90c3db18573d214a99c93dc36197a3213a96c82a1b1156ca56ebcd232d689c5bde9e35dbd068d2b45c86c83c1dee3a8f9e83d62cc2c81eac1f000f612d0bea05fd0fbc5b87c80110b971cdf44610b750cc60090f130a54dbd55fc8bd9b30cccc857ab939b88781006534a6b3d511f80d5713ee039deb937dba83a9f48a97d4feadea8b55b716684ac566bd4c23befe90da9da79a43268608a7de36b457604ffdc951dd27483788a6eb07a6f46a140d7d11b5a86bb8650b30f8312edb5a06faa73efd0c7aeb143ff1f19e91f075acc3c55ea84cfed80facb98d756dd5feca6fb9d27a399fbd124846568c68e1bf66e36956732a057c2732551a671a73e9d5d9b7e6d5643dd4e16c82151fd36e53a083ec7a0e39b66c2a930db3199fbd88c46905e1be464b29f6240666be86aee4467b90517e0cd6ef852efcb0efb52a438c7b91333a409b48e053dcde6a23a6573e212498c8e28a84a3ed658353a5f3ea82a7aa01d23fe94aa2ba9ed73bcdfae44fbb5c8a9f24ed6a1369c5be809a9f436f84268f4d4adcccb0ee3d03112eedc95a611e6e2f7ffea1197405611fcec86d1c265223b27fedfb40a99be7f4ecd452f74f78dfec5a9526bfcf6c052672f58f1a7ac1be6176f69a9b0c0bf929802252dfbb8a1dc7ec64fe001c469492dfa04d80c6da9295d77a40ed81ba5ba347e59523ff8858503c7faa14670de458e1a7ddef80ac606ab2969511690e10a5227dcf9444f642344474b041d96c3eebc74882b458c40c8273a54881919ce9f6c7b4672050458fe487d236b4bef74699ba225fe41c3cedee4a3a23dcb1f701f8efc134a328401b455ca4ce94c5815fa2c5c83a1e59b1f873d139c7a5ee772ec117178b8da3e240d9fc4afa916d117a946eeb53709b99eab06af5563cd7c64c76bcb87d8dff22ba656a1da4eb6cfd3d12825bf9b3605e2e1a8af7c6b23a3d873f0404e9246ce2b23cb192e8402c8eeba0a278152fb3d4f39926131ca7b03490bbea48077727d1d5ac6504d23e18b69fa32e0aca27ce5974a91da38b565ae1bd51def35f3c11a1784a302a90d6f639889257af45d511c8ea357784a732bb42158b5d5bbbdb5ca26208d66afb9052614f3f808c74ca4b73e35ebf2f98e043cb0ad0ec3cf54679a77c59714bb4f54b2f0247ccc67ed6ea32bfc97434e48efb0583bf8b6989435d62a017e3c6515621cc6e1c6cd9970e5b0f158f7331862b16daa123112978be0ac3c0322a4d645aa39180ce8eafebe4839590871516411e97d3cff1434331df10fd17e7975a8a853988b601a0f044e91f225cfaf0a30df8b83b6750b8d99a1ad8092700a50faba417cd812d22ee8790ce7ec4e225fc35a2def3caa99b96c7d08c4e7428768036867d6eb53b4b2db78bada72f207931c5b06b1bd7ce90e7652b463c88e4a7cebcff5bbbf17c2a4c1f859e4553f8282b6b4a62de3e7576baa6955df1a544ca9e34769ec0788870dc6636ad0b03e8ff710607ac4b9acf61d36c2054593bdfb3ad3fb526d85dea7139bdbc111c4d43c3b22946af96c25a3d51fa7e6f4282fc492e494b9cef6e6557694909efbddd52ae88d7ca644271908a3c7ddbf4ad436a0423836f9755c6687b93ddc182074633e772cf05e79d885872f5d04c2a137a28595bdb0015ee7d8a1393374e1c0edb5221bb274c7c3b7195c2d5a36d293a67b9afcf47c38a07de3d28e2f7e3dcd07cf83a6cb58a2b468ea844ae6c3b730f48c13d109da2c449982994ff17536a670eef2ddccd0e5cb9e561f3c8aba6be581c893e1e1d22bda82e6a2a8a9ac589644703ec6e70f73cd2fb057113707c784072058b106b97d95e7ed0fd8bea5a6a519acb67e745f4ab3f8c52d088538e1872a778edc1af2ebe3bfeb8da2bfb3a89c90259833f039a96d43a3cedd075df6d99667d6e64991f7028392a0973370c375977fa70f061049da26abbc1133495ac51c6a3cdaa292a3ba371f22d0ef6b95fe7fbf2999d13c73aa226b29560da5768fe60c77f9c680a34f9e5451ee1dcca7ee9dcfe5d3dead615999df8e3ace684b0bc16cf1873115918ea57ee6f59e3fe7c4ec9eaeb35ea6eae2b3aef5691a102b79d12a735aeb7592bbc051d482092ffc113865dd78e3f2576943adb7cc6ce2850725e9639a851f68702bb966238b1cad90b430d3c3c16c56e24f8e743b4a572dea064ec13881298b4be001de408a43eeb4d329801c0c33a8b94081a77b56c66a8ee7a015b9e6db363506ad7809813f13537a320aab3820a4a95fa8fa03f57316702bdaa18403e6f5688506488fd560414b1819ea8d9befbfdbe9dafe4a018850dec9e4298b5670fc5063aeb982749d1a0b03ab624c3a1c575c662e3c5893f4b029bc7bf9fd9424aaf988ca7fc532cfb63a642348998e307a0f75412a709603c0cf1d6262ca68977b5740ef5523cb6c6328e1ec547f04d75ab9a7ae21add35e89bbfa8ce1e7e9581b46483a6833453230a0dd0fa1a04b4aef6a4047803186ccd033b3befb9b29e4503e41e5e7ea414da272bd4805160e4ce3208987e6c05a5eb0540c4f2dc740fa0dd4c5221da4ba882535ba8af48c9123def435654bc5034274e340e7fb89f63878423cd9d098f18d6ddb7cda7de18acca6d58c25e903c4ec24941c0e14eb7e63fa268f0250a4b04e095ae169a1899376b32419dd177f979de4496c71cbf0461885a7c9f8b3bcefa82e698b7f629deaa123f51690b63fbb5625458392887c3f26001648f3d0fc0b3c91414e54aeea363e92ee9d56a7862328a94ca23a09912b8533fda215d95de15978584fc57268dbb172a203fc00896d263280931ec7f712a79192d9c97f1118685d097b2325b3245d023eb2729175d8bcc217ac54096720ee9a8dbf92369dfd2dba6e029991d9488a3eea1ecf1fb5538c5964deafcf362c9fdb899e707d850042229cf2bb028c6d2adcc183bb8b37b4e502f65f2ee5e00223de9f450ae754f5ff53ad491e5fdf7c4ea1bbeff3a63d7b769593c5e0740201f23cd28ef349741f717dd9c5efd2d658d5454ab5043d9bfbdd3910a9a3a222b21ec19425f81da2c28651b873ec8ed724efd1c52870740a835a36150aa039497821d729a28e9a387ecfa99f778d3ec19de3d060be42f7c67022adbc1bf0d8b1d02ca717f4e5e67de76573c1668cc8a481eb601dd8a05fdae63238423c7850c8d8d702d550bd7f75278831362cf56b02146904f8c016221206c99219847520bad7ce568b093138c3458ff7263af5ee97989bfe0fcfea03cda1befdd7d06464f971c4e27ed974f3ea22b7b43b51332ed40d86598337c01e50e38afe1d28d4a2ebe4897125fcebeed16ae585df0500ce302bf28d1fe7c53b6e20c532066b44b988c3cc8ce2a1d6dee78a1ee852dbcaf6834fe513c65975b3a4d2d0c68928f3b712d066a90b6cd2a8f7232112f39a9d3033469112f7f971bd20e43769919f6f", 0xde0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4040011}, 0x2000000000000000) 03:12:33 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 03:12:33 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = syz_clone(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x6, 0x40, 0x9, 0x0, 0x4, 0x104, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3d, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x8aa10, 0xd8, 0x8, 0x6, 0x6382, 0x1, 0x8, 0x0, 0xff, 0x0, 0x1}, r0, 0xa, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x4, 0xcb, 0xff, 0x0, 0x8046, 0x82000, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x81408, 0x2, 0x0, 0x4, 0xff, 0x80000000, 0x40, 0x0, 0xf6, 0x0, 0x4cf6}, r2, 0x4, r3, 0x9) [ 597.118224][ T5104] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 597.157931][ T5104] CPU: 0 PID: 5104 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 597.168329][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 597.178417][ T5104] Call Trace: [ 597.181722][ T5104] [ 597.184682][ T5104] dump_stack_lvl+0xd1/0x138 [ 597.189312][ T5104] dump_header+0x10b/0x85f [ 597.193779][ T5104] oom_kill_process.cold+0x10/0x15 [ 597.198939][ T5104] out_of_memory+0x35c/0x14a0 [ 597.203666][ T5104] ? find_held_lock+0x2d/0x110 [ 597.208470][ T5104] ? oom_killer_disable+0x280/0x280 [ 597.213716][ T5104] ? find_held_lock+0x2d/0x110 [ 597.218521][ T5104] mem_cgroup_out_of_memory+0x206/0x270 [ 597.224128][ T5104] ? mem_cgroup_margin+0x130/0x130 [ 597.229271][ T5104] ? lock_downgrade+0x6e0/0x6e0 [ 597.234167][ T5104] try_charge_memcg+0xefb/0x12f0 [ 597.239143][ T5104] ? mem_cgroup_handle_over_high+0x520/0x520 [ 597.245157][ T5104] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 597.250920][ T5104] ? lock_downgrade+0x6e0/0x6e0 [ 597.255805][ T5104] ? lock_downgrade+0x6e0/0x6e0 [ 597.260692][ T5104] ? rcu_read_unlock+0x9/0x60 [ 597.265410][ T5104] obj_cgroup_charge+0x2af/0x5e0 [ 597.270364][ T5104] ? copy_process+0x3aa/0x7520 [ 597.275137][ T5104] kmem_cache_alloc_node+0xb7/0x460 [ 597.280350][ T5104] copy_process+0x3aa/0x7520 [ 597.284947][ T5104] ? _raw_spin_unlock+0x28/0x40 [ 597.289815][ T5104] ? wp_page_reuse+0x197/0x570 [ 597.294608][ T5104] ? do_wp_page+0x844/0x3370 [ 597.299220][ T5104] ? __cleanup_sighand+0xb0/0xb0 [ 597.304166][ T5104] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 597.309556][ T5104] ? rwlock_bug.part.0+0x90/0x90 [ 597.314503][ T5104] ? lock_chain_count+0x20/0x20 [ 597.319364][ T5104] kernel_clone+0xeb/0x990 [ 597.323797][ T5104] ? create_io_thread+0xf0/0xf0 [ 597.328663][ T5104] ? find_held_lock+0x2d/0x110 [ 597.333450][ T5104] __do_sys_clone+0xba/0x100 [ 597.338047][ T5104] ? kernel_clone+0x990/0x990 [ 597.342745][ T5104] ? syscall_enter_from_user_mode+0x26/0xb0 [ 597.348655][ T5104] do_syscall_64+0x39/0xb0 [ 597.353085][ T5104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 597.358989][ T5104] RIP: 0033:0x7ff80a289dfb [ 597.363408][ T5104] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 597.383022][ T5104] RSP: 002b:00007ffcbd87a5c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 597.391448][ T5104] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff80a289dfb [ 597.399423][ T5104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 597.407395][ T5104] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557447400 [ 597.415369][ T5104] R10: 00005555574476d0 R11: 0000000000000246 R12: 0000000000000001 [ 597.423348][ T5104] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcbd87a6a0 [ 597.431339][ T5104] 03:12:34 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map=r1, 0xffffffffffffffff, 0x9}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)={0x0}, 0x10) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000005c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x5, 0x38}, 0xc) syz_clone(0xd0a01080, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map=r1, 0xffffffffffffffff, 0x9}, 0x10) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)={0x0}, 0x10) (async) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000005c0)) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x5, 0x38}, 0xc) (async) syz_clone(0xd0a01080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 03:12:34 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async) r2 = syz_clone(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x6, 0x40, 0x9, 0x0, 0x4, 0x104, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3d, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x8aa10, 0xd8, 0x8, 0x6, 0x6382, 0x1, 0x8, 0x0, 0xff, 0x0, 0x1}, r0, 0xa, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x4, 0xcb, 0xff, 0x0, 0x8046, 0x82000, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x81408, 0x2, 0x0, 0x4, 0xff, 0x80000000, 0x40, 0x0, 0xf6, 0x0, 0x4cf6}, r2, 0x4, r3, 0x9) 03:12:34 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 03:12:34 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = syz_clone(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x6, 0x40, 0x9, 0x0, 0x4, 0x104, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3d, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x8aa10, 0xd8, 0x8, 0x6, 0x6382, 0x1, 0x8, 0x0, 0xff, 0x0, 0x1}, r0, 0xa, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x4, 0xcb, 0xff, 0x0, 0x8046, 0x82000, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x81408, 0x2, 0x0, 0x4, 0xff, 0x80000000, 0x40, 0x0, 0xf6, 0x0, 0x4cf6}, r2, 0x4, r3, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async) syz_clone(0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x6, 0x40, 0x9, 0x0, 0x4, 0x104, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3d, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x8aa10, 0xd8, 0x8, 0x6, 0x6382, 0x1, 0x8, 0x0, 0xff, 0x0, 0x1}, r0, 0xa, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x4, 0xcb, 0xff, 0x0, 0x8046, 0x82000, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x81408, 0x2, 0x0, 0x4, 0xff, 0x80000000, 0x40, 0x0, 0xf6, 0x0, 0x4cf6}, r2, 0x4, r3, 0x9) (async) [ 597.829671][ T5104] memory: usage 452kB, limit 0kB, failcnt 20 [ 597.835739][ T5104] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 597.869649][ T5104] Memory cgroup stats for /syz5: [ 597.869877][ T5104] anon 49152 [ 597.869877][ T5104] file 237568 [ 597.869877][ T5104] kernel 176128 [ 597.869877][ T5104] kernel_stack 0 [ 597.869877][ T5104] pagetables 8192 [ 597.869877][ T5104] sec_pagetables 0 [ 597.869877][ T5104] percpu 2368 [ 597.869877][ T5104] sock 0 [ 597.869877][ T5104] vmalloc 0 [ 597.869877][ T5104] shmem 221184 [ 597.869877][ T5104] zswap 0 [ 597.869877][ T5104] zswapped 0 [ 597.869877][ T5104] file_mapped 221184 [ 597.869877][ T5104] file_dirty 0 03:12:34 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) [ 597.869877][ T5104] file_writeback 0 [ 597.869877][ T5104] swapcached 0 [ 597.869877][ T5104] anon_thp 0 [ 597.869877][ T5104] file_thp 0 [ 597.869877][ T5104] shmem_thp 0 [ 597.869877][ T5104] inactive_anon 65536 [ 597.869877][ T5104] active_anon 204800 [ 597.869877][ T5104] inactive_file 8192 [ 597.869877][ T5104] active_file 8192 [ 597.869877][ T5104] unevictable 0 [ 597.869877][ T5104] slab_reclaimable 4520 [ 597.869877][ T5104] slab_unreclaimable 150280 [ 597.869877][ T5104] slab 154800 03:12:34 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000200)=@raw=[@map_fd, @map_idx, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000240)='GPL\x00', 0x4, 0xe8, &(0x7f00000002c0)=""/232, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 598.193522][ T5104] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5104,uid=0 [ 598.216194][ T5104] Memory cgroup out of memory: Killed process 5104 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 599.737297][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 599.747912][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 599.756229][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 599.764352][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 599.789256][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 599.796895][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 600.432351][T12738] chnl_net:caif_netlink_parms(): no params data found [ 600.647783][T12738] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.673076][T12738] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.689386][T12738] device bridge_slave_0 entered promiscuous mode [ 600.707357][T12738] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.721344][T12738] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.745383][T12738] device bridge_slave_1 entered promiscuous mode [ 600.843192][T12738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.872353][T12738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.984439][T12738] team0: Port device team_slave_0 added [ 601.002013][T12738] team0: Port device team_slave_1 added [ 601.088488][T12738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.109571][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.219724][T12738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.253489][T12738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.294667][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.377861][T12738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.533657][T12738] device hsr_slave_0 entered promiscuous mode [ 601.557568][T12738] device hsr_slave_1 entered promiscuous mode [ 601.822565][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 602.740495][ T33] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.861151][ T33] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.950244][ T33] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.070871][ T33] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.103426][T12738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 603.133782][T12738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 603.175213][T12738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 603.204578][T12738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 603.409059][T12738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.462642][T12738] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.472821][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 603.481593][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 603.501641][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 603.511349][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 603.527638][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.534798][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.552346][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 603.566724][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 603.578174][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.585360][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.602524][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 603.651409][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 603.660135][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 603.669189][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 603.681552][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 603.690932][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 603.699754][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 603.713472][T12738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.731662][T12738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 603.747857][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 603.758033][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 603.770167][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 603.900110][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 604.118621][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 604.126909][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 604.157054][T12738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.218557][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 604.237048][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 604.273940][ T33] device hsr_slave_0 left promiscuous mode [ 604.288557][ T33] device hsr_slave_1 left promiscuous mode [ 604.297443][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.307641][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.326265][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.336814][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.348361][ T33] device bridge_slave_1 left promiscuous mode [ 604.355524][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.364536][ T33] device bridge_slave_0 left promiscuous mode [ 604.370888][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.384751][ T33] device veth1_macvtap left promiscuous mode [ 604.391157][ T33] device veth0_macvtap left promiscuous mode [ 604.397303][ T33] device veth1_vlan left promiscuous mode [ 604.403846][ T33] device veth0_vlan left promiscuous mode [ 604.710123][ T33] team0 (unregistering): Port device team_slave_1 removed [ 604.726227][ T33] team0 (unregistering): Port device team_slave_0 removed [ 604.744273][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.762717][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.854467][ T33] bond0 (unregistering): Released all slaves [ 604.938568][T12738] device veth0_vlan entered promiscuous mode [ 604.957432][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 604.966828][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 604.983127][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 605.000499][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.013109][T12738] device veth1_vlan entered promiscuous mode [ 605.096934][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 605.106422][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 605.129172][T12738] device veth0_macvtap entered promiscuous mode [ 605.165682][T12738] device veth1_macvtap entered promiscuous mode [ 605.206562][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.225223][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.236834][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.255386][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.267054][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.289222][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.309827][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.327843][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.348130][T12738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.361442][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 605.376510][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 605.386982][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 605.403977][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 605.414963][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.439460][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.456395][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.467190][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.484740][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.496856][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.516269][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.528408][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.548057][T12738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.557066][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 605.573588][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 605.595517][T12738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.608640][T12738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.624966][T12738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.635661][T12738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.738029][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.764243][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.786796][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 605.801953][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.810594][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.823034][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 605.981827][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 606.205607][T12841] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 606.217302][T12841] CPU: 1 PID: 12841 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 606.227758][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 606.237828][T12841] Call Trace: [ 606.241111][T12841] [ 606.244048][T12841] dump_stack_lvl+0xd1/0x138 [ 606.248660][T12841] dump_header+0x10b/0x85f [ 606.253105][T12841] oom_kill_process.cold+0x10/0x15 [ 606.258243][T12841] out_of_memory+0x35c/0x14a0 [ 606.262939][T12841] ? lockdep_hardirqs_on+0x7d/0x100 [ 606.268152][T12841] ? oom_killer_disable+0x280/0x280 [ 606.273370][T12841] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 606.279035][T12841] mem_cgroup_out_of_memory+0x206/0x270 [ 606.284606][T12841] ? mem_cgroup_margin+0x130/0x130 [ 606.289756][T12841] memory_max_write+0x2f9/0x3c0 [ 606.294620][T12841] ? mem_cgroup_force_empty_write+0x160/0x160 [ 606.300707][T12841] ? lock_release+0x810/0x810 [ 606.305402][T12841] cgroup_file_write+0x1e2/0x770 [ 606.310356][T12841] ? mem_cgroup_force_empty_write+0x160/0x160 [ 606.316436][T12841] ? kill_css+0x370/0x370 [ 606.320794][T12841] ? kill_css+0x370/0x370 [ 606.325135][T12841] kernfs_fop_write_iter+0x3f1/0x600 [ 606.330445][T12841] vfs_write+0x9ed/0xdd0 [ 606.334703][T12841] ? kernel_write+0x630/0x630 [ 606.339411][T12841] ksys_write+0x12b/0x250 [ 606.343749][T12841] ? __ia32_sys_read+0xb0/0xb0 [ 606.348535][T12841] do_syscall_64+0x39/0xb0 [ 606.352977][T12841] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 606.358887][T12841] RIP: 0033:0x7f1d0cc8c0c9 [ 606.363315][T12841] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 606.382972][T12841] RSP: 002b:00007f1d0d924168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.391408][T12841] RAX: ffffffffffffffda RBX: 00007f1d0cdabf80 RCX: 00007f1d0cc8c0c9 [ 606.399388][T12841] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 606.407364][T12841] RBP: 00007f1d0cce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 606.415349][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.423326][T12841] R13: 00007ffdae451fbf R14: 00007f1d0d924300 R15: 0000000000022000 [ 606.431326][T12841] [ 606.449757][T12841] memory: usage 612kB, limit 0kB, failcnt 290 [ 606.457224][T12841] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 606.465798][T12841] Memory cgroup stats for /syz2: [ 606.468102][T12841] anon 114688 [ 606.468102][T12841] file 225280 [ 606.468102][T12841] kernel 266240 [ 606.468102][T12841] kernel_stack 65536 [ 606.468102][T12841] pagetables 77824 [ 606.468102][T12841] sec_pagetables 0 [ 606.468102][T12841] percpu 64 [ 606.468102][T12841] sock 0 [ 606.468102][T12841] vmalloc 0 [ 606.468102][T12841] shmem 221184 [ 606.468102][T12841] zswap 0 [ 606.468102][T12841] zswapped 0 [ 606.468102][T12841] file_mapped 221184 [ 606.468102][T12841] file_dirty 0 [ 606.468102][T12841] file_writeback 0 [ 606.468102][T12841] swapcached 0 [ 606.468102][T12841] anon_thp 0 [ 606.468102][T12841] file_thp 0 [ 606.468102][T12841] shmem_thp 0 [ 606.468102][T12841] inactive_anon 135168 [ 606.468102][T12841] active_anon 200704 [ 606.468102][T12841] inactive_file 0 [ 606.468102][T12841] active_file 4096 [ 606.468102][T12841] unevictable 0 [ 606.468102][T12841] slab_reclaimable 17528 [ 606.468102][T12841] slab_unreclaimable 75048 [ 606.468102][T12841] slab 92576 [ 606.569026][T12841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12840,uid=0 [ 606.587443][T12841] Memory cgroup out of memory: Killed process 12840 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 608.059884][ T48] Bluetooth: hci0: command 0x0419 tx timeout 03:12:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:12:53 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1604, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_clone(0xe8004000, &(0x7f00000018c0)="a5cbba35bf1b099acdcbaabed4f4482a9ea665c6", 0x14, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)) 03:12:53 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async) close(r0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000540)="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", 0xde0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4040011}, 0x2000000000000000) 03:12:53 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x6}, 0x8) 03:12:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x60c000, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 03:12:53 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 616.810951][T12738] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 616.870340][T12738] CPU: 0 PID: 12738 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 616.880827][T12738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 616.890912][T12738] Call Trace: [ 616.894212][T12738] [ 616.897179][T12738] dump_stack_lvl+0xd1/0x138 [ 616.901813][T12738] dump_header+0x10b/0x85f [ 616.906280][T12738] oom_kill_process.cold+0x10/0x15 [ 616.911443][T12738] out_of_memory+0x35c/0x14a0 [ 616.916171][T12738] ? find_held_lock+0x2d/0x110 [ 616.920981][T12738] ? oom_killer_disable+0x280/0x280 [ 616.926228][T12738] ? find_held_lock+0x2d/0x110 [ 616.931037][T12738] mem_cgroup_out_of_memory+0x206/0x270 [ 616.936623][T12738] ? mem_cgroup_margin+0x130/0x130 [ 616.941772][T12738] ? lock_downgrade+0x6e0/0x6e0 [ 616.946671][T12738] try_charge_memcg+0xefb/0x12f0 [ 616.951681][T12738] ? mem_cgroup_handle_over_high+0x520/0x520 [ 616.957706][T12738] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 616.963482][T12738] ? lock_downgrade+0x6e0/0x6e0 [ 616.968370][T12738] ? lock_downgrade+0x6e0/0x6e0 [ 616.973255][T12738] ? rcu_read_unlock+0x9/0x60 [ 616.977995][T12738] obj_cgroup_charge+0x2af/0x5e0 [ 616.982979][T12738] ? copy_process+0x3aa/0x7520 [ 616.987776][T12738] kmem_cache_alloc_node+0xb7/0x460 [ 616.993011][T12738] copy_process+0x3aa/0x7520 [ 616.997634][T12738] ? _raw_spin_unlock+0x28/0x40 [ 617.002516][T12738] ? wp_page_reuse+0x197/0x570 [ 617.007319][T12738] ? do_wp_page+0x844/0x3370 [ 617.011951][T12738] ? __cleanup_sighand+0xb0/0xb0 [ 617.016912][T12738] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 617.022325][T12738] ? rwlock_bug.part.0+0x90/0x90 [ 617.027288][T12738] ? lock_chain_count+0x20/0x20 [ 617.032178][T12738] kernel_clone+0xeb/0x990 [ 617.036627][T12738] ? create_io_thread+0xf0/0xf0 [ 617.041525][T12738] ? find_held_lock+0x2d/0x110 [ 617.046394][T12738] __do_sys_clone+0xba/0x100 [ 617.051027][T12738] ? kernel_clone+0x990/0x990 [ 617.055760][T12738] ? syscall_enter_from_user_mode+0x26/0xb0 [ 617.061698][T12738] do_syscall_64+0x39/0xb0 03:12:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) [ 617.066167][T12738] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 617.072099][T12738] RIP: 0033:0x7f1d0cc89dfb [ 617.076547][T12738] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 617.096195][T12738] RSP: 002b:00007ffdae452200 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 617.104641][T12738] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d0cc89dfb [ 617.112644][T12738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 03:12:53 executing program 4: openat$cgroup_devices(0xffffffffffffffff, 0xfffffffffffffffd, 0x2, 0x0) [ 617.120641][T12738] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557401400 [ 617.128640][T12738] R10: 00005555574016d0 R11: 0000000000000246 R12: 0000000000000001 [ 617.136646][T12738] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdae4522e0 [ 617.144673][T12738] 03:12:53 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2a141, 0x0) 03:12:54 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 03:12:54 executing program 1: syz_clone(0x90001080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 617.279649][T12738] memory: usage 316kB, limit 0kB, failcnt 310 [ 617.285827][T12738] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 617.361944][T12738] Memory cgroup stats for /syz2: [ 617.362156][T12738] anon 36864 [ 617.362156][T12738] file 225280 [ 617.362156][T12738] kernel 61440 [ 617.362156][T12738] kernel_stack 0 [ 617.362156][T12738] pagetables 8192 [ 617.362156][T12738] sec_pagetables 0 [ 617.362156][T12738] percpu 0 [ 617.362156][T12738] sock 0 [ 617.362156][T12738] vmalloc 0 [ 617.362156][T12738] shmem 221184 [ 617.362156][T12738] zswap 0 [ 617.362156][T12738] zswapped 0 [ 617.362156][T12738] file_mapped 221184 [ 617.362156][T12738] file_dirty 0 [ 617.362156][T12738] file_writeback 0 [ 617.362156][T12738] swapcached 0 [ 617.362156][T12738] anon_thp 0 [ 617.362156][T12738] file_thp 0 [ 617.362156][T12738] shmem_thp 0 [ 617.362156][T12738] inactive_anon 57344 [ 617.362156][T12738] active_anon 200704 [ 617.362156][T12738] inactive_file 0 [ 617.362156][T12738] active_file 4096 [ 617.362156][T12738] unevictable 0 [ 617.362156][T12738] slab_reclaimable 10280 [ 617.362156][T12738] slab_unreclaimable 32296 [ 617.362156][T12738] slab 42576 03:12:54 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f0000000540)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) [ 617.678350][T12738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12738,uid=0 [ 617.708954][T12738] Memory cgroup out of memory: Killed process 12738 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 619.296386][ T4388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.309011][ T4388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.317578][ T4388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.325604][ T4388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.333387][ T4388] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 619.341117][ T4388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.620953][T13290] chnl_net:caif_netlink_parms(): no params data found 03:12:56 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:12:56 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x4e) [ 619.802526][T13290] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.825033][T13290] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.865120][T13290] device bridge_slave_0 entered promiscuous mode [ 619.923515][T13290] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.931047][T13290] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.939288][T13290] device bridge_slave_1 entered promiscuous mode [ 619.967384][T13290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.989867][T13290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.053218][T13290] team0: Port device team_slave_0 added [ 620.071982][T13290] team0: Port device team_slave_1 added [ 620.138749][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.156773][T13290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.165246][T13290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.191583][T13290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.204853][T13290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.217116][T13290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.245475][T13290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.267290][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.357431][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.402548][T13290] device hsr_slave_0 entered promiscuous mode [ 620.420038][T13290] device hsr_slave_1 entered promiscuous mode [ 620.438450][T13290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.460504][T13290] Cannot create hsr debugfs directory [ 620.511603][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.419906][ T4388] Bluetooth: hci0: command 0x0409 tx timeout [ 622.098543][T13290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 622.150861][ T11] device hsr_slave_0 left promiscuous mode [ 622.158623][ T11] device hsr_slave_1 left promiscuous mode [ 622.166418][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.174844][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.184505][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.192107][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.201550][ T11] device bridge_slave_1 left promiscuous mode [ 622.207835][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.217721][ T11] device bridge_slave_0 left promiscuous mode [ 622.224120][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.249009][ T11] device veth1_macvtap left promiscuous mode [ 622.260801][ T11] device veth0_macvtap left promiscuous mode [ 622.266963][ T11] device veth1_vlan left promiscuous mode [ 622.274724][ T11] device veth0_vlan left promiscuous mode [ 622.578607][ T11] team0 (unregistering): Port device team_slave_1 removed [ 622.594917][ T11] team0 (unregistering): Port device team_slave_0 removed [ 622.614409][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.633838][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.702644][ T11] bond0 (unregistering): Released all slaves [ 622.770820][T13290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 622.781344][T13290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 622.803087][T13290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 623.013114][T13290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.037073][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.052904][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.073031][T13290] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.093974][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.108662][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.118499][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.125674][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.147320][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.155603][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.164935][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.174160][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.181345][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.189876][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.239664][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.260833][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.280846][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.307975][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.321781][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.342177][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.350473][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.376756][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.401992][T13290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.499909][ T4388] Bluetooth: hci0: command 0x041b tx timeout [ 623.890223][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.897737][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.920910][T13290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.229812][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.236190][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.571099][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 624.583224][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.630986][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 624.639444][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.663887][T13290] device veth0_vlan entered promiscuous mode [ 624.674264][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 624.683199][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 624.697374][T13290] device veth1_vlan entered promiscuous mode [ 624.726027][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 624.736631][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 624.748664][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 624.764703][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 624.777261][T13290] device veth0_macvtap entered promiscuous mode [ 624.804515][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 624.818813][T13290] device veth1_macvtap entered promiscuous mode [ 624.838927][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.851214][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.862432][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.873796][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.890339][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.908786][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.920523][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.937988][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.954448][T13290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.969154][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 624.986118][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 624.997821][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.018146][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.032781][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.051529][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.066093][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.079250][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.096415][T13290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.110234][T13290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.131019][T13290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.155948][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 625.171608][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 625.194276][T13290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.212296][T13290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.226444][T13290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.238851][T13290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.364416][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.387259][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.418077][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 625.446012][ T5329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.458366][ T5329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.475901][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 625.579643][ T4388] Bluetooth: hci0: command 0x040f tx timeout 03:13:03 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async) close(r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000540)="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", 0xde0}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4040011}, 0x2000000000000000) 03:13:03 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x212440, 0x0) 03:13:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0xb9, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:13:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95ff505f36431ec9, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:13:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000540)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 03:13:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0xb9, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:03 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "89"}]}}, &(0x7f0000000540)=""/4096, 0x1000000, 0x1000, 0x1}, 0x20) 03:13:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=ANY=[], 0x128}, 0x600d5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0x60001900, &(0x7f0000000100)="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", 0x0, 0x2a, 0x60000000}, 0x2c) 03:13:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:13:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0xb9, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:03 executing program 0: perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f00000002c0)=""/168, 0x26, 0xa8, 0x1}, 0x20) 03:13:03 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) [ 627.659882][ T4388] Bluetooth: hci0: command 0x0419 tx timeout [ 628.585191][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 628.594278][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 628.602841][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 628.611912][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 628.621389][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 628.628711][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 628.871893][T13528] chnl_net:caif_netlink_parms(): no params data found [ 628.968775][T13528] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.977409][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.992549][T13528] device bridge_slave_0 entered promiscuous mode [ 629.007043][T13528] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.016984][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.038606][T13528] device bridge_slave_1 entered promiscuous mode [ 629.069145][T13528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.082745][T13528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.124173][T13528] team0: Port device team_slave_0 added [ 629.136763][T13528] team0: Port device team_slave_1 added [ 629.164397][T13528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.176849][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.213560][T13528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.237219][T13528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.248453][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.276804][T13528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.350909][T13528] device hsr_slave_0 entered promiscuous mode [ 629.362416][T13528] device hsr_slave_1 entered promiscuous mode [ 630.091514][T13528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 630.112072][T13528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 630.130968][T13528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 630.162730][T13528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 630.318634][T13528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.347496][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 630.361560][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 630.376635][T13528] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.389397][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 630.399332][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 630.408391][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.415650][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.443174][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 630.451903][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 630.462569][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 630.471510][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.478643][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.487695][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 630.496802][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 630.506272][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 630.516279][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 630.534699][T13528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.562034][T13528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 630.585925][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 630.594509][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 630.603474][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 630.612840][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 630.622531][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 630.632025][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 630.699805][ T4388] Bluetooth: hci1: command 0x0409 tx timeout [ 630.860155][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 630.867678][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 630.879708][T13528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.906647][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 630.916284][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 630.940659][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.949189][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 630.959210][T13528] device veth0_vlan entered promiscuous mode [ 630.968838][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.978222][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.992098][T13528] device veth1_vlan entered promiscuous mode [ 631.022133][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 631.031946][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 631.040808][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.049870][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.060935][T13528] device veth0_macvtap entered promiscuous mode [ 631.073640][T13528] device veth1_macvtap entered promiscuous mode [ 631.094860][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.106107][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.142932][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.153846][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.164136][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.174970][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.185886][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.196854][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.207002][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.218189][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.240357][T13528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.249709][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 631.257959][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 631.279252][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 631.290301][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 631.301442][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.313716][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.324474][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.335278][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.349091][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.359913][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.370374][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.382035][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.392749][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.403669][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.415424][T13528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.424902][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 631.434699][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 631.447824][T13528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.468308][T13528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.478097][T13528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.491348][T13528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.590160][ T5329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.598316][ T5329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.627382][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.644027][ T5329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.652785][ T5329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.667501][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.060267][T13598] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 632.072124][T13598] CPU: 1 PID: 13598 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 632.082586][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 632.092676][T13598] Call Trace: [ 632.095974][T13598] [ 632.098925][T13598] dump_stack_lvl+0xd1/0x138 [ 632.103567][T13598] dump_header+0x10b/0x85f [ 632.108064][T13598] oom_kill_process.cold+0x10/0x15 [ 632.113234][T13598] out_of_memory+0x35c/0x14a0 [ 632.117966][T13598] ? lockdep_hardirqs_on+0x7d/0x100 [ 632.123213][T13598] ? oom_killer_disable+0x280/0x280 [ 632.128638][T13598] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 632.134324][T13598] mem_cgroup_out_of_memory+0x206/0x270 [ 632.139922][T13598] ? mem_cgroup_margin+0x130/0x130 [ 632.145105][T13598] memory_max_write+0x2f9/0x3c0 [ 632.149999][T13598] ? mem_cgroup_force_empty_write+0x160/0x160 [ 632.156106][T13598] ? cgroup_file_write+0x181/0x770 [ 632.161267][T13598] cgroup_file_write+0x1e2/0x770 [ 632.166232][T13598] ? mem_cgroup_force_empty_write+0x160/0x160 [ 632.172318][T13598] ? kill_css+0x370/0x370 [ 632.176677][T13598] ? kill_css+0x370/0x370 [ 632.181020][T13598] kernfs_fop_write_iter+0x3f1/0x600 [ 632.186333][T13598] vfs_write+0x9ed/0xdd0 [ 632.190592][T13598] ? kernel_write+0x630/0x630 [ 632.195283][T13598] ? lockdep_hardirqs_on+0x7d/0x100 [ 632.200497][T13598] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 632.206681][T13598] ksys_write+0x12b/0x250 [ 632.211024][T13598] ? __ia32_sys_read+0xb0/0xb0 [ 632.215806][T13598] ? syscall_enter_from_user_mode+0x30/0xb0 [ 632.221719][T13598] do_syscall_64+0x39/0xb0 [ 632.226158][T13598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 632.232066][T13598] RIP: 0033:0x7fb26d68c0c9 [ 632.236487][T13598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.256102][T13598] RSP: 002b:00007fb26e4cd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.264525][T13598] RAX: ffffffffffffffda RBX: 00007fb26d7abf80 RCX: 00007fb26d68c0c9 [ 632.272501][T13598] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 632.280479][T13598] RBP: 00007fb26d6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 632.288452][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.296427][T13598] R13: 00007fffe788983f R14: 00007fb26e4cd300 R15: 0000000000022000 [ 632.304424][T13598] [ 632.324429][T13598] memory: usage 608kB, limit 0kB, failcnt 327 [ 632.335700][T13598] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 632.350239][T13598] Memory cgroup stats for /syz2: [ 632.355682][T13598] anon 114688 [ 632.355682][T13598] file 225280 [ 632.355682][T13598] kernel 266240 [ 632.355682][T13598] kernel_stack 65536 [ 632.355682][T13598] pagetables 81920 [ 632.355682][T13598] sec_pagetables 0 [ 632.355682][T13598] percpu 64 [ 632.355682][T13598] sock 0 [ 632.355682][T13598] vmalloc 0 [ 632.355682][T13598] shmem 221184 [ 632.355682][T13598] zswap 0 [ 632.355682][T13598] zswapped 0 [ 632.355682][T13598] file_mapped 221184 [ 632.355682][T13598] file_dirty 0 [ 632.355682][T13598] file_writeback 0 [ 632.355682][T13598] swapcached 0 [ 632.355682][T13598] anon_thp 0 [ 632.355682][T13598] file_thp 0 [ 632.355682][T13598] shmem_thp 0 [ 632.355682][T13598] inactive_anon 135168 [ 632.355682][T13598] active_anon 200704 [ 632.355682][T13598] inactive_file 0 [ 632.355682][T13598] active_file 4096 [ 632.355682][T13598] unevictable 0 [ 632.355682][T13598] slab_reclaimable 17528 [ 632.355682][T13598] slab_unreclaimable 75048 [ 632.355682][T13598] slab 92576 [ 632.461174][T13598] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13597,uid=0 [ 632.491948][T13598] Memory cgroup out of memory: Killed process 13597 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:13:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000540)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 03:13:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0xb9, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:09 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) 03:13:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:13:09 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) [ 632.783780][ T4388] Bluetooth: hci1: command 0x041b tx timeout 03:13:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @ptr]}, {0x0, [0x0]}}, &(0x7f0000000180)=""/234, 0x3b, 0xea, 0x1}, 0x20) 03:13:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x6000000, 0x0, 0x0, 0x2}}, &(0x7f0000000540)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) [ 632.893347][T13528] syz-executor.2 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 632.929563][T13528] CPU: 0 PID: 13528 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 632.940057][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 632.950147][T13528] Call Trace: [ 632.953451][T13528] [ 632.956407][T13528] dump_stack_lvl+0xd1/0x138 [ 632.961041][T13528] dump_header+0x10b/0x85f [ 632.965515][T13528] oom_kill_process.cold+0x10/0x15 [ 632.970678][T13528] out_of_memory+0x35c/0x14a0 [ 632.975430][T13528] ? find_held_lock+0x2d/0x110 [ 632.980240][T13528] ? oom_killer_disable+0x280/0x280 [ 632.985489][T13528] ? find_held_lock+0x2d/0x110 [ 632.990298][T13528] mem_cgroup_out_of_memory+0x206/0x270 [ 632.995881][T13528] ? mem_cgroup_margin+0x130/0x130 [ 633.001041][T13528] ? lock_downgrade+0x6e0/0x6e0 [ 633.005937][T13528] try_charge_memcg+0xefb/0x12f0 [ 633.010912][T13528] ? mem_cgroup_handle_over_high+0x520/0x520 [ 633.016943][T13528] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 633.022714][T13528] ? lock_downgrade+0x6e0/0x6e0 [ 633.027602][T13528] ? lock_downgrade+0x6e0/0x6e0 [ 633.032489][T13528] ? rcu_read_unlock+0x9/0x60 [ 633.037226][T13528] obj_cgroup_charge+0x2af/0x5e0 [ 633.042211][T13528] ? __alloc_file+0x21/0x270 [ 633.046837][T13528] kmem_cache_alloc+0xb5/0x430 [ 633.051634][T13528] __alloc_file+0x21/0x270 [ 633.056092][T13528] alloc_empty_file+0x71/0x170 [ 633.060897][T13528] path_openat+0xe1/0x2a50 [ 633.065363][T13528] ? ___slab_alloc+0x9df/0x1400 [ 633.070263][T13528] ? path_lookupat+0x840/0x840 [ 633.075077][T13528] do_filp_open+0x1ba/0x410 [ 633.079617][T13528] ? may_open_dev+0xf0/0xf0 [ 633.084161][T13528] ? find_held_lock+0x2d/0x110 [ 633.088989][T13528] ? do_raw_spin_lock+0x124/0x2b0 [ 633.094054][T13528] ? rwlock_bug.part.0+0x90/0x90 [ 633.099040][T13528] ? _raw_spin_unlock+0x28/0x40 [ 633.103927][T13528] ? alloc_fd+0x2d8/0x6d0 [ 633.108304][T13528] do_sys_openat2+0x16d/0x4c0 [ 633.113014][T13528] ? path_umount+0x6b8/0x10b0 [ 633.117729][T13528] ? putname+0x102/0x140 [ 633.122010][T13528] ? build_open_flags+0x6f0/0x6f0 [ 633.127074][T13528] ? may_mount+0xa0/0xa0 [ 633.131370][T13528] __x64_sys_openat+0x143/0x1f0 [ 633.136251][T13528] ? __ia32_sys_open+0x1c0/0x1c0 [ 633.141232][T13528] ? syscall_enter_from_user_mode+0x26/0xb0 [ 633.147165][T13528] do_syscall_64+0x39/0xb0 [ 633.151628][T13528] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 633.157560][T13528] RIP: 0033:0x7fb26d68bc38 [ 633.162004][T13528] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 633.181646][T13528] RSP: 002b:00007fffe7888930 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 633.190097][T13528] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb26d68bc38 [ 633.198094][T13528] RDX: 0000000000090800 RSI: 00007fffe7889b20 RDI: 00000000ffffff9c [ 633.206098][T13528] RBP: 00007fffe7889afc R08: 0000000000090800 R09: 00007fffe7889b20 [ 633.214103][T13528] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fb26d6e6b24 [ 633.222109][T13528] R13: 00007fffe7889b20 R14: 0000000000000018 R15: 00007fffe7889b60 [ 633.230137][T13528] [ 633.297042][T13528] memory: usage 328kB, limit 0kB, failcnt 346 [ 633.306175][T13528] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 633.320794][T13528] Memory cgroup stats for /syz2: [ 633.321015][T13528] anon 36864 [ 633.321015][T13528] file 225280 [ 633.321015][T13528] kernel 73728 [ 633.321015][T13528] kernel_stack 0 [ 633.321015][T13528] pagetables 8192 [ 633.321015][T13528] sec_pagetables 0 [ 633.321015][T13528] percpu 64 [ 633.321015][T13528] sock 0 [ 633.321015][T13528] vmalloc 0 [ 633.321015][T13528] shmem 221184 [ 633.321015][T13528] zswap 0 [ 633.321015][T13528] zswapped 0 [ 633.321015][T13528] file_mapped 221184 [ 633.321015][T13528] file_dirty 0 [ 633.321015][T13528] file_writeback 0 [ 633.321015][T13528] swapcached 0 [ 633.321015][T13528] anon_thp 0 [ 633.321015][T13528] file_thp 0 [ 633.321015][T13528] shmem_thp 0 [ 633.321015][T13528] inactive_anon 57344 [ 633.321015][T13528] active_anon 200704 [ 633.321015][T13528] inactive_file 0 [ 633.321015][T13528] active_file 4096 [ 633.321015][T13528] unevictable 0 [ 633.321015][T13528] slab_reclaimable 7704 [ 633.321015][T13528] slab_unreclaimable 44080 [ 633.321015][T13528] slab 51784 [ 633.446288][T13528] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13528,uid=0 [ 633.470884][T13528] Memory cgroup out of memory: Killed process 13528 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 03:13:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:13:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0x2, 0x0, 0x0, 0xc}]}, {0x0, [0x0]}}, &(0x7f0000000540)=""/4096, 0x27, 0x1000, 0x1}, 0x20) 03:13:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$inet(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400190000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d8384d30000034055b67dafe6c85d78c07fa1f7e655ce34e4d5b3185fec0e0700897a74a0389853ed0213cc04c7867a4e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb62b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152d7cd7b9cd38fdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6148ba532e6ea09c346dfebd38608b328008000000000000000003350830e10d858e8327ef01fb6c86a00000000000000002aec61ce63a38d2fd50117b89a9a54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cae1bd4f4540af9a9ceafd07ed00b0000002cab154ad029a1090000002780850014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe230870072858dc06e7c337642d3e5a807232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683d98685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c6c2c9d7cd3d03d03eb3ec8f13f395b8dcd36e74865fa447e2edfae4f390a8337841cef386e229ad643fd622b7f6252229682e24b92533ac2a9f5a699593f084419cae0bbafb2dd767cb49a6aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0559d380578673f8b6e74ce23877a6b24db0e067345569dad5add094bfa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c4690d3add8eebc8619d73415cda2130f5011e48455b5a8590dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c00000000000000009ac4cfc1c7b40000000000000007ff57229495c826b956ba879ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604fcd60c2499d5d16d7d9158ffffffff5d00000000ef439dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df494b315f651c8412392191fa800e830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90507cd4078a5c6540c653b1bd6c9beb0d0b07c0dd00490f167e6d5c1109681439dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052952cf189bee14c4fa6b355c304188bd20785f653b621491dc6aaee0d40973109644fb94c06006e3c1be2f633c1d98799700aae3c404f9681f42d321c591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fdeb28c13c1ed1c0d9cae846bcbfa8cce7b893e0e90bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc7eae676e1fb4d5865c0ca177a4c7fbb4e62b445cc4806f47ffb966fcf1e54f5a27da3770845cf442d488afdc0e1700000000000000000000000000000000000000000001f000000005205000000dc1c56d59f35d3676329bb8cda690d192a07288f1f09ddc73ea1773b4519834a34ac977ebd4450e121d01342703f5bf030ff35878a6d169cdfaa4252d4ef5f1806cf813f7063afea6b8f6216ff202b5b5a0400b5e838b307632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d2e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd03000000000000000000000000000000000000000000000000000000000000000026ded4dd40000000c7802043ecfe69f743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836dd4128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661fdcfa68f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986bf500000000a3df2739d1768705df188a4f6e1694da24a0ada3f95e9c4f84e84e7a4f9f8ad00d1ea07f17c8b2881ca5010c926617402f85a854d4b8bfd375203765dfb3b4f6744bcde659aa36fc164cbbcf0253b190c87e51d6bfc119c2060772f9c9e7a69dc9726868f33b5693fc6ccdb2beb995cab1b7de8e20b8ddc6b50cf4eecc0000c4390c71c7bf20bf05ebff4f6b5cb88e31aa60cf9eb919ccfc83efab939d608d30f0dc3c7b663ccd05aa7c420655bdc88a69c5a1c5474b55f452790d4415aeb5d299af731786ce15e3ac9cbafdb0e2659d28a8861e023669e2cdd113fd97364396c8724f6c5b6e32cb1c8a66bee428454b9ac43839d1d7ca5ff3a7bb90f4e9e2c070898c1469fd85d25a91f42faa656bce8ed96cb320d436ded3c4eaa5bd06cf1b83c5a88c5765b8aafac148d4b5898e2af74f62289127765944e60f765a32c105c7a73aa69c57fada869072629f87c23add601010076469a994008f340602572bb316ca405c8072a027fbb300000000000000000000000000ecc60ed962e5eb94fe20d369ab8d3ab19c8fe8bdc2a187e9ae63050d9f856c9ad67ea75ac5967f3e2867b58e368a4b523f1f60e8903553628e2eb6d8f11b6088d7d493650c0bb3f86ba45dbbe92ae81747e80de469c2d3f47cecc26bcf063538b126a8e5f375837678ddcbed066b206c55cd6f4bafa1db963805f609125d6b3e0ad80a33337c277d958064930a2c22957535f44c12ab47a7836e5d20a29f5355ae2157824f1f4938bc5f1193faabfd78e8c2aef0d2627018728e90459d4e3beba125d89614507017cdeb890f574a3408878993b0ee0fb8c5864d2f54db9d9b455b45b614e80bd43a862d56a0ab9171b54d6cae2b24ab6fbbcefb2f5094636aa68c1a1f6939380d6f09d0b5d0b777c3f0a5d5f0eb2ae7c753a5cf011350bb3b04f3325da95aaf6b5d4ab6b8bcf0e2c10fe1635a6d25b3c84cdb2b9fa971c9c8731417d0fede32b6ac874c06cea03f7cc46ca740160dfbb98eb8b450ce909314000000000000000000000032d3a29e05037946ef84f9a9d5c55b6b0e955ea417195c3ce02c414d77586d9eabbaa1fc7b600e95f8"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xcc0, 0x60001900, &(0x7f0000000100)="b9ff03076044238cb89e0cf089060fe0ffff00003b00ff0277fbac14142ae000006a62079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x2a, 0x60000000}, 0x2c) 03:13:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0xb9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:10 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0xb9, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000180)=""/234, 0x2e, 0xea, 0x1}, 0x20) 03:13:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:13:13 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000540)=""/4096, 0x27, 0x1000, 0x1}, 0x20) 03:13:13 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}, @ptr]}}, &(0x7f0000000180)=""/234, 0x3a, 0xea, 0x1}, 0x20) 03:13:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 636.777195][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.916061][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.980942][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.057002][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.948676][ T9] device hsr_slave_0 left promiscuous mode [ 637.955463][ T9] device hsr_slave_1 left promiscuous mode [ 637.971776][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.979248][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.997547][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.008722][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.026532][ T9] device bridge_slave_1 left promiscuous mode [ 638.036147][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.055887][ T9] device bridge_slave_0 left promiscuous mode [ 638.066890][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.089988][ T9] device veth1_macvtap left promiscuous mode [ 638.096096][ T9] device veth0_macvtap left promiscuous mode [ 638.112029][ T9] device veth1_vlan left promiscuous mode [ 638.117926][ T9] device veth0_vlan left promiscuous mode [ 638.423866][ T9] team0 (unregistering): Port device team_slave_1 removed [ 638.441762][ T9] team0 (unregistering): Port device team_slave_0 removed [ 638.456940][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.474669][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.562523][ T9] bond0 (unregistering): Released all slaves 03:13:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:13:24 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @ptr]}}, &(0x7f0000000180)=""/234, 0x3a, 0xea, 0x1}, 0x20) 03:13:24 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 03:13:24 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}]}, {0x0, [0x0]}}, &(0x7f0000000180)=""/234, 0x2f, 0xea, 0x1}, 0x20) 03:13:24 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x8, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) 03:13:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:13:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, &(0x7f00000000c0)}, 0x120) 03:13:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x102) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 03:13:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 03:13:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000600)='&', 0x1}], 0x1}, 0x0) 03:13:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 03:13:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x6, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 649.964885][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 649.974225][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 649.982813][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.991252][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.998783][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 650.007315][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.133821][T13947] chnl_net:caif_netlink_parms(): no params data found [ 650.182818][T13947] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.190264][T13947] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.198038][T13947] device bridge_slave_0 entered promiscuous mode [ 650.206199][T13947] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.213532][T13947] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.222015][T13947] device bridge_slave_1 entered promiscuous mode [ 650.245240][T13947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.259270][T13947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.285997][T13947] team0: Port device team_slave_0 added [ 650.294421][T13947] team0: Port device team_slave_1 added [ 650.316287][T13947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.323377][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.349759][T13947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.364276][T13947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.371313][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.397309][T13947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.428378][T13947] device hsr_slave_0 entered promiscuous mode [ 650.435817][T13947] device hsr_slave_1 entered promiscuous mode [ 651.255827][T13947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 651.266118][T13947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 651.285260][T13947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 651.305016][T13947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 651.463997][T13947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.478880][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.488151][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.500827][T13947] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.512623][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 651.522113][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 651.531241][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.538364][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.561946][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 651.570509][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 651.579355][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 651.596686][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.603890][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.620507][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 651.641971][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 651.651695][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 651.663733][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 651.681028][T13947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 651.695796][T13947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 651.709621][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 651.717712][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 651.727029][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.736311][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 651.745690][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 651.768593][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.050128][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 652.059618][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 652.074406][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 652.091383][T13947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.116168][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 652.125994][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 652.148951][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 652.158864][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 652.169904][T13947] device veth0_vlan entered promiscuous mode [ 652.181740][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.190378][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.200607][T13947] device veth1_vlan entered promiscuous mode [ 652.228221][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 652.237463][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 652.246216][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 652.256030][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.271190][T13947] device veth0_macvtap entered promiscuous mode [ 652.292708][T13947] device veth1_macvtap entered promiscuous mode [ 652.320142][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.334163][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.344663][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.355512][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.365670][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.377153][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.389257][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.407873][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.418373][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.430369][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.442297][T13947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.458761][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.473282][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.491287][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.507649][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.520322][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.537262][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.547459][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.558170][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.568200][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.579292][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.590837][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.601434][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.615526][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.626255][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.637409][T13947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.651074][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 652.660563][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 652.671968][T13947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.683372][T13947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.692272][T13947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.701350][T13947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.807944][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.834684][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.877635][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 652.902819][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.920558][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.944498][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 653.389205][T14011] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 653.401781][T14011] CPU: 0 PID: 14011 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 653.412236][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 653.422303][T14011] Call Trace: [ 653.425587][T14011] [ 653.428524][T14011] dump_stack_lvl+0xd1/0x138 [ 653.433139][T14011] dump_header+0x10b/0x85f [ 653.437585][T14011] oom_kill_process.cold+0x10/0x15 [ 653.442721][T14011] out_of_memory+0x35c/0x14a0 [ 653.447439][T14011] ? io_schedule_timeout+0x150/0x150 [ 653.452765][T14011] ? oom_killer_disable+0x280/0x280 [ 653.458011][T14011] ? mark_held_locks+0x9f/0xe0 [ 653.462800][T14011] mem_cgroup_out_of_memory+0x206/0x270 [ 653.468372][T14011] ? mem_cgroup_margin+0x130/0x130 [ 653.473524][T14011] memory_max_write+0x2f9/0x3c0 [ 653.478404][T14011] ? mem_cgroup_force_empty_write+0x160/0x160 [ 653.484484][T14011] ? lock_release+0x810/0x810 [ 653.489177][T14011] cgroup_file_write+0x1e2/0x770 [ 653.494134][T14011] ? mem_cgroup_force_empty_write+0x160/0x160 [ 653.500213][T14011] ? kill_css+0x370/0x370 [ 653.504557][T14011] ? __virt_addr_valid+0x61/0x2e0 [ 653.509617][T14011] ? kill_css+0x370/0x370 [ 653.513975][T14011] kernfs_fop_write_iter+0x3f1/0x600 [ 653.519288][T14011] vfs_write+0x9ed/0xdd0 [ 653.523548][T14011] ? kernel_write+0x630/0x630 [ 653.528279][T14011] ? __fdget_pos+0x7b/0x100 [ 653.532804][T14011] ksys_write+0x12b/0x250 [ 653.537144][T14011] ? __ia32_sys_read+0xb0/0xb0 [ 653.541923][T14011] ? syscall_enter_from_user_mode+0x26/0xb0 [ 653.547844][T14011] do_syscall_64+0x39/0xb0 [ 653.552289][T14011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 653.558203][T14011] RIP: 0033:0x7f488cc8c0c9 [ 653.562634][T14011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 653.582265][T14011] RSP: 002b:00007f488d945168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.590697][T14011] RAX: ffffffffffffffda RBX: 00007f488cdabf80 RCX: 00007f488cc8c0c9 [ 653.598680][T14011] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 653.606664][T14011] RBP: 00007f488cce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 653.614658][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.622649][T14011] R13: 00007ffd7aa15f5f R14: 00007f488d945300 R15: 0000000000022000 [ 653.630655][T14011] [ 653.643632][T14011] memory: usage 608kB, limit 0kB, failcnt 363 [ 653.657360][T14011] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 653.677669][T14011] Memory cgroup stats for /syz2: [ 653.680414][T14011] anon 114688 [ 653.680414][T14011] file 225280 [ 653.680414][T14011] kernel 266240 [ 653.680414][T14011] kernel_stack 65536 [ 653.680414][T14011] pagetables 77824 [ 653.680414][T14011] sec_pagetables 0 [ 653.680414][T14011] percpu 64 [ 653.680414][T14011] sock 0 [ 653.680414][T14011] vmalloc 0 [ 653.680414][T14011] shmem 221184 [ 653.680414][T14011] zswap 0 [ 653.680414][T14011] zswapped 0 [ 653.680414][T14011] file_mapped 221184 [ 653.680414][T14011] file_dirty 0 [ 653.680414][T14011] file_writeback 0 [ 653.680414][T14011] swapcached 0 [ 653.680414][T14011] anon_thp 0 [ 653.680414][T14011] file_thp 0 [ 653.680414][T14011] shmem_thp 0 [ 653.680414][T14011] inactive_anon 135168 [ 653.680414][T14011] active_anon 200704 [ 653.680414][T14011] inactive_file 0 [ 653.680414][T14011] active_file 4096 [ 653.680414][T14011] unevictable 0 [ 653.680414][T14011] slab_reclaimable 17528 [ 653.680414][T14011] slab_unreclaimable 75048 [ 653.680414][T14011] slab 92576 [ 653.786573][T14011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13947,uid=0 [ 653.804134][T14011] Memory cgroup out of memory: Killed process 13947 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 03:13:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002cc0)={0x12, 0x1, &(0x7f0000000180)=@raw=[@ldst], &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:13:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000100)=""/133, 0x26, 0x85, 0x1}, 0x20) 03:13:31 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, 0x0}, 0x80) 03:13:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4) 03:13:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:13:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:13:33 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0), 0x0}, 0x48) 03:13:33 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000400)="c8fd5d916355d4c1ff60c8aaa89b7931a92981668ace3ff8a659e3e31e767ac7a143df0b0e5e823e6ec24478f5dfe521170c8876bf2462265d56d6185bf02a95aa9a805346f8ccabd56be1fe5db7ad27a0eb70468accf86a453cb70fb8f28e677984e0031d420e2c4c6ed5b61f2867e4bc5c19f8944a549e9302c8862fd1c2168e1672eb32037e516cb5325913cfbe21210e6a25e616ed191fdbb4f7f69acda1104bbdb9c8ba70273cb75c19bc402e77d454", 0xb2}, {&(0x7f00000004c0)="39dc2cf73f4d7d2a5f25e063ba01498b", 0x10}, {&(0x7f0000000580)="8e3487183fe24b90183bc9adb19e1b54027882cdda8fb7f9f3d42b65e01850778ca4d817bb922c819f34b951517cb03a0e7b37839ccead92e4a435b05b2e6b6bf714e6e30324eeb4e3f1c39f2fc86f9157b7b18f75f12936e0c94eba2116933b858d1c5a8eb0fc34076d2371047a", 0x6e}, {&(0x7f0000000600)="ead0524476098c707c6219638d80ed52cdc3067b0f64a62b5293caad30891ba074a2", 0x22}, {&(0x7f0000000640)="64027cb963429265b02e5aa26c27459f1ac0a263deef6c238e95c6dcfa55608ecb76ab8393cb4e25c32be80ded278b15a11e86d5f3fe136bf8fbdc56af49d90a7f49911bf282aa983691f84488fbb68b3b5ecbbefa44921d4ba262b631cb55260e5aceea8252ab327bb99f6f5da92e0a77e600f3ca226140782625", 0x7b}, {&(0x7f00000006c0)="dcaee864397cce16c995c0837048ab6d90bbaa88b1eca9e5727e0487145fb02ca9305f37204a523137f3374ecc110500d5c7134ba736b992a9e169cfc3073a9fdd42e93e65b6db446dda8b692424c0f47c97b651f3eaf2a1436fad9fa2f85b31d99ffbc023f90f15222cf004d72d2cb42765ac3ddf56f213640d599bbfc855f6ffcec12da388e4f72081f2887b691e4b1ecbac0e2bfd1fee11d15e56873e858a9dbf66bb03826fed4eef61fd580b54ef3546afe28334fa52f0b04b2181be254917b6aa4cb907293af6df16cd66bd540c0187321f3501617d4ea2037bcdaf5340ee45f2b4e2abc21887a04a9711386c50f4bd0acbb6e7e3179dffd10ebc68f58d7af12106fd73dffc26df92e5dc573ed9d79acf0a72a3a1b42db7afdf5f243fa2085d5dbad36fa6729fe2a6413f71796c6cd8a8338c85a2626b141f2e8e1a8e2f5ffaa77606a88045f6c24ff7044b1f7a8128d3017a2f648de2892e8de1a6f19a843390a9261e50d3ba93e73a447a1017c305209bf4dd4a6192d266ff800eb1c983d4f790e215074e41cf7850afa6ac581aee83a51f672813bf8f1249402df8933c47028dd879b84105a50de3e4a499143b9af36d2827f474685fea83e7295e99663ed21f5fe64d5ddf709e9eef45c4a1587c5cd59f4dd2d66b80fbb7420940a7876589aed89943f4e3ffd15e1d3ad699df08059518c19a2e3b153610740b8ecddebf34b54f49b3313c602ab91ca99081a21c10a7dcf172f2671edb6e3c8ba018e456e4602565254c4c6348a723e720f62d43bb2878ceb33890eb8509f7703ccf927b32761e0ed84e95e7cdbe9debc3bd3ad7e1a86ad0cbe1866fe874dcca53fb296a8c0c7e48452e23a30c9fd68d1482562ebc4296cf03c252be1bfb9af4a7ba47233c41e5460e8254c9213311850e869096209fc79ba8b12faa9f3c58ea45899b042de95bfaab95ee4af9376e0022752bf299f577ca1bfbb1b245b0dc3fd572b4375a1667383c16a05964c1b014dd85fe127cb27651f9b26a390b5e67443bc4701aa9005e8344f3585d09772060545f733474b4acf88754c64155589ca3c4745846c4091788aee81e9c138e1cc9fac3148ea2b7e9499ba3e28882ac7841f2a7374c69c9af062b69d27eec422b9197a29f1676196287e274ef50de165677270e3b20f89ed43ae73ad8da83964164c1308d9c47e95e0125754d66f6892792783eaf5bddde1c49cdf1c11854c4cc1ba32a96f874ffaf1ffc72e5d2836bc4152f1de0b3e890b13c42a3a5f9ff5a6c14611392ef56c8c688a97a9673f7af4d9fb56e81380c274847e19e737ea1a4877765c7b16e05a719c0888e1e1dd8dade609ba6a9bb9cbf14c79ed58e98ed892aec569877d4d24ef3b299cfe90759e4d062dd615af6a35ec77ea03a82e38abb04139d56b2f4bfc867869704836ba74aa419f491a776c14c2e643a8cfad4253afc35b8000e4cb3ec300cfc17480820fab77a636102e7ae019d36a77b13802771f13de24a239422081781dd97eacd362e4b6c381e0728c44fb3a57bc573c0aefc512c10061741b5105f6f6922500eeaf7a1d032a0efc1519732123262d578201232b7131b5bbf03bacf8f3b35109c86904f6c3388817a599964d56c49d52e7aa652e40c5d609cdc615f6474d28e2a02f7caa9e3f38fc56675d79fd63e616332949b115df04562e077f71429670d5cf37e6eda738e323e7a83f05eeeab322bbcae68f3e2f1d566fe328f188af193a994887ed1a69dbbb416b7940234ed980b3b6a6adfe86ef77b966bf96f2fcfe5211fe2a64a9d385be0dd1bc3131c854f7ca2164ac78f2084406b3917495fec3f3f840179d1a76c3768631b246d239d70accad10f950062747e99245397e912b51fde8eb52d025365cd94818c5b7535f5f344568fa0ccac537cdd71483afa4207c9194a9f15a1694cdb4acd990e5888bf639d07c19c93462e91793be0ceb515ea57259953245f4b68c489b3c0fbf80db4fddfb222e70ed39ef894bb2147495b9ab445d01e79f3487d593ab19c469f4dac11c1445c8cd97090d7afc477fd1424a557ec5927144f0d4c2340fcc0c506ea7f6221bf9912050a87a63d2aa3edd1d47eb59680c49810c2a5bef6af6fd1bb2fea9303019cdfe5398d127ddd3f3d7cca6090ba8809204d69a604a2deb3da0da34d87c6a75a0b124ea76088f6db4ba23ba227578076e56e38dc21ff8001b51eee852dc9afeed06a1f4109b657cdbd3c0da4c9919a33ecf75b5817dc61a3f3d26bf63fdbe3a15384b5472495fc08235ff8a09d3de9708432732214c80cd582c6f4162c0315805716afb600c87bda9626a090e05e548124fe962ddd921772884ac99511c917d6366f83df8bcda1359e92e2dbea2b2b1f5a0616fc634747619d0cbc1c48b096fd2f800a8a336a9a200668f05c970963148e2cc832e16ee1d6aa5fea9cc6691e113a2faacd50de108bfbfa178705f3712ccd9a8684e140a1ff1037a702f85be865d1f5715f821f5513e3a34a5aec8bceaa80d375fff388547c167cdd2d93255699671093cb867b9af3dc421b0041053482ce9a448c22e47855caf7d4665fd6bf7459d7439eda538e988ba6b29719b54781946e26d357c14b5a01abd518e033fb791c5befd6ef83d6d0d2c2b78d1622812d3f8cdf952440590f24a9ae7443b388b1ffa4b7b38e4ddf56356f05349b2d7ce727c44d171a1cece8fd33964d5bb16dea81877214c701e5ae5b9bffe974a07f45d889d450730c5afcaad388d61f41bbcbeb065993dad590825cdf1386359350ac9e99cde5d40103a9798e2853f99ecb00a8d55b5aab1d4fb08cbf4a42c25fbc437085986f57049f0c8409ae1466b815583ba1397e199c61e9486cd15b48c97a62581a73ca9933bc9bb3304f5c1b31e85b83f1634caeb8ff51913a21341aec4c6ae9745db60c833c60f9c6c17d21009f4787d821ebc94c8866269e7689fde09b58841c7c029589c26054ba91469b1b522766cefb3950350189d6cb0b66d3683d1bc78501f379ce36b1de76103f53bd7d8d408d33401d1b1ca5b1604cd6cbc42a6e1f3880d8b30e4e957523f432fd4a1b4d52460557ce71e9aa240ad860dff6e55ae1dddf8af128a4d880c6913fc45742d2ca8dd1f9e66f147d5ca274251409b13ffe5e286d5be6aa124851f63f894b13a8c24e4fcead4fdb99cf1a1f08b14e1ff0fe3e0338ecc38fd7fb56545b0bda36f3b3f465233df8393d9f67e4983f91d7705e529d9dc661fefef505881a0cdec7aae362a4a7343454c204a38de6657f4676884c2345ba908fa9b17bd7e89d39fe879a9342ae951c0f385a104ec771922c6de20e5d022b6b4b989dcea16fe5e6456c4df67bfe21eb9da6039e147dd26ac6d2fbdcceefc1a5b21705b4f99e8b2902a52c5a51876f14c112f3fa76514487404b27841a55259670e69c85c7abac8b38834563d75a2b41a7da3c27bb0de844cbb0bb781a5d181acbea56fa22b893da6f01b5d0b4cf0dc8f9779b3853a7624685815ea923f63a3f7f39260a17b8d89cbbb1e3b512b7bb3b3cdf814e85916d06323b6c0f6669ea9a38d9cd66677ab91f39a1777153ca3ad271ea73fb3fc9fb8a1f0e7d8844d92f97f4e411273e04d9fa5dc376b7e5777256e35ade098bbead5d8a6543b04879a938ddcd512cf78684307fee4ce3a6cf620a411b68fbbd99475a7c6f0d320399b2342894410924b47f86ea670e1b8d769f8d5494046e2ae9385f489d86c1c11532de8750d753fa30afbac64ac35e287da7c0f7435127e8138bd893eb1a89115d0bab74bbd9b5789851e4cfc7244970e3a2adfc9785130ec48c47e3bd9fc1656ce3eea1fb94cd6e57293a6c327fb7b16a9219a3a2b66160f521d1f63787b6c42d9d447ad8eeab77a665e0d3c50e91ea401156e5319a73e1e37c020bdae9638dc5c50ad0b103768182dc89538481726634dbd3455ce3a5c647709f791a7e57fb45f3dfabf2b1043b04203d5ce99c4e812b4944145087854c520e8b3a5b229f25405d1d692cabd4491409c1054db3927ff6c984d1ade77034a8d5a4217e2d4f1c9392f2e23c71bd57c8737d4e306372554091eb71c8fc26a2644657f649b9abb953d89e8c4a998d8837c8ff092b002b69f54986a18bf4643960aff5304e96e7a4e30d366aa8be2810864d8a5f2e7f5c37a67a1be4cecc287ce92a7e51b1d6814b9c4fed4699652682f4aad1b431b41bc087578095a59aa94b40c1ef0d670f4da673104430a956af00eb1f24762291d83e34425f566ed265fdbc2ea52cfb4a28e710d7823c82b6611e8d6eb586503ec0beb9076ce40cd9be836ac7a7390ffd9bcf7f4fa7be9b57065e5921e0a12feb3326090eec57462a04ac9d4aa6bfba93bf44bc6bc87e3b5b9e3e25efc93c1d113456e07c9afdeb7a3166b61b3cfc725d19fc6a91015e9e134febeec80e4698ef811a576504dc5537b1865352938ccbb8a84c85d786cf82ef3a2b7c5fa31a6d009e232ba9bbf86b53254b369453654ddc49a4122d2753f2b8ebeabe912fe47d323db706ee4f52d3a37bc257e1caf96d6082f5eadaa3af25d8f1dcfb6f15e65fcc63f8eb2aa4824b079010bb53f36f3bf37530f266ded16cf895d9fafa8839d0c638cb4d34078782d13fc38cc4b31090aca2364ae0b61a30234afd4fa0fd6d5044bb0c89bed319c295c525aad552732612a42da1a8a96878da4815ada433dab9c6af066199f34975fdb7fc7f2b171728e5af60c34d88c445f2a2ab117e1e6ccd4c7e00561250f918ae3c81ba28faa425819ef91cea4d4c0061fcb3423f6ec17ee4c44ed83dd65e4144d9965c8e4128c5efebc70d3710f68d5a73b5a790af7c291a3ad395caebd756083b8c390799ff3c0d25df804912e7a4409c3a55f79aa019df5c3f6d97ffd43b63ed94bf62b2ad12cc4ed04af8d08cc490fa4336d52ffa5ce0b6c387d54c6bab4c7a562353665e9f0b86b6d089b6ee1bd890c7d9ba5d1f70665c6a7978076ac5d132f589f02bd6d0b86a1cd9849eaf46aae1c6111623e18fede448b065c485e7589f3327cdf2ae43d290575c77046d7fe817b9d07c8a832741d32c85223d4e02222588d79cb19be9076c2216a6c99da025fea31ba3a13aa90124e4a222a4f696abef5edab6aa19b6f6348ed8d84fd2b079cdcaf070ae4be3e640580189ce5926bfe5667bea797dbf1ab4439d7ffc72b548a233b83d2f7014f816f4d5f98e5721920610004e4f6910e95ff63e5d482732f546617c0343b7107164065b1b46fe62d5a6535592f40cfd33dcc6d06ef59de88a4fdc5ccea84a9d94e6a6364ed526c475174d96c961fbb2042c3c9a0da5ce5ae677f6b5c66dd45f3e2eb1608c8222424124c65b2c20aafbb90a6e98a0ccfa23b0bbf087b8d5a8080d70710a28d67153c16d39a7db10914212e2ce235314e95dd8359ba33db3517ba7cb7b8100f9507410f9d20dc3ebc5779c71c59263f3aa4798fc1f835fd6826221d2ba561e2e4c6ee0e88b67ceb332e64b376ec4593dd419e1a83efed823fb5e7202be4dabf21167769f77a043e3d45d8714e100aaf147336ed5920bafc533446e2116dc91c971706c45215ed0555856c458d9415ebed449c33e178f1fba1db68eeab5098e5761d66f77018976a86939af6b80f1a868475f5f89e892c35473f1c281b404a7cc37e2c221ab6a9ef76d3a885cf3dd46446380372bbfde45468a15ecd8c10686e4fcd79672b1fd4fc6aae1851eaffb73742762df7b7abdf5cd398a58f877069775085d10457b533966e77557ddba", 0x1000}, {&(0x7f00000016c0)="9b024d05a30ed6d66d71f8d66aa46fbec036d82e58ee0a9c535d015e9c0538ef152805d7d38d6be25c2bd306ea3e9aceb97b798e8510ae36a63bcc3eab3ef5cd74f750a6faa28bb0431fca94e7d388de242db914d00bf08767cdeec95e35521872fa7f306ff42ac70a1530b499043ef9f46959f6ad2ebd4aae3ab09038bca62e69966e0f61c5000afe597aa8fbfce555557f382118ce39397113eb1dc28e586107dba33a687237c18b5079086c09bf028e0644c6", 0xb4}, {&(0x7f0000001780)="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", 0xd80}, {0x0}], 0x9}, 0x0) 03:13:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x600}) 03:13:33 executing program 0: syz_clone(0x52008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 03:13:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xe}]}]}}, &(0x7f0000000100)=""/133, 0x2e, 0x85, 0x1}, 0x20) 03:13:33 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:13:33 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x893a72e880c9b2e2}, 0x20) [ 656.939298][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:13:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5460, 0x0) 03:13:33 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0) r0 = syz_clone(0x0, &(0x7f0000000680)="6869c131f079cf08168956ae33a6b550587d6922733a7ed8d4ef4c8cd61d57cead5f810db2bcf023565fd50ccd09fd8355297bbff5d2d13052f2d98de0b4722b936ee9b2414fc4f9e7420bbf56b962fe7fe419e690f5f236b2596523f5ed7d48f1e1142d2169baddd272827a2c053210a3e26be5a47e5a439ba8dbcc4b28c371b5d1aec745422653f59d5114c171a845cf3611886ad7a14d1e5cf95f418b1687146ee3f3cb9a74dd81e587a60d8342c7cdec344f6aaa2b82bbfe8bb9e18c2c95cee72b756c6dbdc0acd644589e670cdd4aa94a34c5ebe889064c3d065726e6b300f4a5f4e73272b000505f5c37", 0xed, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="9c0603990ea6d2ebe2230c28634105e3659d61f0953b6440591e72e87002d57345da19e97eff0e8a18c826cf779d8cd0e9502626541b439e8431218313b9b6") bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)={&(0x7f0000000840)='./file0\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0xb40, 0xcf, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ldst={0x0, 0x1, 0x2, 0x4, 0x8, 0xffffffffffffffb4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x7, 0xff, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_clone(0x1080, &(0x7f0000000680)="6869c131f079cf08168956ae33a6b550587d6922733a7ed8d4ef4c8cd61d57cead5f810db2bcf023565fd50ccd09fd8355297bbff5d2d13052f2d98de0b4722b936ee9b2414fc4f9e7420bbf56b962fe7fe419e690f5f236b2596523f5ed7d48f1e1142d2169baddd272827a2c053210a3e26be5a47e5a439ba8dbcc4b28c371b5d1aec745422653f59d5114c171a845cf3611886ad7a14d1e5cf95f418b1687146ee3f3cb9a74dd81e587a60d8342c7cdec344f6aaa2b82bbfe8bb9e18c2c95cee72b756c6dbdc0acd644589e670cdd4aa94a34c5ebe889064c3d065726e6b300f4a5f4e73272b000505f5c37", 0xed, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="9c0603990ea6d2ebe2230c28634105e3659d61f0953b6440591e72e87002d57345da19e97eff0e8a18c826cf") r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180), 0x10) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x1, 0x2, 0x5, 0x3, 0x0, 0x7fff, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1c8, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x80000, 0x7fff, 0x101, 0x6, 0x9, 0x0, 0x1f, 0x0, 0x6, 0x0, 0xffffffffffff4199}, r2, 0xb, r3, 0xa) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xf) 03:13:33 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) syz_clone(0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x0, 0xe8a, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0xb40, 0x0, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 657.452332][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.635352][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.727354][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.712910][ T33] device hsr_slave_0 left promiscuous mode [ 658.725773][ T33] device hsr_slave_1 left promiscuous mode [ 658.736857][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.749804][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.759393][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.773802][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.787660][ T33] device bridge_slave_1 left promiscuous mode [ 658.799422][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.811417][ T33] device bridge_slave_0 left promiscuous mode [ 658.817721][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.843890][ T33] device veth1_macvtap left promiscuous mode [ 658.855282][ T33] device veth0_macvtap left promiscuous mode [ 658.866015][ T33] device veth1_vlan left promiscuous mode [ 658.877415][ T33] device veth0_vlan left promiscuous mode [ 659.234036][ T33] team0 (unregistering): Port device team_slave_1 removed [ 659.268130][ T33] team0 (unregistering): Port device team_slave_0 removed [ 659.315375][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.332551][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.436253][ T33] bond0 (unregistering): Released all slaves 03:13:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:13:41 executing program 1: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 03:13:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:13:41 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x430800, 0x0) 03:13:41 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0) r0 = syz_clone(0x0, &(0x7f0000000680)="6869c131f079cf08168956ae33a6b550587d6922733a7ed8d4ef4c8cd61d57cead5f810db2bcf023565fd50ccd09fd8355297bbff5d2d13052f2d98de0b4722b936ee9b2414fc4f9e7420bbf56b962fe7fe419e690f5f236b2596523f5ed7d48f1e1142d2169baddd272827a2c053210a3e26be5a47e5a439ba8dbcc4b28c371b5d1aec745422653f59d5114c171a845cf3611886ad7a14d1e5cf95f418b1687146ee3f3cb9a74dd81e587a60d8342c7cdec344f6aaa2b82bbfe8bb9e18c2c95cee72b756c6dbdc0acd644589e670cdd4aa94a34c5ebe889064c3d065726e6b300f4a5f4e73272b000505f5c37", 0xed, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="9c0603990ea6d2ebe2230c28634105e3659d61f0953b6440591e72e87002d57345da19e97eff0e8a18c826cf779d8cd0e9502626541b439e8431218313b9b6") bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)={&(0x7f0000000840)='./file0\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0xb40, 0xcf, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ldst={0x0, 0x1, 0x2, 0x4, 0x8, 0xffffffffffffffb4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x7, 0xff, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_clone(0x1080, &(0x7f0000000680)="6869c131f079cf08168956ae33a6b550587d6922733a7ed8d4ef4c8cd61d57cead5f810db2bcf023565fd50ccd09fd8355297bbff5d2d13052f2d98de0b4722b936ee9b2414fc4f9e7420bbf56b962fe7fe419e690f5f236b2596523f5ed7d48f1e1142d2169baddd272827a2c053210a3e26be5a47e5a439ba8dbcc4b28c371b5d1aec745422653f59d5114c171a845cf3611886ad7a14d1e5cf95f418b1687146ee3f3cb9a74dd81e587a60d8342c7cdec344f6aaa2b82bbfe8bb9e18c2c95cee72b756c6dbdc0acd644589e670cdd4aa94a34c5ebe889064c3d065726e6b300f4a5f4e73272b000505f5c37", 0xed, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="9c0603990ea6d2ebe2230c28634105e3659d61f0953b6440591e72e87002d57345da19e97eff0e8a18c826cf") r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180), 0x10) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x1, 0x2, 0x5, 0x3, 0x0, 0x7fff, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1c8, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x80000, 0x7fff, 0x101, 0x6, 0x9, 0x0, 0x1f, 0x0, 0x6, 0x0, 0xffffffffffff4199}, r2, 0xb, r3, 0xa) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xf) 03:13:41 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) syz_clone(0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x0, 0xe8a, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0xb40, 0x0, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:13:41 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)={&(0x7f0000000700)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000840)='./file0/file0\x00', 0x0) 03:13:41 executing program 1: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38c24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:13:41 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x1}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/231, 0x27, 0xe7, 0x1}, 0x20) 03:13:41 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)="d8", 0x1}, 0x0) 03:13:41 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x5, 0x0, 0x74d4e3ef7733d4ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x0, 0x5}, 0x10, 0x4000, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40000000000}, 0xffffffffffffffff, 0xbffbffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x9, 0x5, 0x2, 0x0, 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x100000001, 0x2a, 0x0, 0x8000000000003, 0x0, 0xff}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="000000000000000004000000180000f9190b0000000000005f979d057dabf4ff000000001835000003000000000000000000e7c337320600001859000009000000000000", @ANYRESDEC=r0, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x0, 0x29, &(0x7f0000000340)=""/41, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x2, 0x3f, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='(#^.\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)={&(0x7f0000000100)='./file0\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086607, &(0x7f0000000040)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x6, 0x3f, 0x9, 0x1a89, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x82}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001280)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'macvtap0\x00', 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='br_fdb_add\x00'}, 0x10) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001740)={0xffffffffffffffff, r3, 0xa}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 03:13:41 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) syz_clone(0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x0, 0xe8a, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0xb40, 0x0, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 664.821605][T14384] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 666.768316][ T4388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.778825][ T4388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.787338][ T4388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.797684][ T4388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.805571][ T4388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 666.814102][ T4388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.045819][T14449] chnl_net:caif_netlink_parms(): no params data found [ 667.125235][T14449] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.132861][T14449] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.141997][T14449] device bridge_slave_0 entered promiscuous mode [ 667.151073][T14449] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.158268][T14449] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.167229][T14449] device bridge_slave_1 entered promiscuous mode [ 667.210805][T14449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.230807][T14449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.271744][T14449] team0: Port device team_slave_0 added [ 667.280722][T14449] team0: Port device team_slave_1 added [ 667.311392][T14449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.318398][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.357696][T14449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.373697][T14449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.383042][T14449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.410009][T14449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.478883][T14449] device hsr_slave_0 entered promiscuous mode [ 667.486298][T14449] device hsr_slave_1 entered promiscuous mode [ 668.057613][T14449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.067819][T14449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.077966][T14449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.093807][T14449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.223041][T14449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.241341][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 668.250924][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.262049][T14449] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.274246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 668.283303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.292628][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.299794][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.308819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 668.329880][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 668.338665][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.348803][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.355986][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.367106][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 668.376137][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 668.386702][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 668.418995][T14449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 668.441803][T14449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 668.454707][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 668.464376][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 668.473916][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 668.482823][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 668.492013][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 668.500981][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 668.513819][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 668.796136][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.804504][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.818086][T14449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.851321][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.859940][ T4388] Bluetooth: hci1: command 0x0409 tx timeout [ 668.860857][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.899888][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.910662][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.931238][T14449] device veth0_vlan entered promiscuous mode [ 668.940490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 668.949977][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 668.962182][T14449] device veth1_vlan entered promiscuous mode [ 668.997549][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 669.005882][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 669.035818][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 669.047910][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 669.067552][T14449] device veth0_macvtap entered promiscuous mode [ 669.089130][T14449] device veth1_macvtap entered promiscuous mode [ 669.134886][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.154576][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.167627][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.189944][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.206722][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.227288][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.245814][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.258280][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.280321][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.292915][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.304827][T14449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.314023][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 669.323389][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 669.335240][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 669.352643][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 669.372791][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.390765][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.400927][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.411538][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.427287][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.439160][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.457061][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.467594][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.479414][T14449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.492751][T14449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.504788][T14449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.519273][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 669.528175][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 669.540946][T14449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.550603][T14449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.559426][T14449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.568774][T14449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.669734][T14144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.692548][T14144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.734238][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.768893][T14144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.780480][T14144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.804653][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 670.251921][T14532] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 670.262996][T14532] CPU: 0 PID: 14532 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 670.273459][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 670.283549][T14532] Call Trace: [ 670.286864][T14532] [ 670.289824][T14532] dump_stack_lvl+0xd1/0x138 [ 670.294466][T14532] dump_header+0x10b/0x85f [ 670.298943][T14532] oom_kill_process.cold+0x10/0x15 [ 670.304109][T14532] out_of_memory+0x35c/0x14a0 [ 670.308845][T14532] ? oom_killer_disable+0x280/0x280 [ 670.314090][T14532] ? mark_held_locks+0x9f/0xe0 [ 670.318897][T14532] mem_cgroup_out_of_memory+0x206/0x270 [ 670.324502][T14532] ? mem_cgroup_margin+0x130/0x130 [ 670.329666][T14532] memory_max_write+0x2f9/0x3c0 [ 670.334537][T14532] ? mem_cgroup_force_empty_write+0x160/0x160 [ 670.340621][T14532] ? lock_release+0x810/0x810 [ 670.345316][T14532] cgroup_file_write+0x1e2/0x770 [ 670.350275][T14532] ? mem_cgroup_force_empty_write+0x160/0x160 [ 670.356359][T14532] ? kill_css+0x370/0x370 [ 670.360706][T14532] ? __virt_addr_valid+0x61/0x2e0 [ 670.365760][T14532] ? kill_css+0x370/0x370 [ 670.370104][T14532] kernfs_fop_write_iter+0x3f1/0x600 [ 670.375419][T14532] vfs_write+0x9ed/0xdd0 [ 670.379680][T14532] ? kernel_write+0x630/0x630 [ 670.384388][T14532] ? __fget_light+0xd2/0x270 [ 670.389000][T14532] ksys_write+0x12b/0x250 [ 670.393343][T14532] ? __ia32_sys_read+0xb0/0xb0 [ 670.398130][T14532] ? syscall_enter_from_user_mode+0x26/0xb0 [ 670.404045][T14532] do_syscall_64+0x39/0xb0 [ 670.408486][T14532] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 670.414392][T14532] RIP: 0033:0x7efd43e8c0c9 [ 670.418817][T14532] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 670.438447][T14532] RSP: 002b:00007efd44b5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 670.446882][T14532] RAX: ffffffffffffffda RBX: 00007efd43fabf80 RCX: 00007efd43e8c0c9 [ 670.454865][T14532] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 670.462847][T14532] RBP: 00007efd43ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 670.470833][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.478864][T14532] R13: 00007ffe5f6aa68f R14: 00007efd44b5a300 R15: 0000000000022000 [ 670.486906][T14532] [ 670.496494][T14532] memory: usage 608kB, limit 0kB, failcnt 363 [ 670.507232][T14532] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 670.515327][T14532] Memory cgroup stats for /syz2: [ 670.517875][T14532] anon 114688 [ 670.517875][T14532] file 225280 [ 670.517875][T14532] kernel 266240 [ 670.517875][T14532] kernel_stack 65536 [ 670.517875][T14532] pagetables 77824 [ 670.517875][T14532] sec_pagetables 0 [ 670.517875][T14532] percpu 64 [ 670.517875][T14532] sock 0 [ 670.517875][T14532] vmalloc 0 [ 670.517875][T14532] shmem 221184 [ 670.517875][T14532] zswap 0 [ 670.517875][T14532] zswapped 0 [ 670.517875][T14532] file_mapped 221184 [ 670.517875][T14532] file_dirty 0 [ 670.517875][T14532] file_writeback 0 [ 670.517875][T14532] swapcached 0 [ 670.517875][T14532] anon_thp 0 [ 670.517875][T14532] file_thp 0 [ 670.517875][T14532] shmem_thp 0 [ 670.517875][T14532] inactive_anon 135168 [ 670.517875][T14532] active_anon 200704 [ 670.517875][T14532] inactive_file 4096 [ 670.517875][T14532] active_file 0 [ 670.517875][T14532] unevictable 0 [ 670.517875][T14532] slab_reclaimable 17528 [ 670.517875][T14532] slab_unreclaimable 75048 [ 670.517875][T14532] slab 92576 [ 670.632189][T14532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14530,uid=0 [ 670.651193][T14532] Memory cgroup out of memory: Killed process 14530 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 670.922235][T14449] syz-executor.2 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 670.941496][T14449] CPU: 0 PID: 14449 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 670.942169][ T4388] Bluetooth: hci1: command 0x041b tx timeout [ 670.951973][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 670.951992][T14449] Call Trace: [ 670.952002][T14449] [ 670.952013][T14449] dump_stack_lvl+0xd1/0x138 [ 670.952067][T14449] dump_header+0x10b/0x85f [ 670.983388][T14449] oom_kill_process.cold+0x10/0x15 [ 670.988569][T14449] out_of_memory+0x35c/0x14a0 [ 670.993304][T14449] ? find_held_lock+0x2d/0x110 [ 670.998118][T14449] ? oom_killer_disable+0x280/0x280 [ 671.003370][T14449] ? find_held_lock+0x2d/0x110 [ 671.008184][T14449] mem_cgroup_out_of_memory+0x206/0x270 [ 671.013781][T14449] ? mem_cgroup_margin+0x130/0x130 [ 671.018946][T14449] ? lock_downgrade+0x6e0/0x6e0 [ 671.023855][T14449] try_charge_memcg+0xefb/0x12f0 [ 671.028844][T14449] ? mem_cgroup_handle_over_high+0x520/0x520 [ 671.034866][T14449] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 671.040639][T14449] ? lock_downgrade+0x6e0/0x6e0 [ 671.045548][T14449] obj_cgroup_charge+0x2af/0x5e0 [ 671.050533][T14449] kmem_cache_alloc_lru+0x145/0x760 [ 671.055764][T14449] ? ext4_alloc_inode+0x28/0x680 [ 671.060744][T14449] ? ext4_free_in_core_inode+0x70/0x70 [ 671.066246][T14449] ext4_alloc_inode+0x28/0x680 [ 671.071049][T14449] ? ext4_free_in_core_inode+0x70/0x70 [ 671.076545][T14449] alloc_inode+0x61/0x230 [ 671.080927][T14449] iget_locked+0x1bb/0x700 [ 671.085403][T14449] __ext4_iget+0x3af/0x4230 [ 671.089968][T14449] ? ext4_get_projid+0x190/0x190 [ 671.094943][T14449] ? ext4_fname_prepare_lookup+0x163/0x200 [ 671.100788][T14449] ? ext4_fname_setup_filename+0x110/0x110 [ 671.106658][T14449] ? rcu_read_lock_sched_held+0x3e/0x70 [ 671.112255][T14449] ext4_lookup+0x387/0x700 [ 671.116807][T14449] ? ext4_resetent+0x2d0/0x2d0 [ 671.121641][T14449] __lookup_slow+0x24c/0x460 [ 671.126272][T14449] ? __lookup_hash+0x180/0x180 [ 671.131075][T14449] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 671.136586][T14449] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 671.142099][T14449] ? lookup_fast+0x14e/0x520 [ 671.146742][T14449] walk_component+0x33f/0x5a0 [ 671.151477][T14449] path_lookupat+0x1ba/0x840 [ 671.156155][T14449] filename_lookup+0x1d2/0x590 [ 671.160972][T14449] ? may_linkat+0x500/0x500 [ 671.165500][T14449] ? __might_fault+0xd9/0x180 [ 671.170199][T14449] ? __phys_addr_symbol+0x30/0x70 [ 671.175238][T14449] ? __check_object_size+0x2e2/0x5a0 [ 671.180541][T14449] ? strncpy_from_user+0x28b/0x3c0 [ 671.185681][T14449] ? getname_flags.part.0+0x1dd/0x4f0 [ 671.191062][T14449] user_path_at_empty+0x46/0x60 [ 671.195916][T14449] __x64_sys_umount+0xfc/0x190 [ 671.200682][T14449] ? path_umount+0x10b0/0x10b0 [ 671.205446][T14449] ? syscall_enter_from_user_mode+0x26/0xb0 [ 671.211350][T14449] do_syscall_64+0x39/0xb0 [ 671.215766][T14449] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 671.221667][T14449] RIP: 0033:0x7efd43e8d537 [ 671.226081][T14449] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 671.245689][T14449] RSP: 002b:00007ffe5f6a97e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 671.254100][T14449] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efd43e8d537 [ 671.262073][T14449] RDX: 00007ffe5f6a98ba RSI: 000000000000000a RDI: 00007ffe5f6a98b0 [ 671.270052][T14449] RBP: 00007ffe5f6a98b0 R08: 00000000ffffffff R09: 00007ffe5f6a9680 [ 671.278038][T14449] R10: 0000555555e4589b R11: 0000000000000246 R12: 00007efd43ee6b24 [ 671.286007][T14449] R13: 00007ffe5f6aa970 R14: 0000555555e45810 R15: 00007ffe5f6aa9b0 [ 671.293987][T14449] [ 671.303061][T14449] memory: usage 360kB, limit 0kB, failcnt 382 [ 671.309310][T14449] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 671.316305][T14449] Memory cgroup stats for /syz2: [ 671.316484][T14449] anon 45056 [ 671.316484][T14449] file 225280 [ 671.316484][T14449] kernel 81920 [ 671.316484][T14449] kernel_stack 0 [ 671.316484][T14449] pagetables 8192 [ 671.316484][T14449] sec_pagetables 0 [ 671.316484][T14449] percpu 64 [ 671.316484][T14449] sock 0 [ 671.316484][T14449] vmalloc 0 [ 671.316484][T14449] shmem 221184 [ 671.316484][T14449] zswap 0 [ 671.316484][T14449] zswapped 0 [ 671.316484][T14449] file_mapped 221184 [ 671.316484][T14449] file_dirty 0 [ 671.316484][T14449] file_writeback 0 [ 671.316484][T14449] swapcached 0 [ 671.316484][T14449] anon_thp 0 [ 671.316484][T14449] file_thp 0 [ 671.316484][T14449] shmem_thp 0 [ 671.316484][T14449] inactive_anon 65536 [ 671.316484][T14449] active_anon 200704 [ 671.316484][T14449] inactive_file 4096 [ 671.316484][T14449] active_file 0 [ 671.316484][T14449] unevictable 0 [ 671.316484][T14449] slab_reclaimable 14392 [ 671.316484][T14449] slab_unreclaimable 45056 [ 671.316484][T14449] slab 59448 [ 671.414822][T14449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14449,uid=0 [ 671.431202][T14449] Memory cgroup out of memory: Killed process 14449 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 03:13:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:13:48 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x5, 0x0, 0x74d4e3ef7733d4ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x7fffffff, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0xffffffffffffffff, 0xbffbffffffffffff, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x1}, 0x0, 0x100000001, 0x0, 0x2, 0x0, 0x0, 0xff, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x18, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)={&(0x7f0000000100)='./file0\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086607, &(0x7f0000000040)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000012c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001740)={r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 03:13:48 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0) r0 = syz_clone(0x0, &(0x7f0000000680)="6869c131f079cf08168956ae33a6b550587d6922733a7ed8d4ef4c8cd61d57cead5f810db2bcf023565fd50ccd09fd8355297bbff5d2d13052f2d98de0b4722b936ee9b2414fc4f9e7420bbf56b962fe7fe419e690f5f236b2596523f5ed7d48f1e1142d2169baddd272827a2c053210a3e26be5a47e5a439ba8dbcc4b28c371b5d1aec745422653f59d5114c171a845cf3611886ad7a14d1e5cf95f418b1687146ee3f3cb9a74dd81e587a60d8342c7cdec344f6aaa2b82bbfe8bb9e18c2c95cee72b756c6dbdc0acd644589e670cdd4aa94a34c5ebe889064c3d065726e6b300f4a5f4e73272b000505f5c37", 0xed, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="9c0603990ea6d2ebe2230c28634105e3659d61f0953b6440591e72e87002d57345da19e97eff0e8a18c826cf779d8cd0e9502626541b439e8431218313b9b6") bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)={&(0x7f0000000840)='./file0\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0xb40, 0xcf, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ldst={0x0, 0x1, 0x2, 0x4, 0x8, 0xffffffffffffffb4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x7, 0xff, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_clone(0x1080, &(0x7f0000000680)="6869c131f079cf08168956ae33a6b550587d6922733a7ed8d4ef4c8cd61d57cead5f810db2bcf023565fd50ccd09fd8355297bbff5d2d13052f2d98de0b4722b936ee9b2414fc4f9e7420bbf56b962fe7fe419e690f5f236b2596523f5ed7d48f1e1142d2169baddd272827a2c053210a3e26be5a47e5a439ba8dbcc4b28c371b5d1aec745422653f59d5114c171a845cf3611886ad7a14d1e5cf95f418b1687146ee3f3cb9a74dd81e587a60d8342c7cdec344f6aaa2b82bbfe8bb9e18c2c95cee72b756c6dbdc0acd644589e670cdd4aa94a34c5ebe889064c3d065726e6b300f4a5f4e73272b000505f5c37", 0xed, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="9c0603990ea6d2ebe2230c28634105e3659d61f0953b6440591e72e87002d57345da19e97eff0e8a18c826cf") r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180), 0x10) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x1, 0x2, 0x5, 0x3, 0x0, 0x7fff, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1c8, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x80000, 0x7fff, 0x101, 0x6, 0x9, 0x0, 0x1f, 0x0, 0x6, 0x0, 0xffffffffffff4199}, r2, 0xb, r3, 0xa) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xf) 03:13:48 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) syz_clone(0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x0, 0xe8a, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0xb40, 0x0, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:13:48 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) 03:13:48 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 671.704901][T14555] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted 03:13:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:13:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x58, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001300)=""/220, 0x2e, 0xdc, 0x1}, 0x20) 03:13:48 executing program 0: bpf$MAP_CREATE(0x10, 0x0, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f0000000300)) 03:13:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x2e, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001300)=""/220, 0x2e, 0xdc, 0x1}, 0x20) 03:13:48 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0) r0 = syz_clone(0x0, &(0x7f0000000680)="6869c131f079cf08168956ae33a6b550587d6922733a7ed8d4ef4c8cd61d57cead5f810db2bcf023565fd50ccd09fd8355297bbff5d2d13052f2d98de0b4722b936ee9b2414fc4f9e7420bbf56b962fe7fe419e690f5f236b2596523f5ed7d48f1e1142d2169baddd272827a2c053210a3e26be5a47e5a439ba8dbcc4b28c371b5d1aec745422653f59d5114c171a845cf3611886ad7a14d1e5cf95f418b1687146ee3f3cb9a74dd81e587a60d8342c7cdec344f6aaa2b82bbfe8bb9e18c2c95cee72b756c6dbdc0acd644589e670cdd4aa94a34c5ebe889064c3d065726e6b300f4a5f4e73272b000505f5c37", 0xed, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="9c0603990ea6d2ebe2230c28634105e3659d61f0953b6440591e72e87002d57345da19e97eff0e8a18c826cf779d8cd0e9502626541b439e8431218313b9b6") bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)={&(0x7f0000000840)='./file0\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0xb40, 0xcf, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xb, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ldst={0x0, 0x1, 0x2, 0x4, 0x8, 0xffffffffffffffb4, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x7, 0xff, 0xfffffffc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_clone(0x1080, &(0x7f0000000680)="6869c131f079cf08168956ae33a6b550587d6922733a7ed8d4ef4c8cd61d57cead5f810db2bcf023565fd50ccd09fd8355297bbff5d2d13052f2d98de0b4722b936ee9b2414fc4f9e7420bbf56b962fe7fe419e690f5f236b2596523f5ed7d48f1e1142d2169baddd272827a2c053210a3e26be5a47e5a439ba8dbcc4b28c371b5d1aec745422653f59d5114c171a845cf3611886ad7a14d1e5cf95f418b1687146ee3f3cb9a74dd81e587a60d8342c7cdec344f6aaa2b82bbfe8bb9e18c2c95cee72b756c6dbdc0acd644589e670cdd4aa94a34c5ebe889064c3d065726e6b300f4a5f4e73272b000505f5c37", 0xed, &(0x7f0000000240), &(0x7f0000000380), &(0x7f0000000780)="9c0603990ea6d2ebe2230c28634105e3659d61f0953b6440591e72e87002d57345da19e97eff0e8a18c826cf") r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180), 0x10) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x1, 0x2, 0x5, 0x3, 0x0, 0x7fff, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1c8, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x80000, 0x7fff, 0x101, 0x6, 0x9, 0x0, 0x1f, 0x0, 0x6, 0x0, 0xffffffffffff4199}, r2, 0xb, r3, 0xa) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xf) 03:13:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1b, 0x0, 0x0, 0x1000000}, 0x48) [ 672.056756][T14571] can: request_module (can-proto-0) failed. [ 675.201639][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.293544][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.360236][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.440894][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.286165][ T9] device hsr_slave_0 left promiscuous mode [ 676.294717][ T9] device hsr_slave_1 left promiscuous mode [ 676.301975][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.309391][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.321294][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.328748][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.347581][ T9] device bridge_slave_1 left promiscuous mode [ 676.353959][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.367596][ T9] device bridge_slave_0 left promiscuous mode [ 676.374000][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.388642][ T9] device veth1_macvtap left promiscuous mode [ 676.394839][ T9] device veth0_macvtap left promiscuous mode [ 676.401356][ T9] device veth1_vlan left promiscuous mode [ 676.407176][ T9] device veth0_vlan left promiscuous mode [ 676.575770][ T9] team0 (unregistering): Port device team_slave_1 removed [ 676.591412][ T9] team0 (unregistering): Port device team_slave_0 removed [ 676.603158][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.616427][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.686244][ T9] bond0 (unregistering): Released all slaves [ 685.662254][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.668600][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 03:14:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:14:02 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x401}, 0x0, 0x0, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x7c, 0x0, 0xd7, 0x0, 0x5, 0x0, 0x74d4e3ef7733d4ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x7fffffff, 0x5}, 0x10, 0x4000, 0x7, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40000000000}, 0xffffffffffffffff, 0xbffbffffffffffff, r1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x9, 0x5, 0x2, 0x4, 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x1, 0x6}, 0x0, 0x100000001, 0x2a, 0x2, 0x8000000000003, 0x0, 0xff, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="000000000000000004000000180000f9190b0000000000005f979d057dabf4ff000000001835000003000000000000000000e7c3373206000018590000090000000000000000000000038f38209a12a459e792b4", @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x2, 0x29, &(0x7f0000000340)=""/41, 0x41000, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x2, 0x3f, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000018c00)={0x18, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="180000000000000000000000000000009500d9000000000012cc19280a01380b4637eaa1b96dbb895c000000007e2e299e5a868a2c938bc530a6fab9912b2b9c326f8af55453d720910c22f25693e837e85559448b689fb549252e5fba00ac459ebc2e606df21feaa75ec5419c426e745b76ce082947384476151eafe83fb3ba69f79cb713d0fdc6892ed01fdde50ba180e802b8c9febf9fdb9703f0bde9a5198be5c32bc6b82fbc64fb23812645114f7b3b9d4213b57a342973347080ccfb8d8a930f1facaed5551336d4b50015d3c236dd6f0fe9e2285bc2acf581d7e263bff90aaf2f7532177f0686079a76404f94943569d33b648d5cabc996fbe49d0cddfb0e06560bf56f338ae1b4c8df2bbbfd8513558fea85416d5ab4c72cbc0d3181547eeab7ea44a4bdb7a444795f798ff9f4e7be75c804e01467f8ffd414c159e9db857d38cdfce34211ab786b58e1ca764b1769d012cdcc29a26e08fa8f57fff78b8fcb23a4aaad81cfdbfa5ca603313ac3a82dae68635064b17b949efa40b5f246258b4ec908352d147661c1f33e154691b95a742ec9f7f6818bf6c8a5aa45da89a8924040bbf16c1887847d1aa3ae808ae62587fe0411e50b5748177ec9dfe98b1dbb48687b4f5c00000fd116d22ef9ed9a3957017087ba0c8836f1ec3e512671375797195ec9ab5783f2d9a2e41a8b61c813e7e48e498649d68f29252b9d3d21d6ae0a86ac9c3d93630b0c65bcc59c62496fec7ea7d089f76bebcb1bf4b9cc013cb273f65239688527589917c8f385a4ee628372082889f7fd88ab93c44824fb106b9adbf615eee1d69444408875243d7f5f8144738b233901b073000000001ad7b41c0ed7ec1555b31f1e826199d761da3b10ffd3f1d899666e03861fe2231c2cdfb678728dca84e2029758c37e91d87e5330e55a0329c9ec213aac18af265660e713046083bf25cf1a3a50a16f11d18a3d396eb07c60a707295a5d70ab6035d0bb1e19b1cda928d6a6a9a3c72529505af41e9d5cb71970593a482f22029604636bf5321af715f9d46dc7eac222fc1db7a4d699f27ae3e386cb24b2b553ea213c74ff4db2d006660f732a1ba02ba2522d5f39c21ddd1461854621457aea9bf3df5bf7440e1a4bdb8b56cba2740fccbae8215705c90c6c705bc2a77c43770c36c540d8fb80a44b46e64f8b857b522ba3dda4806f407f33ce9030b482b693e58acd89e0bfa88d3e3a0a8ca7a77102df40f0ef841e5e8c1e42dc85f74919185aa1fc3b102f5c34ad029af326b58c4458ce4f9cd7b9806e4ada962ab698fd985275e335bed7331f2a53e524281a1a9eafe77036e2e520a6723510ac06c498fe6a94c3b8becd3f3c615f7bab97372b41d5ee25d1b1b876dfb220080d59fe8529d99bd312ca29fda20dd28c5b220db96f1eae13cdd1a0b84c2d86bfeed95e7f39b90ca157ccbe36e14f68c12e569b4a9971af3372fe13565ae1166b358219a43d116a3a13c751058b8b876f954adff377bbcd0161a737dc45a6f3172c37739733c6400948ba03d7cf9a347a6e165c7983fec020f43d065d0a7d33e77d29a0282066d7dece08f6a8f7647f53db01967aff406831faf7d79fb73faf3a5b5bb2a3cda6b701c376a89b5dcdc5db63a4314d3b8440b427f78146349aa1695efc9b820f40502756fcc807bbb7de297001857a1d644511fb8a7ffae6b8b3e88aa9d5e145faaa666dab667114eb5632cea69705121096a43fc491da0a868044956d3799ccdfaccb84eb9891c5da7b373ff3309570dc00fdb237a411cfb7abf763bb894c40447bd4e14081ee889a1978550a478ee48f24507a8c141d14aaceec762bbd75d3290ebf752d46ad5765e89dc8cb9656adb4bce13b0f1ab152eba102201eb1521aef35171aa0df94d32c2904dcf3b7fc98b294a5d5321a03e20f429dd08763638eec8c5926ea2dbe2105398d9e6c6d2002baecc6d25bbc136653541c7fab3c81b06f7adf0bd88ee07692294310e763191320e6d201b56c94b50939db323a77da5e150f9bac9a2fe5c9e8cb01280802d401217c7bcf45431720bab2ba61e34c770f04ee09cff426be7fb584b0c57793ec2da93116f0c1ecc6c92deb4200273d918a5dac91f22bd852e85c1a000000000000000000c9926f14be894cf89f8e989c94009fb8731bc9f764cc2a105f472816bed4cdf56bb13163b1c3dc82166b1fde5568a15d223f6dd0b841fa8f87af05071dff83e944bf63d907a362610000c5cd6d49377f20772901f4989d308649efaf88e3283bc46daf91b5f24c26d401aaacf9fae54ec52e342ac986978b9401725b8704f0919755d31424c073bf43c9c38ab684a2b991146632a6ae42b1ee29a0df9cb19aa39571e6a2a7108d2baa1a01401887ed78ce6458f3c1071bdde9c6a4b61aa1a32d8a70d92649ce2018e388111e89d40f8a2287babc3cc3e1b21cef5da596d7c7a71c19076451f4057c95866d43247bbdcfc379cb035b8ef93a51709fcaac85e65386dcbf3a607cf18f99ac2c9e14526ecb64841db247d5e5c13e6c0243535aeb3f9b564313e4ebe3490278d6e3db2a50d4808376ee2d2800e6d6e7183bf800000000000000000000000000000097fa05c849ebccfe927e0233b3082c843ea79e3fbb13231a941c771f0909e0890dd1fbe1c93c502553f6f35d0b91999086ef1ba6a6ab7dcb79e5fe5fe29c690717beac07771cddd0f2d2c93077a80eaecb4eb6f5aa67415e9f5a5f94f3ceffbbdc96fed8ce3fffab11dedbdd35ab4ba48f7cd1333a447ad353b13afb6c8a5faa964951bcba3b6d23e2de797f0700f8b1fa2d462729371c9b039a98a801a3b09742dc13dbc5411e60bb72a5136fe853fac96630af0fd85316046e4ce5d664d72e59e6c87a0e39641902cb891fefefce888926a6e2042ab9d1af63589ee69d1e96b30b7653e022017afd3bdfe824334143227cf458d688090000000011fedd9e7dca732b42e153460000008418274d3e948daffc0000000000004ba27b7e0464f924e2c7c49f184b4a2bc25b79c0362dd12e210f6fe95f6bebdecf0df1831bf116cefcc635bfc69c6a11ccbc5adb91d1ba3d7718f3e86dddddd4e6ec2e4af1e57e8edc9557880e02c8de8bfa7592d2416e1156449596b2908889550000000000000000000000000000000000000000d72b22f115e2b496d4fb67a2ba46516a39a1c0ea27e06ed81bc72d4d8eadc98535cd2305c8c0f03e6891e2b40cd28ad7be3e778e9c61bb89ff5f7e14894745c33cfebf85f47da88c392fc097ef0caad9e403cee9b193a2d6d3a72d21d9a024c03a2a17449957d27fb8a56090d14b62433e3040acc628efe62139b980ab6a5d41aa9a35c394036b0d97024e154e4784003bc2cb290ed04abc3f0404be2411c3fe80b4ed5425d1e9529474af5ae617ca190790e7f37a1cb47c2ae7afcb2ae205896d5398c7d7154640286d7e141315f9ba57e77a74c63cdebbca4fe4e63c2c798e6423ef0958120d659dbdd2c4444787d74f8183c336f3174f9ec505cb58fe0d40a7133efc91045337e07a39a92e9d5d935044a37c4515da1b247e928b50ffb47494a65217386adb40dc086b7b79e29076a50ece86ef6d2e49d32bbace69a5e39674b1b9574b1b605279ff6e692e968e855310a9b4b0764b4f54a7ddbcc22778"], &(0x7f0000000440)='GPL\x00', 0x4, 0xb0, &(0x7f0000000480)=""/176, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='(#^.\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086607, &(0x7f0000000040)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x6, 0x3f, 0x9, 0x1a89, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x82}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c84d77d723094aad226e92cf1be85301d1b1982dc06d62456024713145d9fc59b17e762fff339474d531eea7ebb5c699b98a8844056cad344cc06a3b770f299efee00b3851aa69fd6cda107a1c717b57804aab7"], &(0x7f0000001180)=""/64, 0xbe, 0x40}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000001280)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'macvtap0\x00', 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='br_fdb_add\x00'}, 0x10) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000012c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001740)={r4, r6, 0xa}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 03:14:02 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001300)=""/220, 0x4a, 0xdc, 0x1}, 0x20) 03:14:02 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001300)=""/220, 0x26, 0xdc, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd8, &(0x7f0000000240)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3}, 0x10}, 0x80) 03:14:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:14:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:14:02 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "02"}]}}, &(0x7f0000000140)=""/234, 0x2a, 0xea, 0x1}, 0x20) 03:14:02 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 03:14:02 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001300)=""/220, 0x2e, 0xdc, 0x1}, 0x20) [ 686.308963][T14789] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted 03:14:03 executing program 4: socketpair(0x22, 0x0, 0x9, &(0x7f00000016c0)) 03:14:03 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x21}, 0x10) 03:14:03 executing program 5: perf_event_open$cgroup(&(0x7f0000001740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 688.020597][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 688.028665][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 688.037800][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 688.045773][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 688.053249][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 688.175457][T14811] chnl_net:caif_netlink_parms(): no params data found [ 688.223214][T14811] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.230460][T14811] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.238230][T14811] device bridge_slave_0 entered promiscuous mode [ 688.248439][T14811] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.255881][T14811] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.264284][T14811] device bridge_slave_1 entered promiscuous mode [ 688.286683][T14811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.299418][T14811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.356116][T14811] team0: Port device team_slave_0 added [ 688.364005][T14811] team0: Port device team_slave_1 added [ 688.385256][T14811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.392370][T14811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.418317][T14811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.431703][T14811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.438673][T14811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.465904][T14811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.500419][T14811] device hsr_slave_0 entered promiscuous mode [ 688.507187][T14811] device hsr_slave_1 entered promiscuous mode [ 689.129692][T14811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 689.149825][T14811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 689.159982][T14811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 689.178483][T14811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 689.300385][T14811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.316557][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.333669][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.346849][T14811] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.361652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.371279][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.380527][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.387646][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.407553][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 689.425060][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.439012][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.450164][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.457293][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.465688][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.494676][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 689.504230][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.516248][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.527147][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.536131][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.544956][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.554945][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.570006][T14811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.580120][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.833147][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 689.850742][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 689.867013][T14811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.899246][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 689.920999][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 689.949917][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 689.960948][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.972034][T14811] device veth0_vlan entered promiscuous mode [ 689.982321][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 689.990914][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.003340][T14811] device veth1_vlan entered promiscuous mode [ 690.032177][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 690.041146][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 690.050869][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.060617][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.071872][T14811] device veth0_macvtap entered promiscuous mode [ 690.092347][T14811] device veth1_macvtap entered promiscuous mode [ 690.116108][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.126951][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.138571][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.149887][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 690.151402][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.175922][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.188222][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.206718][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.217507][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.237087][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.249352][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.270226][T14811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.281450][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 690.290285][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 690.298454][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 690.308781][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 690.320197][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.331556][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.342883][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.361738][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.372675][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.383319][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.395192][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.405894][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.416507][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.432508][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.448071][T14811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.469692][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 690.478507][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 690.503043][T14811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.513445][T14811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.522899][T14811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.532292][T14811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.650962][ T5329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.683365][ T5329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.708421][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.724265][ T5329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.745038][ T5329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.768407][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 691.263955][T14871] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 691.303259][T14871] CPU: 0 PID: 14871 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 691.313747][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 691.323823][T14871] Call Trace: [ 691.327124][T14871] [ 691.330071][T14871] dump_stack_lvl+0xd1/0x138 [ 691.334702][T14871] dump_header+0x10b/0x85f [ 691.339163][T14871] oom_kill_process.cold+0x10/0x15 [ 691.344325][T14871] out_of_memory+0x35c/0x14a0 [ 691.349056][T14871] ? oom_killer_disable+0x280/0x280 [ 691.354293][T14871] ? mark_held_locks+0x9f/0xe0 [ 691.359091][T14871] mem_cgroup_out_of_memory+0x206/0x270 [ 691.364689][T14871] ? mem_cgroup_margin+0x130/0x130 [ 691.369864][T14871] ? _raw_spin_unlock_irqrestore+0x3c/0x70 [ 691.375711][T14871] memory_max_write+0x2f9/0x3c0 [ 691.380596][T14871] ? mem_cgroup_force_empty_write+0x160/0x160 [ 691.386693][T14871] ? lock_release+0x810/0x810 [ 691.391406][T14871] cgroup_file_write+0x1e2/0x770 [ 691.396387][T14871] ? mem_cgroup_force_empty_write+0x160/0x160 [ 691.402488][T14871] ? kill_css+0x370/0x370 [ 691.406847][T14871] ? __virt_addr_valid+0x61/0x2e0 [ 691.411933][T14871] ? kill_css+0x370/0x370 [ 691.416305][T14871] kernfs_fop_write_iter+0x3f1/0x600 [ 691.421644][T14871] vfs_write+0x9ed/0xdd0 [ 691.425926][T14871] ? kernel_write+0x630/0x630 [ 691.430640][T14871] ? __fget_files+0x26a/0x440 [ 691.435368][T14871] ksys_write+0x12b/0x250 [ 691.439729][T14871] ? __ia32_sys_read+0xb0/0xb0 [ 691.444531][T14871] ? syscall_enter_from_user_mode+0x26/0xb0 [ 691.450472][T14871] do_syscall_64+0x39/0xb0 [ 691.454940][T14871] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 691.460865][T14871] RIP: 0033:0x7f2ca928c0c9 [ 691.465308][T14871] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 691.484954][T14871] RSP: 002b:00007f2caa00a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.493407][T14871] RAX: ffffffffffffffda RBX: 00007f2ca93abf80 RCX: 00007f2ca928c0c9 [ 691.501402][T14871] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 691.509395][T14871] RBP: 00007f2ca92e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 691.517398][T14871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.525394][T14871] R13: 00007ffcf86ecdcf R14: 00007f2caa00a300 R15: 0000000000022000 [ 691.533420][T14871] [ 691.547247][T14871] memory: usage 612kB, limit 0kB, failcnt 382 [ 691.555695][T14871] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 691.563966][T14871] Memory cgroup stats for /syz2: [ 691.568055][T14871] anon 114688 [ 691.568055][T14871] file 225280 [ 691.568055][T14871] kernel 270336 [ 691.568055][T14871] kernel_stack 65536 [ 691.568055][T14871] pagetables 81920 [ 691.568055][T14871] sec_pagetables 0 [ 691.568055][T14871] percpu 64 [ 691.568055][T14871] sock 0 [ 691.568055][T14871] vmalloc 0 [ 691.568055][T14871] shmem 221184 [ 691.568055][T14871] zswap 0 [ 691.568055][T14871] zswapped 0 [ 691.568055][T14871] file_mapped 221184 [ 691.568055][T14871] file_dirty 0 [ 691.568055][T14871] file_writeback 0 [ 691.568055][T14871] swapcached 0 [ 691.568055][T14871] anon_thp 0 [ 691.568055][T14871] file_thp 0 [ 691.568055][T14871] shmem_thp 0 [ 691.568055][T14871] inactive_anon 135168 [ 691.568055][T14871] active_anon 200704 [ 691.568055][T14871] inactive_file 4096 [ 691.568055][T14871] active_file 0 [ 691.568055][T14871] unevictable 0 [ 691.568055][T14871] slab_reclaimable 22920 [ 691.568055][T14871] slab_unreclaimable 75048 [ 691.568055][T14871] slab 97968 [ 691.670474][T14871] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14870,uid=0 [ 691.698898][T14871] Memory cgroup out of memory: Killed process 14870 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 692.220143][ T48] Bluetooth: hci1: command 0x041b tx timeout 03:14:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:14:10 executing program 0: bpf$OBJ_GET_MAP(0x9, &(0x7f0000000000)={&(0x7f0000000080)='./file0\x00'}, 0x3) 03:14:10 executing program 1: syz_clone(0xb0a69180, 0x0, 0x0, 0x0, 0x0, 0x0) 03:14:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001300)=""/220, 0x5f5e0ff, 0xdc}, 0x20) 03:14:10 executing program 5: socket$kcm(0x29, 0x2, 0x0) socketpair(0x10, 0xa, 0x6, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3494}}], 0x18}, 0x0) socket$kcm(0x2, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() perf_event_open(0x0, r2, 0xf, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xc7, 0x2, 0x8, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64bb, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1e, 0x0, 0x9}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x80, 0x3, 0x1, 0x0, 0x2000000000000000, 0x42d0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x100000000, 0x2}, 0x63327b8255ea5c4f, 0x100000001, 0x5, 0x9, 0xffffffff80000000, 0x4, 0xffff, 0x0, 0x4, 0x0, 0x6}, r2, 0xd, r4, 0x691de3fc02ead62e) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000005c0)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x16\x17\xd6\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:14:10 executing program 0: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000001400)={0x0, 0x0}, 0xaa) 03:14:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x5}]}}, &(0x7f0000001300)=""/220, 0x26, 0xdc, 0x1}, 0x20) [ 693.644446][T14811] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 693.676710][T14811] CPU: 0 PID: 14811 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 693.687194][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 693.697280][T14811] Call Trace: [ 693.700583][T14811] [ 693.703540][T14811] dump_stack_lvl+0xd1/0x138 [ 693.708177][T14811] dump_header+0x10b/0x85f [ 693.712644][T14811] oom_kill_process.cold+0x10/0x15 [ 693.717807][T14811] out_of_memory+0x35c/0x14a0 [ 693.722538][T14811] ? find_held_lock+0x2d/0x110 [ 693.727342][T14811] ? oom_killer_disable+0x280/0x280 [ 693.732583][T14811] ? find_held_lock+0x2d/0x110 [ 693.737404][T14811] mem_cgroup_out_of_memory+0x206/0x270 [ 693.743000][T14811] ? mem_cgroup_margin+0x130/0x130 [ 693.748160][T14811] ? lock_downgrade+0x6e0/0x6e0 [ 693.753063][T14811] try_charge_memcg+0xefb/0x12f0 [ 693.758055][T14811] ? mem_cgroup_handle_over_high+0x520/0x520 [ 693.764073][T14811] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 693.769886][T14811] ? lock_downgrade+0x6e0/0x6e0 [ 693.774773][T14811] ? lock_downgrade+0x6e0/0x6e0 [ 693.779650][T14811] ? rcu_read_unlock+0x9/0x60 [ 693.784385][T14811] obj_cgroup_charge+0x2af/0x5e0 [ 693.789369][T14811] ? copy_process+0x3aa/0x7520 [ 693.794165][T14811] kmem_cache_alloc_node+0xb7/0x460 [ 693.799404][T14811] copy_process+0x3aa/0x7520 [ 693.804029][T14811] ? _raw_spin_unlock+0x28/0x40 [ 693.808912][T14811] ? wp_page_reuse+0x197/0x570 [ 693.813716][T14811] ? do_wp_page+0x844/0x3370 [ 693.818362][T14811] ? __cleanup_sighand+0xb0/0xb0 [ 693.823339][T14811] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 693.828762][T14811] ? rwlock_bug.part.0+0x90/0x90 [ 693.833744][T14811] ? lock_chain_count+0x20/0x20 [ 693.838640][T14811] kernel_clone+0xeb/0x990 [ 693.843101][T14811] ? create_io_thread+0xf0/0xf0 [ 693.847998][T14811] ? find_held_lock+0x2d/0x110 [ 693.852820][T14811] __do_sys_clone+0xba/0x100 [ 693.857446][T14811] ? kernel_clone+0x990/0x990 [ 693.862189][T14811] ? syscall_enter_from_user_mode+0x26/0xb0 [ 693.868141][T14811] do_syscall_64+0x39/0xb0 [ 693.872608][T14811] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 693.878542][T14811] RIP: 0033:0x7f2ca9289dfb 03:14:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:14:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 03:14:10 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f00000000c0)) [ 693.882990][T14811] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 693.902641][T14811] RSP: 002b:00007ffcf86ed010 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 693.911096][T14811] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ca9289dfb [ 693.919103][T14811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 693.927194][T14811] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556bf0400 [ 693.935199][T14811] R10: 0000555556bf06d0 R11: 0000000000000246 R12: 0000000000000001 03:14:10 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x1ff) [ 693.943201][T14811] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcf86ed0f0 [ 693.951227][T14811] [ 694.007841][T14953] device lo entered promiscuous mode [ 694.071925][T14811] memory: usage 316kB, limit 0kB, failcnt 401 [ 694.078220][T14811] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 694.094227][T14811] Memory cgroup stats for /syz2: [ 694.094465][T14811] anon 40960 [ 694.094465][T14811] file 225280 [ 694.094465][T14811] kernel 57344 [ 694.094465][T14811] kernel_stack 0 [ 694.094465][T14811] pagetables 8192 [ 694.094465][T14811] sec_pagetables 0 [ 694.094465][T14811] percpu 0 [ 694.094465][T14811] sock 0 [ 694.094465][T14811] vmalloc 0 [ 694.094465][T14811] shmem 221184 [ 694.094465][T14811] zswap 0 [ 694.094465][T14811] zswapped 0 [ 694.094465][T14811] file_mapped 221184 [ 694.094465][T14811] file_dirty 0 [ 694.094465][T14811] file_writeback 0 [ 694.094465][T14811] swapcached 0 [ 694.094465][T14811] anon_thp 0 [ 694.094465][T14811] file_thp 0 [ 694.094465][T14811] shmem_thp 0 [ 694.094465][T14811] inactive_anon 61440 [ 694.094465][T14811] active_anon 200704 [ 694.094465][T14811] inactive_file 0 [ 694.094465][T14811] active_file 4096 [ 694.094465][T14811] unevictable 0 [ 694.094465][T14811] slab_reclaimable 7704 [ 694.094465][T14811] slab_unreclaimable 32296 [ 694.094465][T14811] slab 40000 [ 694.191688][T14811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14811,uid=0 [ 694.207877][T14811] Memory cgroup out of memory: Killed process 14811 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 695.804127][ T999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.953709][ T999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.048943][ T999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.143286][ T999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.058981][ T999] device hsr_slave_0 left promiscuous mode [ 697.068412][ T999] device hsr_slave_1 left promiscuous mode [ 697.081907][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.089378][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.112875][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.130424][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.147065][ T999] device bridge_slave_1 left promiscuous mode [ 697.154835][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.172464][ T999] device bridge_slave_0 left promiscuous mode [ 697.178743][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.212095][ T999] device veth1_macvtap left promiscuous mode [ 697.218201][ T999] device veth0_macvtap left promiscuous mode [ 697.242793][ T999] device veth1_vlan left promiscuous mode [ 697.248691][ T999] device veth0_vlan left promiscuous mode [ 697.565892][ T999] team0 (unregistering): Port device team_slave_1 removed [ 697.601726][ T999] team0 (unregistering): Port device team_slave_0 removed [ 697.621781][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.645715][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.787013][ T999] bond0 (unregistering): Released all slaves [ 697.990003][ T4388] Bluetooth: hci2: command 0x0406 tx timeout 03:14:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:14:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto]}}, &(0x7f0000001300)=""/220, 0x3a, 0xdc, 0x1}, 0x20) 03:14:17 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001300)=""/220, 0x26, 0xdc, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f00000001c0)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd8, &(0x7f0000000240)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x80000000}, 0x10}, 0x80) 03:14:17 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000001300)=""/220, 0x1000000, 0xdc, 0x1}, 0x20) 03:14:17 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:14:17 executing program 5: socket$kcm(0x29, 0x2, 0x0) socketpair(0x10, 0xa, 0x6, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3494}}], 0x18}, 0x0) socket$kcm(0x2, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() perf_event_open(0x0, r2, 0xf, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xc7, 0x2, 0x8, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x64bb, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1e, 0x0, 0x9}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x80, 0x3, 0x1, 0x0, 0x2000000000000000, 0x42d0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x100000000, 0x2}, 0x63327b8255ea5c4f, 0x100000001, 0x5, 0x9, 0xffffffff80000000, 0x4, 0xffff, 0x0, 0x4, 0x0, 0x6}, r2, 0xd, r4, 0x691de3fc02ead62e) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000005c0)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x16\x17\xd6\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000140)='<', 0x1}], 0x2}, 0x0) [ 700.903895][T15177] device lo left promiscuous mode 03:14:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}]}}, &(0x7f0000001300)=""/220, 0x2e, 0xdc, 0x1}, 0x20) [ 700.956035][T15181] device lo entered promiscuous mode 03:14:17 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x3682c480, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, r0, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x40, 0x0, 0x0, 0x3, 0x0, 0x7ff, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xec, 0x0, @perf_config_ext={0x8dcb, 0x8}, 0x801, 0x5, 0x766e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, r1, 0x8, r2, 0x2) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='::{]\xdc\x00') ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000d40)={'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) r6 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000440)={'macsec0\x00', @dev}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000bc0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 03:14:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xdb}]}}, &(0x7f0000001300)=""/220, 0x26, 0xdc, 0x1}, 0x20) 03:14:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0xf, 0x0, 0x0, 0x5}, 0x48) [ 703.041941][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.053028][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.061660][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.071747][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 703.080063][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.288213][T15246] chnl_net:caif_netlink_parms(): no params data found [ 703.360493][T15246] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.367716][T15246] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.377148][T15246] device bridge_slave_0 entered promiscuous mode [ 703.385957][T15246] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.395515][T15246] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.403982][T15246] device bridge_slave_1 entered promiscuous mode [ 703.437248][T15246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.449076][T15246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.481405][T15246] team0: Port device team_slave_0 added [ 703.489627][T15246] team0: Port device team_slave_1 added [ 703.522148][T15246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.529186][T15246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.563181][T15246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.579181][T15246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.586505][T15246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.612662][T15246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.679703][T15246] device hsr_slave_0 entered promiscuous mode [ 703.687331][T15246] device hsr_slave_1 entered promiscuous mode [ 704.128583][T15246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 704.139413][T15246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 704.150060][T15246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 704.160533][T15246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 704.193099][T15246] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.200316][T15246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.208695][T15246] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.215934][T15246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.230905][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.238852][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.318828][T15246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.342077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 704.356323][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 704.371242][T15246] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.392298][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 704.409312][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 704.418709][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.425886][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.446139][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 704.455398][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 704.464809][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.471987][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.480608][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 704.501968][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 704.511395][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 704.521695][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 704.545938][T15246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.559319][T15246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.572583][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 704.581371][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 704.590050][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 704.598765][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 704.609843][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 704.622802][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 704.860277][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 704.875217][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 704.885125][T15246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.922785][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 704.939010][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 704.972018][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 704.989279][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 705.001726][T15246] device veth0_vlan entered promiscuous mode [ 705.029924][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 705.037913][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 705.062853][T15246] device veth1_vlan entered promiscuous mode [ 705.095056][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 705.099949][ T5114] Bluetooth: hci1: command 0x0409 tx timeout [ 705.104709][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 705.125376][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 705.137616][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 705.154868][T15246] device veth0_macvtap entered promiscuous mode [ 705.175035][T15246] device veth1_macvtap entered promiscuous mode [ 705.193801][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.204479][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.214695][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.226066][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.236791][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.247311][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.257215][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.268115][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.278352][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.290741][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.302510][T15246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.312874][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 705.331871][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 705.350165][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 705.358987][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 705.377200][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.388082][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.401342][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.412396][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.423053][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.434861][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.446013][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.457531][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.467792][T15246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.478704][T15246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.490591][T15246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.498483][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 705.508342][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 705.525631][T15246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.536747][T15246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.546472][T15246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.555288][T15246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.634780][T14144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.660754][T14144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.685633][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 705.695687][ T5329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.704780][ T5329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.715185][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 706.083865][T15313] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 706.095067][T15313] CPU: 0 PID: 15313 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 706.105533][T15313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 706.115633][T15313] Call Trace: [ 706.118961][T15313] [ 706.121924][T15313] dump_stack_lvl+0xd1/0x138 [ 706.126563][T15313] dump_header+0x10b/0x85f [ 706.131033][T15313] oom_kill_process.cold+0x10/0x15 [ 706.136201][T15313] out_of_memory+0x35c/0x14a0 [ 706.140942][T15313] ? oom_killer_disable+0x280/0x280 [ 706.146190][T15313] ? mark_held_locks+0x9f/0xe0 [ 706.151000][T15313] mem_cgroup_out_of_memory+0x206/0x270 [ 706.156595][T15313] ? mem_cgroup_margin+0x130/0x130 [ 706.161798][T15313] memory_max_write+0x2f9/0x3c0 [ 706.166710][T15313] ? mem_cgroup_force_empty_write+0x160/0x160 [ 706.172826][T15313] ? lock_release+0x810/0x810 [ 706.177552][T15313] cgroup_file_write+0x1e2/0x770 [ 706.182540][T15313] ? mem_cgroup_force_empty_write+0x160/0x160 [ 706.188655][T15313] ? kill_css+0x370/0x370 [ 706.193027][T15313] ? __virt_addr_valid+0x61/0x2e0 [ 706.198107][T15313] ? kill_css+0x370/0x370 [ 706.202473][T15313] kernfs_fop_write_iter+0x3f1/0x600 [ 706.207793][T15313] vfs_write+0x9ed/0xdd0 [ 706.212059][T15313] ? kernel_write+0x630/0x630 [ 706.216759][T15313] ? __fget_files+0x26a/0x440 [ 706.221472][T15313] ksys_write+0x12b/0x250 [ 706.225819][T15313] ? __ia32_sys_read+0xb0/0xb0 [ 706.230607][T15313] do_syscall_64+0x39/0xb0 [ 706.235045][T15313] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 706.240952][T15313] RIP: 0033:0x7f838668c0c9 [ 706.245378][T15313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 706.265175][T15313] RSP: 002b:00007f8387331168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 706.273608][T15313] RAX: ffffffffffffffda RBX: 00007f83867abf80 RCX: 00007f838668c0c9 [ 706.281587][T15313] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 706.289568][T15313] RBP: 00007f83866e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 706.297552][T15313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.305537][T15313] R13: 00007ffd4186c7bf R14: 00007f8387331300 R15: 0000000000022000 [ 706.313537][T15313] [ 706.330698][T15313] memory: usage 604kB, limit 0kB, failcnt 418 [ 706.337803][T15313] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.355294][T15313] Memory cgroup stats for /syz2: [ 706.360872][T15313] anon 114688 [ 706.360872][T15313] file 225280 [ 706.360872][T15313] kernel 262144 [ 706.360872][T15313] kernel_stack 65536 [ 706.360872][T15313] pagetables 77824 [ 706.360872][T15313] sec_pagetables 0 [ 706.360872][T15313] percpu 64 [ 706.360872][T15313] sock 0 [ 706.360872][T15313] vmalloc 0 [ 706.360872][T15313] shmem 221184 [ 706.360872][T15313] zswap 0 [ 706.360872][T15313] zswapped 0 [ 706.360872][T15313] file_mapped 221184 [ 706.360872][T15313] file_dirty 0 [ 706.360872][T15313] file_writeback 0 [ 706.360872][T15313] swapcached 0 [ 706.360872][T15313] anon_thp 0 [ 706.360872][T15313] file_thp 0 [ 706.360872][T15313] shmem_thp 0 [ 706.360872][T15313] inactive_anon 135168 [ 706.360872][T15313] active_anon 200704 [ 706.360872][T15313] inactive_file 0 [ 706.360872][T15313] active_file 4096 [ 706.360872][T15313] unevictable 0 [ 706.360872][T15313] slab_reclaimable 17528 [ 706.360872][T15313] slab_unreclaimable 75048 [ 706.360872][T15313] slab 92576 [ 706.470315][T15313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15312,uid=0 [ 706.490242][T15313] Memory cgroup out of memory: Killed process 15312 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 707.180345][ T5114] Bluetooth: hci1: command 0x041b tx timeout 03:14:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:14:24 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001440)='io.weight\x00', 0x2, 0x0) 03:14:24 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x83c0, 0x0) 03:14:24 executing program 4: syz_clone(0xbe200080, 0x0, 0x0, 0x0, 0x0, 0x0) 03:14:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x3682c480, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, r0, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x40, 0x0, 0x0, 0x3, 0x0, 0x7ff, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xec, 0x0, @perf_config_ext={0x8dcb, 0x8}, 0x801, 0x5, 0x766e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, r1, 0x8, r2, 0x2) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='::{]\xdc\x00') ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote}) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000d40)={'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) r6 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000440)={'macsec0\x00', @dev}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000bc0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 03:14:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:14:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 708.103032][T15246] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 708.132596][T15246] CPU: 0 PID: 15246 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 708.143084][T15246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 708.153177][T15246] Call Trace: [ 708.156475][T15246] [ 708.159434][T15246] dump_stack_lvl+0xd1/0x138 [ 708.164068][T15246] dump_header+0x10b/0x85f [ 708.168542][T15246] oom_kill_process.cold+0x10/0x15 [ 708.173701][T15246] out_of_memory+0x35c/0x14a0 [ 708.178426][T15246] ? find_held_lock+0x2d/0x110 [ 708.183233][T15246] ? oom_killer_disable+0x280/0x280 [ 708.188485][T15246] ? find_held_lock+0x2d/0x110 [ 708.193295][T15246] mem_cgroup_out_of_memory+0x206/0x270 [ 708.198878][T15246] ? mem_cgroup_margin+0x130/0x130 [ 708.204022][T15246] ? lock_downgrade+0x6e0/0x6e0 [ 708.208925][T15246] try_charge_memcg+0xefb/0x12f0 [ 708.213905][T15246] ? mem_cgroup_handle_over_high+0x520/0x520 [ 708.219923][T15246] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 708.225691][T15246] ? lock_downgrade+0x6e0/0x6e0 [ 708.230665][T15246] ? lock_downgrade+0x6e0/0x6e0 [ 708.235549][T15246] ? rcu_read_unlock+0x9/0x60 [ 708.240278][T15246] obj_cgroup_charge+0x2af/0x5e0 [ 708.245256][T15246] ? copy_process+0x3aa/0x7520 [ 708.250049][T15246] kmem_cache_alloc_node+0xb7/0x460 [ 708.255280][T15246] copy_process+0x3aa/0x7520 [ 708.259901][T15246] ? _raw_spin_unlock+0x28/0x40 [ 708.264788][T15246] ? wp_page_reuse+0x197/0x570 [ 708.269592][T15246] ? do_wp_page+0x844/0x3370 [ 708.274226][T15246] ? __cleanup_sighand+0xb0/0xb0 [ 708.279194][T15246] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 708.284613][T15246] ? rwlock_bug.part.0+0x90/0x90 [ 708.289578][T15246] ? lock_chain_count+0x20/0x20 [ 708.294462][T15246] kernel_clone+0xeb/0x990 [ 708.298918][T15246] ? create_io_thread+0xf0/0xf0 [ 708.303815][T15246] ? find_held_lock+0x2d/0x110 [ 708.308630][T15246] __do_sys_clone+0xba/0x100 [ 708.313257][T15246] ? kernel_clone+0x990/0x990 [ 708.317987][T15246] ? syscall_enter_from_user_mode+0x26/0xb0 [ 708.323927][T15246] do_syscall_64+0x39/0xb0 [ 708.328380][T15246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 708.334297][T15246] RIP: 0033:0x7f8386689dfb [ 708.338724][T15246] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 708.358349][T15246] RSP: 002b:00007ffd4186ca00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 708.366774][T15246] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8386689dfb [ 708.374749][T15246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 708.382721][T15246] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555555cf400 [ 708.390700][T15246] R10: 00005555555cf6d0 R11: 0000000000000246 R12: 0000000000000001 03:14:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x4, 0x0, [{}]}]}}, &(0x7f0000001300)=""/220, 0x2e, 0xdc, 0x1}, 0x20) [ 708.398676][T15246] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd4186cae0 [ 708.406665][T15246] [ 708.415585][T15246] memory: usage 336kB, limit 0kB, failcnt 450 [ 708.422395][T15246] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 708.429497][T15246] Memory cgroup stats for /syz2: [ 708.429711][T15246] anon 40960 [ 708.429711][T15246] file 225280 [ 708.429711][T15246] kernel 77824 [ 708.429711][T15246] kernel_stack 0 [ 708.429711][T15246] pagetables 8192 [ 708.429711][T15246] sec_pagetables 0 [ 708.429711][T15246] percpu 64 [ 708.429711][T15246] sock 0 [ 708.429711][T15246] vmalloc 0 [ 708.429711][T15246] shmem 221184 [ 708.429711][T15246] zswap 0 [ 708.429711][T15246] zswapped 0 [ 708.429711][T15246] file_mapped 221184 [ 708.429711][T15246] file_dirty 0 [ 708.429711][T15246] file_writeback 0 [ 708.429711][T15246] swapcached 0 [ 708.429711][T15246] anon_thp 0 [ 708.429711][T15246] file_thp 0 [ 708.429711][T15246] shmem_thp 0 [ 708.429711][T15246] inactive_anon 61440 [ 708.429711][T15246] active_anon 200704 03:14:25 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001300)=""/220, 0x26, 0xdc, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) [ 708.429711][T15246] inactive_file 0 [ 708.429711][T15246] active_file 4096 [ 708.429711][T15246] unevictable 0 [ 708.429711][T15246] slab_reclaimable 10280 [ 708.429711][T15246] slab_unreclaimable 44080 [ 708.429711][T15246] slab 54360 03:14:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x8, &(0x7f0000000000)=@raw=[@map_fd, @map_idx, @ldst, @ldst, @alu, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:14:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x1, 0xb94, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 03:14:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'pimreg\x00'}) [ 708.577533][T15246] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15246,uid=0 [ 708.684046][T15246] Memory cgroup out of memory: Killed process 15246 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 710.628797][T14144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.706416][T14144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.774642][T14144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.857869][T14144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.712927][T14144] device hsr_slave_0 left promiscuous mode [ 711.721312][T14144] device hsr_slave_1 left promiscuous mode [ 711.727928][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.735857][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.746455][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.753925][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.763428][T14144] device bridge_slave_1 left promiscuous mode [ 711.770834][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.779087][T14144] device bridge_slave_0 left promiscuous mode [ 711.786257][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.801075][T14144] device veth1_macvtap left promiscuous mode [ 711.807110][T14144] device veth0_macvtap left promiscuous mode [ 711.813640][T14144] device veth1_vlan left promiscuous mode [ 711.820814][T14144] device veth0_vlan left promiscuous mode [ 711.988813][T14144] team0 (unregistering): Port device team_slave_1 removed [ 712.006188][T14144] team0 (unregistering): Port device team_slave_0 removed [ 712.017447][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.032573][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.101157][T14144] bond0 (unregistering): Released all slaves 03:14:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:14:37 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4a, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @alu, @initr0, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @exit, @jmp, @func, @cb_func], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x96, &(0x7f00000002c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x80) 03:14:37 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x61, 0x48, 0x30]}}, &(0x7f0000000100)=""/231, 0x31, 0xe7, 0x1}, 0x20) 03:14:37 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {0x6, 0x4}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0xd}, {0x1, 0x2}]}]}}, &(0x7f0000001300)=""/220, 0x5a, 0xdc, 0x1}, 0x20) 03:14:37 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) 03:14:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:14:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) 03:14:37 executing program 4: socketpair(0xa, 0x2, 0x3, &(0x7f0000000000)) 03:14:37 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000001200), 0x48) 03:14:37 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, &(0x7f0000000040)=""/176, 0x32, 0xb0, 0x1}, 0x20) 03:14:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000003d80)=@base={0x10}, 0x48) 03:14:37 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 722.363178][ T4388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 722.371118][ T4388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 722.379258][ T4388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 722.388086][ T4388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 722.395470][ T4388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 722.518629][T15630] chnl_net:caif_netlink_parms(): no params data found [ 722.568812][T15630] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.576038][T15630] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.584700][T15630] device bridge_slave_0 entered promiscuous mode [ 722.592844][T15630] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.600333][T15630] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.608071][T15630] device bridge_slave_1 entered promiscuous mode [ 722.632415][T15630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.646188][T15630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.674302][T15630] team0: Port device team_slave_0 added [ 722.682109][T15630] team0: Port device team_slave_1 added [ 722.703683][T15630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.710752][T15630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.738563][T15630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.761484][T15630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.768473][T15630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.801479][T15630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.844184][T15630] device hsr_slave_0 entered promiscuous mode [ 722.851540][T15630] device hsr_slave_1 entered promiscuous mode [ 723.653237][T15630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 723.672002][T15630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 723.688044][T15630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 723.706275][T15630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 723.845425][T15630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.875471][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 723.892385][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 723.910095][T15630] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.929723][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 723.939106][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 723.953863][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.961048][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.983874][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 723.991912][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 724.000756][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.009095][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.016208][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.023807][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 724.032833][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.045729][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 724.065492][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 724.090160][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 724.107041][T15630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 724.127241][T15630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.143172][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.160683][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.176390][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.186563][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.206500][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 724.429321][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 724.439034][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 724.459821][ T5114] Bluetooth: hci1: command 0x0409 tx timeout [ 724.468382][T15630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.494250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 724.503876][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 724.526583][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 724.536461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 724.547449][T15630] device veth0_vlan entered promiscuous mode [ 724.568668][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 724.576778][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 724.604157][T15630] device veth1_vlan entered promiscuous mode [ 724.634946][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 724.644760][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.656797][T15630] device veth0_macvtap entered promiscuous mode [ 724.670526][T15630] device veth1_macvtap entered promiscuous mode [ 724.688721][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.701474][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.711826][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.725360][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.735511][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.746865][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.757151][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.773082][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.792662][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.812525][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.835819][T15630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.860722][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 724.871426][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 724.880873][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.898008][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.910298][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.923021][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.933768][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.945233][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.958338][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.969357][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.982622][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.994122][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.004631][T15630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.015458][T15630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.027645][T15630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.041525][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 725.051388][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 725.084778][T15630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.094631][T15630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.104280][T15630] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.113269][T15630] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.539587][ T5114] Bluetooth: hci1: command 0x041b tx timeout [ 727.363621][ T5329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.392230][ T5178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.403992][ T5329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.415355][ T5178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.446545][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 727.468901][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 727.715817][T15701] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 727.732457][T15701] CPU: 1 PID: 15701 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 727.742950][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 727.753045][T15701] Call Trace: [ 727.756361][T15701] [ 727.759319][T15701] dump_stack_lvl+0xd1/0x138 [ 727.763959][T15701] dump_header+0x10b/0x85f [ 727.768429][T15701] oom_kill_process.cold+0x10/0x15 [ 727.773598][T15701] out_of_memory+0x35c/0x14a0 [ 727.778346][T15701] ? oom_killer_disable+0x280/0x280 [ 727.783610][T15701] mem_cgroup_out_of_memory+0x206/0x270 [ 727.789209][T15701] ? mem_cgroup_margin+0x130/0x130 [ 727.794396][T15701] memory_max_write+0x2f9/0x3c0 [ 727.799299][T15701] ? mem_cgroup_force_empty_write+0x160/0x160 [ 727.805414][T15701] ? lock_release+0x810/0x810 [ 727.810138][T15701] cgroup_file_write+0x1e2/0x770 [ 727.815123][T15701] ? mem_cgroup_force_empty_write+0x160/0x160 [ 727.821229][T15701] ? kill_css+0x370/0x370 [ 727.825596][T15701] ? __virt_addr_valid+0x61/0x2e0 [ 727.830680][T15701] ? kill_css+0x370/0x370 [ 727.835052][T15701] kernfs_fop_write_iter+0x3f1/0x600 [ 727.840402][T15701] vfs_write+0x9ed/0xdd0 [ 727.844688][T15701] ? kernel_write+0x630/0x630 [ 727.849405][T15701] ? __fget_files+0x26a/0x440 [ 727.854136][T15701] ksys_write+0x12b/0x250 [ 727.858502][T15701] ? __ia32_sys_read+0xb0/0xb0 [ 727.863305][T15701] ? syscall_enter_from_user_mode+0x26/0xb0 [ 727.869244][T15701] do_syscall_64+0x39/0xb0 [ 727.873701][T15701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 727.879625][T15701] RIP: 0033:0x7fe32528c0c9 [ 727.884067][T15701] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 727.903711][T15701] RSP: 002b:00007fe325f9d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:14:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:14:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)) 03:14:44 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000700)) 03:14:44 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 03:14:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000980100009801000004000000000000000500000d"], &(0x7f0000000280)=""/4096, 0x1b4, 0x1000, 0x1}, 0x20) [ 727.912171][T15701] RAX: ffffffffffffffda RBX: 00007fe3253ac050 RCX: 00007fe32528c0c9 [ 727.920165][T15701] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 727.928156][T15701] RBP: 00007fe3252e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 727.936139][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.944122][T15701] R13: 00007ffe53b2864f R14: 00007fe325f9d300 R15: 0000000000022000 [ 727.952128][T15701] [ 728.129709][T15701] memory: usage 632kB, limit 0kB, failcnt 467 [ 728.136014][T15701] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 728.148622][T15701] Memory cgroup stats for /syz2: [ 728.164964][T15701] anon 118784 [ 728.164964][T15701] file 225280 [ 728.164964][T15701] kernel 303104 [ 728.164964][T15701] kernel_stack 98304 [ 728.164964][T15701] pagetables 77824 [ 728.164964][T15701] sec_pagetables 0 [ 728.164964][T15701] percpu 64 [ 728.164964][T15701] sock 0 [ 728.164964][T15701] vmalloc 0 [ 728.164964][T15701] shmem 221184 [ 728.164964][T15701] zswap 0 [ 728.164964][T15701] zswapped 0 [ 728.164964][T15701] file_mapped 221184 [ 728.164964][T15701] file_dirty 0 [ 728.164964][T15701] file_writeback 0 [ 728.164964][T15701] swapcached 0 [ 728.164964][T15701] anon_thp 0 [ 728.164964][T15701] file_thp 0 [ 728.164964][T15701] shmem_thp 0 [ 728.164964][T15701] inactive_anon 139264 [ 728.164964][T15701] active_anon 200704 [ 728.164964][T15701] inactive_file 0 [ 728.164964][T15701] active_file 4096 [ 728.164964][T15701] unevictable 0 [ 728.164964][T15701] slab_reclaimable 17528 [ 728.164964][T15701] slab_unreclaimable 81792 [ 728.164964][T15701] slab 99320 [ 728.264437][T15701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15630,uid=0 [ 728.281464][T15701] Memory cgroup out of memory: Killed process 15630 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 728.620722][ T5114] Bluetooth: hci1: command 0x040f tx timeout 03:14:46 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:14:46 executing program 4: bpf$MAP_CREATE(0x14, &(0x7f0000003d80), 0x48) 03:14:46 executing program 5: r0 = syz_clone(0x40000400, &(0x7f00000001c0)="a6bd224312f5554a32fddbe9af5659b3f832fedcf14d7c5dbe48f098dd00d4727023bad3e71e96d1cf65df8100ad1c5fd5048f017a409d01571a108b33dcdf328ea90a37bd6e3be828ddbd8f6613f59d820fee4feb2052cacd3bd3bfcf41edf23e8c8173e722490c05c5f5be92066368ea7f4f0eac9905d922fefcd0a42f1ad4c212d43a8c65e91b96dcde69295a92e019defc16f5f52e7d3838f39834108b0a51422136ad09a3", 0xa7, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, r1, 0x0, 0x2, &(0x7f00000003c0)=']\x00'}, 0x30) 03:14:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:14:46 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="2d0000000100000000000000ffff000018430000faffffff00000000000000001834000003000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0xe0, &(0x7f0000000080)=""/224, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0), 0x10}, 0x80) 03:14:46 executing program 1: socketpair$unix(0x1, 0x5bf548801f963206, 0x0, 0x0) 03:14:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000003d80)=@base={0x2}, 0x48) [ 730.684257][T14144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.826141][T14144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.955923][T14144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.025244][T14144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.019858][T14144] device hsr_slave_0 left promiscuous mode [ 732.026453][T14144] device hsr_slave_1 left promiscuous mode [ 732.055246][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.069632][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.082279][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.099830][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.123406][T14144] device bridge_slave_1 left promiscuous mode [ 732.139858][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.153003][T14144] device bridge_slave_0 left promiscuous mode [ 732.159287][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.203886][T14144] device veth1_macvtap left promiscuous mode [ 732.226302][T14144] device veth0_macvtap left promiscuous mode [ 732.240469][T14144] device veth1_vlan left promiscuous mode [ 732.246347][T14144] device veth0_vlan left promiscuous mode [ 732.662830][T14144] team0 (unregistering): Port device team_slave_1 removed [ 732.675916][T14144] team0 (unregistering): Port device team_slave_0 removed [ 732.687558][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.704358][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.774731][T14144] bond0 (unregistering): Released all slaves 03:15:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:15:00 executing program 4: bpf$MAP_LOOKUP_BATCH(0x4, 0x0, 0x0) 03:15:00 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000700)) 03:15:00 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)="88", 0x1}], 0x2, &(0x7f00000002c0)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 03:15:00 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:15:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syz_tun\x00', @local}) 03:15:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000003d80)=@base={0x9, 0x0, 0x0, 0x0, 0x4}, 0x48) 03:15:00 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x20040, 0x0) 03:15:00 executing program 5: syz_clone(0x40000400, &(0x7f00000001c0)="a6bd224312f5554a32fddbe9af5659b3f832fedcf14d7c5dbe48f098dd00d4727023bad3e71e96d1cf65df8100ad1c5fd5048f017a409d01571a108b33dcdf328ea90a37bd6e3be828ddbd8f6613f59d820fee4feb2052", 0x57, 0x0, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 03:15:00 executing program 1: bpf$MAP_LOOKUP_BATCH(0xa, 0x0, 0x0) 03:15:00 executing program 4: bpf$MAP_CREATE(0xc, &(0x7f0000003d80), 0x48) 03:15:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0xa, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000000c0)) openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x5, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0x1, 0xa, 0x1, 0x4, 0xfffffffffffffff0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x1}], &(0x7f0000000180)='GPL\x00', 0x0, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0x9, 0x4d1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)={@map=0x1, r1, 0x15}, 0x10) openat$cgroup_subtree(r0, &(0x7f0000001340), 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001380)='memory.low\x00', 0x2, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000013c0)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001400)={r1, 0x1}, 0xc) r2 = openat$cgroup_pressure(r0, &(0x7f0000001440)='cpu.pressure\x00', 0x2, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000001480)={0x1, 0x80, 0xb1, 0x52, 0xee, 0x7, 0x0, 0xa8a, 0xa80, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0xb15d, 0x80000000}, 0x804, 0x5, 0x20f5b598, 0x6, 0x7, 0x6, 0x400, 0x0, 0x90, 0x0, 0x5}, r0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = openat$cgroup_ro(r0, &(0x7f0000001500)='cpuacct.stat\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x18, 0x12, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3a}, @ldst={0x0, 0x1, 0x1, 0x0, 0x5, 0x4, 0xffffffffffffffff}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffe01}, @func, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @generic={0x1f, 0xb, 0x5, 0x4f0, 0x10dd}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @generic={0x36, 0x3, 0x0, 0x9, 0x1}]}, &(0x7f0000001600)='syzkaller\x00', 0x4, 0x71, &(0x7f0000001640)=""/113, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001700)={0x0, 0x1, 0xffffb271, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001740)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r2, 0xffffffffffffffff]}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdirat$cgroup(r4, &(0x7f0000001800)='syz1\x00', 0x1ff) r6 = openat$cgroup_freezer_state(r4, &(0x7f0000001840), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x0, &(0x7f0000001880), &(0x7f00000018c0)='syzkaller\x00', 0x3f, 0x42, &(0x7f0000001900)=""/66, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000019c0)={0x0, 0x0, 0x100, 0x1f}, 0x10}, 0x80) openat$cgroup_freezer_state(r6, &(0x7f0000001a80), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b00)={r4, 0x0, 0x1, 0x7, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) openat$cgroup_freezer_state(r0, &(0x7f0000001b40), 0x2, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000001b80)={'syz_tun\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001bc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002040)={r4, 0xe0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001d80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001e40)=[{}, {}], 0x10, 0x10, &(0x7f0000001e80), &(0x7f0000001ec0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000002080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@enum={0xb, 0x3, 0x0, 0x6, 0x4, [{0x9, 0xad85}, {0xe, 0x401}, {0x8, 0x7ff}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @fwd={0xd}]}, {0x0, [0x61, 0x30, 0x0, 0x2e]}}, &(0x7f0000002100)=""/134, 0x72, 0x86}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002280)={0x6, 0xc, &(0x7f0000001c40)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xb8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, @exit, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0xb, 0xa, 0x5, 0x10, 0xfffffffffffffff0}], &(0x7f0000001cc0)='GPL\x00', 0x3, 0x5e, &(0x7f0000001d00)=""/94, 0x40f00, 0x2, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000002200)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0x6, 0x7, 0x8}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000024c0)={r4, 0x58, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002580)=@bpf_tracing={0x1a, 0x1, &(0x7f0000002300)=@raw=[@jmp={0x5, 0x0, 0x5, 0xa, 0x8, 0x6, 0x1}], &(0x7f0000002340)='GPL\x00', 0xaf, 0x83, &(0x7f0000002380)=""/131, 0x40f00, 0x8, '\x00', r9, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000002540)={0x0, 0xd, 0x5, 0x9}, 0x10, 0x29a2e}, 0x80) [ 744.059757][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 745.687695][ T4388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 745.697177][ T4388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 745.705324][ T4388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 745.714006][ T4388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 745.721779][ T4388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 745.729084][ T4388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 746.059125][T16235] chnl_net:caif_netlink_parms(): no params data found [ 746.203600][T16235] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.218994][T16235] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.241650][T16235] device bridge_slave_0 entered promiscuous mode [ 746.257976][T16235] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.265421][T16235] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.282941][T16235] device bridge_slave_1 entered promiscuous mode [ 746.337456][T16235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.363034][T16235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.445251][T16235] team0: Port device team_slave_0 added [ 746.461995][T16235] team0: Port device team_slave_1 added [ 746.521619][T16235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.528605][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.577612][T16235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.592106][T16235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.599092][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.637687][T16235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.724944][T16235] device hsr_slave_0 entered promiscuous mode [ 746.740363][T16235] device hsr_slave_1 entered promiscuous mode [ 747.103450][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.109843][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.781686][T16235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 747.793426][T16235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 747.808007][T16235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 747.819703][ T4388] Bluetooth: hci1: command 0x0409 tx timeout [ 747.826455][T16235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 747.939574][T16235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.954652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 747.963835][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 747.975530][T16235] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.987305][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 747.997210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.006213][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.013405][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.039155][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.047973][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.057431][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.067138][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.074327][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.082591][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.100063][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.108955][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.122307][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.151825][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.167577][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.176718][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.193984][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.207276][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.218833][T16235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 748.473954][T16235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.488133][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 748.499783][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 748.528067][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 748.548102][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 748.582994][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 748.600758][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 748.611678][T16235] device veth0_vlan entered promiscuous mode [ 748.635411][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 748.651393][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 748.661089][T16235] device veth1_vlan entered promiscuous mode [ 748.707634][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 748.725484][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 748.738345][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 748.752906][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 748.764185][T16235] device veth0_macvtap entered promiscuous mode [ 748.777813][T16235] device veth1_macvtap entered promiscuous mode [ 748.796272][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.809826][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.820654][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.831744][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.843122][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.853981][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.864959][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.875791][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.889531][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.906680][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.920517][T16235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.929619][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 748.940958][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 748.949109][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 748.958368][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 748.970588][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.982245][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.993748][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.013014][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.037005][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.048870][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.066962][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.077777][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.096007][T16235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.109355][T16235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.131140][T16235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.140783][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 749.160052][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 749.171911][T16235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.194413][T16235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.212688][T16235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.227623][T16235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.330963][T14144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.339085][T14144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.374655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 749.390738][ T5329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.398888][ T5329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.411283][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 749.754144][T16312] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 749.767867][T16312] CPU: 1 PID: 16312 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 749.778351][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 749.788453][T16312] Call Trace: [ 749.791762][T16312] [ 749.794729][T16312] dump_stack_lvl+0xd1/0x138 [ 749.799382][T16312] dump_header+0x10b/0x85f [ 749.803870][T16312] oom_kill_process.cold+0x10/0x15 [ 749.809045][T16312] out_of_memory+0x35c/0x14a0 [ 749.813796][T16312] ? oom_killer_disable+0x280/0x280 [ 749.819057][T16312] ? mark_held_locks+0x9f/0xe0 [ 749.823865][T16312] mem_cgroup_out_of_memory+0x206/0x270 [ 749.829456][T16312] ? mem_cgroup_margin+0x130/0x130 [ 749.834625][T16312] memory_max_write+0x2f9/0x3c0 [ 749.839499][T16312] ? mem_cgroup_force_empty_write+0x160/0x160 [ 749.845598][T16312] ? lock_release+0x810/0x810 [ 749.850346][T16312] cgroup_file_write+0x1e2/0x770 [ 749.855329][T16312] ? mem_cgroup_force_empty_write+0x160/0x160 [ 749.861434][T16312] ? kill_css+0x370/0x370 [ 749.865792][T16312] ? __virt_addr_valid+0x61/0x2e0 [ 749.870853][T16312] ? kill_css+0x370/0x370 [ 749.875203][T16312] kernfs_fop_write_iter+0x3f1/0x600 [ 749.880515][T16312] vfs_write+0x9ed/0xdd0 [ 749.884779][T16312] ? kernel_write+0x630/0x630 [ 749.889474][T16312] ? __fget_files+0x26a/0x440 [ 749.894210][T16312] ksys_write+0x12b/0x250 [ 749.898551][T16312] ? __ia32_sys_read+0xb0/0xb0 [ 749.903335][T16312] ? syscall_enter_from_user_mode+0x30/0xb0 [ 749.909513][T16312] do_syscall_64+0x39/0xb0 [ 749.913954][T16312] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 749.919863][T16312] RIP: 0033:0x7f0c6888c0c9 [ 749.924313][T16312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 749.943948][T16312] RSP: 002b:00007f0c69623168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 749.952385][T16312] RAX: ffffffffffffffda RBX: 00007f0c689abf80 RCX: 00007f0c6888c0c9 [ 749.960365][T16312] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 749.968342][T16312] RBP: 00007f0c688e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 749.976317][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.984357][T16312] R13: 00007ffefdd68def R14: 00007f0c69623300 R15: 0000000000022000 [ 749.992388][T16312] [ 749.999339][ T4388] Bluetooth: hci1: command 0x041b tx timeout [ 750.019899][T16312] memory: usage 596kB, limit 0kB, failcnt 467 [ 750.038544][T16312] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 750.049236][T16312] Memory cgroup stats for /syz2: [ 750.053643][T16312] anon 114688 [ 750.053643][T16312] file 225280 [ 750.053643][T16312] kernel 270336 [ 750.053643][T16312] kernel_stack 65536 [ 750.053643][T16312] pagetables 81920 [ 750.053643][T16312] sec_pagetables 0 [ 750.053643][T16312] percpu 64 [ 750.053643][T16312] sock 0 [ 750.053643][T16312] vmalloc 0 [ 750.053643][T16312] shmem 221184 [ 750.053643][T16312] zswap 0 [ 750.053643][T16312] zswapped 0 [ 750.053643][T16312] file_mapped 221184 [ 750.053643][T16312] file_dirty 0 [ 750.053643][T16312] file_writeback 0 [ 750.053643][T16312] swapcached 0 [ 750.053643][T16312] anon_thp 0 [ 750.053643][T16312] file_thp 0 [ 750.053643][T16312] shmem_thp 0 [ 750.053643][T16312] inactive_anon 135168 [ 750.053643][T16312] active_anon 200704 [ 750.053643][T16312] inactive_file 0 [ 750.053643][T16312] active_file 4096 [ 750.053643][T16312] unevictable 0 [ 750.053643][T16312] slab_reclaimable 17528 [ 750.053643][T16312] slab_unreclaimable 73104 [ 750.053643][T16312] slab 90632 [ 750.161116][T16312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16235,uid=0 [ 750.193234][T16312] Memory cgroup out of memory: Killed process 16235 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 754.076213][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.505939][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.558667][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.612083][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.508551][ T9] device hsr_slave_0 left promiscuous mode [ 755.515437][ T9] device hsr_slave_1 left promiscuous mode [ 755.530380][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.537888][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.549719][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.557214][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.566209][ T9] device bridge_slave_1 left promiscuous mode [ 755.572596][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.581715][ T9] device bridge_slave_0 left promiscuous mode [ 755.587941][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.602920][ T9] device veth1_macvtap left promiscuous mode [ 755.608985][ T9] device veth0_macvtap left promiscuous mode [ 755.615514][ T9] device veth1_vlan left promiscuous mode [ 755.621512][ T9] device veth0_vlan left promiscuous mode [ 755.804929][ T9] team0 (unregistering): Port device team_slave_1 removed [ 755.817912][ T9] team0 (unregistering): Port device team_slave_0 removed [ 755.833011][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.846718][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.925767][ T9] bond0 (unregistering): Released all slaves 03:15:13 executing program 4: unlink(&(0x7f0000000200)='./file0\x00') 03:15:13 executing program 1: socketpair(0x5, 0x0, 0x0, &(0x7f00000002c0)) 03:15:13 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)) 03:15:13 executing program 5: bpf$MAP_CREATE(0x6, &(0x7f0000003d80), 0x98) 03:15:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:15:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:15:13 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0x3, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000010c0), 0x10}, 0x80) 03:15:13 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001b40)="96", &(0x7f0000000bc0)="19"}, 0x48) 03:15:13 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0x3, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000003d80)=@base={0xd}, 0x48) 03:15:13 executing program 0: syz_clone(0x40000400, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 03:15:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x32}, 0x20) 03:15:14 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={0xffffffffffffffff, 0x24, 0x1, 0x0, 0x0}, 0x20) [ 759.241839][ T4388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.257810][ T4388] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.266845][ T4388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.275839][ T4388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.283872][ T4388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 759.291793][ T4388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.698970][T16533] chnl_net:caif_netlink_parms(): no params data found [ 759.887949][T16533] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.898970][T16533] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.909332][T16533] device bridge_slave_0 entered promiscuous mode [ 759.925504][T16533] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.936168][T16533] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.944829][T16533] device bridge_slave_1 entered promiscuous mode [ 759.996787][T16533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.022736][T16533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.120600][T16533] team0: Port device team_slave_0 added [ 760.128706][T16533] team0: Port device team_slave_1 added [ 760.237018][T16533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.263429][T16533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.357342][T16533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.397643][T16533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.419674][T16533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.502204][T16533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.584021][T16533] device hsr_slave_0 entered promiscuous mode [ 760.603767][T16533] device hsr_slave_1 entered promiscuous mode [ 761.339719][ T4388] Bluetooth: hci1: command 0x0409 tx timeout [ 761.535339][T16533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 761.553098][T16533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 761.565039][T16533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 761.576343][T16533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 761.669340][T16533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.696785][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 761.705469][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 761.717126][T16533] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.728874][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 761.740114][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 761.748650][T12163] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.755826][T12163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.790572][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 761.798719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 761.817158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 761.826300][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.833467][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.841996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 761.851101][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 761.871236][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 761.881752][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 761.891588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 761.900710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 761.914454][T16533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.928768][T16533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 761.938891][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 761.948341][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 761.957699][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 762.320857][T16533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.329082][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 762.344946][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 762.370863][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 762.380920][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 762.413188][T16533] device veth0_vlan entered promiscuous mode [ 762.429282][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 762.438652][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 762.447570][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 762.456473][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 762.480683][T16533] device veth1_vlan entered promiscuous mode [ 762.506620][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 762.515308][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 762.524174][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 762.542577][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 762.560709][T16533] device veth0_macvtap entered promiscuous mode [ 762.575668][T16533] device veth1_macvtap entered promiscuous mode [ 762.606844][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.617711][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.629051][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.647594][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.657521][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.669333][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.679343][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.690617][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.701140][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.719503][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.732269][T16533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.748350][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 762.758977][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 762.774723][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 762.788220][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 762.804348][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.827580][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.841134][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.858625][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.869979][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.880684][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.891859][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.907964][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.926160][T16533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.937190][T16533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.950792][T16533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.958438][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 762.968398][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 762.980539][T16533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.989312][T16533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.999278][T16533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.008363][T16533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.113150][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.129972][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.148205][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 763.159111][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.178469][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.206928][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 763.433939][ T4388] Bluetooth: hci1: command 0x041b tx timeout [ 763.617104][T16619] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 763.629275][T16619] CPU: 1 PID: 16619 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 763.639736][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 763.649802][T16619] Call Trace: [ 763.653085][T16619] [ 763.656021][T16619] dump_stack_lvl+0xd1/0x138 [ 763.660635][T16619] dump_header+0x10b/0x85f [ 763.665089][T16619] oom_kill_process.cold+0x10/0x15 [ 763.670227][T16619] out_of_memory+0x35c/0x14a0 [ 763.674934][T16619] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 763.681109][T16619] ? oom_killer_disable+0x280/0x280 [ 763.686342][T16619] mem_cgroup_out_of_memory+0x206/0x270 [ 763.691915][T16619] ? mem_cgroup_margin+0x130/0x130 [ 763.697080][T16619] ? preempt_count_sub+0x63/0x150 [ 763.702136][T16619] memory_max_write+0x2f9/0x3c0 [ 763.707001][T16619] ? mem_cgroup_force_empty_write+0x160/0x160 [ 763.713084][T16619] ? lock_release+0x810/0x810 [ 763.717777][T16619] cgroup_file_write+0x1e2/0x770 [ 763.722739][T16619] ? mem_cgroup_force_empty_write+0x160/0x160 [ 763.728835][T16619] ? kill_css+0x370/0x370 [ 763.733209][T16619] ? __virt_addr_valid+0x61/0x2e0 [ 763.738267][T16619] ? kill_css+0x370/0x370 [ 763.742616][T16619] kernfs_fop_write_iter+0x3f1/0x600 [ 763.747959][T16619] vfs_write+0x9ed/0xdd0 [ 763.752248][T16619] ? kernel_write+0x630/0x630 [ 763.756962][T16619] ? __fget_files+0x26a/0x440 [ 763.761669][T16619] ksys_write+0x12b/0x250 [ 763.766013][T16619] ? __ia32_sys_read+0xb0/0xb0 [ 763.770792][T16619] ? syscall_enter_from_user_mode+0x26/0xb0 [ 763.776705][T16619] do_syscall_64+0x39/0xb0 [ 763.781140][T16619] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 763.787045][T16619] RIP: 0033:0x7f092ec8c0c9 [ 763.791472][T16619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 763.811109][T16619] RSP: 002b:00007f092f905168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 763.819557][T16619] RAX: ffffffffffffffda RBX: 00007f092edabf80 RCX: 00007f092ec8c0c9 [ 763.827563][T16619] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 763.835549][T16619] RBP: 00007f092ece7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 763.843529][T16619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.851512][T16619] R13: 00007fffabfc8bbf R14: 00007f092f905300 R15: 0000000000022000 [ 763.859518][T16619] [ 763.873952][T16619] memory: usage 604kB, limit 0kB, failcnt 467 [ 763.881795][T16619] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 763.891615][T16619] Memory cgroup stats for /syz2: [ 763.894880][T16619] anon 110592 [ 763.894880][T16619] file 225280 [ 763.894880][T16619] kernel 266240 [ 763.894880][T16619] kernel_stack 65536 [ 763.894880][T16619] pagetables 77824 [ 763.894880][T16619] sec_pagetables 0 [ 763.894880][T16619] percpu 64 [ 763.894880][T16619] sock 0 [ 763.894880][T16619] vmalloc 0 [ 763.894880][T16619] shmem 221184 [ 763.894880][T16619] zswap 0 [ 763.894880][T16619] zswapped 0 [ 763.894880][T16619] file_mapped 221184 [ 763.894880][T16619] file_dirty 0 [ 763.894880][T16619] file_writeback 0 [ 763.894880][T16619] swapcached 0 [ 763.894880][T16619] anon_thp 0 [ 763.894880][T16619] file_thp 0 [ 763.894880][T16619] shmem_thp 0 [ 763.894880][T16619] inactive_anon 131072 [ 763.894880][T16619] active_anon 200704 [ 763.894880][T16619] inactive_file 4096 [ 763.894880][T16619] active_file 0 [ 763.894880][T16619] unevictable 0 [ 763.894880][T16619] slab_reclaimable 17528 [ 763.894880][T16619] slab_unreclaimable 75048 [ 763.894880][T16619] slab 92576 [ 764.017461][T16619] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16618,uid=0 [ 764.045242][T16619] Memory cgroup out of memory: Killed process 16618 (syz-executor.2) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 765.509531][ T5114] Bluetooth: hci1: command 0x040f tx timeout [ 767.581485][ T5114] Bluetooth: hci1: command 0x0419 tx timeout 03:15:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:15:29 executing program 4: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x6) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x3, &(0x7f0000003d80)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) 03:15:29 executing program 5: r0 = syz_clone(0x40000400, &(0x7f00000001c0)="a6bd224312f5554a32fddbe9af5659b3f832fedcf14d7c5dbe48f098dd00d4727023bad3e71e96d1cf65df8100ad1c5fd5048f017a409d01571a108b33dcdf328ea90a37bd6e3be828ddbd8f6613f59d820fee4feb2052cacd3bd3bfcf41edf23e8c8173e722490c05c5f5be92066368ea7f4f0eac9905d922fefcd0a42f1ad4c212d43a8c65e91b96dcde69295a92e019defc16f5f52e7d3838f39834108b0a51422136ad09a3", 0xa7, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2a140243d8d432bee766bbc43579a56d5fd77567f5f9b1aaa9a388508f5607c8cec5547112ca97180000b71ea8ec7c1f1e0dc31ddd1e0e0cc6afae598fa63cd51b9aded62ef8b97a980780508455b2e62f9ee0f85e0065515c9666f5d75dee11aadc1b826f5c86caa382a54c") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r0, r1, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 03:15:29 executing program 1: bpf$MAP_CREATE(0x22, &(0x7f0000003d80), 0x48) 03:15:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00'}) 03:15:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 772.546972][T16533] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 772.589499][T16533] CPU: 0 PID: 16533 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 772.599985][T16533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 772.610071][T16533] Call Trace: [ 772.613373][T16533] [ 772.616333][T16533] dump_stack_lvl+0xd1/0x138 [ 772.620966][T16533] dump_header+0x10b/0x85f [ 772.625433][T16533] oom_kill_process.cold+0x10/0x15 [ 772.630597][T16533] out_of_memory+0x35c/0x14a0 [ 772.635332][T16533] ? find_held_lock+0x2d/0x110 [ 772.640142][T16533] ? oom_killer_disable+0x280/0x280 [ 772.645385][T16533] ? find_held_lock+0x2d/0x110 [ 772.650171][T16533] mem_cgroup_out_of_memory+0x206/0x270 [ 772.655739][T16533] ? mem_cgroup_margin+0x130/0x130 [ 772.660868][T16533] ? lock_downgrade+0x6e0/0x6e0 [ 772.665743][T16533] try_charge_memcg+0xefb/0x12f0 [ 772.670696][T16533] ? mem_cgroup_handle_over_high+0x520/0x520 [ 772.676686][T16533] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 772.682423][T16533] ? lock_downgrade+0x6e0/0x6e0 [ 772.687284][T16533] ? lock_downgrade+0x6e0/0x6e0 [ 772.692140][T16533] ? rcu_read_unlock+0x9/0x60 [ 772.696847][T16533] obj_cgroup_charge+0x2af/0x5e0 [ 772.701804][T16533] ? copy_process+0x3aa/0x7520 [ 772.706584][T16533] kmem_cache_alloc_node+0xb7/0x460 [ 772.711795][T16533] copy_process+0x3aa/0x7520 [ 772.716397][T16533] ? _raw_spin_unlock+0x28/0x40 [ 772.721261][T16533] ? wp_page_reuse+0x197/0x570 [ 772.726039][T16533] ? do_wp_page+0x844/0x3370 [ 772.730649][T16533] ? __cleanup_sighand+0xb0/0xb0 [ 772.735596][T16533] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 772.740985][T16533] ? rwlock_bug.part.0+0x90/0x90 [ 772.745933][T16533] ? lock_chain_count+0x20/0x20 [ 772.750793][T16533] kernel_clone+0xeb/0x990 [ 772.755231][T16533] ? create_io_thread+0xf0/0xf0 [ 772.760102][T16533] ? find_held_lock+0x2d/0x110 [ 772.764893][T16533] __do_sys_clone+0xba/0x100 [ 772.769516][T16533] ? kernel_clone+0x990/0x990 [ 772.774230][T16533] ? syscall_enter_from_user_mode+0x26/0xb0 [ 772.780139][T16533] do_syscall_64+0x39/0xb0 [ 772.784568][T16533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 772.790473][T16533] RIP: 0033:0x7f092ec89dfb [ 772.794894][T16533] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 772.814507][T16533] RSP: 002b:00007fffabfc8e00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 772.822931][T16533] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f092ec89dfb [ 772.830913][T16533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 03:15:29 executing program 0: bpf$MAP_LOOKUP_BATCH(0x2, 0x0, 0x0) 03:15:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000980100009801000004000000000000000500000d0000000009"], &(0x7f0000000280)=""/4096, 0x1b4, 0x1000, 0x1}, 0x20) [ 772.838891][T16533] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555c41400 [ 772.846866][T16533] R10: 0000555555c416d0 R11: 0000000000000246 R12: 0000000000000001 [ 772.854845][T16533] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffabfc8ee0 [ 772.862835][T16533] 03:15:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000001feffff85"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 772.910510][T16533] memory: usage 316kB, limit 0kB, failcnt 486 [ 772.924812][T16533] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 772.939861][T16533] Memory cgroup stats for /syz2: [ 772.940082][T16533] anon 36864 [ 772.940082][T16533] file 225280 [ 772.940082][T16533] kernel 61440 [ 772.940082][T16533] kernel_stack 0 [ 772.940082][T16533] pagetables 8192 [ 772.940082][T16533] sec_pagetables 0 [ 772.940082][T16533] percpu 0 [ 772.940082][T16533] sock 0 [ 772.940082][T16533] vmalloc 0 [ 772.940082][T16533] shmem 221184 [ 772.940082][T16533] zswap 0 [ 772.940082][T16533] zswapped 0 [ 772.940082][T16533] file_mapped 221184 [ 772.940082][T16533] file_dirty 0 [ 772.940082][T16533] file_writeback 0 [ 772.940082][T16533] swapcached 0 [ 772.940082][T16533] anon_thp 0 [ 772.940082][T16533] file_thp 0 [ 772.940082][T16533] shmem_thp 0 [ 772.940082][T16533] inactive_anon 57344 03:15:29 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x5, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:29 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x0, 0xb}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:29 executing program 0: bpf$BPF_PROG_DETACH(0x11, &(0x7f0000000000), 0x10) [ 772.940082][T16533] active_anon 200704 [ 772.940082][T16533] inactive_file 0 [ 772.940082][T16533] active_file 4096 [ 772.940082][T16533] unevictable 0 [ 772.940082][T16533] slab_reclaimable 10280 [ 772.940082][T16533] slab_unreclaimable 32296 [ 772.940082][T16533] slab 42576 [ 773.041857][T16533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16533,uid=0 [ 773.058110][T16533] Memory cgroup out of memory: Killed process 16533 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 773.485060][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.621286][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.742027][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.858548][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.951530][ T9] device hsr_slave_0 left promiscuous mode [ 774.959473][ T9] device hsr_slave_1 left promiscuous mode [ 774.966035][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.973659][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.985238][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.993028][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.002799][ T9] device bridge_slave_1 left promiscuous mode [ 775.009110][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.018536][ T9] device bridge_slave_0 left promiscuous mode [ 775.025180][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.044171][ T9] device veth1_macvtap left promiscuous mode [ 775.058210][ T9] device veth0_macvtap left promiscuous mode [ 775.064945][ T9] device veth1_vlan left promiscuous mode [ 775.078893][ T9] device veth0_vlan left promiscuous mode [ 775.416054][ T9] team0 (unregistering): Port device team_slave_1 removed [ 775.433253][ T9] team0 (unregistering): Port device team_slave_0 removed [ 775.455856][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.475517][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.586667][ T9] bond0 (unregistering): Released all slaves 03:15:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:15:41 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x5, 0x0, 0xa}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:41 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0x100}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:41 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x5, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:41 executing program 4: bpf$MAP_LOOKUP_BATCH(0x1d, 0x0, 0x0) 03:15:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:15:41 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0xa}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x3, 0x20, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 03:15:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x0, 0x0, 0x4de7}, 0x48) 03:15:41 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x5, 0x0, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004f80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'virt_wifi0\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x8927, &(0x7f0000000080)) 03:15:41 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x5, 0x0, 0x1, 0xa}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 786.647857][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 786.657208][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 786.666580][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 786.675290][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 786.683204][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 786.693547][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 786.819257][T17147] chnl_net:caif_netlink_parms(): no params data found [ 786.866122][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.873350][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.882435][T17147] device bridge_slave_0 entered promiscuous mode [ 786.891040][T17147] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.898171][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.906155][T17147] device bridge_slave_1 entered promiscuous mode [ 786.931185][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.943141][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.968845][T17147] team0: Port device team_slave_0 added [ 786.977741][T17147] team0: Port device team_slave_1 added [ 787.001853][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.008844][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.037807][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.063071][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.082061][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.110753][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.163341][T17147] device hsr_slave_0 entered promiscuous mode [ 787.170923][T17147] device hsr_slave_1 entered promiscuous mode [ 788.779646][ T4388] Bluetooth: hci1: command 0x0409 tx timeout 03:15:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:15:46 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x5, 0x0, 0xd}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:46 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x5}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:46 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xbf, &(0x7f00000002c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:46 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x0, 0x6}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 790.231194][T17147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 790.241919][T17147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 790.252407][T17147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 790.265561][T17147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 790.361818][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.378443][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 790.388097][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 790.399942][T17147] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.415219][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 790.425120][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 790.434200][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.441387][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.459875][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 790.468018][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 790.477654][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 790.486594][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.493876][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.502847][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 790.511887][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 790.537255][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 790.546667][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 790.555872][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 790.565101][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 790.578443][T17147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.598235][T17147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 790.607251][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 790.617469][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 790.626465][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 790.859784][ T4388] Bluetooth: hci1: command 0x041b tx timeout [ 790.967994][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 790.976120][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 790.995394][T17147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.043838][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 791.061392][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 791.092260][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 791.101732][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 791.113245][T17147] device veth0_vlan entered promiscuous mode [ 791.126173][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 791.135269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 791.148718][T17147] device veth1_vlan entered promiscuous mode [ 791.173537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 791.182897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 791.193410][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 791.202573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 791.214366][T17147] device veth0_macvtap entered promiscuous mode [ 791.226419][T17147] device veth1_macvtap entered promiscuous mode [ 791.248037][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.263048][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.282009][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.293339][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.303561][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.315380][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.325547][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.337650][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.350194][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.361444][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.373137][T17147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.383446][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 791.392531][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 791.402950][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 791.412492][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 791.424126][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.438967][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.454957][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.472053][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.489673][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.507815][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.518032][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.529632][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.540507][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.551063][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.562575][T17147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.572632][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 791.582043][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 791.602050][T17147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.618923][T17147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.627830][T17147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.645277][T17147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.791420][ T5178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.800408][ T5178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.815880][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 791.853673][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.867789][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.887745][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 792.312277][T17226] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 792.323046][T17226] CPU: 1 PID: 17226 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 792.333509][T17226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 792.343601][T17226] Call Trace: [ 792.346911][T17226] [ 792.349871][T17226] dump_stack_lvl+0xd1/0x138 [ 792.354514][T17226] dump_header+0x10b/0x85f [ 792.358996][T17226] oom_kill_process.cold+0x10/0x15 [ 792.364165][T17226] out_of_memory+0x35c/0x14a0 [ 792.368898][T17226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 792.375110][T17226] ? oom_killer_disable+0x280/0x280 [ 792.380365][T17226] ? mem_cgroup_margin+0x1b/0x130 [ 792.385442][T17226] ? mem_cgroup_margin+0x66/0x130 [ 792.390524][T17226] mem_cgroup_out_of_memory+0x206/0x270 [ 792.396123][T17226] ? mem_cgroup_margin+0x130/0x130 [ 792.401327][T17226] memory_max_write+0x2f9/0x3c0 [ 792.406222][T17226] ? mem_cgroup_force_empty_write+0x160/0x160 [ 792.412339][T17226] ? lock_release+0x810/0x810 [ 792.417062][T17226] cgroup_file_write+0x1e2/0x770 [ 792.422046][T17226] ? mem_cgroup_force_empty_write+0x160/0x160 [ 792.428152][T17226] ? kill_css+0x370/0x370 [ 792.432520][T17226] ? __virt_addr_valid+0x61/0x2e0 [ 792.437580][T17226] ? kill_css+0x370/0x370 [ 792.441926][T17226] kernfs_fop_write_iter+0x3f1/0x600 [ 792.447249][T17226] vfs_write+0x9ed/0xdd0 [ 792.451517][T17226] ? kernel_write+0x630/0x630 [ 792.456220][T17226] ? __fget_files+0x26a/0x440 [ 792.460939][T17226] ksys_write+0x12b/0x250 [ 792.465285][T17226] ? __ia32_sys_read+0xb0/0xb0 [ 792.470070][T17226] ? syscall_enter_from_user_mode+0x26/0xb0 [ 792.475986][T17226] do_syscall_64+0x39/0xb0 [ 792.480425][T17226] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 792.486330][T17226] RIP: 0033:0x7f110b48c0c9 [ 792.490753][T17226] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 792.510376][T17226] RSP: 002b:00007f110c11d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.518801][T17226] RAX: ffffffffffffffda RBX: 00007f110b5abf80 RCX: 00007f110b48c0c9 [ 792.526782][T17226] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 792.534763][T17226] RBP: 00007f110b4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 792.542744][T17226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.550720][T17226] R13: 00007ffe36d29a6f R14: 00007f110c11d300 R15: 0000000000022000 [ 792.558717][T17226] [ 792.584225][T17226] memory: usage 604kB, limit 0kB, failcnt 503 [ 792.599840][T17226] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 792.608102][T17226] Memory cgroup stats for /syz2: [ 792.612065][T17226] anon 110592 [ 792.612065][T17226] file 225280 [ 792.612065][T17226] kernel 266240 [ 792.612065][T17226] kernel_stack 65536 [ 792.612065][T17226] pagetables 77824 [ 792.612065][T17226] sec_pagetables 0 [ 792.612065][T17226] percpu 64 [ 792.612065][T17226] sock 0 [ 792.612065][T17226] vmalloc 0 [ 792.612065][T17226] shmem 221184 [ 792.612065][T17226] zswap 0 [ 792.612065][T17226] zswapped 0 [ 792.612065][T17226] file_mapped 221184 [ 792.612065][T17226] file_dirty 0 [ 792.612065][T17226] file_writeback 0 [ 792.612065][T17226] swapcached 0 [ 792.612065][T17226] anon_thp 0 [ 792.612065][T17226] file_thp 0 [ 792.612065][T17226] shmem_thp 0 [ 792.612065][T17226] inactive_anon 131072 [ 792.612065][T17226] active_anon 200704 [ 792.612065][T17226] inactive_file 4096 [ 792.612065][T17226] active_file 0 [ 792.612065][T17226] unevictable 0 [ 792.612065][T17226] slab_reclaimable 17528 [ 792.612065][T17226] slab_unreclaimable 74400 [ 792.612065][T17226] slab 91928 [ 792.722742][T17226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17147,uid=0 [ 792.752686][T17226] Memory cgroup out of memory: Killed process 17147 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 03:15:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c00004181"], &(0x7f00000000c0)=""/4096, 0x3c, 0x1000, 0x1}, 0x20) 03:15:53 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800700}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:15:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x48) 03:15:53 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:15:53 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000038c0)) 03:15:53 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x9, &(0x7f0000000580)=@framed={{}, [@map_idx_val, @initr0, @map_idx_val]}, &(0x7f0000000600)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xf, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 796.678822][T14144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.143510][T14144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.227579][T14144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.330225][T14144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.235174][T14144] device hsr_slave_0 left promiscuous mode [ 798.250309][T14144] device hsr_slave_1 left promiscuous mode [ 798.261453][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.268908][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.285898][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.298487][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.321572][T14144] device bridge_slave_1 left promiscuous mode [ 798.327859][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.345175][T14144] device bridge_slave_0 left promiscuous mode [ 798.354211][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.373859][T14144] device veth1_macvtap left promiscuous mode [ 798.390309][T14144] device veth0_macvtap left promiscuous mode [ 798.396492][T14144] device veth1_vlan left promiscuous mode [ 798.410606][T14144] device veth0_vlan left promiscuous mode [ 798.789356][T14144] team0 (unregistering): Port device team_slave_1 removed [ 798.814768][T14144] team0 (unregistering): Port device team_slave_0 removed [ 798.838407][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.865665][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.014659][T14144] bond0 (unregistering): Released all slaves [ 808.541431][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.547799][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 03:16:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:16:06 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:16:06 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000005040), 0x0, 0x0) 03:16:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x222443, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 03:16:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], &(0x7f00000000c0)=""/155, 0x9b, 0x9b, 0x1}, 0x20) 03:16:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000030000000d00000001000084"], &(0x7f00000000c0)=""/155, 0x9b, 0x9b, 0x1}, 0x20) 03:16:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=""/155, 0x9b, 0x9b, 0x1}, 0x20) 03:16:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x4, 0x400}, 0x48) 03:16:06 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@alu={0x7}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0xc9, &(0x7f00000001c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:16:06 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680)) 03:16:06 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000002c0)) [ 811.350102][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 811.358838][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 811.367265][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 811.376032][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 811.384899][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 811.393651][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 811.629879][T17899] chnl_net:caif_netlink_parms(): no params data found [ 811.736907][T17899] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.745257][T17899] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.756026][T17899] device bridge_slave_0 entered promiscuous mode [ 811.764955][T17899] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.772320][T17899] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.780705][T17899] device bridge_slave_1 entered promiscuous mode [ 811.813623][T17899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.826234][T17899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.867032][T17899] team0: Port device team_slave_0 added [ 811.882363][T17899] team0: Port device team_slave_1 added [ 811.916721][T17899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.923822][T17899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.949907][T17899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.963591][T17899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.970955][T17899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.999364][T17899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.069115][T17899] device hsr_slave_0 entered promiscuous mode [ 812.084801][T17899] device hsr_slave_1 entered promiscuous mode [ 812.902125][T17899] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 812.913887][T17899] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 812.924190][T17899] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 812.934768][T17899] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 813.016255][T17899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.045721][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 813.060695][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 813.073141][T17899] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.093749][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 813.112213][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 813.126599][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.133810][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.170350][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 813.179057][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 813.196088][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 813.207064][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.214274][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.230521][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 813.248449][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 813.278618][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 813.288813][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 813.298311][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 813.307213][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 813.318365][T17899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 813.333171][T17899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 813.344677][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 813.356553][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 813.365898][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 813.429847][ T4388] Bluetooth: hci1: command 0x0409 tx timeout [ 813.695926][T17899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.720388][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 813.727954][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 813.773790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 813.783243][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 813.830435][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 813.850694][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 813.861032][T17899] device veth0_vlan entered promiscuous mode [ 813.885689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 813.894578][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 813.911820][T17899] device veth1_vlan entered promiscuous mode [ 813.961269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 813.973753][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 813.982657][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 814.001407][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 814.019295][T17899] device veth0_macvtap entered promiscuous mode [ 814.043376][T17899] device veth1_macvtap entered promiscuous mode [ 814.073132][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.084057][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.094519][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.105383][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.120822][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.149093][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.166329][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.178066][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.209652][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.228554][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.252400][T17899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.266917][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.278582][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.289059][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.309327][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.327380][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.338317][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.361044][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.379869][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.397114][T17899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.407921][T17899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.428071][T17899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.438933][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 814.456257][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 814.466593][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 814.485690][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.505350][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 814.517016][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.537951][T17899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.558182][T17899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.569353][T17899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.587698][T17899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.686482][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.748045][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.768602][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 814.787113][T14144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.797748][T14144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.810192][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 815.500530][ T4388] Bluetooth: hci1: command 0x041b tx timeout [ 817.589530][ T4388] Bluetooth: hci1: command 0x040f tx timeout [ 819.660090][ T4388] Bluetooth: hci1: command 0x0419 tx timeout 03:16:23 executing program 1: syz_clone(0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 03:16:23 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="a10327f626a1b317aa4105aa5fd8c75048baf29bec000956da72b1f08dbfe2d1c24573a4791c761c4a7e7e7267c636d193869d471609fc4364a1cfc872ab53a81edb567e1373d3") 03:16:23 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000700)) 03:16:23 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f00000040c0)) 03:16:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:16:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 03:16:23 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid_for_children\x00') 03:16:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x0, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:16:23 executing program 4: syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="1014316320faf9f56c3219cb80255c6669803a04b2f7") 03:16:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x3, &(0x7f0000001b00)=@framed, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:16:23 executing program 0: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 827.128862][T18356] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 03:16:23 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid_for_children\x00') [ 827.210489][T18356] CPU: 1 PID: 18356 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 827.220977][T18356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 827.231071][T18356] Call Trace: [ 827.234381][T18356] [ 827.237347][T18356] dump_stack_lvl+0xd1/0x138 [ 827.241988][T18356] dump_header+0x10b/0x85f [ 827.246464][T18356] oom_kill_process.cold+0x10/0x15 [ 827.251635][T18356] out_of_memory+0x35c/0x14a0 [ 827.256379][T18356] ? oom_killer_disable+0x280/0x280 [ 827.261645][T18356] mem_cgroup_out_of_memory+0x206/0x270 [ 827.267242][T18356] ? mem_cgroup_margin+0x130/0x130 [ 827.272425][T18356] memory_max_write+0x2f9/0x3c0 [ 827.277317][T18356] ? mem_cgroup_force_empty_write+0x160/0x160 [ 827.283407][T18356] ? lock_release+0x810/0x810 [ 827.288103][T18356] cgroup_file_write+0x1e2/0x770 [ 827.293060][T18356] ? mem_cgroup_force_empty_write+0x160/0x160 [ 827.299147][T18356] ? kill_css+0x370/0x370 [ 827.303500][T18356] ? __virt_addr_valid+0x61/0x2e0 [ 827.308568][T18356] ? kill_css+0x370/0x370 [ 827.312921][T18356] kernfs_fop_write_iter+0x3f1/0x600 [ 827.318255][T18356] vfs_write+0x9ed/0xdd0 [ 827.322519][T18356] ? kernel_write+0x630/0x630 [ 827.327219][T18356] ? __fget_files+0x26a/0x440 [ 827.331926][T18356] ksys_write+0x12b/0x250 [ 827.336273][T18356] ? __ia32_sys_read+0xb0/0xb0 [ 827.341052][T18356] ? syscall_enter_from_user_mode+0x26/0xb0 [ 827.346968][T18356] do_syscall_64+0x39/0xb0 [ 827.351410][T18356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 827.357323][T18356] RIP: 0033:0x7fd6ea68c0c9 [ 827.361749][T18356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 827.381377][T18356] RSP: 002b:00007fd6e91dd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 827.389803][T18356] RAX: ffffffffffffffda RBX: 00007fd6ea7ac050 RCX: 00007fd6ea68c0c9 [ 827.397784][T18356] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 03:16:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0xc, &(0x7f0000001b40)=@raw=[@map_fd, @alu, @alu, @alu, @call, @map_val, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map_idx_val], &(0x7f0000001bc0)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 827.405763][T18356] RBP: 00007fd6ea6e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 827.413742][T18356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.421725][T18356] R13: 00007ffe3810b33f R14: 00007fd6e91dd300 R15: 0000000000022000 [ 827.429727][T18356] 03:16:24 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0x4, 0x4}]}]}}, &(0x7f00000000c0)=""/247, 0x36, 0xf7, 0x1}, 0x20) 03:16:24 executing program 1: bpf$BPF_TASK_FD_QUERY(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) [ 827.562624][T18356] memory: usage 664kB, limit 0kB, failcnt 503 [ 827.568895][T18356] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 827.577309][T18356] Memory cgroup stats for /syz2: [ 827.577528][T18356] anon 143360 [ 827.577528][T18356] file 225280 [ 827.577528][T18356] kernel 311296 [ 827.577528][T18356] kernel_stack 98304 [ 827.577528][T18356] pagetables 81920 [ 827.577528][T18356] sec_pagetables 0 [ 827.577528][T18356] percpu 64 [ 827.577528][T18356] sock 0 [ 827.577528][T18356] vmalloc 0 [ 827.577528][T18356] shmem 221184 [ 827.577528][T18356] zswap 0 [ 827.577528][T18356] zswapped 0 [ 827.577528][T18356] file_mapped 221184 [ 827.577528][T18356] file_dirty 0 [ 827.577528][T18356] file_writeback 0 [ 827.577528][T18356] swapcached 0 [ 827.577528][T18356] anon_thp 0 [ 827.577528][T18356] file_thp 0 [ 827.577528][T18356] shmem_thp 0 [ 827.577528][T18356] inactive_anon 163840 [ 827.577528][T18356] active_anon 200704 [ 827.577528][T18356] inactive_file 0 [ 827.577528][T18356] active_file 4096 [ 827.577528][T18356] unevictable 0 [ 827.577528][T18356] slab_reclaimable 23064 [ 827.577528][T18356] slab_unreclaimable 82440 [ 827.577528][T18356] slab 105504 [ 827.699179][T18356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18342,uid=0 [ 827.723024][T18356] Memory cgroup out of memory: Killed process 18342 (syz-executor.2) total-vm:54672kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 03:16:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:16:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0x2, &(0x7f0000001b40)=@raw=[@map_val], &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:16:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0x4}]}]}}, &(0x7f00000000c0)=""/247, 0x36, 0xf7, 0x1}, 0x20) 03:16:34 executing program 4: socketpair(0x0, 0x91ecea9ccb650a30, 0x0, 0x0) 03:16:34 executing program 1: socketpair(0x0, 0x80000, 0x0, &(0x7f0000001780)) 03:16:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 837.447440][T17899] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 837.475182][T17899] CPU: 0 PID: 17899 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 837.485666][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 837.495756][T17899] Call Trace: [ 837.499065][T17899] [ 837.502018][T17899] dump_stack_lvl+0xd1/0x138 [ 837.506630][T17899] dump_header+0x10b/0x85f [ 837.511068][T17899] oom_kill_process.cold+0x10/0x15 [ 837.516204][T17899] out_of_memory+0x35c/0x14a0 [ 837.520908][T17899] ? find_held_lock+0x2d/0x110 [ 837.525689][T17899] ? oom_killer_disable+0x280/0x280 [ 837.530911][T17899] ? find_held_lock+0x2d/0x110 [ 837.535700][T17899] mem_cgroup_out_of_memory+0x206/0x270 [ 837.541269][T17899] ? mem_cgroup_margin+0x130/0x130 [ 837.546396][T17899] ? lock_downgrade+0x6e0/0x6e0 [ 837.551359][T17899] try_charge_memcg+0xefb/0x12f0 [ 837.556398][T17899] ? mem_cgroup_handle_over_high+0x520/0x520 [ 837.562388][T17899] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 837.568125][T17899] ? lock_downgrade+0x6e0/0x6e0 [ 837.572989][T17899] ? lock_downgrade+0x6e0/0x6e0 [ 837.577848][T17899] ? rcu_read_unlock+0x9/0x60 [ 837.582557][T17899] obj_cgroup_charge+0x2af/0x5e0 [ 837.587513][T17899] ? copy_process+0x3aa/0x7520 [ 837.592289][T17899] kmem_cache_alloc_node+0xb7/0x460 [ 837.597591][T17899] copy_process+0x3aa/0x7520 [ 837.602190][T17899] ? _raw_spin_unlock+0x28/0x40 [ 837.607052][T17899] ? wp_page_reuse+0x197/0x570 [ 837.611832][T17899] ? do_wp_page+0x844/0x3370 [ 837.616445][T17899] ? __cleanup_sighand+0xb0/0xb0 [ 837.621389][T17899] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 837.626781][T17899] ? rwlock_bug.part.0+0x90/0x90 [ 837.631728][T17899] ? lock_chain_count+0x20/0x20 [ 837.636601][T17899] kernel_clone+0xeb/0x990 [ 837.641037][T17899] ? create_io_thread+0xf0/0xf0 [ 837.645918][T17899] ? find_held_lock+0x2d/0x110 [ 837.650725][T17899] __do_sys_clone+0xba/0x100 [ 837.655338][T17899] ? kernel_clone+0x990/0x990 [ 837.660047][T17899] ? syscall_enter_from_user_mode+0x26/0xb0 [ 837.665957][T17899] do_syscall_64+0x39/0xb0 [ 837.670405][T17899] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 837.676319][T17899] RIP: 0033:0x7fd6ea689dfb [ 837.680753][T17899] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 837.700377][T17899] RSP: 002b:00007ffe3810b580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 837.708806][T17899] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6ea689dfb [ 837.716783][T17899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 837.724759][T17899] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555561e3400 [ 837.732738][T17899] R10: 00005555561e36d0 R11: 0000000000000246 R12: 0000000000000001 [ 837.740730][T17899] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe3810b660 03:16:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=""/247, 0x0, 0xf7, 0x1}, 0x20) 03:16:34 executing program 0: r0 = openat$tun(0xffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000008c0)) [ 837.748731][T17899] [ 837.764423][T17899] memory: usage 324kB, limit 0kB, failcnt 522 [ 837.775117][T17899] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 837.794947][T17899] Memory cgroup stats for /syz2: [ 837.795182][T17899] anon 45056 [ 837.795182][T17899] file 225280 [ 837.795182][T17899] kernel 57344 [ 837.795182][T17899] kernel_stack 0 [ 837.795182][T17899] pagetables 8192 [ 837.795182][T17899] sec_pagetables 0 [ 837.795182][T17899] percpu 0 [ 837.795182][T17899] sock 0 [ 837.795182][T17899] vmalloc 0 [ 837.795182][T17899] shmem 221184 [ 837.795182][T17899] zswap 0 [ 837.795182][T17899] zswapped 0 [ 837.795182][T17899] file_mapped 221184 [ 837.795182][T17899] file_dirty 0 [ 837.795182][T17899] file_writeback 0 03:16:34 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000028c0), 0x2, 0x0) [ 837.795182][T17899] swapcached 0 [ 837.795182][T17899] anon_thp 0 [ 837.795182][T17899] file_thp 0 [ 837.795182][T17899] shmem_thp 0 [ 837.795182][T17899] inactive_anon 65536 [ 837.795182][T17899] active_anon 200704 [ 837.795182][T17899] inactive_file 0 [ 837.795182][T17899] active_file 4096 [ 837.795182][T17899] unevictable 0 [ 837.795182][T17899] slab_reclaimable 7704 [ 837.795182][T17899] slab_unreclaimable 32296 [ 837.795182][T17899] slab 40000 03:16:34 executing program 4: openat$tun(0xffffff9c, &(0x7f0000000040), 0x105001, 0x0) 03:16:34 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001600)) 03:16:34 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 838.011784][T17899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17899,uid=0 [ 838.099556][T17899] Memory cgroup out of memory: Killed process 17899 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 838.435023][ T5178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.532745][ T5178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.639056][ T5178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.727708][ T5178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.664055][ T5178] device hsr_slave_0 left promiscuous mode [ 839.673131][ T5178] device hsr_slave_1 left promiscuous mode [ 839.680490][ T5178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.687936][ T5178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.698427][ T5178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.706312][ T5178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.716587][ T5178] device bridge_slave_1 left promiscuous mode [ 839.723551][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.733102][ T5178] device bridge_slave_0 left promiscuous mode [ 839.739428][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.754491][ T5178] device veth1_macvtap left promiscuous mode [ 839.762065][ T5178] device veth0_macvtap left promiscuous mode [ 839.772691][ T5178] device veth1_vlan left promiscuous mode [ 839.778653][ T5178] device veth0_vlan left promiscuous mode [ 840.052763][ T5178] team0 (unregistering): Port device team_slave_1 removed [ 840.069082][ T5178] team0 (unregistering): Port device team_slave_0 removed [ 840.088635][ T5178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.128533][ T5178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.255025][ T5178] bond0 (unregistering): Released all slaves 03:16:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:16:41 executing program 0: syz_clone(0x808a9000, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 03:16:41 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 03:16:41 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000b80)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:16:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:41 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 845.291602][T18589] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 845.365676][T18589] CPU: 1 PID: 18589 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 845.376170][T18589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 845.386261][T18589] Call Trace: [ 845.389571][T18589] [ 845.392525][T18589] dump_stack_lvl+0xd1/0x138 [ 845.397173][T18589] dump_header+0x10b/0x85f [ 845.401650][T18589] oom_kill_process.cold+0x10/0x15 [ 845.406819][T18589] out_of_memory+0x35c/0x14a0 [ 845.411558][T18589] ? oom_killer_disable+0x280/0x280 [ 845.416807][T18589] ? mark_held_locks+0x9f/0xe0 [ 845.421616][T18589] mem_cgroup_out_of_memory+0x206/0x270 [ 845.427205][T18589] ? mem_cgroup_margin+0x130/0x130 [ 845.432357][T18589] memory_max_write+0x2f9/0x3c0 [ 845.437223][T18589] ? mem_cgroup_force_empty_write+0x160/0x160 [ 845.443304][T18589] ? lock_release+0x810/0x810 [ 845.447997][T18589] cgroup_file_write+0x1e2/0x770 [ 845.452952][T18589] ? mem_cgroup_force_empty_write+0x160/0x160 [ 845.459028][T18589] ? kill_css+0x370/0x370 [ 845.463381][T18589] ? kill_css+0x370/0x370 [ 845.467726][T18589] kernfs_fop_write_iter+0x3f1/0x600 [ 845.473038][T18589] vfs_write+0x9ed/0xdd0 [ 845.477297][T18589] ? kernel_write+0x630/0x630 [ 845.481990][T18589] ? __fget_files+0x26a/0x440 [ 845.486693][T18589] ksys_write+0x12b/0x250 [ 845.491035][T18589] ? __ia32_sys_read+0xb0/0xb0 [ 845.495814][T18589] ? syscall_enter_from_user_mode+0x26/0xb0 [ 845.501736][T18589] do_syscall_64+0x39/0xb0 [ 845.506185][T18589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 845.512098][T18589] RIP: 0033:0x7f1367c8c0c9 [ 845.516535][T18589] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 845.536183][T18589] RSP: 002b:00007f13689d7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 845.544610][T18589] RAX: ffffffffffffffda RBX: 00007f1367dabf80 RCX: 00007f1367c8c0c9 [ 845.552590][T18589] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 845.560565][T18589] RBP: 00007f1367ce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 845.568546][T18589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.576524][T18589] R13: 00007ffe943ce4ef R14: 00007f13689d7300 R15: 0000000000022000 [ 845.584527][T18589] 03:16:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 845.776823][T18589] memory: usage 8568kB, limit 0kB, failcnt 38 03:16:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 845.829757][T18589] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 845.837170][T18589] Memory cgroup stats for /syz5: [ 845.896632][T18589] anon 143360 [ 845.896632][T18589] file 8343552 [ 845.896632][T18589] kernel 286720 [ 845.896632][T18589] kernel_stack 65536 [ 845.896632][T18589] pagetables 77824 [ 845.896632][T18589] sec_pagetables 0 [ 845.896632][T18589] percpu 64 [ 845.896632][T18589] sock 0 [ 845.896632][T18589] vmalloc 0 [ 845.896632][T18589] shmem 8339456 [ 845.896632][T18589] zswap 0 [ 845.896632][T18589] zswapped 0 [ 845.896632][T18589] file_mapped 241664 [ 845.896632][T18589] file_dirty 0 [ 845.896632][T18589] file_writeback 0 [ 845.896632][T18589] swapcached 0 [ 845.896632][T18589] anon_thp 0 [ 845.896632][T18589] file_thp 0 [ 845.896632][T18589] shmem_thp 0 [ 845.896632][T18589] inactive_anon 143360 [ 845.896632][T18589] active_anon 8339456 [ 845.896632][T18589] inactive_file 0 [ 845.896632][T18589] active_file 4096 [ 845.896632][T18589] unevictable 0 [ 845.896632][T18589] slab_reclaimable 36408 [ 845.896632][T18589] slab_unreclaimable 74672 [ 845.896632][T18589] slab 111080 [ 846.206061][T18589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18586,uid=0 [ 846.245617][T18589] Memory cgroup out of memory: Killed process 18586 (syz-executor.5) total-vm:56588kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 846.275722][T12138] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 846.293243][T12138] CPU: 1 PID: 12138 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 846.303721][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 846.313810][T12138] Call Trace: [ 846.317111][T12138] [ 846.320067][T12138] dump_stack_lvl+0xd1/0x138 [ 846.324697][T12138] dump_header+0x10b/0x85f [ 846.329171][T12138] oom_kill_process.cold+0x10/0x15 [ 846.334330][T12138] out_of_memory+0x35c/0x14a0 [ 846.339066][T12138] ? oom_killer_disable+0x280/0x280 [ 846.344316][T12138] ? find_held_lock+0x2d/0x110 [ 846.349130][T12138] mem_cgroup_out_of_memory+0x206/0x270 [ 846.354724][T12138] ? mem_cgroup_margin+0x130/0x130 [ 846.359878][T12138] ? lock_downgrade+0x6e0/0x6e0 [ 846.364782][T12138] try_charge_memcg+0xefb/0x12f0 [ 846.369761][T12138] ? mem_cgroup_handle_over_high+0x520/0x520 [ 846.375774][T12138] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 846.381536][T12138] ? lock_downgrade+0x6e0/0x6e0 [ 846.386419][T12138] ? lock_downgrade+0x6e0/0x6e0 [ 846.391298][T12138] ? rcu_read_unlock+0x9/0x60 [ 846.396031][T12138] obj_cgroup_charge+0x2af/0x5e0 [ 846.401009][T12138] ? sk_prot_alloc+0x5f/0x290 [ 846.405719][T12138] kmem_cache_alloc+0xb5/0x430 [ 846.410514][T12138] ? inet_create+0x324/0xea0 [ 846.415167][T12138] sk_prot_alloc+0x5f/0x290 [ 846.419714][T12138] sk_alloc+0x3a/0x7a0 [ 846.423848][T12138] inet_create+0x399/0xea0 [ 846.428308][T12138] __sock_create+0x359/0x790 [ 846.432949][T12138] __sys_socket+0x133/0x250 [ 846.437497][T12138] ? __sys_socket_file+0x1f0/0x1f0 [ 846.442658][T12138] __x64_sys_socket+0x73/0xb0 [ 846.447373][T12138] do_syscall_64+0x39/0xb0 [ 846.451829][T12138] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 846.457751][T12138] RIP: 0033:0x7f6aa328d747 [ 846.462192][T12138] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 846.481831][T12138] RSP: 002b:00007ffc728572d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 846.490283][T12138] RAX: ffffffffffffffda RBX: 00007ffc72857a40 RCX: 00007f6aa328d747 [ 846.498286][T12138] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 846.506289][T12138] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffc72857850 [ 846.514289][T12138] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 846.522292][T12138] R13: 00000000000ce7ce R14: 0000000000000019 R15: 00007ffc72857a80 [ 846.530318][T12138] [ 846.570353][T12138] memory: usage 10408kB, limit 0kB, failcnt 224 [ 846.576749][T12138] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 846.584406][T12138] Memory cgroup stats for /syz0: [ 846.584612][T12138] anon 45056 [ 846.584612][T12138] file 10465280 [ 846.584612][T12138] kernel 147456 [ 846.584612][T12138] kernel_stack 0 [ 846.584612][T12138] pagetables 8192 [ 846.584612][T12138] sec_pagetables 0 [ 846.584612][T12138] percpu 1184 [ 846.584612][T12138] sock 0 [ 846.584612][T12138] vmalloc 0 [ 846.584612][T12138] shmem 10457088 [ 846.584612][T12138] zswap 0 [ 846.584612][T12138] zswapped 0 [ 846.584612][T12138] file_mapped 253952 [ 846.584612][T12138] file_dirty 0 [ 846.584612][T12138] file_writeback 0 [ 846.584612][T12138] swapcached 0 [ 846.584612][T12138] anon_thp 0 [ 846.584612][T12138] file_thp 0 [ 846.584612][T12138] shmem_thp 0 [ 846.584612][T12138] inactive_anon 45056 [ 846.584612][T12138] active_anon 10457088 [ 846.584612][T12138] inactive_file 4096 [ 846.584612][T12138] active_file 4096 [ 846.584612][T12138] unevictable 0 [ 846.584612][T12138] slab_reclaimable 34888 [ 846.584612][T12138] slab_unreclaimable 91288 [ 846.584612][T12138] slab 126176 [ 846.687351][T12138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12138,uid=0 [ 846.714368][T12138] Memory cgroup out of memory: Killed process 12138 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 846.738234][T10466] syz-executor.1 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 846.764840][T10466] CPU: 1 PID: 10466 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 846.775327][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 846.785406][T10466] Call Trace: [ 846.788690][T10466] [ 846.791648][T10466] dump_stack_lvl+0xd1/0x138 [ 846.796272][T10466] dump_header+0x10b/0x85f [ 846.800699][T10466] oom_kill_process.cold+0x10/0x15 [ 846.805811][T10466] out_of_memory+0x35c/0x14a0 [ 846.810492][T10466] ? oom_killer_disable+0x280/0x280 [ 846.815691][T10466] ? find_held_lock+0x2d/0x110 [ 846.820467][T10466] mem_cgroup_out_of_memory+0x206/0x270 [ 846.826036][T10466] ? mem_cgroup_margin+0x130/0x130 [ 846.831161][T10466] ? lock_downgrade+0x6e0/0x6e0 [ 846.836037][T10466] try_charge_memcg+0xefb/0x12f0 [ 846.840994][T10466] ? mem_cgroup_handle_over_high+0x520/0x520 [ 846.846980][T10466] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 846.852721][T10466] ? lock_downgrade+0x6e0/0x6e0 [ 846.857624][T10466] ? lock_downgrade+0x6e0/0x6e0 [ 846.862481][T10466] ? rcu_read_unlock+0x9/0x60 [ 846.867183][T10466] obj_cgroup_charge+0x2af/0x5e0 [ 846.872139][T10466] ? __alloc_file+0x21/0x270 [ 846.876742][T10466] kmem_cache_alloc+0xb5/0x430 [ 846.881514][T10466] ? d_instantiate+0x79/0xa0 [ 846.886117][T10466] __alloc_file+0x21/0x270 [ 846.890548][T10466] alloc_empty_file+0x71/0x170 [ 846.895330][T10466] alloc_file+0x59/0x800 [ 846.899594][T10466] alloc_file_pseudo+0x169/0x250 [ 846.904720][T10466] ? alloc_file+0x800/0x800 [ 846.909242][T10466] ? alloc_fd+0x2d8/0x6d0 [ 846.913586][T10466] sock_alloc_file+0x53/0x190 [ 846.918286][T10466] __sys_socket+0x1a8/0x250 [ 846.922809][T10466] ? __sys_socket_file+0x1f0/0x1f0 [ 846.927945][T10466] __x64_sys_socket+0x73/0xb0 [ 846.932641][T10466] do_syscall_64+0x39/0xb0 [ 846.937091][T10466] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 846.943012][T10466] RIP: 0033:0x7fbed0e8d747 [ 846.947450][T10466] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 846.967077][T10466] RSP: 002b:00007ffd6114fa58 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 846.975503][T10466] RAX: ffffffffffffffda RBX: 00007ffd61150190 RCX: 00007fbed0e8d747 [ 846.983478][T10466] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 846.991457][T10466] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffd6114fad0 [ 846.999439][T10466] R10: 0000000000000010 R11: 0000000000000206 R12: 0000000000000032 [ 847.007422][T10466] R13: 00000000000ce79b R14: 0000000000000019 R15: 00007ffd611501d0 [ 847.015423][T10466] [ 847.029503][T10466] memory: usage 10360kB, limit 0kB, failcnt 70 [ 847.046403][T10466] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 847.053494][T10466] Memory cgroup stats for /syz1: [ 847.053685][T10466] anon 49152 [ 847.053685][T10466] file 10465280 [ 847.053685][T10466] kernel 94208 [ 847.053685][T10466] kernel_stack 0 [ 847.053685][T10466] pagetables 8192 [ 847.053685][T10466] sec_pagetables 0 [ 847.053685][T10466] percpu 0 [ 847.053685][T10466] sock 0 [ 847.053685][T10466] vmalloc 0 [ 847.053685][T10466] shmem 10448896 [ 847.053685][T10466] zswap 0 [ 847.053685][T10466] zswapped 0 [ 847.053685][T10466] file_mapped 233472 [ 847.053685][T10466] file_dirty 0 [ 847.053685][T10466] file_writeback 0 [ 847.053685][T10466] swapcached 0 [ 847.053685][T10466] anon_thp 0 [ 847.053685][T10466] file_thp 0 [ 847.053685][T10466] shmem_thp 0 [ 847.053685][T10466] inactive_anon 49152 [ 847.053685][T10466] active_anon 10448896 [ 847.053685][T10466] inactive_file 4096 [ 847.053685][T10466] active_file 12288 [ 847.053685][T10466] unevictable 0 [ 847.053685][T10466] slab_reclaimable 36584 [ 847.053685][T10466] slab_unreclaimable 38720 [ 847.053685][T10466] slab 75304 [ 847.160740][T10466] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10466,uid=0 [ 847.176835][T10466] Memory cgroup out of memory: Killed process 10466 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 847.194625][ T6145] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 847.214512][ T6145] CPU: 1 PID: 6145 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 847.224885][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 847.234934][ T6145] Call Trace: [ 847.238204][ T6145] [ 847.241131][ T6145] dump_stack_lvl+0xd1/0x138 [ 847.245746][ T6145] dump_header+0x10b/0x85f [ 847.250210][ T6145] oom_kill_process.cold+0x10/0x15 [ 847.255377][ T6145] out_of_memory+0x35c/0x14a0 [ 847.260118][ T6145] ? oom_killer_disable+0x280/0x280 [ 847.265373][ T6145] ? find_held_lock+0x2d/0x110 [ 847.270192][ T6145] mem_cgroup_out_of_memory+0x206/0x270 [ 847.275782][ T6145] ? mem_cgroup_margin+0x130/0x130 [ 847.280929][ T6145] ? lock_downgrade+0x6e0/0x6e0 [ 847.285827][ T6145] try_charge_memcg+0xefb/0x12f0 [ 847.290801][ T6145] ? mem_cgroup_handle_over_high+0x520/0x520 [ 847.296808][ T6145] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 847.302568][ T6145] ? lock_downgrade+0x6e0/0x6e0 [ 847.307450][ T6145] ? lock_downgrade+0x6e0/0x6e0 [ 847.312348][ T6145] __memcg_kmem_charge_page+0x16e/0x3b0 [ 847.317931][ T6145] __alloc_pages+0x1f3/0x5b0 [ 847.322630][ T6145] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 847.329435][ T6145] ? find_held_lock+0x2d/0x110 [ 847.334259][ T6145] ? lock_downgrade+0x6e0/0x6e0 [ 847.339141][ T6145] ? do_raw_spin_lock+0x124/0x2b0 [ 847.344207][ T6145] alloc_pages+0x1aa/0x270 [ 847.348731][ T6145] __pmd_alloc+0x3f/0x5d0 [ 847.353094][ T6145] ? __pud_alloc+0xe4/0x180 [ 847.357635][ T6145] copy_page_range+0x2829/0x3b40 [ 847.362660][ T6145] ? mas_store+0x206/0x2e0 [ 847.367145][ T6145] ? handle_mm_fault+0x850/0x850 [ 847.372137][ T6145] ? anon_vma_fork+0xba/0x630 [ 847.376867][ T6145] dup_mmap+0xc10/0x10b0 [ 847.381152][ T6145] ? replace_mm_exe_file+0x4b0/0x4b0 [ 847.386475][ T6145] ? lock_downgrade+0x6e0/0x6e0 [ 847.391367][ T6145] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 847.397224][ T6145] ? mm_init+0x8e0/0xc10 [ 847.401500][ T6145] copy_process+0x440f/0x7520 [ 847.406206][ T6145] ? _raw_spin_unlock+0x28/0x40 [ 847.411093][ T6145] ? wp_page_reuse+0x197/0x570 [ 847.415907][ T6145] ? __cleanup_sighand+0xb0/0xb0 [ 847.420879][ T6145] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 847.426299][ T6145] ? rwlock_bug.part.0+0x90/0x90 [ 847.431276][ T6145] ? lock_chain_count+0x20/0x20 [ 847.436170][ T6145] kernel_clone+0xeb/0x990 [ 847.439972][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 847.440607][ T6145] ? create_io_thread+0xf0/0xf0 [ 847.449202][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 847.452546][ T6145] ? find_held_lock+0x2d/0x110 [ 847.452598][ T6145] __do_sys_clone+0xba/0x100 [ 847.465414][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 847.468859][ T6145] ? kernel_clone+0x990/0x990 [ 847.477847][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 847.480457][ T6145] ? syscall_enter_from_user_mode+0x26/0xb0 [ 847.480500][ T6145] do_syscall_64+0x39/0xb0 [ 847.488341][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.493289][ T6145] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 847.493323][ T6145] RIP: 0033:0x7f1bb7889dfb [ 847.515107][ T6145] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 847.534754][ T6145] RSP: 002b:00007fffe251e8a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 847.543212][ T6145] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bb7889dfb [ 847.551224][ T6145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 847.559231][ T6145] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555694b400 [ 847.567240][ T6145] R10: 000055555694b6d0 R11: 0000000000000246 R12: 0000000000000001 [ 847.575266][ T6145] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffe251e980 [ 847.583315][ T6145] [ 847.622588][ T6145] memory: usage 10488kB, limit 0kB, failcnt 20 [ 847.628809][ T6145] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 847.637076][ T6145] Memory cgroup stats for /syz4: [ 847.637457][ T6145] anon 49152 [ 847.637457][ T6145] file 10452992 [ 847.637457][ T6145] kernel 237568 [ 847.637457][ T6145] kernel_stack 32768 [ 847.637457][ T6145] pagetables 49152 [ 847.637457][ T6145] sec_pagetables 0 [ 847.637457][ T6145] percpu 64 [ 847.637457][ T6145] sock 0 [ 847.637457][ T6145] vmalloc 0 [ 847.637457][ T6145] shmem 10444800 [ 847.637457][ T6145] zswap 0 [ 847.637457][ T6145] zswapped 0 [ 847.637457][ T6145] file_mapped 299008 [ 847.637457][ T6145] file_dirty 0 [ 847.637457][ T6145] file_writeback 0 [ 847.637457][ T6145] swapcached 0 [ 847.637457][ T6145] anon_thp 0 [ 847.637457][ T6145] file_thp 0 [ 847.637457][ T6145] shmem_thp 0 [ 847.637457][ T6145] inactive_anon 49152 [ 847.637457][ T6145] active_anon 10444800 [ 847.637457][ T6145] inactive_file 4096 [ 847.637457][ T6145] active_file 4096 [ 847.637457][ T6145] unevictable 0 [ 847.637457][ T6145] slab_reclaimable 32960 [ 847.637457][ T6145] slab_unreclaimable 97384 [ 847.637457][ T6145] slab 130344 [ 847.738323][ T6145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=6145,uid=0 [ 847.758886][ T6145] Memory cgroup out of memory: Killed process 6145 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8992kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 847.845787][T18615] chnl_net:caif_netlink_parms(): no params data found [ 847.885130][T14144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.940430][T18615] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.947666][T18615] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.956316][T18615] device bridge_slave_0 entered promiscuous mode [ 847.978647][T18615] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.023808][T18615] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.045784][T18615] device bridge_slave_1 entered promiscuous mode [ 848.147399][T14144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.285573][T14144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.310133][T18615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.327222][T18615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.377332][T14144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.421680][T18615] team0: Port device team_slave_0 added [ 848.446582][T18615] team0: Port device team_slave_1 added [ 848.485195][T18615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.492257][T18615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.518424][T18615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.531605][T18615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.538582][T18615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.566074][T18615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.653740][T18615] device hsr_slave_0 entered promiscuous mode [ 848.677266][T18615] device hsr_slave_1 entered promiscuous mode [ 849.500149][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 849.962962][T14144] device hsr_slave_0 left promiscuous mode [ 850.019834][T14144] device hsr_slave_1 left promiscuous mode [ 850.029929][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.037397][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.071822][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.079290][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.112391][T14144] device bridge_slave_1 left promiscuous mode [ 850.118672][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.131745][T14144] device bridge_slave_0 left promiscuous mode [ 850.137997][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.179581][T14144] device veth1_macvtap left promiscuous mode [ 850.185681][T14144] device veth0_macvtap left promiscuous mode [ 850.218546][T14144] device veth1_vlan left promiscuous mode [ 850.237268][T14144] device veth0_vlan left promiscuous mode [ 850.971251][T14144] team0 (unregistering): Port device team_slave_1 removed [ 851.020936][T14144] team0 (unregistering): Port device team_slave_0 removed [ 851.039765][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.058095][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.188968][T14144] bond0 (unregistering): Released all slaves [ 851.589807][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 851.663992][T18615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 851.674211][T18615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 851.702048][T18615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 851.719037][T18615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 851.879545][T18615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.912390][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 851.921047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 851.932844][T18615] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.969891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 851.978717][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 852.000093][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.007258][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.029807][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 852.038609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 852.052914][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.060085][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.089804][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 852.097944][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 852.120436][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 852.129332][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 852.151270][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 852.179216][T18615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 852.200229][T18615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 852.214169][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 852.228351][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.243883][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.255915][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.265267][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.278256][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 852.641455][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.649004][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.683401][T18615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.745825][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.760290][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.801244][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.820254][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.846634][T18615] device veth0_vlan entered promiscuous mode [ 852.854909][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.864230][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.878653][T18615] device veth1_vlan entered promiscuous mode [ 852.907022][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.923470][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 852.936390][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.950906][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.968253][T18615] device veth0_macvtap entered promiscuous mode [ 852.983225][T18615] device veth1_macvtap entered promiscuous mode [ 853.002233][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.024459][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.042164][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.057510][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.074467][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.099086][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.115705][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.137398][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.160316][T18615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.178668][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 853.190827][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.208191][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.227373][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.247522][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.268268][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.289450][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.312276][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.332333][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.355307][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.375332][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.398305][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.422200][T18615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.443419][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 853.460816][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 853.482280][T18615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.494188][T18615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.529474][T18615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.538241][T18615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.659699][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 853.715998][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.751547][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.772054][ T5329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.783409][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 853.802282][ T5329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.825145][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 854.263310][T18716] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 854.274060][T18716] CPU: 0 PID: 18716 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 854.284529][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 854.294629][T18716] Call Trace: [ 854.297938][T18716] [ 854.300896][T18716] dump_stack_lvl+0xd1/0x138 [ 854.305533][T18716] dump_header+0x10b/0x85f [ 854.310014][T18716] oom_kill_process.cold+0x10/0x15 [ 854.315186][T18716] out_of_memory+0x35c/0x14a0 [ 854.319929][T18716] ? oom_killer_disable+0x280/0x280 [ 854.325180][T18716] ? mark_held_locks+0x9f/0xe0 [ 854.329994][T18716] mem_cgroup_out_of_memory+0x206/0x270 [ 854.335582][T18716] ? mem_cgroup_margin+0x130/0x130 [ 854.340739][T18716] memory_max_write+0x2f9/0x3c0 [ 854.345605][T18716] ? mem_cgroup_force_empty_write+0x160/0x160 [ 854.351692][T18716] ? lock_release+0x810/0x810 [ 854.356386][T18716] cgroup_file_write+0x1e2/0x770 [ 854.361344][T18716] ? mem_cgroup_force_empty_write+0x160/0x160 [ 854.367425][T18716] ? kill_css+0x370/0x370 [ 854.371773][T18716] ? __virt_addr_valid+0x61/0x2e0 [ 854.376836][T18716] ? kill_css+0x370/0x370 [ 854.381195][T18716] kernfs_fop_write_iter+0x3f1/0x600 [ 854.386519][T18716] vfs_write+0x9ed/0xdd0 [ 854.390784][T18716] ? kernel_write+0x630/0x630 [ 854.395481][T18716] ? __fget_files+0x26a/0x440 [ 854.400192][T18716] ksys_write+0x12b/0x250 [ 854.404536][T18716] ? __ia32_sys_read+0xb0/0xb0 [ 854.409316][T18716] ? syscall_enter_from_user_mode+0x26/0xb0 [ 854.415237][T18716] do_syscall_64+0x39/0xb0 [ 854.419684][T18716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 854.425599][T18716] RIP: 0033:0x7f28ad28c0c9 [ 854.430031][T18716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 854.449650][T18716] RSP: 002b:00007f28adf67168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 854.458077][T18716] RAX: ffffffffffffffda RBX: 00007f28ad3abf80 RCX: 00007f28ad28c0c9 [ 854.466055][T18716] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 854.474033][T18716] RBP: 00007f28ad2e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 854.482012][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.489990][T18716] R13: 00007ffeee78a6df R14: 00007f28adf67300 R15: 0000000000022000 [ 854.497989][T18716] [ 854.510322][T18716] memory: usage 608kB, limit 0kB, failcnt 539 [ 854.525539][T18716] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 854.533443][T18716] Memory cgroup stats for /syz2: [ 854.538875][T18716] anon 114688 [ 854.538875][T18716] file 225280 [ 854.538875][T18716] kernel 266240 [ 854.538875][T18716] kernel_stack 65536 [ 854.538875][T18716] pagetables 77824 [ 854.538875][T18716] sec_pagetables 0 [ 854.538875][T18716] percpu 64 [ 854.538875][T18716] sock 0 [ 854.538875][T18716] vmalloc 0 [ 854.538875][T18716] shmem 221184 [ 854.538875][T18716] zswap 0 [ 854.538875][T18716] zswapped 0 [ 854.538875][T18716] file_mapped 221184 [ 854.538875][T18716] file_dirty 0 [ 854.538875][T18716] file_writeback 0 [ 854.538875][T18716] swapcached 0 [ 854.538875][T18716] anon_thp 0 [ 854.538875][T18716] file_thp 0 [ 854.538875][T18716] shmem_thp 0 [ 854.538875][T18716] inactive_anon 135168 [ 854.538875][T18716] active_anon 200704 [ 854.538875][T18716] inactive_file 0 [ 854.538875][T18716] active_file 4096 [ 854.538875][T18716] unevictable 0 [ 854.538875][T18716] slab_reclaimable 17528 [ 854.538875][T18716] slab_unreclaimable 75048 [ 854.538875][T18716] slab 92576 [ 854.639238][T18716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18714,uid=0 [ 854.658297][T18716] Memory cgroup out of memory: Killed process 18714 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 854.720848][T18615] syz-executor.2 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 854.730976][T18615] CPU: 0 PID: 18615 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 854.741426][T18615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 854.751490][T18615] Call Trace: [ 854.754768][T18615] [ 854.757702][T18615] dump_stack_lvl+0xd1/0x138 [ 854.762295][T18615] dump_header+0x10b/0x85f [ 854.766713][T18615] oom_kill_process.cold+0x10/0x15 [ 854.771831][T18615] out_of_memory+0x35c/0x14a0 [ 854.776512][T18615] ? find_held_lock+0x2d/0x110 [ 854.781276][T18615] ? oom_killer_disable+0x280/0x280 [ 854.786486][T18615] ? find_held_lock+0x2d/0x110 [ 854.791251][T18615] mem_cgroup_out_of_memory+0x206/0x270 [ 854.796796][T18615] ? mem_cgroup_margin+0x130/0x130 [ 854.801906][T18615] ? lock_downgrade+0x6e0/0x6e0 [ 854.806759][T18615] try_charge_memcg+0xefb/0x12f0 [ 854.811696][T18615] ? mem_cgroup_handle_over_high+0x520/0x520 [ 854.817673][T18615] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 854.823403][T18615] ? lock_downgrade+0x6e0/0x6e0 [ 854.828272][T18615] obj_cgroup_charge+0x2af/0x5e0 [ 854.833298][T18615] kmem_cache_alloc_lru+0x145/0x760 [ 854.838490][T18615] ? ext4_alloc_inode+0x28/0x680 [ 854.843430][T18615] ? ext4_free_in_core_inode+0x70/0x70 [ 854.848885][T18615] ext4_alloc_inode+0x28/0x680 [ 854.853644][T18615] ? ext4_free_in_core_inode+0x70/0x70 [ 854.859097][T18615] alloc_inode+0x61/0x230 [ 854.863446][T18615] iget_locked+0x1bb/0x700 [ 854.867909][T18615] __ext4_iget+0x3af/0x4230 [ 854.872478][T18615] ? ext4_get_projid+0x190/0x190 [ 854.877456][T18615] ? ext4_fname_prepare_lookup+0x163/0x200 [ 854.883296][T18615] ? ext4_fname_setup_filename+0x110/0x110 [ 854.889127][T18615] ? rcu_read_lock_sched_held+0x3e/0x70 [ 854.894680][T18615] ext4_lookup+0x387/0x700 [ 854.899090][T18615] ? ext4_resetent+0x2d0/0x2d0 [ 854.903865][T18615] __lookup_slow+0x24c/0x460 [ 854.908452][T18615] ? __lookup_hash+0x180/0x180 [ 854.913215][T18615] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 854.918678][T18615] ? scarlett2_usb_get_mix+0x2f6/0x318 [ 854.924143][T18615] ? lookup_fast+0x14e/0x520 [ 854.928750][T18615] walk_component+0x33f/0x5a0 [ 854.933432][T18615] path_lookupat+0x1ba/0x840 [ 854.938042][T18615] filename_lookup+0x1d2/0x590 [ 854.942926][T18615] ? may_linkat+0x500/0x500 [ 854.947462][T18615] ? __might_fault+0xd9/0x180 [ 854.952162][T18615] ? __phys_addr_symbol+0x30/0x70 [ 854.957221][T18615] ? __check_object_size+0x2e2/0x5a0 [ 854.962513][T18615] ? strncpy_from_user+0x28b/0x3c0 [ 854.967627][T18615] ? getname_flags.part.0+0x1dd/0x4f0 [ 854.973005][T18615] user_path_at_empty+0x46/0x60 [ 854.977943][T18615] __x64_sys_umount+0xfc/0x190 [ 854.982726][T18615] ? path_umount+0x10b0/0x10b0 [ 854.987486][T18615] ? syscall_enter_from_user_mode+0x26/0xb0 [ 854.993377][T18615] do_syscall_64+0x39/0xb0 [ 854.997795][T18615] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 855.003700][T18615] RIP: 0033:0x7f28ad28d537 [ 855.008117][T18615] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 855.027733][T18615] RSP: 002b:00007ffeee789838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 855.036245][T18615] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f28ad28d537 [ 855.044212][T18615] RDX: 00007ffeee78990c RSI: 000000000000000a RDI: 00007ffeee789900 [ 855.052178][T18615] RBP: 00007ffeee789900 R08: 00000000ffffffff R09: 00007ffeee7896d0 [ 855.060155][T18615] R10: 0000555557075853 R11: 0000000000000246 R12: 00007f28ad2e6b24 [ 855.068154][T18615] R13: 00007ffeee78a9c0 R14: 0000555557075810 R15: 00007ffeee78aa00 [ 855.076151][T18615] [ 855.080581][T18615] memory: usage 356kB, limit 0kB, failcnt 558 [ 855.088005][T18615] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 855.095253][T18615] Memory cgroup stats for /syz2: [ 855.095459][T18615] anon 40960 [ 855.095459][T18615] file 225280 [ 855.095459][T18615] kernel 86016 [ 855.095459][T18615] kernel_stack 0 [ 855.095459][T18615] pagetables 8192 [ 855.095459][T18615] sec_pagetables 0 [ 855.095459][T18615] percpu 64 [ 855.095459][T18615] sock 0 [ 855.095459][T18615] vmalloc 0 [ 855.095459][T18615] shmem 221184 [ 855.095459][T18615] zswap 0 [ 855.095459][T18615] zswapped 0 [ 855.095459][T18615] file_mapped 221184 [ 855.095459][T18615] file_dirty 0 [ 855.095459][T18615] file_writeback 0 [ 855.095459][T18615] swapcached 0 [ 855.095459][T18615] anon_thp 0 [ 855.095459][T18615] file_thp 0 [ 855.095459][T18615] shmem_thp 0 [ 855.095459][T18615] inactive_anon 61440 [ 855.095459][T18615] active_anon 200704 [ 855.095459][T18615] inactive_file 0 [ 855.095459][T18615] active_file 4096 [ 855.095459][T18615] unevictable 0 [ 855.095459][T18615] slab_reclaimable 17528 [ 855.095459][T18615] slab_unreclaimable 45056 [ 855.095459][T18615] slab 62584 [ 855.193149][T18615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18615,uid=0 [ 855.210587][T18615] Memory cgroup out of memory: Killed process 18615 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 856.267334][T14144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.371848][T14144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.462857][T14144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.535750][T14144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.759181][T14144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.833618][T14144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.919095][T14144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.058565][T14144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.705352][T14144] device hsr_slave_0 left promiscuous mode [ 858.725426][T14144] device hsr_slave_1 left promiscuous mode [ 858.737374][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.746463][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 03:16:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:16:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 858.762289][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.795897][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 03:16:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 858.835734][T14144] device hsr_slave_0 left promiscuous mode [ 858.847844][T13290] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 [ 858.859769][T13290] CPU: 1 PID: 13290 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 858.870240][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 858.880324][T13290] Call Trace: [ 858.883630][T13290] [ 858.886587][T13290] dump_stack_lvl+0xd1/0x138 [ 858.891222][T13290] dump_header+0x10b/0x85f [ 858.895690][T13290] oom_kill_process.cold+0x10/0x15 [ 858.900856][T13290] out_of_memory+0x35c/0x14a0 [ 858.905587][T13290] ? find_held_lock+0x2d/0x110 [ 858.910394][T13290] ? oom_killer_disable+0x280/0x280 [ 858.915706][T13290] ? find_held_lock+0x2d/0x110 [ 858.920529][T13290] mem_cgroup_out_of_memory+0x206/0x270 [ 858.926130][T13290] ? mem_cgroup_margin+0x130/0x130 [ 858.931287][T13290] ? lock_downgrade+0x6e0/0x6e0 [ 858.936191][T13290] try_charge_memcg+0xefb/0x12f0 [ 858.941175][T13290] ? mem_cgroup_handle_over_high+0x520/0x520 [ 858.947198][T13290] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 858.952974][T13290] ? lock_downgrade+0x6e0/0x6e0 [ 858.957868][T13290] ? lock_downgrade+0x6e0/0x6e0 [ 858.962761][T13290] ? rcu_read_unlock+0x9/0x60 [ 858.967506][T13290] obj_cgroup_charge+0x2af/0x5e0 [ 858.972503][T13290] ? copy_process+0x3aa/0x7520 [ 858.977308][T13290] kmem_cache_alloc_node+0xb7/0x460 [ 858.982528][T13290] copy_process+0x3aa/0x7520 [ 858.987134][T13290] ? _raw_spin_unlock+0x28/0x40 [ 858.992005][T13290] ? wp_page_reuse+0x197/0x570 [ 858.996792][T13290] ? do_wp_page+0x844/0x3370 [ 859.001408][T13290] ? __cleanup_sighand+0xb0/0xb0 [ 859.006356][T13290] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 859.011750][T13290] ? rwlock_bug.part.0+0x90/0x90 [ 859.016704][T13290] ? lock_chain_count+0x20/0x20 [ 859.021583][T13290] kernel_clone+0xeb/0x990 [ 859.026024][T13290] ? create_io_thread+0xf0/0xf0 [ 859.030893][T13290] ? find_held_lock+0x2d/0x110 [ 859.035685][T13290] __do_sys_clone+0xba/0x100 [ 859.040292][T13290] ? kernel_clone+0x990/0x990 [ 859.044994][T13290] ? syscall_enter_from_user_mode+0x26/0xb0 [ 859.050908][T13290] do_syscall_64+0x39/0xb0 [ 859.055342][T13290] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 859.061248][T13290] RIP: 0033:0x7f1367c89dfb [ 859.065672][T13290] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 859.085291][T13290] RSP: 002b:00007ffe943ce730 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 859.093714][T13290] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1367c89dfb [ 859.101697][T13290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 859.109677][T13290] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557156400 [ 859.117658][T13290] R10: 00005555571566d0 R11: 0000000000000246 R12: 0000000000000001 [ 859.125634][T13290] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe943ce810 [ 859.133631][T13290] [ 859.169982][T14144] device hsr_slave_1 left promiscuous mode [ 859.199608][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.207078][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.271973][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.285195][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.315172][T14144] device bridge_slave_1 left promiscuous mode [ 859.337281][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.364547][T14144] device bridge_slave_0 left promiscuous mode [ 859.373818][T13290] memory: usage 8276kB, limit 0kB, failcnt 57 [ 859.382403][T13290] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 859.385444][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.396627][T13290] Memory cgroup stats for /syz5: [ 859.396814][T13290] anon 49152 [ 859.396814][T13290] file 8347648 [ 859.396814][T13290] kernel 77824 [ 859.396814][T13290] kernel_stack 0 [ 859.396814][T13290] pagetables 8192 [ 859.396814][T13290] sec_pagetables 0 [ 859.396814][T13290] percpu 0 [ 859.396814][T13290] sock 0 [ 859.396814][T13290] vmalloc 0 [ 859.396814][T13290] shmem 8339456 [ 859.396814][T13290] zswap 0 [ 859.396814][T13290] zswapped 0 [ 859.396814][T13290] file_mapped 221184 [ 859.396814][T13290] file_dirty 0 [ 859.396814][T13290] file_writeback 0 [ 859.396814][T13290] swapcached 0 [ 859.396814][T13290] anon_thp 0 [ 859.396814][T13290] file_thp 0 [ 859.396814][T13290] shmem_thp 0 [ 859.396814][T13290] inactive_anon 49152 [ 859.396814][T13290] active_anon 8339456 [ 859.396814][T13290] inactive_file 4096 [ 859.396814][T13290] active_file 4096 [ 859.396814][T13290] unevictable 0 [ 859.396814][T13290] slab_reclaimable 26824 [ 859.396814][T13290] slab_unreclaimable 33864 [ 859.396814][T13290] slab 60688 [ 859.501349][T13290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13290,uid=0 [ 859.521769][T14144] device veth1_macvtap left promiscuous mode [ 859.523385][T13290] Memory cgroup out of memory: Killed process 13290 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 859.541488][T14144] device veth0_macvtap left promiscuous mode [ 859.581228][T14144] device veth1_vlan left promiscuous mode [ 859.604636][T14144] device veth0_vlan left promiscuous mode [ 859.629521][T14144] device veth1_macvtap left promiscuous mode [ 859.646203][T14144] device veth0_macvtap left promiscuous mode [ 859.658238][T14144] device veth1_vlan left promiscuous mode [ 859.675486][T14144] device veth0_vlan left promiscuous mode [ 860.267279][T14144] team0 (unregistering): Port device team_slave_1 removed [ 860.288965][T14144] team0 (unregistering): Port device team_slave_0 removed [ 860.312781][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.342419][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.466719][T14144] bond0 (unregistering): Released all slaves [ 860.558714][T14144] team0 (unregistering): Port device team_slave_1 removed [ 860.573792][T14144] team0 (unregistering): Port device team_slave_0 removed [ 860.585859][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.599239][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.671475][T14144] bond0 (unregistering): Released all slaves 03:16:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:16:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 861.338115][ T4388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 861.352282][ T4388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 861.360326][ T4388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 861.369079][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 861.378581][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 861.387420][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 862.109042][T18798] chnl_net:caif_netlink_parms(): no params data found 03:16:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 862.369272][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 862.385277][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 862.394470][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 862.404304][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 862.412304][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 862.420141][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 862.427448][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 862.465300][ T4388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 862.474816][ T4388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 862.482504][ T4388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 862.489893][ T4388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 862.560104][T18798] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.568752][T18798] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.590793][T18798] device bridge_slave_0 entered promiscuous mode [ 862.620408][T18798] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.642079][T18798] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.653161][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 862.662809][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 862.671288][T18798] device bridge_slave_1 entered promiscuous mode [ 862.677752][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 862.686335][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 862.694591][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 862.702066][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 862.805242][T18798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.865585][T18798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.988404][T18798] team0: Port device team_slave_0 added [ 863.041259][T18798] team0: Port device team_slave_1 added [ 863.165867][T18798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.182288][T18798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.222110][T18798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.253860][T18798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.273573][T18798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.329613][T18798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.419627][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 863.521871][T18798] device hsr_slave_0 entered promiscuous mode [ 863.545496][T18798] device hsr_slave_1 entered promiscuous mode [ 863.634807][T18798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.645218][T18798] Cannot create hsr debugfs directory [ 863.697013][T18816] chnl_net:caif_netlink_parms(): no params data found [ 863.874997][T18813] chnl_net:caif_netlink_parms(): no params data found [ 864.146990][ T4388] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 864.155875][ T4388] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 864.167421][ T4388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 864.182240][ T4388] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 864.189946][ T4388] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 864.334497][T18816] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.352145][T18816] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.367692][T18816] device bridge_slave_0 entered promiscuous mode [ 864.383326][T18816] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.390674][T18816] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.398985][T18816] device bridge_slave_1 entered promiscuous mode [ 864.406325][T18823] chnl_net:caif_netlink_parms(): no params data found [ 864.428037][T18813] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.435983][T18813] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.445057][T18813] device bridge_slave_0 entered promiscuous mode [ 864.457477][T18813] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.465152][ T4388] Bluetooth: hci2: command 0x0409 tx timeout [ 864.472133][T18813] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.480835][T18813] device bridge_slave_1 entered promiscuous mode [ 864.545340][T18816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.549741][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 864.630783][T18816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.673532][T18813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.755934][T18813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.779723][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 864.814545][T14144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.928063][T18816] team0: Port device team_slave_0 added [ 864.974430][T14144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.019274][T18816] team0: Port device team_slave_1 added [ 865.097545][T18823] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.107393][T18823] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.131616][T18823] device bridge_slave_0 entered promiscuous mode [ 865.146668][T18813] team0: Port device team_slave_0 added [ 865.175458][T14144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.217565][T18823] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.235268][T18823] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.267736][T18823] device bridge_slave_1 entered promiscuous mode [ 865.292088][T18813] team0: Port device team_slave_1 added [ 865.339753][T14144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.450553][T18816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.457552][T18816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.499523][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 865.503899][T18816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.608251][T18816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.616512][T18816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.709420][T18816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.853480][T18823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.882925][T18813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.893649][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.937855][T18813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.956054][T18816] device hsr_slave_0 entered promiscuous mode [ 865.974500][T18816] device hsr_slave_1 entered promiscuous mode [ 865.998648][T18816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.006423][T18816] Cannot create hsr debugfs directory [ 866.026463][T18823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.047257][T18813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.059721][T18813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.117325][T18813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.219651][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 866.495395][T18823] team0: Port device team_slave_0 added [ 866.549599][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 866.619555][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 866.661193][T18823] team0: Port device team_slave_1 added [ 866.683733][T18813] device hsr_slave_0 entered promiscuous mode [ 866.709982][T18813] device hsr_slave_1 entered promiscuous mode [ 866.739669][T18813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.747293][T18813] Cannot create hsr debugfs directory [ 866.859717][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 866.965631][T14144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.091252][T18823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.098251][T18823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.164102][T18823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.186975][T18798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 867.216332][T18854] chnl_net:caif_netlink_parms(): no params data found [ 867.254332][T14144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.298565][T18823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.307958][T18823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.366961][T18823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.391193][T18798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 867.469248][T14144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:17:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 867.519278][T18798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 867.590029][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 867.680495][T14144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.732077][T18798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 867.868902][T18823] device hsr_slave_0 entered promiscuous mode [ 867.891006][T18823] device hsr_slave_1 entered promiscuous mode [ 867.907510][T18823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 867.932243][T18823] Cannot create hsr debugfs directory [ 868.251204][T18854] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.258360][T18854] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.274026][T18854] device bridge_slave_0 entered promiscuous mode [ 868.299517][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 868.359545][T18854] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.366685][T18854] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.387936][T18854] device bridge_slave_1 entered promiscuous mode [ 868.534308][T18854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.621405][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 868.637864][T18854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.700014][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 868.703998][T18798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.923837][T18854] team0: Port device team_slave_0 added [ 868.949842][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 868.998627][T18798] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.023680][T18854] team0: Port device team_slave_1 added [ 869.041954][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 869.055856][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 869.150227][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 869.163960][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 869.182589][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.189811][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.206240][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 869.219337][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 869.244892][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.252074][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.342992][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 869.355725][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 869.444127][T18816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 869.463131][T18854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.479995][T18854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.526963][T18854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.600216][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 869.609109][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 869.620544][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 869.637779][T18816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 869.662169][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 869.690573][T18854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.697570][T18854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.788758][T18854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.877427][T18816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 869.902867][T18816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 869.982093][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 869.990437][ T1200] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.996764][ T1200] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.110198][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 870.125165][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 870.183547][T18854] device hsr_slave_0 entered promiscuous mode [ 870.200770][T18854] device hsr_slave_1 entered promiscuous mode [ 870.219601][T18854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.227214][T18854] Cannot create hsr debugfs directory [ 870.314309][T18798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 870.341346][T18798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 870.379641][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 870.450011][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 870.458559][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 870.699646][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 870.789607][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 870.870092][T18816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.019948][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 871.023054][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 871.047295][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 871.089700][T18816] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.161428][T18813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 871.443498][T18813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 871.469832][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 871.483442][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 871.492718][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.499903][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.510097][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 871.520027][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 871.528615][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.535795][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.544822][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 871.639873][T18813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 871.720375][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 871.729223][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 871.750512][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 871.772136][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 871.794414][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 871.811960][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 871.840190][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 871.848688][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 871.878105][T18798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.930501][T18813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 872.010669][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 872.023755][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 872.032148][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 872.073088][T18816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 872.160852][T14144] device hsr_slave_0 left promiscuous mode [ 872.188879][T14144] device hsr_slave_1 left promiscuous mode [ 872.210058][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.217538][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.262632][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.288884][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.321865][T14144] device bridge_slave_1 left promiscuous mode [ 872.348048][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.400035][T14144] device bridge_slave_0 left promiscuous mode [ 872.406327][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.459612][ T4388] Bluetooth: hci5: command 0x0419 tx timeout [ 872.530453][T14144] device hsr_slave_0 left promiscuous mode [ 872.537471][T14144] device hsr_slave_1 left promiscuous mode [ 872.569927][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.577404][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.622046][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.650946][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.671733][T14144] device bridge_slave_1 left promiscuous mode [ 872.677986][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.720794][T14144] device bridge_slave_0 left promiscuous mode [ 872.727111][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.770979][T14144] device veth1_macvtap left promiscuous mode [ 872.777077][T14144] device veth0_macvtap left promiscuous mode [ 872.810612][T14144] device veth1_vlan left promiscuous mode [ 872.816513][T14144] device veth0_vlan left promiscuous mode [ 872.852150][T14144] device veth1_macvtap left promiscuous mode [ 872.858246][T14144] device veth0_macvtap left promiscuous mode [ 872.879881][T14144] device veth1_vlan left promiscuous mode [ 872.885772][T14144] device veth0_vlan left promiscuous mode [ 874.017474][T14144] team0 (unregistering): Port device team_slave_1 removed [ 874.045102][T14144] team0 (unregistering): Port device team_slave_0 removed [ 874.076127][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.107623][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.287045][T14144] bond0 (unregistering): Released all slaves [ 874.536601][T14144] team0 (unregistering): Port device team_slave_1 removed [ 874.568155][T14144] team0 (unregistering): Port device team_slave_0 removed [ 874.596941][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.618530][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.766883][T14144] bond0 (unregistering): Released all slaves [ 874.921394][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 874.970270][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 03:17:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 875.270478][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 875.278980][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 875.296223][T18798] device veth0_vlan entered promiscuous mode [ 875.331127][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 875.339107][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 875.406062][T18813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.470799][T18798] device veth1_vlan entered promiscuous mode [ 875.515607][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 875.530330][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 875.539164][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 875.560213][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 877.675181][T18813] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.732267][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 877.749774][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 877.762340][T18816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.831920][T18798] device veth0_macvtap entered promiscuous mode [ 877.857302][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 877.880896][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 877.922213][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.929432][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.946227][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 877.970255][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 877.986953][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.994195][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.012075][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 878.027620][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 878.044637][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 878.073784][T18798] device veth1_macvtap entered promiscuous mode [ 878.129322][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 878.138704][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 878.171006][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 878.179204][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 878.200637][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 878.220618][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 878.259963][T18813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.292426][T18813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.306571][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 878.323725][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 878.341619][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 878.357358][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 878.368062][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 878.408474][T18798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.449794][T18798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.461393][T18798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.505477][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 878.530487][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 878.539291][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 878.611267][T18798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.644124][T18798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.696805][T18798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.739422][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 878.748236][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 878.806387][T18798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.829517][T18798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.838278][T18798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.881072][T18798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.921497][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 878.950387][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 878.998725][T18854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 879.060155][T18854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 879.115104][T18854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 879.149196][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 879.161558][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 879.180956][T18816] device veth0_vlan entered promiscuous mode [ 879.215535][T18854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 879.247929][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 879.260605][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 879.302856][T18816] device veth1_vlan entered promiscuous mode [ 879.411725][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.420305][T18823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 879.448905][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.499630][T18823] netdevsim netdevsim1 netdevsim1: renamed from eth1 03:17:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 879.540136][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 879.548415][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 879.590297][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 879.604790][T18816] device veth0_macvtap entered promiscuous mode [ 879.623308][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 879.649951][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 879.657508][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 879.695395][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 879.723913][T18823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 879.748836][T18813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.777084][T18816] device veth1_macvtap entered promiscuous mode [ 879.790692][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 879.798967][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 879.809870][T18823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 879.818968][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.844951][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.867515][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 879.939676][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 879.957809][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 879.968997][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.993086][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.030522][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.041764][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.054809][T18816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.095858][T18854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.115694][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 880.126981][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 880.138697][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.209855][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.258733][T18816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.307378][T18816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.352168][T18816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.389793][T18813] device veth0_vlan entered promiscuous mode [ 880.418660][T18854] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.433589][T19069] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 880.452097][T19069] CPU: 1 PID: 19069 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 880.462574][T19069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 880.472665][T19069] Call Trace: [ 880.475969][T19069] [ 880.478923][T19069] dump_stack_lvl+0xd1/0x138 [ 880.483572][T19069] dump_header+0x10b/0x85f [ 880.488053][T19069] oom_kill_process.cold+0x10/0x15 [ 880.493227][T19069] out_of_memory+0x35c/0x14a0 [ 880.497968][T19069] ? oom_killer_disable+0x280/0x280 [ 880.503218][T19069] ? mark_held_locks+0x9f/0xe0 [ 880.508033][T19069] mem_cgroup_out_of_memory+0x206/0x270 [ 880.513630][T19069] ? mem_cgroup_margin+0x130/0x130 [ 880.518785][T19069] memory_max_write+0x2f9/0x3c0 [ 880.523655][T19069] ? mem_cgroup_force_empty_write+0x160/0x160 [ 880.529743][T19069] ? lock_release+0x810/0x810 [ 880.534437][T19069] cgroup_file_write+0x1e2/0x770 [ 880.539393][T19069] ? mem_cgroup_force_empty_write+0x160/0x160 [ 880.545474][T19069] ? kill_css+0x370/0x370 [ 880.549821][T19069] ? __virt_addr_valid+0x61/0x2e0 [ 880.554875][T19069] ? kill_css+0x370/0x370 [ 880.559219][T19069] kernfs_fop_write_iter+0x3f1/0x600 [ 880.564529][T19069] vfs_write+0x9ed/0xdd0 [ 880.568791][T19069] ? kernel_write+0x630/0x630 [ 880.573489][T19069] ? __fget_files+0x26a/0x440 [ 880.578239][T19069] ksys_write+0x12b/0x250 [ 880.582582][T19069] ? __ia32_sys_read+0xb0/0xb0 [ 880.587374][T19069] do_syscall_64+0x39/0xb0 [ 880.591812][T19069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 880.597735][T19069] RIP: 0033:0x7f5d8ea8c0c9 [ 880.602159][T19069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 880.621778][T19069] RSP: 002b:00007f5d8f8d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 880.630202][T19069] RAX: ffffffffffffffda RBX: 00007f5d8ebabf80 RCX: 00007f5d8ea8c0c9 [ 880.638180][T19069] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 880.646160][T19069] RBP: 00007f5d8eae7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 880.654142][T19069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.662122][T19069] R13: 00007ffd9a97421f R14: 00007f5d8f8d1300 R15: 0000000000022000 [ 880.670123][T19069] [ 880.679525][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 880.688349][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 880.699910][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 880.708532][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 880.717865][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 880.730009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 880.750915][T18816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.760865][T18816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.770308][T18816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.779185][T18816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.810345][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 880.819153][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 880.835688][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 880.858415][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 880.918725][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.925941][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.959842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 880.968639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 880.996800][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.003988][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.031226][T18813] device veth1_vlan entered promiscuous mode [ 881.100204][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 881.108354][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 881.132159][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 881.144838][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 881.245625][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 881.260509][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 881.261855][T19069] memory: usage 10608kB, limit 0kB, failcnt 242 [ 881.289539][T19069] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 881.293820][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 881.296427][T19069] Memory cgroup stats for /syz0: [ 881.296623][T19069] anon 114688 [ 881.296623][T19069] file 10457088 [ 881.296623][T19069] kernel 258048 [ 881.296623][T19069] kernel_stack 32768 [ 881.296623][T19069] pagetables 81920 [ 881.296623][T19069] sec_pagetables 0 [ 881.296623][T19069] percpu 64 [ 881.296623][T19069] sock 0 [ 881.296623][T19069] vmalloc 0 [ 881.296623][T19069] shmem 10457088 [ 881.296623][T19069] zswap 0 [ 881.296623][T19069] zswapped 0 [ 881.296623][T19069] file_mapped 274432 [ 881.296623][T19069] file_dirty 0 [ 881.296623][T19069] file_writeback 0 [ 881.296623][T19069] swapcached 0 [ 881.296623][T19069] anon_thp 0 [ 881.296623][T19069] file_thp 0 [ 881.296623][T19069] shmem_thp 0 [ 881.296623][T19069] inactive_anon 114688 [ 881.296623][T19069] active_anon 10457088 [ 881.296623][T19069] inactive_file 0 [ 881.296623][T19069] active_file 0 [ 881.296623][T19069] unevictable 0 [ 881.296623][T19069] slab_reclaimable 40112 [ 881.296623][T19069] slab_unreclaimable 73104 [ 881.296623][T19069] slab 113216 [ 881.315718][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 881.447522][T18854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 881.476757][T18854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 881.491278][T18823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.501108][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 881.510753][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 881.549937][T18823] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.572596][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 881.587225][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 881.613794][T18813] device veth0_macvtap entered promiscuous mode [ 881.653634][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 881.665910][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 881.685972][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 881.701743][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 881.718307][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.725526][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.769906][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 881.796545][T19069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19068,uid=0 [ 881.796750][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 881.822564][T19069] Memory cgroup out of memory: Killed process 19069 (syz-executor.0) total-vm:56588kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 03:17:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 881.867104][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.874362][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.924934][T18798] syz-executor.0 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 881.946125][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 881.960657][T18813] device veth1_macvtap entered promiscuous mode [ 881.971525][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.989579][T18798] CPU: 0 PID: 18798 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 881.995161][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.000031][T18798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 882.000094][T18798] Call Trace: [ 882.000102][T18798] [ 882.000112][T18798] dump_stack_lvl+0xd1/0x138 [ 882.000151][T18798] dump_header+0x10b/0x85f [ 882.032750][T18798] oom_kill_process.cold+0x10/0x15 [ 882.037902][T18798] out_of_memory+0x35c/0x14a0 [ 882.042604][T18798] ? find_held_lock+0x2d/0x110 [ 882.047388][T18798] ? oom_killer_disable+0x280/0x280 [ 882.052606][T18798] ? find_held_lock+0x2d/0x110 [ 882.057388][T18798] mem_cgroup_out_of_memory+0x206/0x270 [ 882.062957][T18798] ? mem_cgroup_margin+0x130/0x130 [ 882.068089][T18798] ? lock_downgrade+0x6e0/0x6e0 [ 882.072968][T18798] try_charge_memcg+0xefb/0x12f0 [ 882.077926][T18798] ? mem_cgroup_handle_over_high+0x520/0x520 [ 882.083917][T18798] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 882.089657][T18798] ? lock_downgrade+0x6e0/0x6e0 [ 882.094520][T18798] ? lock_downgrade+0x6e0/0x6e0 [ 882.099382][T18798] ? rcu_read_unlock+0x9/0x60 [ 882.104086][T18798] obj_cgroup_charge+0x2af/0x5e0 [ 882.109038][T18798] ? __alloc_file+0x21/0x270 [ 882.113640][T18798] kmem_cache_alloc+0xb5/0x430 [ 882.118410][T18798] ? d_instantiate+0x79/0xa0 [ 882.123011][T18798] __alloc_file+0x21/0x270 [ 882.127442][T18798] alloc_empty_file+0x71/0x170 [ 882.132231][T18798] alloc_file+0x59/0x800 [ 882.136504][T18798] alloc_file_pseudo+0x169/0x250 [ 882.141455][T18798] ? alloc_file+0x800/0x800 [ 882.145977][T18798] ? alloc_fd+0x2d8/0x6d0 [ 882.150320][T18798] sock_alloc_file+0x53/0x190 [ 882.155014][T18798] __sys_socket+0x1a8/0x250 [ 882.159533][T18798] ? __sys_socket_file+0x1f0/0x1f0 [ 882.164691][T18798] __x64_sys_socket+0x73/0xb0 [ 882.169391][T18798] do_syscall_64+0x39/0xb0 [ 882.173825][T18798] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 882.179733][T18798] RIP: 0033:0x7f5d8ea8d747 [ 882.184155][T18798] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 882.203768][T18798] RSP: 002b:00007ffd9a973dc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 882.212188][T18798] RAX: ffffffffffffffda RBX: 00007ffd9a974500 RCX: 00007f5d8ea8d747 [ 882.220164][T18798] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 882.228137][T18798] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffd9a973e40 [ 882.236114][T18798] R10: 0000000000000010 R11: 0000000000000202 R12: 0000000000000032 [ 882.244090][T18798] R13: 00000000000d71cf R14: 0000000000000019 R15: 00007ffd9a974540 [ 882.252084][T18798] [ 882.301707][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 882.318180][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 882.340460][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 882.351291][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 882.370069][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 882.389821][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 882.409504][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 882.419159][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 882.430390][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 882.468330][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.493050][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.511894][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.528203][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.549982][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.569461][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.588816][T18813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.614171][T18823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 882.627870][T18823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 882.636107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 882.643589][T18798] memory: usage 10364kB, limit 0kB, failcnt 261 [ 882.644711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 882.658240][T18798] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 882.658653][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 882.665823][T18798] Memory cgroup stats for [ 882.674202][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 882.674501][T18798] /syz0 [ 882.679429][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 882.694666][T18798] : [ 882.697918][T18798] anon 45056 [ 882.697918][T18798] file 10461184 [ 882.697918][T18798] kernel 106496 [ 882.697918][T18798] kernel_stack 0 [ 882.697918][T18798] pagetables 8192 [ 882.697918][T18798] sec_pagetables 0 [ 882.697918][T18798] percpu 64 [ 882.697918][T18798] sock 0 [ 882.697918][T18798] vmalloc 0 [ 882.697918][T18798] shmem 10457088 [ 882.697918][T18798] zswap 0 [ 882.697918][T18798] zswapped 0 [ 882.697918][T18798] file_mapped 253952 [ 882.697918][T18798] file_dirty 0 [ 882.697918][T18798] file_writeback 0 [ 882.697918][T18798] swapcached 0 [ 882.697918][T18798] anon_thp 0 [ 882.697918][T18798] file_thp 0 [ 882.697918][T18798] shmem_thp 0 [ 882.697918][T18798] inactive_anon 45056 [ 882.697918][T18798] active_anon 10457088 [ 882.697918][T18798] inactive_file 0 [ 882.697918][T18798] active_file 4096 [ 882.697918][T18798] unevictable 0 [ 882.697918][T18798] slab_reclaimable 35032 [ 882.697918][T18798] slab_unreclaimable 47224 [ 882.697918][T18798] slab 82256 [ 882.809547][T18798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18798,uid=0 [ 882.828213][T18798] Memory cgroup out of memory: Killed process 18798 (syz-executor.0) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 882.833385][T18854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.958894][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.970733][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.981682][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 882.992863][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.003666][T18813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.015204][T18813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.027931][T18813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.046961][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 883.055073][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 883.069800][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 883.078855][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 883.098612][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.116353][T18813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.132559][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.138148][T18813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.160910][T18813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.179494][T18813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.202332][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:17:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 883.561443][T14144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.672808][T19108] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 883.686115][T19108] CPU: 1 PID: 19108 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 883.696587][T19108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 883.706679][T19108] Call Trace: [ 883.709983][T19108] [ 883.712941][T19108] dump_stack_lvl+0xd1/0x138 [ 883.717587][T19108] dump_header+0x10b/0x85f [ 883.722060][T19108] oom_kill_process.cold+0x10/0x15 [ 883.727223][T19108] out_of_memory+0x35c/0x14a0 [ 883.731956][T19108] ? oom_killer_disable+0x280/0x280 [ 883.737215][T19108] ? lockdep_hardirqs_on+0x7d/0x100 [ 883.742456][T19108] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 883.748662][T19108] mem_cgroup_out_of_memory+0x206/0x270 [ 883.754264][T19108] ? mem_cgroup_margin+0x130/0x130 [ 883.759459][T19108] memory_max_write+0x2f9/0x3c0 [ 883.764347][T19108] ? mem_cgroup_force_empty_write+0x160/0x160 [ 883.770446][T19108] ? mem_cgroup_force_empty_write+0x160/0x160 [ 883.776557][T19108] cgroup_file_write+0x1e2/0x770 [ 883.781536][T19108] ? mem_cgroup_force_empty_write+0x160/0x160 [ 883.787642][T19108] ? kill_css+0x370/0x370 [ 883.792015][T19108] ? __virt_addr_valid+0x61/0x2e0 [ 883.797094][T19108] ? kill_css+0x370/0x370 [ 883.801463][T19108] kernfs_fop_write_iter+0x3f1/0x600 [ 883.806828][T19108] vfs_write+0x9ed/0xdd0 [ 883.811126][T19108] ? kernel_write+0x630/0x630 [ 883.815851][T19108] ? __fget_files+0x26a/0x440 [ 883.820580][T19108] ksys_write+0x12b/0x250 [ 883.824957][T19108] ? __ia32_sys_read+0xb0/0xb0 [ 883.829770][T19108] ? syscall_enter_from_user_mode+0x26/0xb0 [ 883.835709][T19108] do_syscall_64+0x39/0xb0 [ 883.840174][T19108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 883.846106][T19108] RIP: 0033:0x7efe2d88c0c9 [ 883.850549][T19108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 883.870199][T19108] RSP: 002b:00007efe2e5d9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 883.878653][T19108] RAX: ffffffffffffffda RBX: 00007efe2d9abf80 RCX: 00007efe2d88c0c9 [ 883.886664][T19108] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 883.894669][T19108] RBP: 00007efe2d8e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 883.902679][T19108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.910686][T19108] R13: 00007ffefb44195f R14: 00007efe2e5d9300 R15: 0000000000022000 [ 883.918709][T19108] [ 884.067969][T19108] memory: usage 10592kB, limit 0kB, failcnt 37 [ 884.094633][T19108] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 884.103162][T19108] Memory cgroup stats for /syz4: [ 884.104406][T19108] anon 114688 [ 884.104406][T19108] file 10444800 [ 884.104406][T19108] kernel 286720 [ 884.104406][T19108] kernel_stack 65536 [ 884.104406][T19108] pagetables 77824 [ 884.104406][T19108] sec_pagetables 0 [ 884.104406][T19108] percpu 64 [ 884.104406][T19108] sock 0 [ 884.104406][T19108] vmalloc 0 [ 884.104406][T19108] shmem 10444800 [ 884.104406][T19108] zswap 0 [ 884.104406][T19108] zswapped 0 [ 884.104406][T19108] file_mapped 327680 [ 884.104406][T19108] file_dirty 0 [ 884.104406][T19108] file_writeback 0 [ 884.104406][T19108] swapcached 0 [ 884.104406][T19108] anon_thp 0 [ 884.104406][T19108] file_thp 0 [ 884.104406][T19108] shmem_thp 0 [ 884.104406][T19108] inactive_anon 114688 [ 884.104406][T19108] active_anon 10444800 [ 884.104406][T19108] inactive_file 0 [ 884.104406][T19108] active_file 0 [ 884.104406][T19108] unevictable 0 [ 884.104406][T19108] slab_reclaimable 39728 [ 884.104406][T19108] slab_unreclaimable 73104 [ 884.104406][T19108] slab 112832 [ 884.112606][T14144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.273499][T19108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=19107,uid=0 [ 884.289326][T19108] Memory cgroup out of memory: Killed process 19108 (syz-executor.4) total-vm:56588kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 884.333341][T18816] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 884.389489][T18816] CPU: 1 PID: 18816 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 884.399972][T18816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 884.410071][T18816] Call Trace: [ 884.413371][T18816] [ 884.416324][T18816] dump_stack_lvl+0xd1/0x138 [ 884.420961][T18816] dump_header+0x10b/0x85f [ 884.425432][T18816] oom_kill_process.cold+0x10/0x15 [ 884.430587][T18816] out_of_memory+0x35c/0x14a0 [ 884.435312][T18816] ? find_held_lock+0x2d/0x110 [ 884.440120][T18816] ? oom_killer_disable+0x280/0x280 [ 884.445369][T18816] ? find_held_lock+0x2d/0x110 [ 884.450185][T18816] mem_cgroup_out_of_memory+0x206/0x270 [ 884.455770][T18816] ? mem_cgroup_margin+0x130/0x130 [ 884.460909][T18816] ? lock_downgrade+0x6e0/0x6e0 [ 884.465789][T18816] try_charge_memcg+0xefb/0x12f0 [ 884.470743][T18816] ? mem_cgroup_handle_over_high+0x520/0x520 [ 884.476739][T18816] ? lock_downgrade+0x6e0/0x6e0 [ 884.481610][T18816] charge_memcg+0x90/0x3b0 [ 884.486039][T18816] __mem_cgroup_charge+0x2b/0x90 [ 884.490988][T18816] ? _compound_head+0x5d/0x150 [ 884.495764][T18816] __handle_mm_fault+0x187d/0x3c90 [ 884.500897][T18816] ? vm_iomap_memory+0x190/0x190 [ 884.505872][T18816] handle_mm_fault+0x1b6/0x850 [ 884.510657][T18816] do_user_addr_fault+0x475/0x1210 [ 884.515785][T18816] ? rcu_read_lock_sched_held+0x3e/0x70 [ 884.521355][T18816] exc_page_fault+0x98/0x170 [ 884.525955][T18816] asm_exc_page_fault+0x26/0x30 [ 884.530819][T18816] RIP: 0033:0x7efe2d85a7d5 [ 884.535242][T18816] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 884.554859][T18816] RSP: 002b:00007ffefb440900 EFLAGS: 00010206 [ 884.560933][T18816] RAX: 00000000000187c1 RBX: 00007efe2d9885e0 RCX: 0000555556f84840 [ 884.568916][T18816] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 884.576901][T18816] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007efe2d988640 [ 884.584884][T18816] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 884.592860][T18816] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555556f7c800 [ 884.600856][T18816] [ 884.618437][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.637474][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.717250][T18823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.723615][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.749425][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.767667][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 884.775802][T18816] memory: usage 10336kB, limit 0kB, failcnt 56 [ 884.776075][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 884.790020][T18816] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 884.796698][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 884.797321][T18816] Memory cgroup stats for /syz4 [ 884.806555][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.819098][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.832427][T18816] : [ 884.832599][T18816] anon 36864 [ 884.832599][T18816] file 10444800 [ 884.832599][T18816] kernel 102400 [ 884.832599][T18816] kernel_stack 0 [ 884.832599][T18816] pagetables 8192 [ 884.832599][T18816] sec_pagetables 0 [ 884.832599][T18816] percpu 64 [ 884.832599][T18816] sock 0 [ 884.832599][T18816] vmalloc 0 [ 884.832599][T18816] shmem 10444800 [ 884.832599][T18816] zswap 0 [ 884.832599][T18816] zswapped 0 [ 884.832599][T18816] file_mapped 299008 [ 884.832599][T18816] file_dirty 0 [ 884.832599][T18816] file_writeback 0 [ 884.832599][T18816] swapcached 0 [ 884.832599][T18816] anon_thp 0 [ 884.832599][T18816] file_thp 0 [ 884.832599][T18816] shmem_thp 0 [ 884.832599][T18816] inactive_anon 36864 [ 884.832599][T18816] active_anon 10444800 [ 884.832599][T18816] inactive_file 0 [ 884.832599][T18816] active_file 0 [ 884.832599][T18816] unevictable 0 [ 884.832599][T18816] slab_reclaimable 32864 [ 884.832599][T18816] slab_unreclaimable 44728 [ 884.832599][T18816] slab 77592 [ 884.838874][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 884.946660][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 884.958478][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 884.970097][T18816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18816,uid=0 [ 884.981462][T18854] device veth0_vlan entered promiscuous mode [ 885.009514][T18816] Memory cgroup out of memory: Killed process 18816 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 885.073895][T14144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.101715][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 885.116127][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 885.152993][T18854] device veth1_vlan entered promiscuous mode [ 885.235588][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 885.267370][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 885.320682][T14144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.464216][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 885.500449][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 885.511305][T18823] device veth0_vlan entered promiscuous mode [ 885.555497][T18823] device veth1_vlan entered promiscuous mode [ 885.604947][T18854] device veth0_macvtap entered promiscuous mode [ 885.623177][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 885.647196][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 885.685402][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 885.720628][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 885.729887][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 885.741312][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 885.792955][T18854] device veth1_macvtap entered promiscuous mode [ 885.802673][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 885.813546][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 885.867248][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 885.885090][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 885.928975][T18854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.989479][T18854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.004157][T19128] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 886.015297][T19128] CPU: 0 PID: 19128 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 886.022126][T18854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.025727][T19128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 886.046234][T19128] Call Trace: [ 886.049548][T19128] [ 886.052506][T19128] dump_stack_lvl+0xd1/0x138 [ 886.057156][T19128] dump_header+0x10b/0x85f [ 886.061649][T19128] oom_kill_process.cold+0x10/0x15 [ 886.066804][T19128] out_of_memory+0x35c/0x14a0 [ 886.071535][T19128] ? oom_killer_disable+0x280/0x280 [ 886.076774][T19128] ? mark_held_locks+0x9f/0xe0 [ 886.081571][T19128] mem_cgroup_out_of_memory+0x206/0x270 [ 886.087144][T19128] ? mem_cgroup_margin+0x130/0x130 [ 886.092299][T19128] memory_max_write+0x2f9/0x3c0 [ 886.097166][T19128] ? mem_cgroup_force_empty_write+0x160/0x160 [ 886.103251][T19128] ? lock_release+0x810/0x810 [ 886.107945][T19128] cgroup_file_write+0x1e2/0x770 [ 886.112901][T19128] ? mem_cgroup_force_empty_write+0x160/0x160 [ 886.118978][T19128] ? kill_css+0x370/0x370 [ 886.123325][T19128] ? __virt_addr_valid+0x61/0x2e0 [ 886.128382][T19128] ? kill_css+0x370/0x370 [ 886.132727][T19128] kernfs_fop_write_iter+0x3f1/0x600 [ 886.138039][T19128] vfs_write+0x9ed/0xdd0 [ 886.142298][T19128] ? kernel_write+0x630/0x630 [ 886.146992][T19128] ? __fget_files+0x26a/0x440 [ 886.151698][T19128] ksys_write+0x12b/0x250 [ 886.156040][T19128] ? __ia32_sys_read+0xb0/0xb0 [ 886.160830][T19128] do_syscall_64+0x39/0xb0 [ 886.165266][T19128] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 886.171172][T19128] RIP: 0033:0x7f53c9e8c0c9 [ 886.175595][T19128] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 886.195239][T19128] RSP: 002b:00007f53cac4d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 886.203660][T19128] RAX: ffffffffffffffda RBX: 00007f53c9fabf80 RCX: 00007f53c9e8c0c9 [ 886.211642][T19128] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 886.219620][T19128] RBP: 00007f53c9ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 886.227596][T19128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.235572][T19128] R13: 00007ffc20f4ca1f R14: 00007f53cac4d300 R15: 0000000000022000 [ 886.243569][T19128] [ 886.247115][T18854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.267232][T18854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.278043][T19128] memory: usage 616kB, limit 0kB, failcnt 558 [ 886.299573][T19128] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 886.299581][T18854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.299598][T19128] Memory cgroup stats for /syz2 [ 886.306442][T18854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.323749][T19128] : [ 886.331970][T19128] anon 110592 [ 886.331970][T19128] file 229376 [ 886.331970][T19128] kernel 237568 [ 886.331970][T19128] kernel_stack 32768 [ 886.331970][T19128] pagetables 81920 [ 886.331970][T19128] sec_pagetables 0 [ 886.331970][T19128] percpu 64 [ 886.331970][T19128] sock 0 [ 886.331970][T19128] vmalloc 0 [ 886.331970][T19128] shmem 221184 [ 886.331970][T19128] zswap 0 [ 886.331970][T19128] zswapped 0 [ 886.331970][T19128] file_mapped 221184 [ 886.331970][T19128] file_dirty 0 [ 886.331970][T19128] file_writeback 0 [ 886.331970][T19128] swapcached 0 [ 886.331970][T19128] anon_thp 0 [ 886.331970][T19128] file_thp 0 [ 886.331970][T19128] shmem_thp 0 [ 886.331970][T19128] inactive_anon 131072 [ 886.331970][T19128] active_anon 200704 [ 886.331970][T19128] inactive_file 4096 [ 886.331970][T19128] active_file 4096 [ 886.331970][T19128] unevictable 0 [ 886.331970][T19128] slab_reclaimable 17768 [ 886.331970][T19128] slab_unreclaimable 75048 [ 886.331970][T19128] slab 92816 [ 886.369464][T18854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.529484][T19128] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19127,uid=0 [ 886.560315][T18854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.560313][T19128] Memory cgroup out of memory: Killed process 19128 (syz-executor.2) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 886.598620][T18823] device veth0_macvtap entered promiscuous mode [ 886.624763][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 886.637866][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 886.651559][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 886.670995][T18854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.729393][T18854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.735744][T18813] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 886.739239][T18854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.807537][T18813] CPU: 0 PID: 18813 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 886.809391][T18854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.817992][T18813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 886.837870][T18813] Call Trace: [ 886.841165][T18813] [ 886.844113][T18813] dump_stack_lvl+0xd1/0x138 [ 886.848739][T18813] dump_header+0x10b/0x85f [ 886.849386][T18854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.853180][T18813] oom_kill_process.cold+0x10/0x15 [ 886.868725][T18813] out_of_memory+0x35c/0x14a0 [ 886.873459][T18813] ? find_held_lock+0x2d/0x110 [ 886.878258][T18813] ? oom_killer_disable+0x280/0x280 [ 886.883500][T18813] ? find_held_lock+0x2d/0x110 [ 886.888308][T18813] mem_cgroup_out_of_memory+0x206/0x270 [ 886.889386][T18854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.893870][T18813] ? mem_cgroup_margin+0x130/0x130 [ 886.908796][T18813] ? lock_downgrade+0x6e0/0x6e0 [ 886.909535][T18854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.913672][T18813] try_charge_memcg+0xefb/0x12f0 [ 886.929030][T18813] ? mem_cgroup_handle_over_high+0x520/0x520 [ 886.935074][T18813] ? lock_downgrade+0x6e0/0x6e0 [ 886.939410][T18854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.939960][T18813] charge_memcg+0x90/0x3b0 [ 886.954222][T18813] __mem_cgroup_charge+0x2b/0x90 [ 886.959195][T18813] ? _compound_head+0x5d/0x150 [ 886.963992][T18813] __handle_mm_fault+0x187d/0x3c90 [ 886.969155][T18813] ? vm_iomap_memory+0x190/0x190 [ 886.970931][T18854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.974135][T18813] handle_mm_fault+0x1b6/0x850 [ 886.974181][T18813] do_user_addr_fault+0x475/0x1210 [ 886.974216][T18813] ? rcu_read_lock_sched_held+0x3e/0x70 [ 886.974257][T18813] exc_page_fault+0x98/0x170 [ 886.974287][T18813] asm_exc_page_fault+0x26/0x30 [ 886.974314][T18813] RIP: 0033:0x7f53c9e5a7d5 [ 886.974336][T18813] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff [ 886.974360][T18813] RSP: 002b:00007ffc20f4b9c0 EFLAGS: 00010206 [ 886.974383][T18813] RAX: 00000000000187c1 RBX: 00007f53c9f885e0 RCX: 000055555660e840 [ 886.974400][T18813] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 886.974414][T18813] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007f53c9f88640 [ 886.974430][T18813] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 886.974445][T18813] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555556606800 [ 886.974483][T18813] [ 887.026131][T18813] memory: usage 356kB, limit 0kB, failcnt 577 [ 887.094051][T18813] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 887.104122][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 887.113182][T18813] Memory cgroup stats for /syz2: [ 887.113395][T18813] anon 36864 [ 887.113395][T18813] file 229376 [ 887.113395][T18813] kernel 77824 [ 887.113395][T18813] kernel_stack 0 [ 887.113395][T18813] pagetables 8192 [ 887.113395][T18813] sec_pagetables 0 [ 887.113395][T18813] percpu 64 [ 887.113395][T18813] sock 0 [ 887.113395][T18813] vmalloc 0 [ 887.113395][T18813] shmem 221184 [ 887.113395][T18813] zswap 0 [ 887.113395][T18813] zswapped 0 [ 887.113395][T18813] file_mapped 221184 [ 887.113395][T18813] file_dirty 0 [ 887.113395][T18813] file_writeback 0 [ 887.113395][T18813] swapcached 0 [ 887.113395][T18813] anon_thp 0 [ 887.113395][T18813] file_thp 0 [ 887.113395][T18813] shmem_thp 0 [ 887.113395][T18813] inactive_anon 57344 [ 887.113395][T18813] active_anon 200704 [ 887.113395][T18813] inactive_file 4096 [ 887.113395][T18813] active_file 4096 [ 887.113395][T18813] unevictable 0 [ 887.113395][T18813] slab_reclaimable 10904 [ 887.113395][T18813] slab_unreclaimable 44728 [ 887.113395][T18813] slab 55632 [ 887.124893][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 887.270202][T18813] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18813,uid=0 [ 887.292261][T18813] Memory cgroup out of memory: Killed process 18813 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 887.324545][T18823] device veth1_macvtap entered promiscuous mode [ 887.407905][T18854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.417973][T18854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.437442][T18854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.446560][T18854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.558362][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.570235][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.589777][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.605506][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.615737][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.634724][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.647696][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.667444][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.678241][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.697225][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.709033][T18823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.747122][T19096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 887.760208][T19096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 887.775966][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.798545][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.809007][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.829441][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.839324][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.858523][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.877215][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.888105][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.913288][T18823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.924324][T18823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.936414][T18823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.980119][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 887.988987][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 888.011481][T18823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.024189][T18823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.034312][T18823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.043665][T18823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.178964][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.192942][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.212761][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 888.253788][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.283386][ T5178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.284865][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.302813][ T5178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.324023][ T5329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.348054][ T5329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.355863][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 888.367894][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 888.377113][T10611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 888.821299][T14144] device hsr_slave_0 left promiscuous mode [ 888.828329][T14144] device hsr_slave_1 left promiscuous mode [ 888.855483][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.869021][T19163] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 888.895479][T19163] CPU: 1 PID: 19163 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 888.905972][T19163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 888.916062][T19163] Call Trace: [ 888.919371][T19163] [ 888.922338][T19163] dump_stack_lvl+0xd1/0x138 [ 888.926984][T19163] dump_header+0x10b/0x85f [ 888.931458][T19163] oom_kill_process.cold+0x10/0x15 [ 888.936633][T19163] out_of_memory+0x35c/0x14a0 [ 888.941379][T19163] ? oom_killer_disable+0x280/0x280 [ 888.946640][T19163] ? mark_held_locks+0x9f/0xe0 [ 888.949033][T14144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.951428][T19163] mem_cgroup_out_of_memory+0x206/0x270 [ 888.951471][T19163] ? mem_cgroup_margin+0x130/0x130 [ 888.951527][T19163] memory_max_write+0x2f9/0x3c0 [ 888.951558][T19163] ? mem_cgroup_force_empty_write+0x160/0x160 [ 888.951589][T19163] ? lock_release+0x810/0x810 [ 888.984954][T19163] cgroup_file_write+0x1e2/0x770 [ 888.989939][T19163] ? mem_cgroup_force_empty_write+0x160/0x160 [ 888.996047][T19163] ? kill_css+0x370/0x370 [ 889.000413][T19163] ? __virt_addr_valid+0x61/0x2e0 [ 889.005491][T19163] ? kill_css+0x370/0x370 [ 889.009858][T19163] kernfs_fop_write_iter+0x3f1/0x600 [ 889.015191][T19163] vfs_write+0x9ed/0xdd0 [ 889.019471][T19163] ? kernel_write+0x630/0x630 [ 889.024189][T19163] ? __fget_files+0x26a/0x440 [ 889.028928][T19163] ksys_write+0x12b/0x250 [ 889.033303][T19163] ? __ia32_sys_read+0xb0/0xb0 [ 889.038104][T19163] ? syscall_enter_from_user_mode+0x26/0xb0 [ 889.044058][T19163] do_syscall_64+0x39/0xb0 [ 889.048532][T19163] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 889.054475][T19163] RIP: 0033:0x7f3f4508c0c9 [ 889.058925][T19163] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 889.078658][T19163] RSP: 002b:00007f3f45e7d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 889.087116][T19163] RAX: ffffffffffffffda RBX: 00007f3f451abf80 RCX: 00007f3f4508c0c9 [ 889.095123][T19163] RDX: 0000000000000012 RSI: 00000000200002c0 RDI: 0000000000000005 [ 889.103129][T19163] RBP: 00007f3f450e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 889.111135][T19163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.119138][T19163] R13: 00007ffd02fe8bdf R14: 00007f3f45e7d300 R15: 0000000000022000 [ 889.127171][T19163] [ 889.136431][T14144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.163810][T14144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.176855][T19163] memory: usage 8544kB, limit 0kB, failcnt 74 [ 889.191819][T14144] device bridge_slave_1 left promiscuous mode [ 889.198096][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.215380][T19163] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 889.223448][T19163] Memory cgroup stats for /syz5: [ 889.224486][T14144] device bridge_slave_0 left promiscuous mode [ 889.232492][T19163] anon 110592 [ 889.232492][T19163] file 8351744 [ 889.232492][T19163] kernel 286720 [ 889.232492][T19163] kernel_stack 65536 [ 889.232492][T19163] pagetables 81920 [ 889.232492][T19163] sec_pagetables 0 [ 889.232492][T19163] percpu 64 [ 889.232492][T19163] sock 0 [ 889.232492][T19163] vmalloc 0 [ 889.232492][T19163] shmem 8339456 [ 889.232492][T19163] zswap 0 [ 889.232492][T19163] zswapped 0 [ 889.232492][T19163] file_mapped 241664 [ 889.232492][T19163] file_dirty 0 [ 889.232492][T19163] file_writeback 0 [ 889.232492][T19163] swapcached 0 [ 889.232492][T19163] anon_thp 0 [ 889.232492][T19163] file_thp 0 [ 889.232492][T19163] shmem_thp 0 [ 889.232492][T19163] inactive_anon 110592 [ 889.232492][T19163] active_anon 8339456 [ 889.232492][T19163] inactive_file 8192 [ 889.232492][T19163] active_file 4096 [ 889.232492][T19163] unevictable 0 [ 889.232492][T19163] slab_reclaimable 36888 [ 889.232492][T19163] slab_unreclaimable 73104 [ 889.232492][T19163] slab 109992 [ 889.247720][T14144] bridge0: port 1(bridge_slave_0) entered disabled state 03:17:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:17:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) 03:17:26 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:17:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 889.515245][T19163] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19162,uid=0 [ 889.625902][T14144] device veth1_macvtap left promiscuous mode [ 889.650625][T14144] device veth0_macvtap left promiscuous mode [ 889.662016][T14144] device veth1_vlan left promiscuous mode [ 889.688352][T14144] device veth0_vlan left promiscuous mode 03:17:26 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 889.909530][T19163] Memory cgroup out of memory: Killed process 19163 (syz-executor.5) total-vm:56588kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 889.969611][T18823] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 889.987975][T18823] CPU: 0 PID: 18823 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 889.998469][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 890.008559][T18823] Call Trace: [ 890.011867][T18823] [ 890.014822][T18823] dump_stack_lvl+0xd1/0x138 [ 890.019456][T18823] dump_header+0x10b/0x85f [ 890.023927][T18823] oom_kill_process.cold+0x10/0x15 [ 890.029094][T18823] out_of_memory+0x35c/0x14a0 [ 890.033820][T18823] ? oom_killer_disable+0x280/0x280 [ 890.039070][T18823] ? find_held_lock+0x2d/0x110 [ 890.043873][T18823] mem_cgroup_out_of_memory+0x206/0x270 [ 890.049441][T18823] ? mem_cgroup_margin+0x130/0x130 [ 890.054573][T18823] ? lock_downgrade+0x6e0/0x6e0 [ 890.059446][T18823] try_charge_memcg+0xefb/0x12f0 [ 890.064399][T18823] ? mem_cgroup_handle_over_high+0x520/0x520 [ 890.070386][T18823] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 890.076124][T18823] ? lock_downgrade+0x6e0/0x6e0 [ 890.080988][T18823] ? lock_downgrade+0x6e0/0x6e0 [ 890.085857][T18823] __memcg_kmem_charge_page+0x16e/0x3b0 [ 890.091423][T18823] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 890.097593][T18823] copy_process+0x4e3/0x7520 [ 890.102190][T18823] ? _raw_spin_unlock+0x28/0x40 [ 890.107057][T18823] ? wp_page_reuse+0x197/0x570 [ 890.111838][T18823] ? do_wp_page+0x844/0x3370 [ 890.116450][T18823] ? __cleanup_sighand+0xb0/0xb0 [ 890.121398][T18823] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 890.126808][T18823] ? rwlock_bug.part.0+0x90/0x90 [ 890.131756][T18823] ? lock_chain_count+0x20/0x20 [ 890.136616][T18823] kernel_clone+0xeb/0x990 [ 890.141045][T18823] ? create_io_thread+0xf0/0xf0 [ 890.145910][T18823] ? find_held_lock+0x2d/0x110 [ 890.150704][T18823] __do_sys_clone+0xba/0x100 [ 890.155302][T18823] ? kernel_clone+0x990/0x990 [ 890.160005][T18823] ? syscall_enter_from_user_mode+0x26/0xb0 [ 890.165913][T18823] do_syscall_64+0x39/0xb0 [ 890.170349][T18823] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 890.176252][T18823] RIP: 0033:0x7f9187889dfb [ 890.180675][T18823] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 890.200638][T18823] RSP: 002b:00007fffeb40a3b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 890.209061][T18823] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9187889dfb [ 890.217036][T18823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 890.225009][T18823] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555557006400 [ 890.232983][T18823] R10: 00005555570066d0 R11: 0000000000000246 R12: 0000000000000001 [ 890.240962][T18823] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffeb40a490 [ 890.248964][T18823] 03:17:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 890.309475][T18823] memory: usage 10364kB, limit 0kB, failcnt 113 [ 890.315963][T18823] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 890.358562][T18823] Memory cgroup stats for /syz1: [ 890.358747][T18823] anon 40960 [ 890.358747][T18823] file 10465280 [ 890.358747][T18823] kernel 106496 [ 890.358747][T18823] kernel_stack 0 [ 890.358747][T18823] pagetables 8192 [ 890.358747][T18823] sec_pagetables 0 [ 890.358747][T18823] percpu 0 [ 890.358747][T18823] sock 0 [ 890.358747][T18823] vmalloc 0 [ 890.358747][T18823] shmem 10448896 [ 890.358747][T18823] zswap 0 [ 890.358747][T18823] zswapped 0 [ 890.358747][T18823] file_mapped 233472 [ 890.358747][T18823] file_dirty 4096 [ 890.358747][T18823] file_writeback 0 [ 890.358747][T18823] swapcached 0 [ 890.358747][T18823] anon_thp 0 [ 890.358747][T18823] file_thp 0 [ 890.358747][T18823] shmem_thp 0 [ 890.358747][T18823] inactive_anon 40960 [ 890.358747][T18823] active_anon 10448896 [ 890.358747][T18823] inactive_file 4096 [ 890.358747][T18823] active_file 12288 [ 890.358747][T18823] unevictable 0 [ 890.358747][T18823] slab_reclaimable 33112 [ 890.358747][T18823] slab_unreclaimable 39792 [ 890.358747][T18823] slab 72904 [ 890.606137][T18823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18823,uid=0 [ 890.639556][T18823] Memory cgroup out of memory: Killed process 18823 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 890.730739][T14144] team0 (unregistering): Port device team_slave_1 removed [ 890.752814][T18854] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 890.785844][T18854] CPU: 0 PID: 18854 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 890.796333][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 890.806425][T18854] Call Trace: [ 890.809735][T18854] [ 890.812691][T18854] dump_stack_lvl+0xd1/0x138 [ 890.817325][T18854] dump_header+0x10b/0x85f [ 890.821797][T18854] oom_kill_process.cold+0x10/0x15 [ 890.826966][T18854] out_of_memory+0x35c/0x14a0 [ 890.831709][T18854] ? oom_killer_disable+0x280/0x280 [ 890.836975][T18854] ? find_held_lock+0x2d/0x110 [ 890.841792][T18854] mem_cgroup_out_of_memory+0x206/0x270 [ 890.847387][T18854] ? mem_cgroup_margin+0x130/0x130 [ 890.852519][T18854] ? lock_downgrade+0x6e0/0x6e0 [ 890.857398][T18854] try_charge_memcg+0xefb/0x12f0 [ 890.862354][T18854] ? mem_cgroup_handle_over_high+0x520/0x520 [ 890.868350][T18854] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 890.874098][T18854] ? lock_downgrade+0x6e0/0x6e0 [ 890.878962][T18854] ? lock_downgrade+0x6e0/0x6e0 [ 890.883840][T18854] __memcg_kmem_charge_page+0x16e/0x3b0 [ 890.889408][T18854] __alloc_pages+0x1f3/0x5b0 [ 890.894019][T18854] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 890.900801][T18854] ? find_held_lock+0x2d/0x110 [ 890.905592][T18854] ? lock_downgrade+0x6e0/0x6e0 [ 890.910449][T18854] ? do_raw_spin_lock+0x124/0x2b0 [ 890.915509][T18854] alloc_pages+0x1aa/0x270 [ 890.919952][T18854] __pmd_alloc+0x3f/0x5d0 [ 890.924309][T18854] ? __pud_alloc+0xe4/0x180 [ 890.928898][T18854] copy_page_range+0x2829/0x3b40 [ 890.933919][T18854] ? mas_store+0x206/0x2e0 [ 890.938357][T18854] ? handle_mm_fault+0x850/0x850 [ 890.943337][T18854] ? anon_vma_fork+0xba/0x630 [ 890.948045][T18854] dup_mmap+0xc10/0x10b0 [ 890.952334][T18854] ? replace_mm_exe_file+0x4b0/0x4b0 [ 890.957651][T18854] ? lock_downgrade+0x6e0/0x6e0 [ 890.962529][T18854] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 890.968368][T18854] ? mm_init+0x8e0/0xc10 [ 890.972641][T18854] copy_process+0x440f/0x7520 [ 890.977329][T18854] ? _raw_spin_unlock+0x28/0x40 [ 890.982193][T18854] ? wp_page_reuse+0x197/0x570 [ 890.987006][T18854] ? __cleanup_sighand+0xb0/0xb0 [ 890.991973][T18854] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 890.997396][T18854] ? rwlock_bug.part.0+0x90/0x90 [ 891.002363][T18854] ? lock_chain_count+0x20/0x20 [ 891.007256][T18854] kernel_clone+0xeb/0x990 [ 891.011732][T18854] ? create_io_thread+0xf0/0xf0 [ 891.016619][T18854] ? find_held_lock+0x2d/0x110 [ 891.021442][T18854] __do_sys_clone+0xba/0x100 [ 891.026077][T18854] ? kernel_clone+0x990/0x990 [ 891.030797][T18854] ? syscall_enter_from_user_mode+0x26/0xb0 [ 891.036722][T18854] do_syscall_64+0x39/0xb0 [ 891.041162][T18854] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 891.047067][T18854] RIP: 0033:0x7f3f45089dfb [ 891.051489][T18854] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 891.071120][T18854] RSP: 002b:00007ffd02fe8e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 891.079547][T18854] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3f45089dfb [ 891.087534][T18854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 891.095512][T18854] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555f1c400 [ 891.103487][T18854] R10: 0000555555f1c6d0 R11: 0000000000000246 R12: 0000000000000001 [ 891.111463][T18854] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd02fe8f00 [ 891.119458][T18854] [ 891.148307][T14144] team0 (unregistering): Port device team_slave_0 removed [ 891.196107][T18854] memory: usage 8348kB, limit 0kB, failcnt 107 [ 891.203033][T14144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.207341][T18854] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 891.218533][T18854] Memory cgroup stats for /syz5: [ 891.218693][T18854] anon 36864 [ 891.218693][T18854] file 8351744 [ 891.218693][T18854] kernel 159744 [ 891.218693][T18854] kernel_stack 32768 [ 891.218693][T18854] pagetables 8192 [ 891.218693][T18854] sec_pagetables 0 [ 891.218693][T18854] percpu 128 [ 891.218693][T18854] sock 0 [ 891.218693][T18854] vmalloc 0 [ 891.218693][T18854] shmem 8339456 [ 891.218693][T18854] zswap 0 [ 891.218693][T18854] zswapped 0 [ 891.218693][T18854] file_mapped 221184 [ 891.218693][T18854] file_dirty 0 [ 891.218693][T18854] file_writeback 0 [ 891.218693][T18854] swapcached 0 [ 891.218693][T18854] anon_thp 0 [ 891.218693][T18854] file_thp 0 [ 891.218693][T18854] shmem_thp 0 [ 891.218693][T18854] inactive_anon 36864 [ 891.218693][T18854] active_anon 8339456 [ 891.218693][T18854] inactive_file 12288 [ 891.218693][T18854] active_file 0 [ 891.218693][T18854] unevictable 0 [ 891.218693][T18854] slab_reclaimable 30408 [ 891.218693][T18854] slab_unreclaimable 65648 [ 891.218693][T18854] slab 96056 [ 891.318711][T18854] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18854,uid=0 [ 891.334415][T18854] Memory cgroup out of memory: Killed process 18854 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 891.354180][T14144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.510581][T14144] bond0 (unregistering): Released all slaves [ 891.614185][ T4388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 891.623255][ T4388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 891.631604][ T4388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 891.652423][ T4388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 891.662313][ T4388] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 891.670853][ T4388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 03:17:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:17:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 891.978726][T19176] chnl_net:caif_netlink_parms(): no params data found 03:17:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(r4, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) 03:17:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000000}, 0x0, 0xf3d, 0xff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0xfff, 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/90, 0x5a}], 0x2, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20}, 0x10000) getpid() openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x8000}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r0}, 0x4) write$cgroup_int(r2, &(0x7f00000002c0), 0x12) [ 892.328531][T19176] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.359674][T19176] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.367961][T19176] device bridge_slave_0 entered promiscuous mode [ 892.401713][T19176] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.408960][T19176] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.441634][T19176] device bridge_slave_1 entered promiscuous mode [ 892.586079][T19176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.662361][T19176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.890492][T19176] team0: Port device team_slave_0 added [ 892.898438][T19176] team0: Port device team_slave_1 added [ 893.057516][T19176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.083856][T19176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.131179][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 893.140259][T18820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 893.140447][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 893.156412][T19204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 893.159826][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 893.171059][T19204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 893.172185][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 893.185402][T18820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 893.187094][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 893.201065][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 893.208347][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 893.232531][T19176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.358604][T19176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.379719][T19176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.467386][T19176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.645320][T19176] device hsr_slave_0 entered promiscuous mode [ 893.668046][T19176] device hsr_slave_1 entered promiscuous mode [ 893.739978][ T4388] Bluetooth: hci0: command 0x0409 tx timeout [ 894.269074][T19176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.324882][T19199] chnl_net:caif_netlink_parms(): no params data found [ 894.362879][T19200] chnl_net:caif_netlink_parms(): no params data found [ 894.611229][T19176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.823780][T19176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.860459][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 894.871747][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 894.880874][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 894.888570][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 894.896011][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 895.069301][T19176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.206629][T19199] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.213917][T19199] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.250784][T19199] device bridge_slave_0 entered promiscuous mode [ 895.259801][ T5114] Bluetooth: hci2: command 0x0409 tx timeout [ 895.259831][ T4388] Bluetooth: hci1: command 0x0409 tx timeout [ 895.402685][T19200] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.420210][T19200] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.428730][T19200] device bridge_slave_0 entered promiscuous mode [ 895.484197][T19199] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.521511][T19199] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.550033][T19199] device bridge_slave_1 entered promiscuous mode [ 895.585318][T19200] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.609455][T19200] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.617749][T19200] device bridge_slave_1 entered promiscuous mode [ 895.782499][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 895.793306][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 895.801826][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 895.811570][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 895.820087][ T5114] Bluetooth: hci0: command 0x041b tx timeout [ 895.829890][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 895.839260][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 895.943783][T19200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.992738][T19199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.025262][T19200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.059250][T19199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.174775][T19199] team0: Port device team_slave_0 added [ 896.222405][T19199] team0: Port device team_slave_1 added [ 896.254779][T19200] team0: Port device team_slave_0 added [ 896.296645][T19200] team0: Port device team_slave_1 added [ 896.335541][T19176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 896.406462][T19176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 896.416814][T19199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.428223][T19199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.454694][T19199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.510981][T19176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 896.521656][T19199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.529238][T19199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.562272][T19199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.584420][T19200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.601071][T19200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.646466][T19200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.663438][T19176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 896.699118][T14144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.771964][T19200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.778966][T19200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.879566][T19200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.934018][T14144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.945159][ T5114] Bluetooth: hci3: command 0x0409 tx timeout [ 896.978169][T19232] chnl_net:caif_netlink_parms(): no params data found [ 897.073702][T19199] device hsr_slave_0 entered promiscuous mode [ 897.116446][T19199] device hsr_slave_1 entered promiscuous mode [ 897.138583][T19199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.164632][T19199] Cannot create hsr debugfs directory [ 897.315335][T14144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.339491][ T5114] Bluetooth: hci1: command 0x041b tx timeout [ 897.345559][ T5114] Bluetooth: hci2: command 0x041b tx timeout [ 897.452911][T19200] device hsr_slave_0 entered promiscuous mode [ 897.462353][T19200] device hsr_slave_1 entered promiscuous mode [ 897.469205][T19200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.477738][T19200] Cannot create hsr debugfs directory [ 897.528725][T14144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.899627][ T5114] Bluetooth: hci5: command 0x0409 tx timeout [ 897.909508][ T5114] Bluetooth: hci0: command 0x040f tx timeout [ 897.952473][T19232] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.989550][T19232] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.004327][T19232] device bridge_slave_0 entered promiscuous mode [ 898.036298][T19248] chnl_net:caif_netlink_parms(): no params data found [ 898.118803][T19232] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.128565][T19232] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.149796][T19232] device bridge_slave_1 entered promiscuous mode [ 898.199509][T19176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.304896][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 898.316442][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 898.411108][T14144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.486727][T19176] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.538114][T14144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.585353][T19232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.666905][T14144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.791240][T19199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.844941][T19232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.873237][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 898.890358][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 898.909908][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.917073][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.940082][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 898.956456][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 898.980074][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.987232][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.019543][ T5114] Bluetooth: hci3: command 0x041b tx timeout [ 899.055391][T14144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:17:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000000000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8, 0x0, 0xa0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x1a) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x5}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000180)=""/103, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x6, 0x200, 0x10000}, 0x10, 0x24c9, r1, 0x0, &(0x7f00000015c0)=[r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r4, r3, 0x7, 0xf002100}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000001680)=0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x408fc, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f00000014c0)=0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x2000}) socketpair(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x3, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) socketpair(0x3, 0x5, 0x100, 0x0) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000001440)={0x3, 0x80, 0x3, 0x0, 0x40, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x10, 0x100000000, 0x7f, 0x0, 0x1, 0x8, 0x257, 0x0, 0x2, 0x0, 0x31}, r2, 0x2, 0xffffffffffffffff, 0x4) getpid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0xfffffcf3) [ 899.133741][T19199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.170790][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 899.238919][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 899.249122][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 899.258546][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 899.292849][T19232] team0: Port device team_slave_0 added [ 899.323575][T19199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.401492][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 899.409978][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 899.419131][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.420835][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 899.433721][ T4388] Bluetooth: hci1: command 0x040f tx timeout [ 899.444544][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.453290][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.462148][T18740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.472623][T19248] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.500485][T19248] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.509777][T19248] device bridge_slave_0 entered promiscuous mode [ 899.542973][T19232] team0: Port device team_slave_1 added [ 899.551492][T19176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 899.610045][T19199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.687514][T19248] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.709962][T19248] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.729516][T19248] device bridge_slave_1 entered promiscuous mode [ 899.980036][ T5114] Bluetooth: hci0: command 0x0419 tx timeout [ 899.980198][ T4388] Bluetooth: hci5: command 0x041b tx timeout [ 900.101150][T19232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.108150][T19232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.239435][T19232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.271845][T19232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.278835][T19232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.349499][T19232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.401290][T19248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.440261][T14144] ------------[ cut here ]------------ [ 900.445753][T14144] DEBUG_LOCKS_WARN_ON(1) [ 900.445804][T14144] WARNING: CPU: 1 PID: 14144 at kernel/locking/lockdep.c:231 __lock_acquire+0xecf/0x56d0 [ 900.459816][T14144] Modules linked in: [ 900.463692][T14144] CPU: 1 PID: 14144 Comm: kworker/u4:4 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 900.473910][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 900.483955][T14144] Workqueue: netns cleanup_net [ 900.488718][T14144] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 900.494251][T14144] Code: 28 14 73 8e e8 02 bb 6b 00 8b 05 94 78 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 51 d6 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 900.513844][T14144] RSP: 0018:ffffc90003def518 EFLAGS: 00010082 [ 900.519944][T14144] RAX: 0000000000000000 RBX: 00000000000008fc RCX: 0000000000000000 [ 900.527903][T14144] RDX: ffff88804180d7c0 RSI: ffffffff8166724c RDI: fffff520007bde95 [ 900.535865][T14144] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 900.543823][T14144] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 900.551793][T14144] R13: ffff88804180d7c0 R14: ffff88804180e1f8 R15: dffffc0000000000 [ 900.559753][T14144] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 900.568679][T14144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.575255][T14144] CR2: 0000557dd1a5f950 CR3: 000000004192b000 CR4: 00000000003506e0 [ 900.583217][T14144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 900.591175][T14144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 900.599138][T14144] Call Trace: [ 900.602408][T14144] [ 900.605333][T14144] ? find_held_lock+0x21/0x110 [ 900.610091][T14144] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 900.617201][T14144] ? bpf_trace_run4+0x194/0x410 [ 900.622123][T14144] ? lock_downgrade+0x6e0/0x6e0 [ 900.626975][T14144] lock_acquire+0x1e3/0x630 [ 900.631469][T14144] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 900.637284][T14144] ? lock_release+0x810/0x810 [ 900.641949][T14144] ? bpf_trace_run3+0x400/0x400 [ 900.646797][T14144] ? rcu_read_lock_sched_held+0x3e/0x70 [ 900.652338][T14144] __perf_event_task_sched_in+0xe2/0x6c0 [ 900.657954][T14144] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 900.663745][T14144] ? ctx_sched_in+0x850/0x850 [ 900.668406][T14144] ? __schedule+0xb02/0x5450 [ 900.672988][T14144] ? lock_downgrade+0x6e0/0x6e0 [ 900.677842][T14144] finish_task_switch.isra.0+0x5e5/0xc80 [ 900.683470][T14144] ? __switch_to+0x5d0/0x10a0 [ 900.688133][T14144] ? __switch_to_asm+0x3e/0x60 [ 900.692903][T14144] __schedule+0xb92/0x5450 [ 900.697324][T14144] ? lockdep_hardirqs_on+0x7d/0x100 [ 900.702521][T14144] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.708683][T14144] ? lock_acquire+0x227/0x630 [ 900.713350][T14144] ? io_schedule_timeout+0x150/0x150 [ 900.718628][T14144] ? lock_release+0x810/0x810 [ 900.723290][T14144] schedule+0xde/0x1b0 [ 900.727348][T14144] schedule_preempt_disabled+0x13/0x20 [ 900.732797][T14144] __mutex_lock+0x10d6/0x1360 [ 900.737467][T14144] ? find_held_lock+0x2d/0x110 [ 900.742222][T14144] ? devlink_pernet_pre_exit+0x10a/0x220 [ 900.747918][T14144] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 900.753462][T14144] ? lock_downgrade+0x6e0/0x6e0 [ 900.758316][T14144] ? devlink_try_get+0x15d/0x1e0 [ 900.763257][T14144] devlink_pernet_pre_exit+0x10a/0x220 [ 900.768710][T14144] ? devlinks_xa_find_get+0x220/0x220 [ 900.774078][T14144] ? cttimeout_net_pre_exit+0x10d/0x500 [ 900.779705][T14144] ? devlinks_xa_find_get+0x220/0x220 [ 900.785069][T14144] cleanup_net+0x455/0xb10 [ 900.789475][T14144] ? unregister_pernet_device+0x80/0x80 [ 900.795007][T14144] process_one_work+0x9bf/0x1710 [ 900.799956][T14144] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 900.805404][T14144] ? rwlock_bug.part.0+0x90/0x90 [ 900.810326][T14144] ? _raw_spin_lock_irq+0x45/0x50 [ 900.815342][T14144] worker_thread+0x669/0x1090 [ 900.820010][T14144] ? __kthread_parkme+0x163/0x220 [ 900.825019][T14144] ? process_one_work+0x1710/0x1710 [ 900.830203][T14144] kthread+0x2e8/0x3a0 [ 900.834255][T14144] ? kthread_complete_and_exit+0x40/0x40 [ 900.839872][T14144] ret_from_fork+0x1f/0x30 [ 900.844281][T14144] [ 900.847284][T14144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 900.854541][T14144] CPU: 1 PID: 14144 Comm: kworker/u4:4 Not tainted 6.2.0-rc2-syzkaller-00302-g6d0c4b11e743 #0 [ 900.864768][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 900.874817][T14144] Workqueue: netns cleanup_net [ 900.879574][T14144] Call Trace: [ 900.882841][T14144] [ 900.885759][T14144] dump_stack_lvl+0xd1/0x138 [ 900.890340][T14144] panic+0x2cc/0x626 [ 900.894251][T14144] ? panic_print_sys_info.part.0+0x110/0x110 [ 900.900225][T14144] ? __lock_acquire+0xecf/0x56d0 [ 900.905151][T14144] check_panic_on_warn.cold+0x19/0x35 [ 900.910513][T14144] __warn+0xf2/0x1a0 [ 900.914392][T14144] ? __lock_acquire+0xecf/0x56d0 [ 900.919310][T14144] report_bug+0x1c0/0x210 [ 900.923627][T14144] handle_bug+0x3c/0x70 [ 900.927775][T14144] exc_invalid_op+0x18/0x50 [ 900.932268][T14144] asm_exc_invalid_op+0x1a/0x20 [ 900.937103][T14144] RIP: 0010:__lock_acquire+0xecf/0x56d0 [ 900.942634][T14144] Code: 28 14 73 8e e8 02 bb 6b 00 8b 05 94 78 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 51 d6 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8 [ 900.962226][T14144] RSP: 0018:ffffc90003def518 EFLAGS: 00010082 [ 900.968273][T14144] RAX: 0000000000000000 RBX: 00000000000008fc RCX: 0000000000000000 [ 900.976230][T14144] RDX: ffff88804180d7c0 RSI: ffffffff8166724c RDI: fffff520007bde95 [ 900.984185][T14144] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 900.992313][T14144] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003 [ 901.000268][T14144] R13: ffff88804180d7c0 R14: ffff88804180e1f8 R15: dffffc0000000000 [ 901.008229][T14144] ? vprintk+0x8c/0xa0 [ 901.012325][T14144] ? __lock_acquire+0xecf/0x56d0 [ 901.017277][T14144] ? find_held_lock+0x21/0x110 [ 901.022067][T14144] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 901.028056][T14144] ? bpf_trace_run4+0x194/0x410 [ 901.032910][T14144] ? lock_downgrade+0x6e0/0x6e0 [ 901.037756][T14144] lock_acquire+0x1e3/0x630 [ 901.042248][T14144] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 901.048044][T14144] ? lock_release+0x810/0x810 [ 901.052712][T14144] ? bpf_trace_run3+0x400/0x400 [ 901.057552][T14144] ? rcu_read_lock_sched_held+0x3e/0x70 [ 901.063094][T14144] __perf_event_task_sched_in+0xe2/0x6c0 [ 901.068711][T14144] ? __perf_event_task_sched_in+0xb0/0x6c0 [ 901.074503][T14144] ? ctx_sched_in+0x850/0x850 [ 901.079171][T14144] ? __schedule+0xb02/0x5450 [ 901.083757][T14144] ? lock_downgrade+0x6e0/0x6e0 [ 901.088596][T14144] finish_task_switch.isra.0+0x5e5/0xc80 [ 901.094221][T14144] ? __switch_to+0x5d0/0x10a0 [ 901.098882][T14144] ? __switch_to_asm+0x3e/0x60 [ 901.103638][T14144] __schedule+0xb92/0x5450 [ 901.108083][T14144] ? lockdep_hardirqs_on+0x7d/0x100 [ 901.113353][T14144] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 901.119499][T14144] ? lock_acquire+0x227/0x630 [ 901.124161][T14144] ? io_schedule_timeout+0x150/0x150 [ 901.129443][T14144] ? lock_release+0x810/0x810 [ 901.134114][T14144] schedule+0xde/0x1b0 [ 901.138177][T14144] schedule_preempt_disabled+0x13/0x20 [ 901.143630][T14144] __mutex_lock+0x10d6/0x1360 [ 901.148293][T14144] ? find_held_lock+0x2d/0x110 [ 901.153053][T14144] ? devlink_pernet_pre_exit+0x10a/0x220 [ 901.158677][T14144] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 901.164206][T14144] ? lock_downgrade+0x6e0/0x6e0 [ 901.169073][T14144] ? devlink_try_get+0x15d/0x1e0 [ 901.174007][T14144] devlink_pernet_pre_exit+0x10a/0x220 [ 901.179453][T14144] ? devlinks_xa_find_get+0x220/0x220 [ 901.184815][T14144] ? cttimeout_net_pre_exit+0x10d/0x500 [ 901.190349][T14144] ? devlinks_xa_find_get+0x220/0x220 [ 901.195709][T14144] cleanup_net+0x455/0xb10 [ 901.200116][T14144] ? unregister_pernet_device+0x80/0x80 [ 901.205659][T14144] process_one_work+0x9bf/0x1710 [ 901.210600][T14144] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 901.215964][T14144] ? rwlock_bug.part.0+0x90/0x90 [ 901.220889][T14144] ? _raw_spin_lock_irq+0x45/0x50 [ 901.225906][T14144] worker_thread+0x669/0x1090 [ 901.230572][T14144] ? __kthread_parkme+0x163/0x220 [ 901.235578][T14144] ? process_one_work+0x1710/0x1710 [ 901.240762][T14144] kthread+0x2e8/0x3a0 [ 901.244813][T14144] ? kthread_complete_and_exit+0x40/0x40 [ 901.250429][T14144] ret_from_fork+0x1f/0x30 [ 901.254843][T14144] [ 902.321593][T14144] Shutting down cpus with NMI [ 902.326495][T14144] Kernel Offset: disabled [ 902.330813][T14144] Rebooting in 86400 seconds..