5.750874][T22207] swapcached 0
[ 2415.750874][T22207] anon_thp 0
[ 2415.750874][T22207] file_thp 0
[ 2415.750874][T22207] shmem_thp 0
[ 2415.750874][T22207] inactive_anon 122880
[ 2415.750874][T22207] active_anon 10452992
[ 2415.750874][T22207] inactive_file 0
[ 2415.750874][T22207] active_file 0
[ 2415.750874][T22207] unevictable 0
[ 2415.750874][T22207] slab_reclaimable 55752
[ 2415.750874][T22207] slab_unreclaimable 109152
[ 2415.750874][T22207] slab 164904
[ 2415.870023][T22171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2415.884374][T22171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2415.920810][T22171] team0: Port device team_slave_0 added
[ 2415.939630][T22171] team0: Port device team_slave_1 added
[ 2416.011197][T22171] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2416.018293][T22171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2416.080781][T22207] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22202,uid=0
[ 2416.107690][T22207] Memory cgroup out of memory: Killed process 22202 (syz-executor.2) total-vm:56720kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2416.118606][T22171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2416.176647][T22171] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2416.197623][T22171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2416.225170][T22171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2416.299594][T22171] device hsr_slave_0 entered promiscuous mode
[ 2416.309172][T22171] device hsr_slave_1 entered promiscuous mode
[ 2416.337184][T22171] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2416.358992][T22171] Cannot create hsr debugfs directory
[ 2416.602386][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2416.635801][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2416.731377][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2416.740688][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2416.761826][T22069] device veth0_vlan entered promiscuous mode
[ 2416.769104][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2416.777054][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2416.865162][T22069] device veth1_vlan entered promiscuous mode
[ 2416.889934][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2417.055308][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2417.069942][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2417.307481][T22069] device veth0_macvtap entered promiscuous mode
[ 2417.330665][T22069] device veth1_macvtap entered promiscuous mode
[ 2417.371725][T22069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.398975][ T5119] Bluetooth: hci0: command 0x041b tx timeout
[ 2417.418655][T22069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.468699][T22069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.518643][T22069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.559157][T22069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.583787][T22069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.618571][T22069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2417.639157][T22069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.669386][T22069] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2417.681078][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2417.700693][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2417.719442][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2417.728289][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2417.761322][T22069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.788645][T22069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.808599][T22069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.828579][T22069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.865004][T22069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.898781][T22069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.918591][T22069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2417.948632][T22069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2417.980287][T22069] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2417.988013][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2417.997681][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2418.031109][T22069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2418.042779][T22069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2418.055742][T22069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2418.066137][T22069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2418.260061][T15966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2418.278694][T15966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2418.290686][T15444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2418.330602][T15444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2418.360514][T15447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2418.418234][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2418.437455][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2418.457478][T22171] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2418.471392][T22171] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2418.543547][T15447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2418.607140][T22171] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2418.705734][T15447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2418.780683][T22171] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2418.834155][T22241] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2418.850539][T22241] CPU: 0 PID: 22241 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2418.861038][T22241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2418.871138][T22241] Call Trace:
[ 2418.874451][T22241]  <TASK>
[ 2418.877415][T22241]  dump_stack_lvl+0xd1/0x138
[ 2418.882328][T22241]  dump_header+0x10b/0x85f
[ 2418.886815][T22241]  oom_kill_process.cold+0x10/0x15
[ 2418.892002][T22241]  out_of_memory+0x35c/0x14a0
[ 2418.896744][T22241]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2418.902013][T22241]  ? oom_killer_disable+0x280/0x280
[ 2418.907371][T22241]  ? mem_cgroup_out_of_memory+0x199/0x270
[ 2418.913163][T22241]  mem_cgroup_out_of_memory+0x206/0x270
[ 2418.918774][T22241]  ? mem_cgroup_margin+0x130/0x130
[ 2418.923955][T22241]  memory_max_write+0x2f9/0x3c0
[ 2418.928845][T22241]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2418.934952][T22241]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2418.941072][T22241]  cgroup_file_write+0x1e2/0x770
[ 2418.946051][T22241]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2418.952248][T22241]  ? kill_css+0x370/0x370
[ 2418.956873][T22241]  ? __virt_addr_valid+0x61/0x2e0
[ 2418.962140][T22241]  ? kill_css+0x370/0x370
[ 2418.966525][T22241]  kernfs_fop_write_iter+0x3f1/0x600
[ 2418.971865][T22241]  vfs_write+0x9ed/0xdd0
[ 2418.976143][T22241]  ? kernel_write+0x630/0x630
[ 2418.980847][T22241]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2418.986063][T22241]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2418.992248][T22241]  ? ksys_write+0xdc/0x250
[ 2418.996699][T22241]  ksys_write+0x12b/0x250
[ 2419.001048][T22241]  ? __ia32_sys_read+0xb0/0xb0
[ 2419.005828][T22241]  ? __x64_sys_write+0x11/0xb0
[ 2419.010615][T22241]  ? __sanitizer_cov_trace_pc+0x50/0x70
[ 2419.016193][T22241]  do_syscall_64+0x39/0xb0
[ 2419.020634][T22241]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2419.026896][T22241] RIP: 0033:0x7fdf4f88c0c9
[ 2419.031324][T22241] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2419.051384][T22241] RSP: 002b:00007fdf505b4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2419.059813][T22241] RAX: ffffffffffffffda RBX: 00007fdf4f9abf80 RCX: 00007fdf4f88c0c9
[ 2419.067903][T22241] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005
[ 2419.076001][T22241] RBP: 00007fdf4f8e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2419.084000][T22241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2419.092087][T22241] R13: 00007ffe2f6a4a0f R14: 00007fdf505b4300 R15: 0000000000022000
[ 2419.100128][T22241]  </TASK>
[ 2419.131759][T15447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2419.205814][T22241] memory: usage 10612kB, limit 0kB, failcnt 3429
[ 2419.282403][T22241] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2419.319834][T22241] Memory cgroup stats for /syz4:
[ 2419.323916][T22241] anon 114688
[ 2419.323916][T22241] file 10444800
[ 2419.323916][T22241] kernel 286720
[ 2419.323916][T22241] kernel_stack 65536
[ 2419.323916][T22241] pagetables 77824
[ 2419.323916][T22241] sec_pagetables 0
[ 2419.323916][T22241] percpu 64
[ 2419.323916][T22241] sock 0
[ 2419.323916][T22241] vmalloc 0
[ 2419.323916][T22241] shmem 10444800
[ 2419.323916][T22241] zswap 0
[ 2419.323916][T22241] zswapped 0
[ 2419.323916][T22241] file_mapped 245760
[ 2419.323916][T22241] file_dirty 0
[ 2419.323916][T22241] file_writeback 0
[ 2419.323916][T22241] swapcached 0
[ 2419.323916][T22241] anon_thp 0
[ 2419.323916][T22241] file_thp 0
[ 2419.323916][T22241] shmem_thp 0
[ 2419.323916][T22241] inactive_anon 114688
[ 2419.323916][T22241] active_anon 10444800
[ 2419.323916][T22241] inactive_file 0
[ 2419.323916][T22241] active_file 0
[ 2419.323916][T22241] unevictable 0
[ 2419.323916][T22241] slab_reclaimable 44000
[ 2419.323916][T22241] slab_unreclaimable 74400
[ 2419.323916][T22241] slab 118400
[ 2419.486451][ T5119] Bluetooth: hci0: command 0x040f tx timeout
[ 2419.530393][T22171] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2419.564144][T22241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22239,uid=0
18:58:51 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

18:58:51 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:58:51 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, &(0x7f00000001c0))

18:58:51 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0xb30, 0x12)

18:58:51 executing program 2:
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

[ 2419.580739][T22241] Memory cgroup out of memory: Killed process 22239 (syz-executor.4) total-vm:54540kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2419.597812][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2419.630708][T22047] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0
[ 2419.639435][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2419.656227][T22047] CPU: 1 PID: 22047 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2419.666721][T22047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2419.676835][T22047] Call Trace:
[ 2419.680160][T22047]  <TASK>
[ 2419.683113][T22047]  dump_stack_lvl+0xd1/0x138
[ 2419.687762][T22047]  dump_header+0x10b/0x85f
[ 2419.692215][T22047]  oom_kill_process.cold+0x10/0x15
[ 2419.697377][T22047]  out_of_memory+0x35c/0x14a0
[ 2419.702095][T22047]  ? find_held_lock+0x2d/0x110
[ 2419.706980][T22047]  ? oom_killer_disable+0x280/0x280
[ 2419.712297][T22047]  ? find_held_lock+0x2d/0x110
[ 2419.717113][T22047]  mem_cgroup_out_of_memory+0x206/0x270
[ 2419.722701][T22047]  ? mem_cgroup_margin+0x130/0x130
[ 2419.727835][T22047]  ? lock_downgrade+0x6e0/0x6e0
[ 2419.732765][T22047]  try_charge_memcg+0xefb/0x12f0
[ 2419.737743][T22047]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2419.743748][T22047]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2419.749519][T22047]  ? lock_downgrade+0x6e0/0x6e0
[ 2419.754393][T22047]  ? lock_downgrade+0x6e0/0x6e0
[ 2419.759271][T22047]  ? rcu_read_unlock+0x9/0x60
[ 2419.763989][T22047]  obj_cgroup_charge+0x2af/0x5e0
[ 2419.768949][T22047]  ? copy_process+0x3aa/0x7520
[ 2419.773758][T22047]  kmem_cache_alloc_node+0xb7/0x460
[ 2419.778985][T22047]  copy_process+0x3aa/0x7520
[ 2419.783606][T22047]  ? _raw_spin_unlock+0x28/0x40
[ 2419.788477][T22047]  ? wp_page_reuse+0x197/0x570
[ 2419.793270][T22047]  ? do_wp_page+0x844/0x3370
[ 2419.797923][T22047]  ? __cleanup_sighand+0xb0/0xb0
[ 2419.802892][T22047]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2419.808394][T22047]  ? rwlock_bug.part.0+0x90/0x90
[ 2419.813355][T22047]  ? lock_chain_count+0x20/0x20
[ 2419.818230][T22047]  kernel_clone+0xeb/0x990
[ 2419.822765][T22047]  ? create_io_thread+0xf0/0xf0
[ 2419.827653][T22047]  ? find_held_lock+0x2d/0x110
[ 2419.832890][T22047]  __do_sys_clone+0xba/0x100
[ 2419.837500][T22047]  ? kernel_clone+0x990/0x990
[ 2419.842216][T22047]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2419.847818][T22047]  do_syscall_64+0x39/0xb0
[ 2419.852261][T22047]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2419.858173][T22047] RIP: 0033:0x7f8cf5689dfb
[ 2419.862628][T22047] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2419.882344][T22047] RSP: 002b:00007fff2e3d7070 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2419.890795][T22047] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8cf5689dfb
[ 2419.898790][T22047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2419.906782][T22047] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555fd1400
[ 2419.914793][T22047] R10: 0000555555fd16d0 R11: 0000000000000246 R12: 0000000000000001
[ 2419.922802][T22047] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff2e3d7150
[ 2419.930822][T22047]  </TASK>
18:58:51 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, &(0x7f00000001c0))

[ 2420.018774][T22047] memory: usage 10344kB, limit 0kB, failcnt 868
[ 2420.025106][T22047] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2420.057751][T22047] Memory cgroup stats for /syz2:
[ 2420.057971][T22047] anon 45056
18:58:51 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2420.057971][T22047] file 10452992
[ 2420.057971][T22047] kernel 94208
[ 2420.057971][T22047] kernel_stack 0
[ 2420.057971][T22047] pagetables 8192
[ 2420.057971][T22047] sec_pagetables 0
[ 2420.057971][T22047] percpu 0
[ 2420.057971][T22047] sock 0
[ 2420.057971][T22047] vmalloc 0
[ 2420.057971][T22047] shmem 10452992
[ 2420.057971][T22047] zswap 0
[ 2420.057971][T22047] zswapped 0
[ 2420.057971][T22047] file_mapped 241664
[ 2420.057971][T22047] file_dirty 0
[ 2420.057971][T22047] file_writeback 0
[ 2420.057971][T22047] swapcached 0
[ 2420.057971][T22047] anon_thp 0
[ 2420.057971][T22047] file_thp 0
[ 2420.057971][T22047] shmem_thp 0
[ 2420.057971][T22047] inactive_anon 45056
[ 2420.057971][T22047] active_anon 10452992
[ 2420.057971][T22047] inactive_file 0
[ 2420.057971][T22047] active_file 0
[ 2420.057971][T22047] unevictable 0
[ 2420.057971][T22047] slab_reclaimable 42448
[ 2420.057971][T22047] slab_unreclaimable 32296
[ 2420.057971][T22047] slab 74744
[ 2420.177340][T22171] 8021q: adding VLAN 0 to HW filter on device team0
[ 2420.204247][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2420.213945][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2420.254204][T26501] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2420.261416][T26501] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2420.308166][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2420.317376][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
18:58:52 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2420.361169][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2420.389679][T14390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2420.397037][T14390] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2420.428965][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2420.449948][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
18:58:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x2, 0x9, &(0x7f00000001c0))

[ 2420.482875][T22047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22047,uid=0
[ 2420.520840][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2420.544785][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2420.563525][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2420.572437][T22047] Memory cgroup out of memory: Killed process 22047 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2420.601024][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2420.621328][T22069] syz-executor.4 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0
[ 2420.658730][T22069] CPU: 1 PID: 22069 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2420.669242][T22069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2420.679339][T22069] Call Trace:
[ 2420.682646][T22069]  <TASK>
[ 2420.685644][T22069]  dump_stack_lvl+0xd1/0x138
[ 2420.690289][T22069]  dump_header+0x10b/0x85f
[ 2420.694889][T22069]  oom_kill_process.cold+0x10/0x15
[ 2420.700066][T22069]  out_of_memory+0x35c/0x14a0
[ 2420.704807][T22069]  ? oom_killer_disable+0x280/0x280
[ 2420.710156][T22069]  ? find_held_lock+0x2d/0x110
[ 2420.714980][T22069]  mem_cgroup_out_of_memory+0x206/0x270
[ 2420.720586][T22069]  ? mem_cgroup_margin+0x130/0x130
[ 2420.725775][T22069]  ? lock_downgrade+0x6e0/0x6e0
[ 2420.731088][T22069]  try_charge_memcg+0xefb/0x12f0
[ 2420.736084][T22069]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2420.753204][T22069]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2420.758991][T22069]  ? lock_downgrade+0x6e0/0x6e0
[ 2420.763902][T22069]  ? lock_downgrade+0x6e0/0x6e0
[ 2420.768825][T22069]  obj_cgroup_charge+0x2af/0x5e0
[ 2420.773816][T22069]  __kmem_cache_alloc_node+0xb2/0x430
[ 2420.779228][T22069]  ? kvmalloc_node+0xa2/0x1a0
[ 2420.783952][T22069]  ? kvmalloc_node+0xa2/0x1a0
[ 2420.788659][T22069]  __kmalloc_node+0x4d/0xd0
[ 2420.793273][T22069]  kvmalloc_node+0xa2/0x1a0
[ 2420.797800][T22069]  xt_alloc_table_info+0x40/0xa0
[ 2420.802768][T22069]  do_ip6t_set_ctl+0x514/0xb30
[ 2420.807562][T22069]  ? trace_contention_end+0x153/0x1e0
[ 2420.812965][T22069]  ? __mutex_lock+0x231/0x1360
[ 2420.817746][T22069]  ? compat_do_replace.constprop.0+0x410/0x410
[ 2420.823930][T22069]  ? wait_for_completion_io_timeout+0x20/0x20
[ 2420.830009][T22069]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2420.835416][T22069]  ? nf_sockopt_find.constprop.0+0x22d/0x2a0
[ 2420.841414][T22069]  nf_setsockopt+0x87/0xe0
[ 2420.845847][T22069]  ipv6_setsockopt+0x12b/0x190
[ 2420.850663][T22069]  tcp_setsockopt+0x9f/0x100
[ 2420.855319][T22069]  ? sock_common_recvmsg+0x190/0x190
[ 2420.860620][T22069]  __sys_setsockopt+0x2c6/0x5b0
[ 2420.865510][T22069]  ? __ia32_sys_recv+0x100/0x100
[ 2420.870465][T22069]  ? up_write+0x520/0x520
[ 2420.874815][T22069]  ? __traceiter_irq_enable+0xa0/0xa0
[ 2420.880222][T22069]  __x64_sys_setsockopt+0xbe/0x160
[ 2420.885356][T22069]  do_syscall_64+0x39/0xb0
[ 2420.889794][T22069]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2420.895704][T22069] RIP: 0033:0x7fdf4f88d71a
[ 2420.900127][T22069] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2420.919768][T22069] RSP: 002b:00007ffe2f6a4578 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2420.928195][T22069] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007fdf4f88d71a
[ 2420.936213][T22069] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[ 2420.944316][T22069] RBP: 00007ffe2f6a45a0 R08: 00000000000003b8 R09: ffffffffff000000
18:58:52 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2420.952392][T22069] R10: 00007fdf4f983bc0 R11: 0000000000000206 R12: 00007ffe2f6a4600
[ 2420.960492][T22069] R13: 0000000000000003 R14: 00007ffe2f6a459c R15: 00007fdf4f983b60
[ 2420.968677][T22069]  </TASK>
[ 2421.040433][T22171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2421.082304][T22171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2421.113983][T22069] memory: usage 10348kB, limit 0kB, failcnt 3457
[ 2421.120681][T22069] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2421.135074][T22069] Memory cgroup stats for /syz4:
[ 2421.135270][T22069] anon 40960
[ 2421.135270][T22069] file 10444800
[ 2421.135270][T22069] kernel 110592
[ 2421.135270][T22069] kernel_stack 0
[ 2421.135270][T22069] pagetables 8192
[ 2421.135270][T22069] sec_pagetables 0
[ 2421.135270][T22069] percpu 64
[ 2421.135270][T22069] sock 0
[ 2421.135270][T22069] vmalloc 0
[ 2421.135270][T22069] shmem 10444800
[ 2421.135270][T22069] zswap 0
[ 2421.135270][T22069] zswapped 0
[ 2421.135270][T22069] file_mapped 225280
[ 2421.135270][T22069] file_dirty 0
[ 2421.135270][T22069] file_writeback 0
[ 2421.135270][T22069] swapcached 0
[ 2421.135270][T22069] anon_thp 0
[ 2421.135270][T22069] file_thp 0
[ 2421.135270][T22069] shmem_thp 0
[ 2421.135270][T22069] inactive_anon 40960
[ 2421.135270][T22069] active_anon 10444800
[ 2421.135270][T22069] inactive_file 0
[ 2421.135270][T22069] active_file 0
[ 2421.135270][T22069] unevictable 0
[ 2421.135270][T22069] slab_reclaimable 39208
[ 2421.135270][T22069] slab_unreclaimable 48000
[ 2421.135270][T22069] slab 87208
[ 2421.241201][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2421.250599][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2421.266536][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2421.277545][T22069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22069,uid=0
[ 2421.321614][T22069] Memory cgroup out of memory: Killed process 22069 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2421.558791][ T5119] Bluetooth: hci0: command 0x0419 tx timeout
[ 2421.849522][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2421.857615][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2421.896403][T22171] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2421.924069][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2421.940663][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2422.001216][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2422.012231][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2422.034400][T22171] device veth0_vlan entered promiscuous mode
[ 2422.042441][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2422.051871][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2422.065746][T22171] device veth1_vlan entered promiscuous mode
[ 2422.117673][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2422.131147][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2422.140749][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2422.151341][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2422.182952][T22171] device veth0_macvtap entered promiscuous mode
[ 2422.205477][T15447] device hsr_slave_0 left promiscuous mode
[ 2422.212148][T15447] device hsr_slave_1 left promiscuous mode
[ 2422.220632][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2422.228107][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2422.246682][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2422.254462][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2422.273377][T15447] device bridge_slave_1 left promiscuous mode
[ 2422.290155][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2422.306472][T15447] device bridge_slave_0 left promiscuous mode
[ 2422.316393][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2422.342574][T15447] device veth1_macvtap left promiscuous mode
[ 2422.354063][T15447] device veth0_macvtap left promiscuous mode
[ 2422.363952][T15447] device veth1_vlan left promiscuous mode
[ 2422.382153][T15447] device veth0_vlan left promiscuous mode
[ 2422.614407][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2422.624391][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2422.633219][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2422.643432][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2422.651846][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2422.661678][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2422.764867][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2422.781932][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2422.800104][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2422.816861][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2422.887485][T15447] bond0 (unregistering): Released all slaves
[ 2422.959357][T22171] device veth1_macvtap entered promiscuous mode
[ 2422.979571][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2422.987656][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2423.061802][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2423.073810][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.086292][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2423.098176][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.108475][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2423.120065][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.130258][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2423.141115][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.152614][T22171] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2423.172113][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2423.181157][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2423.201760][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2423.212460][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.222697][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2423.234989][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.245999][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2423.256863][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.269046][T22171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2423.279632][T22171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2423.291319][T22171] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2423.312789][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2423.323845][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2423.345353][T22171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2423.355838][T22171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2423.365251][T22171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2423.374703][T22171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2423.555276][T15966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2423.589398][T15966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2423.613583][T15444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2423.615163][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2423.648599][T15444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2423.660770][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2423.686467][T22302] chnl_net:caif_netlink_parms(): no params data found
[ 2423.970957][T22302] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2423.979007][T22302] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2423.987354][T22302] device bridge_slave_0 entered promiscuous mode
[ 2423.997907][T22302] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2424.024338][T22302] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2424.049593][T22302] device bridge_slave_1 entered promiscuous mode
[ 2424.191903][T22302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2424.254243][T22302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2424.347931][T22315] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2424.424370][T22302] team0: Port device team_slave_0 added
[ 2424.455475][T22315] CPU: 1 PID: 22315 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2424.465973][T22315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2424.476070][T22315] Call Trace:
[ 2424.479378][T22315]  <TASK>
[ 2424.482348][T22315]  dump_stack_lvl+0xd1/0x138
[ 2424.486993][T22315]  dump_header+0x10b/0x85f
[ 2424.491473][T22315]  oom_kill_process.cold+0x10/0x15
[ 2424.496652][T22315]  out_of_memory+0x35c/0x14a0
[ 2424.501466][T22315]  ? find_held_lock+0x2d/0x110
[ 2424.506284][T22315]  ? oom_killer_disable+0x280/0x280
[ 2424.511666][T22315]  ? find_held_lock+0x2d/0x110
[ 2424.516489][T22315]  mem_cgroup_out_of_memory+0x206/0x270
[ 2424.522095][T22315]  ? mem_cgroup_margin+0x130/0x130
[ 2424.527346][T22315]  ? lock_downgrade+0x6e0/0x6e0
[ 2424.532259][T22315]  try_charge_memcg+0xefb/0x12f0
[ 2424.537333][T22315]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2424.543559][T22315]  ? lock_downgrade+0x6e0/0x6e0
[ 2424.548505][T22315]  charge_memcg+0x90/0x3b0
[ 2424.552975][T22315]  __mem_cgroup_charge+0x2b/0x90
[ 2424.557956][T22315]  ? folio_flags.constprop.0+0x53/0x150
[ 2424.563556][T22315]  __filemap_add_folio+0x615/0xf80
[ 2424.568727][T22315]  ? filemap_write_and_wait_range+0x120/0x120
[ 2424.574854][T22315]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2424.580268][T22315]  ? alloc_pages+0x1b2/0x270
[ 2424.584912][T22315]  ? folio_alloc+0x43/0x70
[ 2424.589368][T22315]  filemap_add_folio+0xaf/0x1e0
[ 2424.594308][T22315]  ? __filemap_add_folio+0xf80/0xf80
[ 2424.599807][T22315]  ? xas_load+0x6a/0x140
[ 2424.604129][T22315]  __filemap_get_folio+0x389/0xd80
[ 2424.609324][T22315]  ? filemap_add_folio+0x1e0/0x1e0
[ 2424.614515][T22315]  ? asm_exc_page_fault+0x26/0x30
[ 2424.619621][T22315]  pagecache_get_page+0x2e/0x280
[ 2424.624624][T22315]  ext4_da_write_begin+0x421/0xb50
[ 2424.629900][T22315]  ? ext4_write_begin+0x1140/0x1140
[ 2424.635162][T22315]  generic_perform_write+0x256/0x570
[ 2424.640517][T22315]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2424.645931][T22315]  ? discard_new_inode+0x1a0/0x1a0
[ 2424.651085][T22315]  ? down_write_killable+0x250/0x250
[ 2424.656487][T22315]  ext4_buffered_write_iter+0x15b/0x460
[ 2424.662101][T22315]  ext4_file_write_iter+0x8bf/0x1710
[ 2424.667447][T22315]  ? lock_release+0x810/0x810
[ 2424.672170][T22315]  ? ext4_file_mmap+0x440/0x440
[ 2424.677106][T22315]  vfs_write+0x9ed/0xdd0
[ 2424.681416][T22315]  ? kernel_write+0x630/0x630
[ 2424.686156][T22315]  ? __fget_files+0x26a/0x440
[ 2424.690963][T22315]  ksys_write+0x12b/0x250
[ 2424.695341][T22315]  ? __ia32_sys_read+0xb0/0xb0
[ 2424.700153][T22315]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2424.705755][T22315]  do_syscall_64+0x39/0xb0
[ 2424.709597][ T5115] Bluetooth: hci1: command 0x0409 tx timeout
[ 2424.710326][T22315]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2424.710360][T22315] RIP: 0033:0x7f4044a8c0c9
[ 2424.726920][T22315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2424.747095][T22315] RSP: 002b:00007f4045745168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2424.755557][T22315] RAX: ffffffffffffffda RBX: 00007f4044babf80 RCX: 00007f4044a8c0c9
[ 2424.763577][T22315] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2424.771599][T22315] RBP: 00007f4044ae7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2424.779624][T22315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2424.787626][T22315] R13: 00007ffc00e78d1f R14: 00007f4045745300 R15: 0000000000022000
[ 2424.795755][T22315]  </TASK>
[ 2424.809027][T22302] team0: Port device team_slave_1 added
[ 2424.902816][T22302] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2424.923440][T22302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2424.999948][T22302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2425.043743][T22302] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2425.058680][T22302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2425.096112][T22315] memory: usage 10700kB, limit 4kB, failcnt 1643
[ 2425.118475][T22302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2425.122359][T22315] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2425.148734][T22315] Memory cgroup stats for /syz3:
[ 2425.148962][T22315] anon 126976
[ 2425.148962][T22315] file 10452992
[ 2425.148962][T22315] kernel 258048
[ 2425.148962][T22315] kernel_stack 32768
[ 2425.148962][T22315] pagetables 77824
[ 2425.148962][T22315] sec_pagetables 0
[ 2425.148962][T22315] percpu 64
[ 2425.148962][T22315] sock 0
[ 2425.148962][T22315] vmalloc 0
[ 2425.148962][T22315] shmem 10452992
[ 2425.148962][T22315] zswap 0
[ 2425.148962][T22315] zswapped 0
[ 2425.148962][T22315] file_mapped 319488
[ 2425.148962][T22315] file_dirty 0
[ 2425.148962][T22315] file_writeback 0
[ 2425.148962][T22315] swapcached 0
[ 2425.148962][T22315] anon_thp 0
[ 2425.148962][T22315] file_thp 0
[ 2425.148962][T22315] shmem_thp 0
[ 2425.148962][T22315] inactive_anon 126976
[ 2425.148962][T22315] active_anon 10452992
[ 2425.148962][T22315] inactive_file 0
[ 2425.148962][T22315] active_file 0
[ 2425.148962][T22315] unevictable 0
[ 2425.148962][T22315] slab_reclaimable 46736
[ 2425.148962][T22315] slab_unreclaimable 72584
[ 2425.148962][T22315] slab 119320
[ 2425.316595][T22302] device hsr_slave_0 entered promiscuous mode
[ 2425.335080][T22302] device hsr_slave_1 entered promiscuous mode
[ 2425.346665][T22302] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2425.372562][T22302] Cannot create hsr debugfs directory
[ 2425.372821][T22315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22312,uid=0
[ 2425.405974][T22315] Memory cgroup out of memory: Killed process 22315 (syz-executor.3) total-vm:54804kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000
18:58:57 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x1500, 0x12)

18:58:57 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x2, 0x9, &(0x7f00000001c0))

18:58:57 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:58:57 executing program 2:
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

18:58:57 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

[ 2425.582083][T22171] syz-executor.3 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0
[ 2425.638920][T22171] CPU: 1 PID: 22171 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2425.649408][T22171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2425.659495][T22171] Call Trace:
[ 2425.662805][T22171]  <TASK>
[ 2425.665777][T22171]  dump_stack_lvl+0xd1/0x138
[ 2425.670420][T22171]  dump_header+0x10b/0x85f
[ 2425.674887][T22171]  oom_kill_process.cold+0x10/0x15
[ 2425.680061][T22171]  out_of_memory+0x35c/0x14a0
[ 2425.684793][T22171]  ? find_held_lock+0x2d/0x110
[ 2425.689618][T22171]  ? oom_killer_disable+0x280/0x280
[ 2425.694876][T22171]  ? find_held_lock+0x2d/0x110
[ 2425.699692][T22171]  mem_cgroup_out_of_memory+0x206/0x270
[ 2425.705301][T22171]  ? mem_cgroup_margin+0x130/0x130
[ 2425.710468][T22171]  ? lock_downgrade+0x6e0/0x6e0
[ 2425.715379][T22171]  try_charge_memcg+0xefb/0x12f0
[ 2425.720400][T22171]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2425.726425][T22171]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2425.732207][T22171]  ? lock_downgrade+0x6e0/0x6e0
[ 2425.737125][T22171]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2425.742372][T22171]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2425.748595][T22171]  obj_cgroup_charge+0x2af/0x5e0
[ 2425.753582][T22171]  kmem_cache_alloc_lru+0x145/0x760
[ 2425.758884][T22171]  ? ext4_alloc_inode+0x28/0x680
[ 2425.763844][T22171]  ? ext4_free_in_core_inode+0x70/0x70
[ 2425.769320][T22171]  ext4_alloc_inode+0x28/0x680
[ 2425.774101][T22171]  ? ext4_free_in_core_inode+0x70/0x70
[ 2425.779634][T22171]  alloc_inode+0x61/0x230
[ 2425.784007][T22171]  iget_locked+0x1bb/0x700
[ 2425.788451][T22171]  __ext4_iget+0x3af/0x4230
[ 2425.792988][T22171]  ? ext4_get_projid+0x190/0x190
[ 2425.797942][T22171]  ? ext4_fname_prepare_lookup+0x163/0x200
[ 2425.803797][T22171]  ? ext4_fname_setup_filename+0x110/0x110
[ 2425.809665][T22171]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2425.815246][T22171]  ext4_lookup+0x387/0x700
[ 2425.819682][T22171]  ? ext4_resetent+0x2d0/0x2d0
[ 2425.824507][T22171]  __lookup_slow+0x24c/0x460
[ 2425.829113][T22171]  ? __lookup_hash+0x180/0x180
[ 2425.833903][T22171]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2425.839394][T22171]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2425.844886][T22171]  ? lookup_fast+0x14e/0x520
[ 2425.849503][T22171]  walk_component+0x33f/0x5a0
[ 2425.854203][T22171]  path_lookupat+0x1ba/0x840
[ 2425.858816][T22171]  filename_lookup+0x1d2/0x590
[ 2425.863602][T22171]  ? may_linkat+0x500/0x500
[ 2425.868144][T22171]  ? __might_fault+0xd9/0x180
[ 2425.872938][T22171]  ? __phys_addr_symbol+0x30/0x70
[ 2425.877982][T22171]  ? __check_object_size+0x2e2/0x5a0
[ 2425.883395][T22171]  ? strncpy_from_user+0x28b/0x3c0
[ 2425.888553][T22171]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2425.893960][T22171]  user_path_at_empty+0x46/0x60
[ 2425.898837][T22171]  __x64_sys_umount+0xfc/0x190
[ 2425.903639][T22171]  ? path_umount+0x10b0/0x10b0
[ 2425.908425][T22171]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2425.914018][T22171]  do_syscall_64+0x39/0xb0
[ 2425.918559][T22171]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2425.924467][T22171] RIP: 0033:0x7f4044a8d537
[ 2425.929452][T22171] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2425.949091][T22171] RSP: 002b:00007ffc00e77e78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2425.957526][T22171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4044a8d537
[ 2425.965600][T22171] RDX: 00007ffc00e77f4c RSI: 000000000000000a RDI: 00007ffc00e77f40
[ 2425.973683][T22171] RBP: 00007ffc00e77f40 R08: 00000000ffffffff R09: 00007ffc00e77d10
[ 2425.981683][T22171] R10: 0000555555e9b853 R11: 0000000000000246 R12: 00007f4044ae6b24
[ 2425.989664][T22171] R13: 00007ffc00e79000 R14: 0000555555e9b810 R15: 00007ffc00e79040
[ 2425.997668][T22171]  </TASK>
[ 2426.043319][T22171] memory: usage 10360kB, limit 4kB, failcnt 1666
[ 2426.065506][T22171] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2426.085159][T22171] Memory cgroup stats for /syz3:
[ 2426.085360][T22171] anon 45056
[ 2426.085360][T22171] file 10452992
[ 2426.085360][T22171] kernel 110592
[ 2426.085360][T22171] kernel_stack 0
[ 2426.085360][T22171] pagetables 8192
[ 2426.085360][T22171] sec_pagetables 0
[ 2426.085360][T22171] percpu 64
[ 2426.085360][T22171] sock 0
[ 2426.085360][T22171] vmalloc 0
[ 2426.085360][T22171] shmem 10452992
[ 2426.085360][T22171] zswap 0
[ 2426.085360][T22171] zswapped 0
[ 2426.085360][T22171] file_mapped 311296
[ 2426.085360][T22171] file_dirty 0
[ 2426.085360][T22171] file_writeback 0
[ 2426.085360][T22171] swapcached 0
[ 2426.085360][T22171] anon_thp 0
[ 2426.085360][T22171] file_thp 0
[ 2426.085360][T22171] shmem_thp 0
[ 2426.085360][T22171] inactive_anon 45056
[ 2426.085360][T22171] active_anon 10452992
[ 2426.085360][T22171] inactive_file 0
[ 2426.085360][T22171] active_file 0
[ 2426.085360][T22171] unevictable 0
[ 2426.085360][T22171] slab_reclaimable 44184
[ 2426.085360][T22171] slab_unreclaimable 44728
[ 2426.085360][T22171] slab 88912
[ 2426.259201][T22171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22171,uid=0
[ 2426.326653][T22171] Memory cgroup out of memory: Killed process 22171 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2426.769188][ T5115] Bluetooth: hci1: command 0x041b tx timeout
[ 2427.226465][T22302] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2427.256474][T22302] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2427.285265][T22302] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2427.307853][T22302] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2427.448482][T15447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2427.535134][T15447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2427.654252][T22302] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2427.686918][T15447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2427.724905][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2427.734224][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2427.746492][T22302] 8021q: adding VLAN 0 to HW filter on device team0
[ 2427.758393][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2427.770018][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2427.778582][T18532] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2427.785776][T18532] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2427.820291][T15447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2427.841249][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2427.859710][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2427.873026][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2427.899182][T14417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2427.906371][T14417] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2427.945171][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2427.981308][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2427.990780][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2428.027779][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2428.037430][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2428.047627][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2428.057168][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2428.072387][T22302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2428.089786][T22302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2428.130686][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2428.140784][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2428.268456][T15447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2428.326690][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2428.340126][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2428.348363][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2428.357258][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2428.370097][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2428.377941][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2428.479594][T15447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2428.574253][T15447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2428.625874][T15447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2428.799883][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2428.807432][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2428.843889][T22302] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2428.848818][ T5119] Bluetooth: hci1: command 0x040f tx timeout
[ 2428.993556][T15447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.120261][T15447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.183388][T22362] chnl_net:caif_netlink_parms(): no params data found
[ 2429.251425][T15447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.296671][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2429.306766][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2429.329607][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2429.337278][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2429.345066][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2429.409573][T15447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2429.595996][T22362] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2429.618703][T22362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2429.627014][T22362] device bridge_slave_0 entered promiscuous mode
[ 2429.697666][T22362] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2429.705309][T22362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2429.715929][T22362] device bridge_slave_1 entered promiscuous mode
[ 2429.786719][T22362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2429.853163][T22362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2430.041872][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2430.052037][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2430.101727][T22362] team0: Port device team_slave_0 added
[ 2430.161468][T22362] team0: Port device team_slave_1 added
[ 2430.232877][T22302] device veth0_vlan entered promiscuous mode
[ 2430.253391][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2430.271964][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2430.292203][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2430.304976][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2430.314023][T22362] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2430.321880][T22362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2430.348748][T22362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2430.417796][T22362] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2430.425121][T22362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2430.453339][ T5115] Bluetooth: hci0: command 0x0409 tx timeout
[ 2430.457480][T22362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2430.471703][T22383] chnl_net:caif_netlink_parms(): no params data found
[ 2430.561190][T22302] device veth1_vlan entered promiscuous mode
[ 2430.627150][T22362] device hsr_slave_0 entered promiscuous mode
[ 2430.636328][T22362] device hsr_slave_1 entered promiscuous mode
[ 2430.643656][T22362] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2430.656523][T22362] Cannot create hsr debugfs directory
[ 2430.802849][T22383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2430.810573][T22383] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2430.819755][T22383] device bridge_slave_0 entered promiscuous mode
[ 2430.844004][T22302] device veth0_macvtap entered promiscuous mode
[ 2430.853358][T22383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2430.861705][T22383] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2430.870780][T22383] device bridge_slave_1 entered promiscuous mode
[ 2430.897061][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2430.906365][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2430.921540][T22302] device veth1_macvtap entered promiscuous mode
[ 2430.929699][ T5119] Bluetooth: hci1: command 0x0419 tx timeout
[ 2430.981640][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2430.990067][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2431.008282][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2431.020133][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.031255][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2431.042053][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.052880][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2431.063744][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.073921][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2431.084732][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.094890][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2431.105679][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.117574][T22302] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2431.143539][T22383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2431.155831][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2431.166103][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2431.214524][T22383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2431.229904][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2431.242099][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.253305][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2431.268809][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.283607][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2431.294630][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.304805][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2431.325767][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.345066][T22302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2431.367397][T22302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2431.380886][T22302] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2431.398874][ T5115] Bluetooth: hci3: command 0x0409 tx timeout
[ 2431.413630][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2431.422704][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2431.503375][T22302] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2431.512783][T22302] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2431.528244][T22302] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2431.548457][T22302] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2431.585231][T22383] team0: Port device team_slave_0 added
[ 2431.637301][T22383] team0: Port device team_slave_1 added
[ 2431.740979][T22383] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2431.747991][T22383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2431.788032][T22383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2431.839828][T22383] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2431.846869][T22383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2431.929136][T22383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2432.174969][T22383] device hsr_slave_0 entered promiscuous mode
[ 2432.199825][T22383] device hsr_slave_1 entered promiscuous mode
[ 2432.218737][T22383] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2432.226352][T22383] Cannot create hsr debugfs directory
[ 2432.405418][T14864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2432.419195][T14864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2432.471113][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2432.516429][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2432.528712][ T5115] Bluetooth: hci0: command 0x041b tx timeout
[ 2432.536330][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2432.589154][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2432.784994][T22362] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2433.071938][T22362] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2433.090851][T22442] syz-executor.5 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2433.218836][T22442] CPU: 1 PID: 22442 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2433.229334][T22442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2433.239526][T22442] Call Trace:
[ 2433.242840][T22442]  <TASK>
[ 2433.245811][T22442]  dump_stack_lvl+0xd1/0x138
[ 2433.250549][T22442]  dump_header+0x10b/0x85f
[ 2433.255031][T22442]  oom_kill_process.cold+0x10/0x15
[ 2433.260219][T22442]  out_of_memory+0x35c/0x14a0
[ 2433.264972][T22442]  ? find_held_lock+0x2d/0x110
[ 2433.269796][T22442]  ? oom_killer_disable+0x280/0x280
[ 2433.275062][T22442]  ? find_held_lock+0x2d/0x110
[ 2433.279892][T22442]  mem_cgroup_out_of_memory+0x206/0x270
[ 2433.285495][T22442]  ? mem_cgroup_margin+0x130/0x130
[ 2433.290914][T22442]  ? lock_downgrade+0x6e0/0x6e0
[ 2433.295865][T22442]  try_charge_memcg+0xefb/0x12f0
[ 2433.300846][T22442]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2433.306861][T22442]  ? lock_downgrade+0x6e0/0x6e0
[ 2433.311787][T22442]  charge_memcg+0x90/0x3b0
[ 2433.316251][T22442]  __mem_cgroup_charge+0x2b/0x90
[ 2433.321233][T22442]  ? folio_flags.constprop.0+0x53/0x150
[ 2433.326811][T22442]  __filemap_add_folio+0x615/0xf80
[ 2433.331977][T22442]  ? filemap_write_and_wait_range+0x120/0x120
[ 2433.338109][T22442]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2433.343545][T22442]  ? alloc_pages+0x1b2/0x270
[ 2433.348202][T22442]  ? folio_alloc+0x43/0x70
[ 2433.352648][T22442]  filemap_add_folio+0xaf/0x1e0
[ 2433.357554][T22442]  ? __filemap_add_folio+0xf80/0xf80
[ 2433.362880][T22442]  ? xas_load+0x6a/0x140
[ 2433.367217][T22442]  __filemap_get_folio+0x389/0xd80
[ 2433.372396][T22442]  ? filemap_add_folio+0x1e0/0x1e0
[ 2433.377558][T22442]  ? asm_exc_page_fault+0x26/0x30
[ 2433.382636][T22442]  pagecache_get_page+0x2e/0x280
[ 2433.387604][T22442]  ext4_da_write_begin+0x421/0xb50
[ 2433.392749][T22442]  ? ext4_write_begin+0x1140/0x1140
[ 2433.397986][T22442]  generic_perform_write+0x256/0x570
[ 2433.403322][T22442]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2433.408747][T22442]  ? discard_new_inode+0x1a0/0x1a0
[ 2433.414067][T22442]  ? down_write_killable+0x250/0x250
[ 2433.419386][T22442]  ext4_buffered_write_iter+0x15b/0x460
[ 2433.424977][T22442]  ext4_file_write_iter+0x8bf/0x1710
[ 2433.430290][T22442]  ? lock_release+0x810/0x810
[ 2433.435072][T22442]  ? ext4_file_mmap+0x440/0x440
[ 2433.439958][T22442]  vfs_write+0x9ed/0xdd0
[ 2433.444227][T22442]  ? kernel_write+0x630/0x630
[ 2433.448954][T22442]  ? __fget_files+0x26a/0x440
[ 2433.453681][T22442]  ksys_write+0x12b/0x250
[ 2433.458116][T22442]  ? __ia32_sys_read+0xb0/0xb0
[ 2433.462898][T22442]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2433.468488][T22442]  do_syscall_64+0x39/0xb0
[ 2433.472954][T22442]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2433.478864][T22442] RIP: 0033:0x7f587908c0c9
[ 2433.483291][T22442] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2433.502918][T22442] RSP: 002b:00007f5879def168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2433.511375][T22442] RAX: ffffffffffffffda RBX: 00007f58791abf80 RCX: 00007f587908c0c9
[ 2433.519364][T22442] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2433.527345][T22442] RBP: 00007f58790e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2433.535349][T22442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2433.543331][T22442] R13: 00007ffc87b912cf R14: 00007f5879def300 R15: 0000000000022000
[ 2433.551355][T22442]  </TASK>
[ 2433.558901][ T5119] Bluetooth: hci3: command 0x041b tx timeout
[ 2433.605089][T22442] memory: usage 10720kB, limit 0kB, failcnt 1179
[ 2433.618669][T22442] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2433.633883][T22442] Memory cgroup stats for /syz5:
[ 2433.634107][T22442] anon 126976
[ 2433.634107][T22442] file 10448896
[ 2433.634107][T22442] kernel 376832
[ 2433.634107][T22442] kernel_stack 131072
[ 2433.634107][T22442] pagetables 77824
[ 2433.634107][T22442] sec_pagetables 0
[ 2433.634107][T22442] percpu 64
[ 2433.634107][T22442] sock 0
[ 2433.634107][T22442] vmalloc 0
[ 2433.634107][T22442] shmem 10448896
[ 2433.634107][T22442] zswap 0
[ 2433.634107][T22442] zswapped 0
[ 2433.634107][T22442] file_mapped 249856
[ 2433.634107][T22442] file_dirty 0
[ 2433.634107][T22442] file_writeback 0
[ 2433.634107][T22442] swapcached 0
[ 2433.634107][T22442] anon_thp 0
[ 2433.634107][T22442] file_thp 0
[ 2433.634107][T22442] shmem_thp 0
[ 2433.634107][T22442] inactive_anon 126976
[ 2433.634107][T22442] active_anon 10448896
[ 2433.634107][T22442] inactive_file 0
[ 2433.634107][T22442] active_file 0
[ 2433.634107][T22442] unevictable 0
[ 2433.634107][T22442] slab_reclaimable 47672
[ 2433.634107][T22442] slab_unreclaimable 91128
[ 2433.634107][T22442] slab 138800
[ 2433.732393][T15447] device hsr_slave_0 left promiscuous mode
[ 2433.762078][T15447] device hsr_slave_1 left promiscuous mode
[ 2433.770868][T22442] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22302,uid=0
[ 2433.787343][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2433.795108][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2433.803340][T22442] Memory cgroup out of memory: Killed process 22302 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2433.833623][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2433.841763][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2433.857773][T15447] device bridge_slave_1 left promiscuous mode
[ 2433.869183][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2433.878252][T15447] device bridge_slave_0 left promiscuous mode
[ 2433.885573][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2433.906153][T15447] device hsr_slave_0 left promiscuous mode
[ 2433.959357][T15447] device hsr_slave_1 left promiscuous mode
[ 2433.978822][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2433.986304][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2433.996373][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2434.016672][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2434.029554][T15447] device bridge_slave_1 left promiscuous mode
[ 2434.035822][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2434.057365][T15447] device bridge_slave_0 left promiscuous mode
[ 2434.068170][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2434.095073][T15447] device hsr_slave_0 left promiscuous mode
[ 2434.107301][T15447] device hsr_slave_1 left promiscuous mode
[ 2434.120758][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2434.128244][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2434.139793][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2434.147261][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2434.157201][T15447] device bridge_slave_1 left promiscuous mode
[ 2434.163908][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2434.173403][T15447] device bridge_slave_0 left promiscuous mode
[ 2434.180514][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2434.202095][T15447] device veth1_macvtap left promiscuous mode
[ 2434.208214][T15447] device veth0_macvtap left promiscuous mode
[ 2434.215846][T15447] device veth1_vlan left promiscuous mode
[ 2434.222897][T15447] device veth0_vlan left promiscuous mode
[ 2434.231805][T15447] device veth1_macvtap left promiscuous mode
[ 2434.237895][T15447] device veth0_macvtap left promiscuous mode
[ 2434.255389][T15447] device veth1_vlan left promiscuous mode
[ 2434.265726][T15447] device veth0_vlan left promiscuous mode
[ 2434.281416][T15447] device veth1_macvtap left promiscuous mode
[ 2434.287522][T15447] device veth0_macvtap left promiscuous mode
[ 2434.308768][T15447] device veth1_vlan left promiscuous mode
[ 2434.314676][T15447] device veth0_vlan left promiscuous mode
[ 2434.617822][ T5119] Bluetooth: hci0: command 0x040f tx timeout
[ 2435.086238][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2435.115437][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2435.147276][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2435.164542][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2435.277305][T15447] bond0 (unregistering): Released all slaves
[ 2435.542318][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2435.562027][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2435.577890][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2435.596343][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2435.648089][ T5119] Bluetooth: hci3: command 0x040f tx timeout
[ 2435.712746][T15447] bond0 (unregistering): Released all slaves
[ 2435.905444][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2435.929579][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2435.951224][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2435.983954][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2436.085135][T15447] bond0 (unregistering): Released all slaves
[ 2436.169605][T22362] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2436.302156][T22362] netdevsim netdevsim4 netdevsim3: renamed from eth3
18:59:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:08 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:08 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x2, 0x9, &(0x7f00000001c0))

18:59:08 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x1b0b, 0x12)

[ 2436.447670][T22362] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2436.468465][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2436.513072][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2436.573094][T22362] 8021q: adding VLAN 0 to HW filter on device team0
18:59:08 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2436.679048][ T5119] Bluetooth: hci0: command 0x0419 tx timeout
[ 2436.724426][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2436.756141][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
18:59:08 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2436.816487][T14417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2436.823789][T14417] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2436.902761][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
18:59:08 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x0, 0x9, &(0x7f00000001c0))

[ 2436.959453][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2437.017477][T14417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2437.024752][T14417] bridge0: port 2(bridge_slave_1) entered forwarding state
18:59:08 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2437.070249][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
18:59:08 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x0, 0x9, &(0x7f00000001c0))

18:59:08 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x0, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2437.233967][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2437.243239][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2437.282088][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2437.340114][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2437.390440][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2437.429357][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2437.470800][T22362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2437.513258][T22362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2437.543949][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2437.559518][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2437.568057][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2437.628183][T22383] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2437.665823][T22383] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2437.703027][T22383] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2437.725219][T22383] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2437.728741][ T5119] Bluetooth: hci3: command 0x0419 tx timeout
[ 2438.032291][T22383] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2438.076111][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2438.096022][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2438.128675][T22383] 8021q: adding VLAN 0 to HW filter on device team0
[ 2438.146712][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2438.166723][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2438.179436][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2438.186613][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2438.244065][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2438.252783][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2438.272624][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2438.282463][T26601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2438.289648][T26601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2438.305324][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2438.315517][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2438.377542][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2438.389459][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2438.405594][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2438.426080][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2438.449439][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2438.467282][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2438.492195][T22362] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2438.507813][T22383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2438.552654][T22383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2438.567637][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2438.583990][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2438.603229][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2439.127109][T22383] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2439.147489][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2439.164530][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2439.216837][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2439.226853][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2439.284721][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2439.295359][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2439.301014][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2439.312350][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2439.330466][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2439.330969][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2439.347476][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2439.355456][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2439.412438][T22383] device veth0_vlan entered promiscuous mode
[ 2439.466057][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2439.479592][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2439.493289][T22383] device veth1_vlan entered promiscuous mode
[ 2439.584569][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2439.593958][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2439.603893][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2439.621141][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2439.637996][T22383] device veth0_macvtap entered promiscuous mode
[ 2439.682565][T22383] device veth1_macvtap entered promiscuous mode
[ 2439.709053][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2439.717309][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2439.758312][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2439.780702][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2439.889485][T22383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2439.928656][T22383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2439.948618][T22383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2439.974968][T22383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2440.015058][T22383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2440.048014][T22383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2440.070703][T22383] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2440.107323][T22383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2440.144234][T22383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2440.185141][T22383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2440.218673][T22383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2440.231445][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2440.233963][T22383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2440.251445][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2440.261591][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2440.272825][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2440.274842][T22383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2440.298050][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2440.305462][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2440.314201][T22383] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2440.352808][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2440.381115][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2440.416202][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2440.439816][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2440.484042][T22383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2440.500834][T22383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2440.518773][T22383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2440.527538][T22383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2440.561029][T22362] device veth0_vlan entered promiscuous mode
[ 2440.576704][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2440.593455][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2440.656065][T22362] device veth1_vlan entered promiscuous mode
[ 2440.674881][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2440.683491][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2440.691899][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2440.850892][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2440.862368][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2440.889428][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2440.905152][T22362] device veth0_macvtap entered promiscuous mode
[ 2440.982662][T22362] device veth1_macvtap entered promiscuous mode
[ 2441.014015][T22506] chnl_net:caif_netlink_parms(): no params data found
[ 2441.099244][T15444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2441.107420][T15444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2441.214298][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2441.223791][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2441.240536][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2441.272635][T22362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2441.295006][T22362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2441.313270][T22362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2441.327071][T22362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2441.338673][T22362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2441.349266][T22362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2441.359360][T22362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2441.370259][T22362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2441.382963][T22362] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2441.398953][ T5119] Bluetooth: hci1: command 0x0409 tx timeout
[ 2441.450710][T22506] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2441.457942][T22506] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2441.466372][T22506] device bridge_slave_0 entered promiscuous mode
[ 2441.476230][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2441.486049][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2441.497663][T22362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2441.508658][T22362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2441.519685][T22362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2441.531207][T22362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2441.541414][T22362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2441.553392][T22362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2441.563805][T22362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2441.574874][T22362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2441.588797][T22362] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2441.597925][T15444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2441.616321][T15444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2441.638323][T22506] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2441.655431][T22506] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2441.687103][T22506] device bridge_slave_1 entered promiscuous mode
[ 2441.707132][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2441.716579][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2441.733842][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2441.749787][T22362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2441.769315][T22362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2441.778084][T22362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2441.795877][T22362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2441.916678][T22506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2442.020046][T22506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2442.135297][T22523] chnl_net:caif_netlink_parms(): no params data found
[ 2442.202200][T15444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2442.226456][T15444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2442.253354][T22506] team0: Port device team_slave_0 added
[ 2442.316546][T15447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2442.358759][ T5119] Bluetooth: hci4: command 0x0409 tx timeout
[ 2442.365826][T22555] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2442.383904][T22555] CPU: 0 PID: 22555 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2442.394394][T22555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2442.404494][T22555] Call Trace:
[ 2442.407794][T22555]  <TASK>
[ 2442.410755][T22555]  dump_stack_lvl+0xd1/0x138
[ 2442.415392][T22555]  dump_header+0x10b/0x85f
[ 2442.419867][T22555]  oom_kill_process.cold+0x10/0x15
[ 2442.425032][T22555]  out_of_memory+0x35c/0x14a0
[ 2442.429766][T22555]  ? oom_killer_disable+0x280/0x280
[ 2442.435010][T22555]  ? mark_held_locks+0x9f/0xe0
[ 2442.439817][T22555]  mem_cgroup_out_of_memory+0x206/0x270
[ 2442.445413][T22555]  ? mem_cgroup_margin+0x130/0x130
[ 2442.450594][T22555]  ? _raw_spin_unlock_irqrestore+0x3c/0x70
[ 2442.456802][T22555]  memory_max_write+0x2f9/0x3c0
[ 2442.461705][T22555]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2442.467821][T22555]  ? lock_release+0x810/0x810
[ 2442.472548][T22555]  cgroup_file_write+0x1e2/0x770
[ 2442.477535][T22555]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2442.483743][T22555]  ? kill_css+0x370/0x370
[ 2442.488157][T22555]  ? __virt_addr_valid+0x61/0x2e0
[ 2442.493242][T22555]  ? kill_css+0x370/0x370
[ 2442.497618][T22555]  kernfs_fop_write_iter+0x3f1/0x600
[ 2442.502955][T22555]  vfs_write+0x9ed/0xdd0
[ 2442.507235][T22555]  ? kernel_write+0x630/0x630
[ 2442.511955][T22555]  ? __fget_files+0x26a/0x440
[ 2442.516772][T22555]  ksys_write+0x12b/0x250
[ 2442.521140][T22555]  ? __ia32_sys_read+0xb0/0xb0
[ 2442.525944][T22555]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2442.531635][T22555]  do_syscall_64+0x39/0xb0
[ 2442.536105][T22555]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2442.542018][T22555] RIP: 0033:0x7f9830a8c0c9
[ 2442.546451][T22555] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2442.566084][T22555] RSP: 002b:00007f98318b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2442.574521][T22555] RAX: ffffffffffffffda RBX: 00007f9830babf80 RCX: 00007f9830a8c0c9
[ 2442.582519][T22555] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005
[ 2442.590511][T22555] RBP: 00007f9830ae7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2442.598494][T22555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2442.606503][T22555] R13: 00007fff510529ef R14: 00007f98318b5300 R15: 0000000000022000
[ 2442.614503][T22555]  </TASK>
[ 2442.628646][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2442.661140][T22506] team0: Port device team_slave_1 added
[ 2442.739399][T22555] memory: usage 10632kB, limit 0kB, failcnt 885
[ 2442.747396][T22555] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2442.764620][T22555] Memory cgroup stats for /syz2:
[ 2442.765941][T22555] anon 114688
[ 2442.765941][T22555] file 10452992
[ 2442.765941][T22555] kernel 294912
[ 2442.765941][T22555] kernel_stack 65536
[ 2442.765941][T22555] pagetables 81920
[ 2442.765941][T22555] sec_pagetables 0
[ 2442.765941][T22555] percpu 64
[ 2442.765941][T22555] sock 0
[ 2442.765941][T22555] vmalloc 0
[ 2442.765941][T22555] shmem 10452992
[ 2442.765941][T22555] zswap 0
[ 2442.765941][T22555] zswapped 0
[ 2442.765941][T22555] file_mapped 253952
[ 2442.765941][T22555] file_dirty 0
[ 2442.765941][T22555] file_writeback 0
[ 2442.765941][T22555] swapcached 0
[ 2442.765941][T22555] anon_thp 0
[ 2442.765941][T22555] file_thp 0
[ 2442.765941][T22555] shmem_thp 0
[ 2442.765941][T22555] inactive_anon 114688
[ 2442.765941][T22555] active_anon 10452992
[ 2442.765941][T22555] inactive_file 0
[ 2442.765941][T22555] active_file 0
[ 2442.765941][T22555] unevictable 0
[ 2442.765941][T22555] slab_reclaimable 47480
[ 2442.765941][T22555] slab_unreclaimable 73752
[ 2442.765941][T22555] slab 121232
[ 2442.864729][T14864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2442.864808][T14864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2442.888703][T22506] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2442.895776][T22506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2442.919841][T22555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null)
[ 2442.926642][T22506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2442.927427][T22555] ,cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22383,uid=0
[ 2443.039523][T22555] Memory cgroup out of memory: Killed process 22383 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2443.057975][T22523] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2443.080397][T22523] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2443.088961][T22523] device bridge_slave_0 entered promiscuous mode
[ 2443.121200][T22523] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2443.143337][T22523] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2443.155837][T22523] device bridge_slave_1 entered promiscuous mode
[ 2443.173736][T15447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2443.187087][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2443.195663][T22506] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2443.203396][T22506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2443.236215][T22506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2443.343769][T15447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2443.415911][T22523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2443.451301][T15447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
18:59:15 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2443.481955][ T5115] Bluetooth: hci1: command 0x041b tx timeout
[ 2443.535758][T22523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2443.592039][T22506] device hsr_slave_0 entered promiscuous mode
[ 2443.629948][T22506] device hsr_slave_1 entered promiscuous mode
[ 2443.642171][T22506] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2443.678818][T22506] Cannot create hsr debugfs directory
[ 2443.728213][T22566] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2443.766520][T22566] CPU: 1 PID: 22566 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2443.777027][T22566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2443.787123][T22566] Call Trace:
[ 2443.790431][T22566]  <TASK>
[ 2443.793398][T22566]  dump_stack_lvl+0xd1/0x138
[ 2443.798044][T22566]  dump_header+0x10b/0x85f
[ 2443.802534][T22566]  oom_kill_process.cold+0x10/0x15
[ 2443.807705][T22566]  out_of_memory+0x35c/0x14a0
[ 2443.812448][T22566]  ? oom_killer_disable+0x280/0x280
[ 2443.817688][T22566]  ? mark_held_locks+0x9f/0xe0
[ 2443.822501][T22566]  mem_cgroup_out_of_memory+0x206/0x270
[ 2443.828108][T22566]  ? mem_cgroup_margin+0x130/0x130
[ 2443.833433][T22566]  memory_max_write+0x2f9/0x3c0
[ 2443.838428][T22566]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2443.844515][T22566]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2443.850608][T22566]  cgroup_file_write+0x1e2/0x770
[ 2443.855657][T22566]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2443.861770][T22566]  ? kill_css+0x370/0x370
[ 2443.866143][T22566]  ? kill_css+0x370/0x370
[ 2443.870491][T22566]  kernfs_fop_write_iter+0x3f1/0x600
[ 2443.875808][T22566]  vfs_write+0x9ed/0xdd0
[ 2443.880090][T22566]  ? kernel_write+0x630/0x630
[ 2443.884799][T22566]  ? __fdget_pos+0x31/0x100
[ 2443.889350][T22566]  ksys_write+0x12b/0x250
[ 2443.893714][T22566]  ? __ia32_sys_read+0xb0/0xb0
[ 2443.898512][T22566]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2443.904095][T22566]  do_syscall_64+0x39/0xb0
[ 2443.908537][T22566]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2443.914444][T22566] RIP: 0033:0x7f61f088c0c9
[ 2443.918870][T22566] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2443.938510][T22566] RSP: 002b:00007f61f1578168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2443.946954][T22566] RAX: ffffffffffffffda RBX: 00007f61f09abf80 RCX: 00007f61f088c0c9
[ 2443.954938][T22566] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006
[ 2443.962916][T22566] RBP: 00007f61f08e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2443.970895][T22566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2443.978898][T22566] R13: 00007ffd8b3e5acf R14: 00007f61f1578300 R15: 0000000000022000
[ 2443.986903][T22566]  </TASK>
[ 2444.003303][T22566] memory: usage 10664kB, limit 0kB, failcnt 3474
[ 2444.010295][T22566] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2444.019559][T22566] Memory cgroup stats for /syz4:
[ 2444.023900][T22566] anon 118784
[ 2444.023900][T22566] file 10444800
[ 2444.023900][T22566] kernel 335872
[ 2444.023900][T22566] kernel_stack 98304
[ 2444.023900][T22566] pagetables 77824
[ 2444.023900][T22566] sec_pagetables 0
[ 2444.023900][T22566] percpu 64
[ 2444.023900][T22566] sock 0
[ 2444.023900][T22566] vmalloc 0
[ 2444.023900][T22566] shmem 10444800
[ 2444.023900][T22566] zswap 0
[ 2444.023900][T22566] zswapped 0
[ 2444.023900][T22566] file_mapped 245760
[ 2444.023900][T22566] file_dirty 0
[ 2444.023900][T22566] file_writeback 0
[ 2444.023900][T22566] swapcached 0
[ 2444.023900][T22566] anon_thp 0
[ 2444.023900][T22566] file_thp 0
[ 2444.023900][T22566] shmem_thp 0
[ 2444.023900][T22566] inactive_anon 114688
[ 2444.023900][T22566] active_anon 10444800
[ 2444.023900][T22566] inactive_file 0
[ 2444.023900][T22566] active_file 0
[ 2444.023900][T22566] unevictable 0
[ 2444.023900][T22566] slab_reclaimable 47848
[ 2444.023900][T22566] slab_unreclaimable 84384
[ 2444.023900][T22566] slab 132232
[ 2444.127223][T22566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22565,uid=0
[ 2444.160519][T22566] Memory cgroup out of memory: Killed process 22566 (syz-executor.4) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000
18:59:15 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

18:59:15 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x0, 0x9, &(0x7f00000001c0))

18:59:15 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x0, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:15 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2444.163309][T22523] team0: Port device team_slave_0 added
[ 2444.223984][T22523] team0: Port device team_slave_1 added
[ 2444.318074][T22362] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2444.387135][T22362] CPU: 0 PID: 22362 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2444.397617][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2444.407704][T22362] Call Trace:
[ 2444.411026][T22362]  <TASK>
[ 2444.413985][T22362]  dump_stack_lvl+0xd1/0x138
[ 2444.418630][T22362]  dump_header+0x10b/0x85f
[ 2444.423103][T22362]  oom_kill_process.cold+0x10/0x15
[ 2444.428308][T22362]  out_of_memory+0x35c/0x14a0
[ 2444.433340][T22362]  ? find_held_lock+0x2d/0x110
[ 2444.438156][T22362]  ? oom_killer_disable+0x280/0x280
[ 2444.443433][T22362]  ? find_held_lock+0x2d/0x110
[ 2444.448264][T22362]  mem_cgroup_out_of_memory+0x206/0x270
[ 2444.454035][T22362]  ? mem_cgroup_margin+0x130/0x130
[ 2444.459242][T22362]  ? lock_downgrade+0x6e0/0x6e0
[ 2444.464459][T22362]  try_charge_memcg+0xefb/0x12f0
[ 2444.469431][T22362]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2444.475466][T22362]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2444.481233][T22362]  ? lock_downgrade+0x6e0/0x6e0
[ 2444.486128][T22362]  obj_cgroup_charge+0x2af/0x5e0
[ 2444.491083][T22362]  kmem_cache_alloc_lru+0x145/0x760
[ 2444.496305][T22362]  ? __d_alloc+0x32/0x980
[ 2444.500835][T22362]  __d_alloc+0x32/0x980
[ 2444.505008][T22362]  ? __lock_acquire+0x166e/0x56d0
[ 2444.510048][T22362]  d_alloc+0x4e/0x240
[ 2444.514047][T22362]  d_alloc_parallel+0xe8/0x1410
[ 2444.518928][T22362]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2444.525043][T22362]  ? __d_lookup_rcu+0x4c0/0x4c0
[ 2444.530012][T22362]  ? lockdep_init_map_type+0x21e/0x800
[ 2444.535489][T22362]  ? lockdep_init_map_type+0x21e/0x800
[ 2444.540969][T22362]  __lookup_slow+0x193/0x460
[ 2444.545673][T22362]  ? __lookup_hash+0x180/0x180
[ 2444.550487][T22362]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2444.555980][T22362]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2444.561594][T22362]  ? lookup_fast+0x14e/0x520
[ 2444.566233][T22362]  walk_component+0x33f/0x5a0
[ 2444.570962][T22362]  path_lookupat+0x1ba/0x840
[ 2444.575578][T22362]  filename_lookup+0x1d2/0x590
[ 2444.580364][T22362]  ? may_linkat+0x500/0x500
[ 2444.584895][T22362]  ? __might_fault+0xd9/0x180
[ 2444.589597][T22362]  ? __phys_addr_symbol+0x30/0x70
[ 2444.594748][T22362]  ? __check_object_size+0x2e2/0x5a0
[ 2444.600078][T22362]  ? strncpy_from_user+0x28b/0x3c0
[ 2444.605216][T22362]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2444.610618][T22362]  user_path_at_empty+0x46/0x60
[ 2444.615591][T22362]  __x64_sys_umount+0xfc/0x190
[ 2444.620375][T22362]  ? path_umount+0x10b0/0x10b0
[ 2444.625175][T22362]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2444.630788][T22362]  do_syscall_64+0x39/0xb0
[ 2444.635410][T22362]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2444.641336][T22362] RIP: 0033:0x7f61f088d537
[ 2444.645773][T22362] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2444.665560][T22362] RSP: 002b:00007ffd8b3e4c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2444.673996][T22362] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f61f088d537
[ 2444.681989][T22362] RDX: 00007ffd8b3e4cfa RSI: 000000000000000a RDI: 00007ffd8b3e4cf0
[ 2444.689966][T22362] RBP: 00007ffd8b3e4cf0 R08: 00000000ffffffff R09: 00007ffd8b3e4ac0
[ 2444.698220][T22362] R10: 0000555555746873 R11: 0000000000000246 R12: 00007f61f08e6b24
[ 2444.706217][T22362] R13: 00007ffd8b3e5db0 R14: 0000555555746810 R15: 00007ffd8b3e5df0
[ 2444.714227][T22362]  </TASK>
[ 2444.727192][ T5115] Bluetooth: hci4: command 0x041b tx timeout
[ 2444.749446][T22523] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2444.756448][T22523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2444.783920][T22362] memory: usage 10344kB, limit 0kB, failcnt 3493
[ 2444.798685][T22362] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2444.805609][T22362] Memory cgroup stats for /syz4:
[ 2444.805810][T22362] anon 40960
[ 2444.805810][T22362] file 10444800
[ 2444.805810][T22362] kernel 106496
[ 2444.805810][T22362] kernel_stack 0
[ 2444.805810][T22362] pagetables 8192
[ 2444.805810][T22362] sec_pagetables 0
[ 2444.805810][T22362] percpu 64
[ 2444.805810][T22362] sock 0
[ 2444.805810][T22362] vmalloc 0
[ 2444.805810][T22362] shmem 10444800
[ 2444.805810][T22362] zswap 0
[ 2444.805810][T22362] zswapped 0
[ 2444.805810][T22362] file_mapped 225280
[ 2444.805810][T22362] file_dirty 0
[ 2444.805810][T22362] file_writeback 0
[ 2444.805810][T22362] swapcached 0
[ 2444.805810][T22362] anon_thp 0
[ 2444.805810][T22362] file_thp 0
[ 2444.805810][T22362] shmem_thp 0
[ 2444.805810][T22362] inactive_anon 40960
[ 2444.805810][T22362] active_anon 10444800
[ 2444.805810][T22362] inactive_file 0
[ 2444.805810][T22362] active_file 0
[ 2444.805810][T22362] unevictable 0
[ 2444.805810][T22362] slab_reclaimable 40240
[ 2444.805810][T22362] slab_unreclaimable 44728
[ 2444.805810][T22362] slab 84968
[ 2444.928606][T22523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2444.997177][T22523] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2445.011362][T22523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2445.068275][T22523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2445.324671][T22362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22362,uid=0
[ 2445.340666][T22362] Memory cgroup out of memory: Killed process 22362 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2445.376049][T22523] device hsr_slave_0 entered promiscuous mode
[ 2445.410723][T22523] device hsr_slave_1 entered promiscuous mode
[ 2445.438588][T22523] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2445.446208][T22523] Cannot create hsr debugfs directory
[ 2445.558726][ T5115] Bluetooth: hci1: command 0x040f tx timeout
[ 2446.520743][T22506] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2446.544099][T22506] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2446.656859][T22506] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2446.720660][T22506] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2446.758926][ T5115] Bluetooth: hci4: command 0x040f tx timeout
[ 2446.988427][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2446.999118][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2447.011027][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2447.021139][T15447] device hsr_slave_0 left promiscuous mode
[ 2447.027887][T14228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2447.036929][T14228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2447.062220][T15447] device hsr_slave_1 left promiscuous mode
[ 2447.094101][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2447.121462][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2447.140928][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2447.148414][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2447.198565][T15447] device bridge_slave_1 left promiscuous mode
[ 2447.205010][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2447.289095][T15447] device bridge_slave_0 left promiscuous mode
[ 2447.295395][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2447.359766][T15447] device veth1_macvtap left promiscuous mode
[ 2447.365869][T15447] device veth0_macvtap left promiscuous mode
[ 2447.388820][T15447] device veth1_vlan left promiscuous mode
[ 2447.394753][T15447] device veth0_vlan left promiscuous mode
[ 2447.638691][ T5115] Bluetooth: hci1: command 0x0419 tx timeout
[ 2448.220316][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2448.246085][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2448.275644][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2448.297035][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2448.422400][T15447] bond0 (unregistering): Released all slaves
[ 2448.643495][T22506] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2448.694925][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2448.703816][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2448.755439][T22506] 8021q: adding VLAN 0 to HW filter on device team0
[ 2448.771630][T22523] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2448.797643][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2448.807337][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2448.815938][T26501] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2448.823118][T26501] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2448.831566][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2448.840594][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2448.848926][ T5115] Bluetooth: hci4: command 0x0419 tx timeout
[ 2448.855617][T26501] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2448.862789][T26501] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2448.889760][T22523] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2448.901737][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2448.918432][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2448.929682][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2448.953155][T22523] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2448.966991][T22523] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2448.984526][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2448.999569][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2449.019235][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2449.039367][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2449.052887][T22506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2449.078877][T14228] Bluetooth: hci0: command 0x0409 tx timeout
[ 2449.087492][T22506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2449.120915][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2449.133084][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2449.141871][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2449.342125][T22523] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2449.367348][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2449.387867][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2449.401066][T22523] 8021q: adding VLAN 0 to HW filter on device team0
[ 2449.417000][T22595] chnl_net:caif_netlink_parms(): no params data found
[ 2449.440328][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2449.459442][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2449.468075][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2449.475251][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2449.537488][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2449.547308][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2449.588872][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2449.597445][T18323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2449.604635][T18323] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2449.645247][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2449.669719][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2449.742286][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2449.760458][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2449.786634][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2449.809492][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2449.833466][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2449.841808][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2449.850878][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2449.877315][T22523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2449.908968][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2449.916534][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2449.957079][T22506] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2450.025280][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2450.034928][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2450.098967][T22595] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2450.106190][T22595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2450.124089][T22595] device bridge_slave_0 entered promiscuous mode
[ 2450.155698][T22506] device veth0_vlan entered promiscuous mode
[ 2450.184716][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2450.209665][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2450.218490][T22595] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2450.225849][T22595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2450.261246][T22595] device bridge_slave_1 entered promiscuous mode
[ 2450.299359][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2450.309408][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2450.331139][T22506] device veth1_vlan entered promiscuous mode
[ 2450.363005][T22595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2450.403036][T22595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2450.516437][T22595] team0: Port device team_slave_0 added
[ 2450.556249][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2450.579162][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2450.641727][T22595] team0: Port device team_slave_1 added
[ 2450.731308][T22595] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2450.738301][T22595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2450.828994][T22595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2450.851186][T22595] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2450.858198][T22595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2450.928608][T22595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2450.968056][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2450.982833][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2451.007927][T22506] device veth0_macvtap entered promiscuous mode
[ 2451.032433][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2451.041670][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2451.057593][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2451.109821][T22506] device veth1_macvtap entered promiscuous mode
[ 2451.130241][T22523] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2451.158681][T14228] Bluetooth: hci0: command 0x041b tx timeout
[ 2451.179988][T22506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2451.239487][T22506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2451.260773][T22506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2451.301159][T22506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2451.326643][T22506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2451.343066][T22506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2451.357143][T22506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2451.375675][T22506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2451.410240][T22506] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2451.423112][T22595] device hsr_slave_0 entered promiscuous mode
[ 2451.451158][T22595] device hsr_slave_1 entered promiscuous mode
[ 2451.479457][T22595] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2451.487109][T22595] Cannot create hsr debugfs directory
[ 2451.511135][T22506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2451.538643][T22506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2451.553264][T22506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2451.581018][T22506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2451.608717][T22506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2451.638573][T22506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2451.648867][T22506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2451.678570][T22506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2451.718629][T22506] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2451.726123][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2451.745651][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2451.759290][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2451.799784][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2451.826208][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2451.894850][T22506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2451.905179][T22506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2451.916169][T22506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2451.925322][T22506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2452.205595][T14864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2452.218667][T14864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2452.229465][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2452.328395][T22595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2452.548007][T22595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2452.604966][T15447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2452.658265][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2452.700432][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2452.718354][T22595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2452.813343][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2452.827802][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2452.846793][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2452.879652][T15447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2452.951645][T22595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2453.099626][T15447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2453.184751][T22523] device veth0_vlan entered promiscuous mode
[ 2453.223110][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2453.238764][T14228] Bluetooth: hci0: command 0x040f tx timeout
[ 2453.245586][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2453.255346][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2453.264901][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2453.279889][T22523] device veth1_vlan entered promiscuous mode
[ 2453.489610][T15447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2453.503328][T22698] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2453.578026][T22698] CPU: 1 PID: 22698 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2453.588515][T22698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2453.598737][T22698] Call Trace:
[ 2453.602356][T22698]  <TASK>
[ 2453.605341][T22698]  dump_stack_lvl+0xd1/0x138
[ 2453.610425][T22698]  dump_header+0x10b/0x85f
[ 2453.614999][T22698]  oom_kill_process.cold+0x10/0x15
[ 2453.616243][T22523] device veth0_macvtap entered promiscuous mode
[ 2453.620162][T22698]  out_of_memory+0x35c/0x14a0
[ 2453.620210][T22698]  ? find_held_lock+0x2d/0x110
[ 2453.620245][T22698]  ? oom_killer_disable+0x280/0x280
[ 2453.642702][T22698]  ? find_held_lock+0x2d/0x110
[ 2453.647538][T22698]  mem_cgroup_out_of_memory+0x206/0x270
[ 2453.653261][T22698]  ? mem_cgroup_margin+0x130/0x130
[ 2453.658961][T22698]  ? lock_downgrade+0x6e0/0x6e0
[ 2453.663997][T22698]  try_charge_memcg+0xefb/0x12f0
[ 2453.669075][T22698]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2453.675139][T22698]  ? lock_downgrade+0x6e0/0x6e0
[ 2453.680127][T22698]  charge_memcg+0x90/0x3b0
[ 2453.684570][T22698]  __mem_cgroup_charge+0x2b/0x90
[ 2453.689537][T22698]  ? folio_flags.constprop.0+0x53/0x150
[ 2453.695300][T22698]  __filemap_add_folio+0x615/0xf80
[ 2453.700449][T22698]  ? filemap_write_and_wait_range+0x120/0x120
[ 2453.706573][T22698]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2453.711972][T22698]  ? alloc_pages+0x1b2/0x270
[ 2453.716608][T22698]  ? folio_alloc+0x43/0x70
[ 2453.721055][T22698]  filemap_add_folio+0xaf/0x1e0
[ 2453.725940][T22698]  ? __filemap_add_folio+0xf80/0xf80
[ 2453.731266][T22698]  ? xas_load+0x6a/0x140
[ 2453.735546][T22698]  __filemap_get_folio+0x389/0xd80
[ 2453.740799][T22698]  ? filemap_add_folio+0x1e0/0x1e0
[ 2453.745942][T22698]  ? asm_exc_page_fault+0x26/0x30
[ 2453.751011][T22698]  pagecache_get_page+0x2e/0x280
[ 2453.755971][T22698]  ext4_da_write_begin+0x421/0xb50
[ 2453.761123][T22698]  ? ext4_write_begin+0x1140/0x1140
[ 2453.766363][T22698]  generic_perform_write+0x256/0x570
[ 2453.771791][T22698]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2453.777225][T22698]  ? discard_new_inode+0x1a0/0x1a0
[ 2453.782469][T22698]  ? down_write_killable+0x250/0x250
[ 2453.787817][T22698]  ext4_buffered_write_iter+0x15b/0x460
[ 2453.793413][T22698]  ext4_file_write_iter+0x8bf/0x1710
[ 2453.798744][T22698]  ? lock_release+0x810/0x810
[ 2453.803551][T22698]  ? ext4_file_mmap+0x440/0x440
[ 2453.808456][T22698]  vfs_write+0x9ed/0xdd0
[ 2453.812792][T22698]  ? kernel_write+0x630/0x630
[ 2453.817640][T22698]  ? __fget_files+0x26a/0x440
[ 2453.822464][T22698]  ksys_write+0x12b/0x250
[ 2453.826850][T22698]  ? __ia32_sys_read+0xb0/0xb0
[ 2453.831668][T22698]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2453.837265][T22698]  do_syscall_64+0x39/0xb0
[ 2453.841736][T22698]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2453.847693][T22698] RIP: 0033:0x7faee168c0c9
[ 2453.852138][T22698] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2453.871805][T22698] RSP: 002b:00007faee2343168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2453.880283][T22698] RAX: ffffffffffffffda RBX: 00007faee17abf80 RCX: 00007faee168c0c9
[ 2453.888382][T22698] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2453.897513][T22698] RBP: 00007faee16e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2453.905500][T22698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2453.913503][T22698] R13: 00007ffd5780f0df R14: 00007faee2343300 R15: 0000000000022000
[ 2453.921538][T22698]  </TASK>
[ 2453.932576][T22698] memory: usage 10660kB, limit 4kB, failcnt 1718
[ 2453.960024][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2453.967991][T22698] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2453.968379][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2453.975122][T22698] Memory cgroup stats for /syz3:
[ 2453.988199][T22698] anon 122880
[ 2453.988199][T22698] file 10452992
[ 2453.988199][T22698] kernel 274432
[ 2453.988199][T22698] kernel_stack 32768
[ 2453.988199][T22698] pagetables 81920
[ 2453.988199][T22698] sec_pagetables 0
[ 2453.988199][T22698] percpu 64
[ 2453.988199][T22698] sock 0
[ 2453.988199][T22698] vmalloc 0
[ 2453.988199][T22698] shmem 10452992
[ 2453.988199][T22698] zswap 0
[ 2453.988199][T22698] zswapped 0
[ 2453.988199][T22698] file_mapped 319488
[ 2453.988199][T22698] file_dirty 0
[ 2453.988199][T22698] file_writeback 0
[ 2453.988199][T22698] swapcached 0
[ 2453.988199][T22698] anon_thp 0
[ 2453.988199][T22698] file_thp 0
[ 2453.988199][T22698] shmem_thp 0
[ 2453.988199][T22698] inactive_anon 122880
[ 2453.988199][T22698] active_anon 10452992
[ 2453.988199][T22698] inactive_file 0
[ 2453.988199][T22698] active_file 0
[ 2453.988199][T22698] unevictable 0
[ 2453.988199][T22698] slab_reclaimable 50296
[ 2453.988199][T22698] slab_unreclaimable 82440
[ 2453.988199][T22698] slab 132736
[ 2454.000799][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2454.087098][T22698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22697,uid=0
[ 2454.114973][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2454.122019][T22698] Memory cgroup out of memory: Killed process 22698 (syz-executor.3) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2454.126727][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2454.156646][T22523] device veth1_macvtap entered promiscuous mode
18:59:25 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12)

18:59:25 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0))

18:59:25 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x0, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:25 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

[ 2454.261060][T22595] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2454.342799][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2454.356226][T22506] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2454.369973][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2454.393910][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2454.422958][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2454.438785][T22506] CPU: 1 PID: 22506 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2454.449352][T22506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2454.459635][T22506] Call Trace:
[ 2454.462921][T22506]  <TASK>
[ 2454.467195][T22506]  dump_stack_lvl+0xd1/0x138
[ 2454.471826][T22506]  dump_header+0x10b/0x85f
[ 2454.476534][T22506]  oom_kill_process.cold+0x10/0x15
[ 2454.481704][T22506]  out_of_memory+0x35c/0x14a0
[ 2454.486428][T22506]  ? find_held_lock+0x2d/0x110
[ 2454.491233][T22506]  ? oom_killer_disable+0x280/0x280
[ 2454.496574][T22506]  ? find_held_lock+0x2d/0x110
[ 2454.501487][T22506]  mem_cgroup_out_of_memory+0x206/0x270
[ 2454.507067][T22506]  ? mem_cgroup_margin+0x130/0x130
[ 2454.512202][T22506]  ? lock_downgrade+0x6e0/0x6e0
[ 2454.517084][T22506]  try_charge_memcg+0xefb/0x12f0
[ 2454.522126][T22506]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2454.528128][T22506]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2454.533874][T22506]  ? lock_downgrade+0x6e0/0x6e0
[ 2454.538759][T22506]  obj_cgroup_charge+0x2af/0x5e0
[ 2454.543725][T22506]  kmem_cache_alloc_lru+0x145/0x760
[ 2454.548957][T22506]  ? __d_alloc+0x32/0x980
[ 2454.553400][T22506]  __d_alloc+0x32/0x980
[ 2454.557682][T22506]  d_alloc+0x4e/0x240
[ 2454.561772][T22506]  __lookup_hash+0xc8/0x180
[ 2454.566300][T22506]  filename_create+0x1d6/0x4a0
[ 2454.571171][T22506]  ? filename_parentat+0x5a0/0x5a0
[ 2454.576822][T22506]  ? lock_downgrade+0x6e0/0x6e0
[ 2454.581696][T22506]  ? __virt_addr_valid+0x61/0x2e0
[ 2454.587008][T22506]  ? __phys_addr+0xc8/0x140
[ 2454.591540][T22506]  do_mkdirat+0x9d/0x2f0
[ 2454.596339][T22506]  ? __ia32_sys_mknod+0xb0/0xb0
[ 2454.601446][T22506]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2454.607585][T22506]  __x64_sys_mkdirat+0x119/0x170
[ 2454.612598][T22506]  do_syscall_64+0x39/0xb0
[ 2454.617078][T22506]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2454.623001][T22506] RIP: 0033:0x7faee168b0e7
[ 2454.627454][T22506] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2454.647104][T22506] RSP: 002b:00007ffd5780f338 EFLAGS: 00000202 ORIG_RAX: 0000000000000102
[ 2454.655565][T22506] RAX: ffffffffffffffda RBX: 00007ffd5780f3c0 RCX: 00007faee168b0e7
[ 2454.663571][T22506] RDX: 00000000000001ff RSI: 00007ffd5780f3c0 RDI: 00000000ffffff9c
[ 2454.671658][T22506] RBP: 00007ffd5780f39c R08: 0000000000000000 R09: 0000000000000003
[ 2454.679736][T22506] R10: 00007ffd5780f0d7 R11: 0000000000000202 R12: 0000000000000032
[ 2454.687822][T22506] R13: 00000000002571a0 R14: 0000000000000011 R15: 00007ffd5780f400
[ 2454.695843][T22506]  </TASK>
[ 2454.728481][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2454.759207][T22506] memory: usage 10352kB, limit 4kB, failcnt 1752
[ 2454.765885][T22506] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2454.772957][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2454.786141][T22506] Memory cgroup stats for /syz3:
[ 2454.786368][T22506] anon 45056
[ 2454.786368][T22506] file 10452992
[ 2454.786368][T22506] kernel 102400
[ 2454.786368][T22506] kernel_stack 0
[ 2454.786368][T22506] pagetables 8192
[ 2454.786368][T22506] sec_pagetables 0
[ 2454.786368][T22506] percpu 64
[ 2454.786368][T22506] sock 0
[ 2454.786368][T22506] vmalloc 0
[ 2454.786368][T22506] shmem 10452992
[ 2454.786368][T22506] zswap 0
[ 2454.786368][T22506] zswapped 0
[ 2454.786368][T22506] file_mapped 311296
[ 2454.786368][T22506] file_dirty 0
[ 2454.786368][T22506] file_writeback 0
[ 2454.786368][T22506] swapcached 0
[ 2454.786368][T22506] anon_thp 0
[ 2454.786368][T22506] file_thp 0
[ 2454.786368][T22506] shmem_thp 0
[ 2454.786368][T22506] inactive_anon 45056
[ 2454.786368][T22506] active_anon 10452992
[ 2454.786368][T22506] inactive_file 0
[ 2454.786368][T22506] active_file 0
[ 2454.786368][T22506] unevictable 0
[ 2454.786368][T22506] slab_reclaimable 37664
[ 2454.786368][T22506] slab_unreclaimable 44080
[ 2454.786368][T22506] slab 81744
[ 2454.817186][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2455.064288][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2455.102103][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2455.114464][T22506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22506,uid=0
[ 2455.136543][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2455.168654][T22506] Memory cgroup out of memory: Killed process 22506 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2455.187298][T22523] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2455.235967][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2455.268990][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2455.288673][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2455.308624][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2455.319513][T14228] Bluetooth: hci0: command 0x0419 tx timeout
[ 2455.338583][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2455.349799][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2455.380907][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2455.402509][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2455.421202][T22523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2455.438616][T22523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2455.490142][T22523] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2455.508855][T22595] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2455.547276][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2455.556055][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2455.565802][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2455.574844][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2455.634395][T22595] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2455.671346][T22523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2455.680314][T22523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2455.689493][T22523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2455.698226][T22523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2455.747478][T22595] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2455.911489][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2455.929000][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2456.012454][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2456.062110][T14864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2456.078149][T14864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2456.122562][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2456.161809][T22595] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2456.215038][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2456.223806][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2456.237231][T22595] 8021q: adding VLAN 0 to HW filter on device team0
[ 2456.249356][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
18:59:27 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x1b0b, 0x12)

18:59:27 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x0, 0x0)

18:59:27 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:27 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x2000, 0x12)

[ 2456.260092][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2456.269139][T23811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2456.276262][T23811] bridge0: port 1(bridge_slave_0) entered forwarding state
18:59:28 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x0, 0x0)

[ 2456.391778][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2456.409701][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2456.436918][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2456.479200][T14417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2456.486357][T14417] bridge0: port 2(bridge_slave_1) entered forwarding state
18:59:28 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:28 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x0, 0x0)

[ 2456.599971][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2456.629598][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2456.688233][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2456.863119][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2456.894707][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2456.934208][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2456.979453][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2457.017000][T22595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2457.089739][T22595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2457.153844][T22719] syz-executor.5 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2457.191277][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2457.209464][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2457.373794][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2457.384307][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2457.393986][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2457.400761][T22719] CPU: 0 PID: 22719 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2457.411491][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2457.421717][T22719] Call Trace:
[ 2457.425057][T22719]  <TASK>
[ 2457.428029][T22719]  dump_stack_lvl+0xd1/0x138
[ 2457.432682][T22719]  dump_header+0x10b/0x85f
[ 2457.437169][T22719]  oom_kill_process.cold+0x10/0x15
[ 2457.442349][T22719]  out_of_memory+0x35c/0x14a0
[ 2457.447273][T22719]  ? find_held_lock+0x2d/0x110
[ 2457.452198][T22719]  ? oom_killer_disable+0x280/0x280
[ 2457.457439][T22719]  ? find_held_lock+0x2d/0x110
[ 2457.462247][T22719]  mem_cgroup_out_of_memory+0x206/0x270
[ 2457.467823][T22719]  ? mem_cgroup_margin+0x130/0x130
[ 2457.472959][T22719]  ? lock_downgrade+0x6e0/0x6e0
[ 2457.477838][T22719]  try_charge_memcg+0xefb/0x12f0
[ 2457.482800][T22719]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2457.488810][T22719]  ? lock_downgrade+0x6e0/0x6e0
[ 2457.493691][T22719]  charge_memcg+0x90/0x3b0
[ 2457.498125][T22719]  __mem_cgroup_charge+0x2b/0x90
[ 2457.503164][T22719]  ? folio_flags.constprop.0+0x53/0x150
[ 2457.508743][T22719]  __filemap_add_folio+0x615/0xf80
[ 2457.513886][T22719]  ? filemap_write_and_wait_range+0x120/0x120
[ 2457.519993][T22719]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2457.525730][T22719]  ? alloc_pages+0x1b2/0x270
[ 2457.530343][T22719]  ? folio_alloc+0x43/0x70
[ 2457.534783][T22719]  filemap_add_folio+0xaf/0x1e0
[ 2457.539654][T22719]  ? __filemap_add_folio+0xf80/0xf80
[ 2457.545057][T22719]  ? xas_load+0x6a/0x140
[ 2457.549337][T22719]  __filemap_get_folio+0x389/0xd80
[ 2457.554603][T22719]  ? filemap_add_folio+0x1e0/0x1e0
[ 2457.559778][T22719]  ? asm_exc_page_fault+0x26/0x30
[ 2457.564880][T22719]  pagecache_get_page+0x2e/0x280
[ 2457.569960][T22719]  ext4_da_write_begin+0x421/0xb50
[ 2457.575122][T22719]  ? ext4_write_begin+0x1140/0x1140
[ 2457.580367][T22719]  generic_perform_write+0x256/0x570
[ 2457.585773][T22719]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2457.591165][T22719]  ? discard_new_inode+0x1a0/0x1a0
[ 2457.596306][T22719]  ? down_write_killable+0x250/0x250
[ 2457.601627][T22719]  ext4_buffered_write_iter+0x15b/0x460
[ 2457.607207][T22719]  ext4_file_write_iter+0x8bf/0x1710
[ 2457.612531][T22719]  ? lock_release+0x810/0x810
[ 2457.617342][T22719]  ? ext4_file_mmap+0x440/0x440
[ 2457.622302][T22719]  vfs_write+0x9ed/0xdd0
[ 2457.626597][T22719]  ? kernel_write+0x630/0x630
[ 2457.631363][T22719]  ? __fget_files+0x26a/0x440
[ 2457.636110][T22719]  ksys_write+0x12b/0x250
[ 2457.640470][T22719]  ? __ia32_sys_read+0xb0/0xb0
[ 2457.645281][T22719]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2457.650891][T22719]  do_syscall_64+0x39/0xb0
[ 2457.655362][T22719]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2457.661311][T22719] RIP: 0033:0x7fbfb3c8c0c9
[ 2457.665773][T22719] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2457.685424][T22719] RSP: 002b:00007fbfb4a2a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2457.694769][T22719] RAX: ffffffffffffffda RBX: 00007fbfb3dabf80 RCX: 00007fbfb3c8c0c9
[ 2457.702956][T22719] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2457.710949][T22719] RBP: 00007fbfb3ce7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2457.718938][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2457.726971][T22719] R13: 00007ffe58467b4f R14: 00007fbfb4a2a300 R15: 0000000000022000
[ 2457.735115][T22719]  </TASK>
[ 2457.761827][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2457.772655][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2457.780982][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2457.788872][T22719] memory: usage 10716kB, limit 4kB, failcnt 1214
[ 2457.796212][T22719] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2457.864437][T22719] Memory cgroup stats for /syz5:
[ 2457.864616][T22719] anon 143360
[ 2457.864616][T22719] file 10448896
[ 2457.864616][T22719] kernel 380928
[ 2457.864616][T22719] kernel_stack 131072
[ 2457.864616][T22719] pagetables 81920
[ 2457.864616][T22719] sec_pagetables 0
[ 2457.864616][T22719] percpu 64
[ 2457.864616][T22719] sock 0
[ 2457.864616][T22719] vmalloc 0
[ 2457.864616][T22719] shmem 10448896
[ 2457.864616][T22719] zswap 0
[ 2457.864616][T22719] zswapped 0
[ 2457.864616][T22719] file_mapped 249856
[ 2457.864616][T22719] file_dirty 0
[ 2457.864616][T22719] file_writeback 0
[ 2457.864616][T22719] swapcached 0
[ 2457.864616][T22719] anon_thp 0
[ 2457.864616][T22719] file_thp 0
[ 2457.864616][T22719] shmem_thp 0
[ 2457.864616][T22719] inactive_anon 143360
[ 2457.864616][T22719] active_anon 10448896
[ 2457.864616][T22719] inactive_file 0
[ 2457.864616][T22719] active_file 0
[ 2457.864616][T22719] unevictable 0
[ 2457.864616][T22719] slab_reclaimable 49112
[ 2457.864616][T22719] slab_unreclaimable 91128
[ 2457.864616][T22719] slab 140240
[ 2458.017824][T22719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22718,uid=0
[ 2458.043416][T22719] Memory cgroup out of memory: Killed process 22719 (syz-executor.5) total-vm:56852kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2458.324651][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2458.334190][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2458.355060][T22595] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2458.472333][T22736] chnl_net:caif_netlink_parms(): no params data found
[ 2458.499306][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2458.519204][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2458.639803][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2458.648345][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2458.659247][T22595] device veth0_vlan entered promiscuous mode
[ 2458.681400][T22595] device veth1_vlan entered promiscuous mode
[ 2458.694316][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2458.702537][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2458.711120][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2458.758825][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2458.800660][T22736] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2458.807814][T22736] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2458.819251][T22736] device bridge_slave_0 entered promiscuous mode
[ 2458.831317][T15447] device hsr_slave_0 left promiscuous mode
[ 2458.838102][T15447] device hsr_slave_1 left promiscuous mode
[ 2458.868810][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2458.876293][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2458.897455][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2458.912355][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2458.938902][T15447] device bridge_slave_1 left promiscuous mode
[ 2458.947711][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2458.968347][T15447] device bridge_slave_0 left promiscuous mode
[ 2458.977440][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2459.039072][T15447] device hsr_slave_0 left promiscuous mode
[ 2459.046012][T15447] device hsr_slave_1 left promiscuous mode
[ 2459.079752][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2459.087246][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2459.111648][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2459.138716][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2459.148307][T15447] device bridge_slave_1 left promiscuous mode
[ 2459.169294][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2459.189917][T15447] device bridge_slave_0 left promiscuous mode
[ 2459.196201][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2459.242490][T15447] device veth1_macvtap left promiscuous mode
[ 2459.259194][T15447] device veth0_macvtap left promiscuous mode
[ 2459.265402][T15447] device veth1_vlan left promiscuous mode
[ 2459.278771][T15447] device veth0_vlan left promiscuous mode
[ 2459.300609][T15447] device veth1_macvtap left promiscuous mode
[ 2459.307320][T15447] device veth0_macvtap left promiscuous mode
[ 2459.329261][T14228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2459.329309][T15447] device veth1_vlan left promiscuous mode
[ 2459.329409][T15447] device veth0_vlan left promiscuous mode
[ 2459.348710][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2459.359595][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2459.367799][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2459.375549][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2459.861831][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2459.877005][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2459.885047][ T5119] Bluetooth: hci1: command 0x0409 tx timeout
[ 2459.910698][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2459.928983][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2460.007481][T15447] bond0 (unregistering): Released all slaves
[ 2460.145361][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2460.160428][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2460.182975][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2460.200049][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2460.284975][T15447] bond0 (unregistering): Released all slaves
[ 2460.391887][T22736] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2460.399725][T22736] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2460.408137][T22736] device bridge_slave_1 entered promiscuous mode
[ 2460.445756][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2460.455274][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2460.465858][T22595] device veth0_macvtap entered promiscuous mode
[ 2460.494711][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2460.521825][T22595] device veth1_macvtap entered promiscuous mode
[ 2460.541754][T22736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2460.571606][T22736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2460.610994][T22595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.622748][T22595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.632710][T22595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.646279][T22595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.656341][T22595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.667676][T22595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.677686][T22595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2460.688487][T22595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.717998][T22595] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2460.756556][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2460.766587][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2460.778173][T22595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2460.792804][T22595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.803128][T22595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2460.813868][T22595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.824361][T22595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2460.848062][T22595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.858652][T22595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2460.869861][T22595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2460.884121][T22595] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2460.924005][T22736] team0: Port device team_slave_0 added
[ 2460.934887][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2460.955399][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2460.981321][T22595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2460.990738][T22595] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2461.012946][T22595] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2461.022180][T22595] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2461.035717][T22736] team0: Port device team_slave_1 added
[ 2461.169696][T22736] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2461.176823][T22736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2461.224408][T22736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2461.258935][T22736] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2461.269485][T22736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2461.296491][T22736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2461.386465][T15966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2461.408745][ T5119] Bluetooth: hci3: command 0x0409 tx timeout
[ 2461.411104][T15966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2461.458064][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2461.473465][T22736] device hsr_slave_0 entered promiscuous mode
[ 2461.497088][T22736] device hsr_slave_1 entered promiscuous mode
[ 2461.504334][T22736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2461.512195][T22736] Cannot create hsr debugfs directory
[ 2461.530130][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2461.572571][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2461.618851][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2461.739733][T22769] chnl_net:caif_netlink_parms(): no params data found
18:59:33 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

18:59:33 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:33 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:33 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2461.920207][T22523] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0
[ 2461.965044][ T5119] Bluetooth: hci1: command 0x041b tx timeout
[ 2461.984747][T22523] CPU: 1 PID: 22523 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2461.995230][T22523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2462.005451][T22523] Call Trace:
[ 2462.008861][T22523]  <TASK>
[ 2462.012097][T22523]  dump_stack_lvl+0xd1/0x138
[ 2462.016773][T22523]  dump_header+0x10b/0x85f
[ 2462.021349][T22523]  oom_kill_process.cold+0x10/0x15
[ 2462.026549][T22523]  out_of_memory+0x35c/0x14a0
[ 2462.031295][T22523]  ? find_held_lock+0x2d/0x110
[ 2462.036115][T22523]  ? oom_killer_disable+0x280/0x280
[ 2462.041377][T22523]  ? find_held_lock+0x2d/0x110
[ 2462.046207][T22523]  mem_cgroup_out_of_memory+0x206/0x270
[ 2462.051913][T22523]  ? mem_cgroup_margin+0x130/0x130
[ 2462.057091][T22523]  ? lock_downgrade+0x6e0/0x6e0
[ 2462.063044][T22523]  try_charge_memcg+0xefb/0x12f0
[ 2462.068028][T22523]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2462.074059][T22523]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2462.080009][T22523]  ? lock_downgrade+0x6e0/0x6e0
[ 2462.085153][T22523]  ? lock_downgrade+0x6e0/0x6e0
[ 2462.090033][T22523]  ? rcu_read_unlock+0x9/0x60
[ 2462.094768][T22523]  obj_cgroup_charge+0x2af/0x5e0
[ 2462.099750][T22523]  ? copy_process+0x3aa/0x7520
[ 2462.104556][T22523]  kmem_cache_alloc_node+0xb7/0x460
[ 2462.109808][T22523]  copy_process+0x3aa/0x7520
[ 2462.114447][T22523]  ? _raw_spin_unlock+0x28/0x40
[ 2462.119340][T22523]  ? wp_page_reuse+0x197/0x570
[ 2462.124178][T22523]  ? do_wp_page+0x844/0x3370
[ 2462.129514][T22523]  ? __cleanup_sighand+0xb0/0xb0
[ 2462.134483][T22523]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2462.139907][T22523]  ? rwlock_bug.part.0+0x90/0x90
[ 2462.144886][T22523]  ? lock_chain_count+0x20/0x20
[ 2462.149799][T22523]  kernel_clone+0xeb/0x990
[ 2462.154349][T22523]  ? create_io_thread+0xf0/0xf0
[ 2462.159417][T22523]  ? find_held_lock+0x2d/0x110
[ 2462.164322][T22523]  __do_sys_clone+0xba/0x100
[ 2462.169049][T22523]  ? kernel_clone+0x990/0x990
[ 2462.173888][T22523]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2462.179485][T22523]  do_syscall_64+0x39/0xb0
[ 2462.184031][T22523]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2462.189959][T22523] RIP: 0033:0x7fbfb3c89dfb
[ 2462.194848][T22523] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2462.214578][T22523] RSP: 002b:00007ffe58467d90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2462.223169][T22523] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfb3c89dfb
[ 2462.231179][T22523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2462.239198][T22523] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555560bd400
[ 2462.247313][T22523] R10: 00005555560bd6d0 R11: 0000000000000246 R12: 0000000000000001
[ 2462.255363][T22523] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe58467e70
[ 2462.263460][T22523]  </TASK>
[ 2462.478423][T22769] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2462.499308][T22769] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2462.519316][T22769] device bridge_slave_0 entered promiscuous mode
[ 2462.578786][T22523] memory: usage 10332kB, limit 4kB, failcnt 1233
[ 2462.587801][T22769] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2462.588334][T22523] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2462.608707][T22769] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2462.628821][T22769] device bridge_slave_1 entered promiscuous mode
[ 2462.648568][T22523] Memory cgroup stats for /syz5:
[ 2462.648773][T22523] anon 40960
[ 2462.648773][T22523] file 10448896
[ 2462.648773][T22523] kernel 90112
[ 2462.648773][T22523] kernel_stack 0
[ 2462.648773][T22523] pagetables 8192
[ 2462.648773][T22523] sec_pagetables 0
[ 2462.648773][T22523] percpu 0
[ 2462.648773][T22523] sock 0
[ 2462.648773][T22523] vmalloc 0
[ 2462.648773][T22523] shmem 10448896
[ 2462.648773][T22523] zswap 0
[ 2462.648773][T22523] zswapped 0
[ 2462.648773][T22523] file_mapped 241664
[ 2462.648773][T22523] file_dirty 0
[ 2462.648773][T22523] file_writeback 0
[ 2462.648773][T22523] swapcached 0
[ 2462.648773][T22523] anon_thp 0
[ 2462.648773][T22523] file_thp 0
[ 2462.648773][T22523] shmem_thp 0
[ 2462.648773][T22523] inactive_anon 40960
[ 2462.648773][T22523] active_anon 10448896
[ 2462.648773][T22523] inactive_file 0
[ 2462.648773][T22523] active_file 0
[ 2462.648773][T22523] unevictable 0
[ 2462.648773][T22523] slab_reclaimable 38704
[ 2462.648773][T22523] slab_unreclaimable 32296
[ 2462.648773][T22523] slab 71000
[ 2462.853157][T22769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2462.893549][T22769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2462.933161][T22523] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22523,uid=0
[ 2462.984742][T22769] team0: Port device team_slave_0 added
[ 2462.994008][T22523] Memory cgroup out of memory: Killed process 22523 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2463.040179][T22769] team0: Port device team_slave_1 added
[ 2463.153255][T22769] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2463.169116][T22769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2463.228874][T22769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2463.268332][T22769] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2463.298549][T22769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2463.376902][T22769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2463.443055][T22736] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2463.473317][T22736] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2463.498582][ T5119] Bluetooth: hci3: command 0x041b tx timeout
[ 2463.513355][T22736] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2463.614106][T22736] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2463.669531][T22769] device hsr_slave_0 entered promiscuous mode
[ 2463.687918][T22769] device hsr_slave_1 entered promiscuous mode
[ 2463.706970][T22769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2463.716548][T22769] Cannot create hsr debugfs directory
[ 2463.986946][T22769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.039086][ T5119] Bluetooth: hci1: command 0x040f tx timeout
[ 2464.059074][T22736] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2464.095843][T22769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.151658][T22736] 8021q: adding VLAN 0 to HW filter on device team0
[ 2464.179399][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2464.187462][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2464.209885][T22769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.249174][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2464.259930][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2464.269392][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2464.276681][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2464.285636][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2464.302462][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2464.311242][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2464.318480][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2464.327381][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2464.366496][T22769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.381608][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2464.390875][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2464.400342][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2464.410459][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2464.434642][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2464.460093][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2464.478855][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2464.518455][T22736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2464.558360][T22736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2464.568233][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2464.589518][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2464.709936][T15447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.859720][T15447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.989261][T15447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2465.008127][T22769] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2465.033709][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2465.055695][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2465.081685][T15447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2465.101356][T22769] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2465.116121][T22736] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2465.129577][T22769] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2465.159152][T22769] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2465.407340][T22769] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2465.423757][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2465.433232][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2465.460730][T22769] 8021q: adding VLAN 0 to HW filter on device team0
[ 2465.490882][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2465.500688][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2465.510127][T15074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2465.517259][T15074] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2465.539512][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2465.568857][ T5119] Bluetooth: hci3: command 0x040f tx timeout
[ 2465.570549][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2465.584853][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2465.609417][T26601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2465.616655][T26601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2465.635626][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2465.645701][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2465.667196][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2465.771451][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2465.791436][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2465.813266][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2465.831798][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2465.847052][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2465.867274][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2465.915310][T22769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2466.036870][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2466.056492][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2466.121233][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2466.130960][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2466.138637][ T5119] Bluetooth: hci1: command 0x0419 tx timeout
[ 2466.172434][T22736] device veth0_vlan entered promiscuous mode
[ 2466.223377][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2466.231885][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2466.247653][T22736] device veth1_vlan entered promiscuous mode
[ 2466.373315][T22736] device veth0_macvtap entered promiscuous mode
[ 2466.411106][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2466.420483][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2466.439936][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2466.458886][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2466.501407][T22736] device veth1_macvtap entered promiscuous mode
[ 2466.519014][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2466.527535][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2466.575160][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2466.597991][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.624681][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2466.638253][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.654914][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2466.668023][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.681026][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2466.691713][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.702943][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2466.713650][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.725323][T22736] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2466.737820][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2466.746488][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2466.754410][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2466.766214][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2466.816238][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2466.829141][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.840543][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2466.851795][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.862039][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2466.873021][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.884073][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2466.894913][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.905345][T22736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2466.916111][T22736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2466.932095][T22736] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2466.943667][T22769] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2466.952113][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2466.961898][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2467.001530][T22736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2467.010579][T22736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2467.019815][T22736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2467.030202][T22736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2467.133793][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2467.143059][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2467.188100][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2467.200541][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2467.209965][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2467.217821][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2467.243444][T22769] device veth0_vlan entered promiscuous mode
[ 2467.255650][T15444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2467.278914][T15444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2467.301804][T22769] device veth1_vlan entered promiscuous mode
[ 2467.329673][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2467.338061][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2467.401389][ T1200] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.407748][ T1200] ieee802154 phy1 wpan1: encryption failed: -22
[ 2467.415187][T15331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2467.433092][T15331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2467.457955][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2467.479707][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2467.489238][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2467.509461][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2467.527048][T22769] device veth0_macvtap entered promiscuous mode
[ 2467.554616][T15447] device hsr_slave_0 left promiscuous mode
[ 2467.567726][T15447] device hsr_slave_1 left promiscuous mode
[ 2467.576370][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2467.601778][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2467.619284][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2467.636299][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2467.649804][ T5115] Bluetooth: hci3: command 0x0419 tx timeout
[ 2467.690110][T15447] device bridge_slave_1 left promiscuous mode
[ 2467.696707][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2467.707599][T15447] device bridge_slave_0 left promiscuous mode
[ 2467.714691][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2467.753570][T15447] device hsr_slave_0 left promiscuous mode
[ 2467.769587][T15447] device hsr_slave_1 left promiscuous mode
[ 2467.823240][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2467.840855][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2467.858202][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2467.877740][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2467.899541][T15447] device bridge_slave_1 left promiscuous mode
[ 2467.915584][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2467.937698][T15447] device bridge_slave_0 left promiscuous mode
[ 2467.958378][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2467.966478][T22857] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2467.981394][T22857] CPU: 0 PID: 22857 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2467.991880][T22857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2468.002169][T22857] Call Trace:
[ 2468.005486][T22857]  <TASK>
[ 2468.008523][T22857]  dump_stack_lvl+0xd1/0x138
[ 2468.013311][T22857]  dump_header+0x10b/0x85f
[ 2468.017788][T22857]  oom_kill_process.cold+0x10/0x15
[ 2468.023000][T22857]  out_of_memory+0x35c/0x14a0
[ 2468.027724][T22857]  ? oom_killer_disable+0x280/0x280
[ 2468.032948][T22857]  ? mark_held_locks+0x9f/0xe0
[ 2468.037735][T22857]  mem_cgroup_out_of_memory+0x206/0x270
[ 2468.043306][T22857]  ? mem_cgroup_margin+0x130/0x130
[ 2468.048463][T22857]  memory_max_write+0x2f9/0x3c0
[ 2468.053339][T22857]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2468.059428][T22857]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2468.065529][T22857]  cgroup_file_write+0x1e2/0x770
[ 2468.070489][T22857]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2468.076675][T22857]  ? kill_css+0x370/0x370
[ 2468.081033][T22857]  ? kill_css+0x370/0x370
[ 2468.085379][T22857]  kernfs_fop_write_iter+0x3f1/0x600
[ 2468.090694][T22857]  vfs_write+0x9ed/0xdd0
[ 2468.094967][T22857]  ? kernel_write+0x630/0x630
[ 2468.099664][T22857]  ? __fget_files+0x26a/0x440
[ 2468.104392][T22857]  ksys_write+0x12b/0x250
[ 2468.108754][T22857]  ? __ia32_sys_read+0xb0/0xb0
[ 2468.113558][T22857]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2468.119148][T22857]  do_syscall_64+0x39/0xb0
[ 2468.123590][T22857]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2468.129506][T22857] RIP: 0033:0x7faf4908c0c9
[ 2468.133947][T22857] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2468.153918][T22857] RSP: 002b:00007faf49cfe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2468.162345][T22857] RAX: ffffffffffffffda RBX: 00007faf491abf80 RCX: 00007faf4908c0c9
[ 2468.170336][T22857] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006
[ 2468.178581][T22857] RBP: 00007faf490e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2468.186568][T22857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2468.194565][T22857] R13: 00007ffd3fb1847f R14: 00007faf49cfe300 R15: 0000000000022000
[ 2468.202570][T22857]  </TASK>
[ 2468.224849][T22857] memory: usage 10620kB, limit 0kB, failcnt 3510
[ 2468.233092][T15447] device veth1_macvtap left promiscuous mode
[ 2468.238716][T22857] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2468.245660][T15447] device veth0_macvtap left promiscuous mode
[ 2468.257409][T22857] Memory cgroup stats for /syz4:
[ 2468.263635][T22857] anon 118784
[ 2468.263635][T22857] file 10444800
[ 2468.263635][T22857] kernel 290816
[ 2468.263635][T22857] kernel_stack 65536
[ 2468.263635][T22857] pagetables 77824
[ 2468.263635][T22857] sec_pagetables 0
[ 2468.263635][T22857] percpu 64
[ 2468.263635][T22857] sock 0
[ 2468.263635][T22857] vmalloc 0
[ 2468.263635][T22857] shmem 10444800
[ 2468.263635][T22857] zswap 0
[ 2468.263635][T22857] zswapped 0
[ 2468.263635][T22857] file_mapped 245760
[ 2468.263635][T22857] file_dirty 0
[ 2468.263635][T22857] file_writeback 0
[ 2468.263635][T22857] swapcached 0
[ 2468.263635][T22857] anon_thp 0
[ 2468.263635][T22857] file_thp 0
[ 2468.263635][T22857] shmem_thp 0
[ 2468.263635][T22857] inactive_anon 118784
[ 2468.263635][T22857] active_anon 10444800
[ 2468.263635][T22857] inactive_file 0
[ 2468.263635][T22857] active_file 0
[ 2468.263635][T22857] unevictable 0
[ 2468.263635][T22857] slab_reclaimable 47848
[ 2468.263635][T22857] slab_unreclaimable 75696
[ 2468.263635][T22857] slab 123544
[ 2468.264118][T15447] device veth1_vlan left promiscuous mode
[ 2468.277798][T22857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null)
[ 2468.377254][T15447] device veth0_vlan left promiscuous mode
[ 2468.392512][T15447] device veth1_macvtap left promiscuous mode
[ 2468.404893][T22857] ,cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22736,uid=0
[ 2468.408844][T15447] device veth0_macvtap left promiscuous mode
[ 2468.443184][T15447] device veth1_vlan left promiscuous mode
[ 2468.443883][T22857] Memory cgroup out of memory: Killed process 22736 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2468.458725][T15447] device veth0_vlan left promiscuous mode
[ 2469.040818][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2469.055546][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2469.072167][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2469.087597][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2469.167587][T15447] bond0 (unregistering): Released all slaves
[ 2469.326565][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2469.345142][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2469.366364][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2469.381330][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2469.456874][T15447] bond0 (unregistering): Released all slaves
[ 2469.539599][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2469.595540][T22769] device veth1_macvtap entered promiscuous mode
[ 2469.660690][T22769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2469.671471][T22769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2469.681873][T22769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2469.692702][T22769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2469.702911][T22769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2469.713957][T22769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2469.726252][T22769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2469.737166][T22769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2469.749624][T22769] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2469.757677][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2469.767309][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2469.791979][T22769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
18:59:41 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

18:59:41 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:41 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

18:59:41 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x2, 0x9, &(0x7f00000001c0))

[ 2469.806378][T22769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2469.831025][T22769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2469.852023][T22769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2469.868277][T22769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2469.895811][T22769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2469.918048][T22769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2469.938571][T22769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2469.990443][T22769] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2470.029809][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2470.040874][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2470.071259][T22769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2470.098714][T22769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2470.107518][T22769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2470.128598][T22769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2470.329214][T18399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2470.337840][T18399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2470.383456][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2470.479360][T15331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2470.508642][T15331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2470.519307][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2470.935242][T22888] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2471.040513][T22888] CPU: 0 PID: 22888 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2471.051025][T22888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2471.061245][T22888] Call Trace:
[ 2471.064628][T22888]  <TASK>
[ 2471.068869][T22888]  dump_stack_lvl+0xd1/0x138
[ 2471.073643][T22888]  dump_header+0x10b/0x85f
[ 2471.078138][T22888]  oom_kill_process.cold+0x10/0x15
[ 2471.083439][T22888]  out_of_memory+0x35c/0x14a0
[ 2471.088276][T22888]  ? find_held_lock+0x2d/0x110
[ 2471.093110][T22888]  ? oom_killer_disable+0x280/0x280
[ 2471.098413][T22888]  ? find_held_lock+0x2d/0x110
[ 2471.103326][T22888]  mem_cgroup_out_of_memory+0x206/0x270
[ 2471.109018][T22888]  ? mem_cgroup_margin+0x130/0x130
[ 2471.114205][T22888]  ? lock_downgrade+0x6e0/0x6e0
[ 2471.119179][T22888]  try_charge_memcg+0xefb/0x12f0
[ 2471.124200][T22888]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2471.130315][T22888]  ? lock_downgrade+0x6e0/0x6e0
[ 2471.135250][T22888]  charge_memcg+0x90/0x3b0
[ 2471.139894][T22888]  __mem_cgroup_charge+0x2b/0x90
[ 2471.144896][T22888]  ? folio_flags.constprop.0+0x53/0x150
[ 2471.150516][T22888]  __filemap_add_folio+0x615/0xf80
[ 2471.155694][T22888]  ? filemap_write_and_wait_range+0x120/0x120
[ 2471.161851][T22888]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2471.167445][T22888]  ? alloc_pages+0x1b2/0x270
[ 2471.172267][T22888]  ? folio_alloc+0x43/0x70
[ 2471.176849][T22888]  filemap_add_folio+0xaf/0x1e0
[ 2471.181758][T22888]  ? __filemap_add_folio+0xf80/0xf80
[ 2471.187302][T22888]  ? xas_load+0x6a/0x140
[ 2471.191614][T22888]  __filemap_get_folio+0x389/0xd80
[ 2471.196870][T22888]  ? filemap_add_folio+0x1e0/0x1e0
[ 2471.202039][T22888]  ? asm_exc_page_fault+0x26/0x30
[ 2471.207111][T22888]  pagecache_get_page+0x2e/0x280
[ 2471.212086][T22888]  ext4_da_write_begin+0x421/0xb50
[ 2471.217251][T22888]  ? ext4_write_begin+0x1140/0x1140
[ 2471.222539][T22888]  generic_perform_write+0x256/0x570
[ 2471.227890][T22888]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2471.233328][T22888]  ? discard_new_inode+0x1a0/0x1a0
[ 2471.238514][T22888]  ? down_write_killable+0x250/0x250
[ 2471.243999][T22888]  ext4_buffered_write_iter+0x15b/0x460
[ 2471.249719][T22888]  ext4_file_write_iter+0x8bf/0x1710
[ 2471.255065][T22888]  ? lock_release+0x810/0x810
[ 2471.259777][T22888]  ? ext4_file_mmap+0x440/0x440
[ 2471.264783][T22888]  vfs_write+0x9ed/0xdd0
[ 2471.269183][T22888]  ? kernel_write+0x630/0x630
[ 2471.273943][T22888]  ? __fget_files+0x26a/0x440
[ 2471.278680][T22888]  ksys_write+0x12b/0x250
[ 2471.283044][T22888]  ? __ia32_sys_read+0xb0/0xb0
[ 2471.287893][T22888]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2471.293589][T22888]  do_syscall_64+0x39/0xb0
[ 2471.298063][T22888]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2471.303997][T22888] RIP: 0033:0x7fa4be48c0c9
[ 2471.308444][T22888] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2471.328091][T22888] RSP: 002b:00007fa4bf13b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2471.336634][T22888] RAX: ffffffffffffffda RBX: 00007fa4be5abf80 RCX: 00007fa4be48c0c9
[ 2471.344661][T22888] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2471.352762][T22888] RBP: 00007fa4be4e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2471.360895][T22888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2471.368915][T22888] R13: 00007fffab0e807f R14: 00007fa4bf13b300 R15: 0000000000022000
[ 2471.376954][T22888]  </TASK>
[ 2471.448770][T22888] memory: usage 10680kB, limit 8kB, failcnt 1797
[ 2471.465666][T22888] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2471.488843][T22888] Memory cgroup stats for /syz3:
[ 2471.489035][T22888] anon 122880
[ 2471.489035][T22888] file 10452992
[ 2471.489035][T22888] kernel 278528
[ 2471.489035][T22888] kernel_stack 32768
[ 2471.489035][T22888] pagetables 77824
[ 2471.489035][T22888] sec_pagetables 0
[ 2471.489035][T22888] percpu 64
[ 2471.489035][T22888] sock 0
[ 2471.489035][T22888] vmalloc 0
[ 2471.489035][T22888] shmem 10452992
[ 2471.489035][T22888] zswap 0
[ 2471.489035][T22888] zswapped 0
[ 2471.489035][T22888] file_mapped 319488
[ 2471.489035][T22888] file_dirty 0
[ 2471.489035][T22888] file_writeback 0
[ 2471.489035][T22888] swapcached 0
[ 2471.489035][T22888] anon_thp 0
[ 2471.489035][T22888] file_thp 0
[ 2471.489035][T22888] shmem_thp 0
[ 2471.489035][T22888] inactive_anon 122880
[ 2471.489035][T22888] active_anon 10452992
[ 2471.489035][T22888] inactive_file 0
[ 2471.489035][T22888] active_file 0
[ 2471.489035][T22888] unevictable 0
[ 2471.489035][T22888] slab_reclaimable 46256
[ 2471.489035][T22888] slab_unreclaimable 98432
[ 2471.489035][T22888] slab 144688
[ 2471.752958][T22888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22887,uid=0
[ 2471.795144][T22888] Memory cgroup out of memory: Killed process 22888 (syz-executor.3) total-vm:54672kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:59:43 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x300b, 0x12)

18:59:43 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

18:59:43 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

18:59:43 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

[ 2472.092681][T22769] syz-executor.3 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0
[ 2472.176016][T22769] CPU: 1 PID: 22769 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2472.186511][T22769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2472.196684][T22769] Call Trace:
[ 2472.200077][T22769]  <TASK>
[ 2472.203059][T22769]  dump_stack_lvl+0xd1/0x138
[ 2472.207717][T22769]  dump_header+0x10b/0x85f
[ 2472.212188][T22769]  oom_kill_process.cold+0x10/0x15
[ 2472.217354][T22769]  out_of_memory+0x35c/0x14a0
[ 2472.222261][T22769]  ? find_held_lock+0x2d/0x110
[ 2472.227366][T22769]  ? oom_killer_disable+0x280/0x280
[ 2472.232649][T22769]  ? find_held_lock+0x2d/0x110
[ 2472.237465][T22769]  mem_cgroup_out_of_memory+0x206/0x270
[ 2472.243056][T22769]  ? mem_cgroup_margin+0x130/0x130
[ 2472.248204][T22769]  ? lock_downgrade+0x6e0/0x6e0
[ 2472.253150][T22769]  try_charge_memcg+0xefb/0x12f0
[ 2472.258142][T22769]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2472.264181][T22769]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2472.269961][T22769]  ? lock_downgrade+0x6e0/0x6e0
[ 2472.274858][T22769]  ? lock_downgrade+0x6e0/0x6e0
[ 2472.279768][T22769]  obj_cgroup_charge+0x2af/0x5e0
[ 2472.284762][T22769]  __kmem_cache_alloc_node+0xb2/0x430
[ 2472.290175][T22769]  ? kvmalloc_node+0xa2/0x1a0
[ 2472.295011][T22769]  ? kvmalloc_node+0xa2/0x1a0
[ 2472.299821][T22769]  __kmalloc_node+0x4d/0xd0
[ 2472.304387][T22769]  kvmalloc_node+0xa2/0x1a0
[ 2472.308943][T22769]  xt_alloc_table_info+0x40/0xa0
[ 2472.313934][T22769]  do_ip6t_set_ctl+0x514/0xb30
[ 2472.318737][T22769]  ? trace_contention_end+0x153/0x1e0
[ 2472.324162][T22769]  ? __mutex_lock+0x231/0x1360
[ 2472.328985][T22769]  ? compat_do_replace.constprop.0+0x410/0x410
[ 2472.335193][T22769]  ? wait_for_completion_io_timeout+0x20/0x20
[ 2472.341318][T22769]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2472.346760][T22769]  ? nf_sockopt_find.constprop.0+0x22d/0x2a0
[ 2472.352795][T22769]  nf_setsockopt+0x87/0xe0
[ 2472.357266][T22769]  ipv6_setsockopt+0x12b/0x190
[ 2472.362083][T22769]  tcp_setsockopt+0x9f/0x100
[ 2472.366719][T22769]  ? sock_common_recvmsg+0x190/0x190
[ 2472.372040][T22769]  __sys_setsockopt+0x2c6/0x5b0
[ 2472.376996][T22769]  ? __ia32_sys_recv+0x100/0x100
[ 2472.381976][T22769]  ? up_write+0x520/0x520
[ 2472.386362][T22769]  ? __traceiter_irq_enable+0xa0/0xa0
[ 2472.391804][T22769]  __x64_sys_setsockopt+0xbe/0x160
[ 2472.396975][T22769]  do_syscall_64+0x39/0xb0
[ 2472.401440][T22769]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2472.407502][T22769] RIP: 0033:0x7fa4be48d71a
[ 2472.411984][T22769] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2472.432028][T22769] RSP: 002b:00007fffab0e7be8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036
[ 2472.441555][T22769] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007fa4be48d71a
[ 2472.449682][T22769] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[ 2472.457799][T22769] RBP: 00007fffab0e7c10 R08: 0000000000000558 R09: fefefefefeff646b
[ 2472.465903][T22769] R10: 00007fa4be584940 R11: 0000000000000202 R12: 00007fffab0e7c70
18:59:44 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2472.473989][T22769] R13: 0000000000000003 R14: 00007fffab0e7c0c R15: 00007fa4be5848e0
[ 2472.482362][T22769]  </TASK>
18:59:44 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:44 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:44 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x1200, 0x12)

[ 2473.299527][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2473.309541][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2473.317901][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2473.329045][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2473.337725][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2473.345612][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2473.568653][T22769] memory: usage 10380kB, limit 8kB, failcnt 1832
[ 2473.575213][T22769] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2473.635799][T22769] Memory cgroup stats for /syz3:
[ 2473.636016][T22769] anon 40960
[ 2473.636016][T22769] file 10452992
[ 2473.636016][T22769] kernel 135168
[ 2473.636016][T22769] kernel_stack 0
[ 2473.636016][T22769] pagetables 8192
[ 2473.636016][T22769] sec_pagetables 0
[ 2473.636016][T22769] percpu 64
[ 2473.636016][T22769] sock 0
[ 2473.636016][T22769] vmalloc 0
[ 2473.636016][T22769] shmem 10452992
[ 2473.636016][T22769] zswap 0
[ 2473.636016][T22769] zswapped 0
[ 2473.636016][T22769] file_mapped 311296
[ 2473.636016][T22769] file_dirty 0
[ 2473.636016][T22769] file_writeback 0
[ 2473.636016][T22769] swapcached 0
[ 2473.636016][T22769] anon_thp 0
[ 2473.636016][T22769] file_thp 0
[ 2473.636016][T22769] shmem_thp 0
[ 2473.636016][T22769] inactive_anon 40960
[ 2473.636016][T22769] active_anon 10452992
[ 2473.636016][T22769] inactive_file 0
[ 2473.636016][T22769] active_file 0
[ 2473.636016][T22769] unevictable 0
[ 2473.636016][T22769] slab_reclaimable 39208
[ 2473.636016][T22769] slab_unreclaimable 74712
[ 2473.636016][T22769] slab 113920
[ 2473.968752][T22769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22769,uid=0
[ 2473.997096][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2474.006595][T22769] Memory cgroup out of memory: Killed process 22769 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2474.023860][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2474.032494][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2474.042298][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2474.049253][T22595] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2474.049289][T22595] CPU: 1 PID: 22595 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2474.049313][T22595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2474.049327][T22595] Call Trace:
[ 2474.049335][T22595]  <TASK>
[ 2474.049345][T22595]  dump_stack_lvl+0xd1/0x138
[ 2474.049381][T22595]  dump_header+0x10b/0x85f
[ 2474.095125][T22920] chnl_net:caif_netlink_parms(): no params data found
[ 2474.095283][T22595]  oom_kill_process.cold+0x10/0x15
[ 2474.107188][T22595]  out_of_memory+0x35c/0x14a0
[ 2474.112013][T22595]  ? oom_killer_disable+0x280/0x280
[ 2474.117281][T22595]  ? find_held_lock+0x2d/0x110
[ 2474.122109][T22595]  mem_cgroup_out_of_memory+0x206/0x270
[ 2474.127708][T22595]  ? mem_cgroup_margin+0x130/0x130
[ 2474.132870][T22595]  ? lock_downgrade+0x6e0/0x6e0
[ 2474.137775][T22595]  try_charge_memcg+0xefb/0x12f0
[ 2474.142761][T22595]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2474.148766][T22595]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2474.154530][T22595]  ? lock_downgrade+0x6e0/0x6e0
[ 2474.159477][T22595]  obj_cgroup_charge+0x2af/0x5e0
[ 2474.164461][T22595]  kmem_cache_alloc_lru+0x145/0x760
[ 2474.169696][T22595]  ? __d_alloc+0x32/0x980
[ 2474.174150][T22595]  __d_alloc+0x32/0x980
[ 2474.178332][T22595]  ? __lock_acquire+0x166e/0x56d0
[ 2474.183391][T22595]  d_alloc+0x4e/0x240
[ 2474.187426][T22595]  d_alloc_parallel+0xe8/0x1410
[ 2474.192492][T22595]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2474.198499][T22595]  ? __d_lookup_rcu+0x4c0/0x4c0
[ 2474.203375][T22595]  ? lockdep_init_map_type+0x21e/0x800
[ 2474.208864][T22595]  ? lockdep_init_map_type+0x21e/0x800
[ 2474.214356][T22595]  __lookup_slow+0x193/0x460
[ 2474.218979][T22595]  ? __lookup_hash+0x180/0x180
[ 2474.223788][T22595]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2474.229297][T22595]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2474.234796][T22595]  ? lookup_fast+0x14e/0x520
[ 2474.239422][T22595]  walk_component+0x33f/0x5a0
[ 2474.244171][T22595]  path_lookupat+0x1ba/0x840
[ 2474.248794][T22595]  filename_lookup+0x1d2/0x590
[ 2474.253596][T22595]  ? may_linkat+0x500/0x500
[ 2474.258227][T22595]  ? __might_fault+0xd9/0x180
[ 2474.262963][T22595]  ? __phys_addr_symbol+0x30/0x70
[ 2474.268025][T22595]  ? __check_object_size+0x2e2/0x5a0
[ 2474.273427][T22595]  ? strncpy_from_user+0x28b/0x3c0
[ 2474.278683][T22595]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2474.284113][T22595]  user_path_at_empty+0x46/0x60
[ 2474.289004][T22595]  __x64_sys_umount+0xfc/0x190
[ 2474.293829][T22595]  ? path_umount+0x10b0/0x10b0
[ 2474.298744][T22595]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2474.304340][T22595]  do_syscall_64+0x39/0xb0
[ 2474.308906][T22595]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2474.314833][T22595] RIP: 0033:0x7f24f148d537
[ 2474.319270][T22595] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2474.338992][T22595] RSP: 002b:00007ffdcac55e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2474.347612][T22595] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f24f148d537
[ 2474.355628][T22595] RDX: 00007ffdcac55f3a RSI: 000000000000000a RDI: 00007ffdcac55f30
[ 2474.363634][T22595] RBP: 00007ffdcac55f30 R08: 00000000ffffffff R09: 00007ffdcac55d00
[ 2474.371631][T22595] R10: 00005555565e5873 R11: 0000000000000246 R12: 00007f24f14e6b24
[ 2474.379622][T22595] R13: 00007ffdcac56ff0 R14: 00005555565e5810 R15: 00007ffdcac57030
[ 2474.387637][T22595]  </TASK>
[ 2474.392447][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2474.396183][T22595] memory: usage 10344kB, limit 0kB, failcnt 904
[ 2474.407388][T22595] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2474.439450][T22595] Memory cgroup stats for /syz2:
[ 2474.439644][T22595] anon 45056
[ 2474.439644][T22595] file 10452992
[ 2474.439644][T22595] kernel 94208
[ 2474.439644][T22595] kernel_stack 0
[ 2474.439644][T22595] pagetables 8192
[ 2474.439644][T22595] sec_pagetables 0
[ 2474.439644][T22595] percpu 0
[ 2474.439644][T22595] sock 0
[ 2474.439644][T22595] vmalloc 0
[ 2474.439644][T22595] shmem 10452992
[ 2474.439644][T22595] zswap 0
[ 2474.439644][T22595] zswapped 0
[ 2474.439644][T22595] file_mapped 241664
[ 2474.439644][T22595] file_dirty 0
[ 2474.439644][T22595] file_writeback 0
[ 2474.439644][T22595] swapcached 0
[ 2474.439644][T22595] anon_thp 0
[ 2474.439644][T22595] file_thp 0
[ 2474.439644][T22595] shmem_thp 0
[ 2474.439644][T22595] inactive_anon 45056
[ 2474.439644][T22595] active_anon 10452992
[ 2474.439644][T22595] inactive_file 0
[ 2474.439644][T22595] active_file 0
[ 2474.439644][T22595] unevictable 0
[ 2474.439644][T22595] slab_reclaimable 42832
[ 2474.439644][T22595] slab_unreclaimable 32944
[ 2474.439644][T22595] slab 75776
[ 2474.544425][T22595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22595,uid=0
[ 2474.631449][T22595] Memory cgroup out of memory: Killed process 22595 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2474.689246][T19191] syz-executor.1 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0
[ 2474.734001][T19191] CPU: 0 PID: 19191 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2474.744478][T19191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2474.754549][T19191] Call Trace:
[ 2474.757840][T19191]  <TASK>
[ 2474.760775][T19191]  dump_stack_lvl+0xd1/0x138
[ 2474.765446][T19191]  dump_header+0x10b/0x85f
[ 2474.769917][T19191]  oom_kill_process.cold+0x10/0x15
[ 2474.775161][T19191]  out_of_memory+0x35c/0x14a0
[ 2474.779887][T19191]  ? oom_killer_disable+0x280/0x280
[ 2474.785167][T19191]  ? find_held_lock+0x2d/0x110
[ 2474.789987][T19191]  mem_cgroup_out_of_memory+0x206/0x270
[ 2474.795567][T19191]  ? mem_cgroup_margin+0x130/0x130
[ 2474.800726][T19191]  ? lock_downgrade+0x6e0/0x6e0
[ 2474.805599][T19191]  try_charge_memcg+0xefb/0x12f0
[ 2474.810555][T19191]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2474.816567][T19191]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2474.822430][T19191]  ? lock_downgrade+0x6e0/0x6e0
[ 2474.827320][T19191]  obj_cgroup_charge+0x2af/0x5e0
[ 2474.832297][T19191]  kmem_cache_alloc_lru+0x145/0x760
[ 2474.837503][T19191]  ? ext4_alloc_inode+0x28/0x680
[ 2474.842560][T19191]  ? ext4_free_in_core_inode+0x70/0x70
[ 2474.848125][T19191]  ext4_alloc_inode+0x28/0x680
[ 2474.853183][T19191]  ? ext4_free_in_core_inode+0x70/0x70
[ 2474.858672][T19191]  alloc_inode+0x61/0x230
[ 2474.863032][T19191]  iget_locked+0x1bb/0x700
[ 2474.867478][T19191]  __ext4_iget+0x3af/0x4230
[ 2474.872020][T19191]  ? ext4_get_projid+0x190/0x190
[ 2474.877092][T19191]  ? ext4_fname_prepare_lookup+0x163/0x200
[ 2474.882914][T19191]  ? ext4_fname_setup_filename+0x110/0x110
[ 2474.888747][T19191]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2474.894323][T19191]  ext4_lookup+0x387/0x700
[ 2474.898758][T19191]  ? ext4_resetent+0x2d0/0x2d0
[ 2474.903566][T19191]  __lookup_slow+0x24c/0x460
[ 2474.908172][T19191]  ? __lookup_hash+0x180/0x180
[ 2474.912956][T19191]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2474.918447][T19191]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2474.923937][T19191]  ? lookup_fast+0x14e/0x520
[ 2474.928632][T19191]  walk_component+0x33f/0x5a0
[ 2474.933374][T19191]  path_lookupat+0x1ba/0x840
[ 2474.937999][T19191]  filename_lookup+0x1d2/0x590
[ 2474.942807][T19191]  ? may_linkat+0x500/0x500
[ 2474.947354][T19191]  ? __might_fault+0xd9/0x180
[ 2474.952059][T19191]  ? __phys_addr_symbol+0x30/0x70
[ 2474.957103][T19191]  ? __check_object_size+0x2e2/0x5a0
[ 2474.962419][T19191]  ? strncpy_from_user+0x28b/0x3c0
[ 2474.967647][T19191]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2474.973230][T19191]  user_path_at_empty+0x46/0x60
[ 2474.978191][T19191]  __x64_sys_umount+0xfc/0x190
[ 2474.983238][T19191]  ? path_umount+0x10b0/0x10b0
[ 2474.988041][T19191]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2474.993617][T19191]  do_syscall_64+0x39/0xb0
[ 2474.998063][T19191]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2475.003979][T19191] RIP: 0033:0x7f1fc828d537
[ 2475.008497][T19191] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2475.028218][T19191] RSP: 002b:00007ffdba9a6d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2475.036663][T19191] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1fc828d537
[ 2475.044643][T19191] RDX: 00007ffdba9a6e4b RSI: 000000000000000a RDI: 00007ffdba9a6e40
[ 2475.052888][T19191] RBP: 00007ffdba9a6e40 R08: 00000000ffffffff R09: 00007ffdba9a6c10
[ 2475.060866][T19191] R10: 0000555555fff873 R11: 0000000000000246 R12: 00007f1fc82e6b24
[ 2475.069192][T19191] R13: 00007ffdba9a7f00 R14: 0000555555fff810 R15: 00007ffdba9a7f40
[ 2475.077211][T19191]  </TASK>
[ 2475.118081][T19191] memory: usage 8308kB, limit 0kB, failcnt 722
[ 2475.127790][T19191] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2475.141464][T19191] Memory cgroup stats for /syz1:
[ 2475.141677][T19191] anon 57344
[ 2475.141677][T19191] file 8359936
[ 2475.141677][T19191] kernel 90112
[ 2475.141677][T19191] kernel_stack 0
[ 2475.141677][T19191] pagetables 12288
[ 2475.141677][T19191] sec_pagetables 0
[ 2475.141677][T19191] percpu 0
[ 2475.141677][T19191] sock 0
[ 2475.141677][T19191] vmalloc 0
[ 2475.141677][T19191] shmem 8351744
[ 2475.141677][T19191] zswap 0
[ 2475.141677][T19191] zswapped 0
[ 2475.141677][T19191] file_mapped 188416
[ 2475.141677][T19191] file_dirty 0
[ 2475.141677][T19191] file_writeback 0
[ 2475.141677][T19191] swapcached 0
[ 2475.141677][T19191] anon_thp 0
[ 2475.141677][T19191] file_thp 0
[ 2475.141677][T19191] shmem_thp 0
[ 2475.141677][T19191] inactive_anon 57344
[ 2475.141677][T19191] active_anon 8351744
[ 2475.141677][T19191] inactive_file 4096
[ 2475.141677][T19191] active_file 4096
[ 2475.141677][T19191] unevictable 0
[ 2475.141677][T19191] slab_reclaimable 33776
[ 2475.141677][T19191] slab_unreclaimable 32944
[ 2475.141677][T19191] slab 66720
[ 2475.247802][T22920] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2475.252649][T19191] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=19191,uid=0
[ 2475.278251][T19191] Memory cgroup out of memory: Killed process 19191 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0
[ 2475.279003][T22920] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2475.325897][T22920] device bridge_slave_0 entered promiscuous mode
[ 2475.408764][ T5119] Bluetooth: hci1: command 0x0409 tx timeout
[ 2475.501901][T22920] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2475.552395][T22920] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2475.588238][T22920] device bridge_slave_1 entered promiscuous mode
[ 2475.729918][T22920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2475.761356][T22920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2475.865697][T15447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2475.933194][T22920] team0: Port device team_slave_0 added
[ 2475.951773][T22920] team0: Port device team_slave_1 added
[ 2475.972027][T15447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2476.138748][T15447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2476.191486][T22920] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2476.223576][T22920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2476.295983][T22920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2476.324340][T15447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2476.399534][T22920] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2476.407332][T22920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2476.438870][ T5119] Bluetooth: hci4: command 0x0409 tx timeout
[ 2476.505412][T22920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2476.539625][T22930] chnl_net:caif_netlink_parms(): no params data found
[ 2476.681798][T22920] device hsr_slave_0 entered promiscuous mode
[ 2476.691200][T22920] device hsr_slave_1 entered promiscuous mode
[ 2476.702361][T22920] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2476.712697][T22920] Cannot create hsr debugfs directory
[ 2476.937385][T15447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2477.012119][T22930] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2477.031998][T22930] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2477.046861][T22930] device bridge_slave_0 entered promiscuous mode
[ 2477.075665][T22930] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2477.088656][T22930] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2477.096936][T22930] device bridge_slave_1 entered promiscuous mode
[ 2477.134967][T15447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2477.192640][T22930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2477.227885][T15447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2477.264573][T22930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2477.313308][T15447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2477.395366][T22930] team0: Port device team_slave_0 added
[ 2477.460894][T22930] team0: Port device team_slave_1 added
[ 2477.478795][ T5119] Bluetooth: hci1: command 0x041b tx timeout
[ 2477.614221][T22930] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2477.628574][T22930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2477.674491][T22930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2477.760956][T15447] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2477.793903][T22930] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2477.833934][T22930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2477.888761][T22930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2477.944705][T15447] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2478.337213][T15447] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2478.401031][T22930] device hsr_slave_0 entered promiscuous mode
[ 2478.428297][T22930] device hsr_slave_1 entered promiscuous mode
[ 2478.478961][T22930] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2478.486586][T22930] Cannot create hsr debugfs directory
[ 2478.518795][ T5119] Bluetooth: hci4: command 0x041b tx timeout
[ 2478.542607][T15447] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2479.163324][T15447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2479.329374][T15447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2479.479511][T15447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2479.560121][ T5119] Bluetooth: hci1: command 0x040f tx timeout
[ 2479.627991][T15447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2480.598668][ T5119] Bluetooth: hci4: command 0x040f tx timeout
[ 2480.606770][T22920] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2480.726365][T22920] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2480.755568][T22920] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2480.842365][T22920] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2481.136371][T22920] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2481.249284][T22930] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2481.267157][T22920] 8021q: adding VLAN 0 to HW filter on device team0
[ 2481.275993][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2481.287974][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2481.296969][T22930] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2481.360510][T22930] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2481.379312][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2481.388086][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2481.411914][T15074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2481.419136][T15074] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2481.437639][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2481.447308][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2481.465772][T15074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2481.473094][T15074] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2481.489860][T22930] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2481.502943][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2481.512146][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2481.523083][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2481.575145][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2481.587465][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2481.599779][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2481.609262][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2481.619907][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2481.629541][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2481.639593][ T5119] Bluetooth: hci1: command 0x0419 tx timeout
[ 2481.655464][T22920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2481.670626][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2481.879614][T22930] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2481.922922][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2481.936789][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2481.954023][T22930] 8021q: adding VLAN 0 to HW filter on device team0
[ 2482.040037][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2482.051204][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2482.065776][T15071] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2482.073012][T15071] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2482.090106][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2482.107823][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2482.117249][T15071] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2482.125016][T15071] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2482.159157][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2482.167403][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2482.177085][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2482.218763][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2482.228957][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2482.247631][T22930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2482.260664][T22930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2482.280809][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2482.289652][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2482.298429][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2482.320142][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2482.339203][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2482.381064][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2482.439101][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2482.446675][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2482.481927][T22920] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2482.681516][T14228] Bluetooth: hci4: command 0x0419 tx timeout
[ 2482.732848][T15447] device hsr_slave_0 left promiscuous mode
[ 2482.764427][T15447] device hsr_slave_1 left promiscuous mode
[ 2482.796366][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2482.804948][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2482.814888][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2482.822489][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2482.832765][T15447] device bridge_slave_1 left promiscuous mode
[ 2482.842060][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2482.852336][T15447] device bridge_slave_0 left promiscuous mode
[ 2482.859724][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2482.885231][T15447] device hsr_slave_0 left promiscuous mode
[ 2482.892385][T15447] device hsr_slave_1 left promiscuous mode
[ 2482.899706][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2482.907162][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2482.917189][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2482.930815][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2482.943133][T15447] device bridge_slave_1 left promiscuous mode
[ 2482.951679][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2482.965335][T15447] device bridge_slave_0 left promiscuous mode
[ 2482.973372][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2482.997300][T15447] device hsr_slave_0 left promiscuous mode
[ 2483.014396][T15447] device hsr_slave_1 left promiscuous mode
[ 2483.023894][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2483.038243][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2483.057404][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2483.075218][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2483.088028][T15447] device bridge_slave_1 left promiscuous mode
[ 2483.100875][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2483.117971][T15447] device bridge_slave_0 left promiscuous mode
[ 2483.126952][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2483.152253][T15447] device hsr_slave_0 left promiscuous mode
[ 2483.165778][T15447] device hsr_slave_1 left promiscuous mode
[ 2483.173250][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2483.185592][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2483.194418][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2483.206578][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2483.215381][T15447] device bridge_slave_1 left promiscuous mode
[ 2483.223180][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2483.232034][T15447] device bridge_slave_0 left promiscuous mode
[ 2483.238216][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2483.260281][T15447] device veth1_macvtap left promiscuous mode
[ 2483.267422][T15447] device veth0_macvtap left promiscuous mode
[ 2483.273968][T15447] device veth1_vlan left promiscuous mode
[ 2483.281912][T15447] device veth0_vlan left promiscuous mode
[ 2483.289294][T15447] device veth1_macvtap left promiscuous mode
[ 2483.295433][T15447] device veth0_macvtap left promiscuous mode
[ 2483.301679][T15447] device veth1_vlan left promiscuous mode
[ 2483.307980][T15447] device veth0_vlan left promiscuous mode
[ 2483.315301][T15447] device veth1_macvtap left promiscuous mode
[ 2483.321956][T15447] device veth0_macvtap left promiscuous mode
[ 2483.328071][T15447] device veth1_vlan left promiscuous mode
[ 2483.334534][T15447] device veth0_vlan left promiscuous mode
[ 2483.342491][T15447] device veth1_macvtap left promiscuous mode
[ 2483.348808][T15447] device veth0_macvtap left promiscuous mode
[ 2483.355117][T15447] device veth1_vlan left promiscuous mode
[ 2483.361429][T15447] device veth0_vlan left promiscuous mode
[ 2483.841520][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2483.855803][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2483.867675][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2483.887255][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2483.957582][T15447] bond0 (unregistering): Released all slaves
[ 2484.075991][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2484.095599][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2484.111298][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2484.124471][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2484.191625][T15447] bond0 (unregistering): Released all slaves
[ 2484.332456][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2484.350770][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2484.374722][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2484.394114][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2484.476486][T15447] bond0 (unregistering): Released all slaves
[ 2484.616886][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2484.632534][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2484.644801][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2484.659899][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2484.730469][T15447] bond0 (unregistering): Released all slaves
[ 2484.803323][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2484.829126][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2484.851894][T22930] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2485.201162][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2485.210706][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2485.250078][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2485.259650][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2485.280304][T22920] device veth0_vlan entered promiscuous mode
[ 2485.296676][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2485.305297][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2485.319063][T22920] device veth1_vlan entered promiscuous mode
[ 2485.402791][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2485.412025][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2485.436611][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2485.469478][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2485.480478][T22920] device veth0_macvtap entered promiscuous mode
[ 2485.524757][T22920] device veth1_macvtap entered promiscuous mode
[ 2485.563861][T22920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2485.583378][T22920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.595506][T22920] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2485.615204][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2485.632352][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2485.648168][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2485.661960][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2485.675942][T22920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2485.690169][T22920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.709757][T22920] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2485.718310][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2485.739750][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2485.781747][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2485.791863][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2485.802763][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2485.811615][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2485.822193][T22920] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2485.833582][T22920] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2485.842808][T22920] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2485.852383][T22920] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2485.867977][T22930] device veth0_vlan entered promiscuous mode
[ 2485.885218][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2485.896517][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2485.961283][T22930] device veth1_vlan entered promiscuous mode
[ 2486.095596][T14864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2486.107060][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2486.116878][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2486.125243][T14864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2486.139788][T22930] device veth0_macvtap entered promiscuous mode
[ 2486.170974][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2486.184065][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2486.206845][T22930] device veth1_macvtap entered promiscuous mode
[ 2486.215634][T14864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2486.231345][T14864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2486.251331][T22930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2486.265507][T22930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2486.275708][T22930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2486.286681][T22930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2486.297953][T22930] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2486.307917][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2486.316529][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2486.324538][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2486.333517][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2486.359877][T22930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2486.389605][T22930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2486.399761][T22930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2486.410850][T22930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2486.422501][T22930] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2486.435534][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2486.446579][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2486.462368][T22930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2486.473082][T22930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2486.483084][T22930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2486.492377][T22930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2486.670189][T14864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2486.678387][T14864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2486.712728][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2486.741082][T15444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2486.781316][T15444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2486.794242][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2487.096285][T23111] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2487.107750][T23111] CPU: 0 PID: 23111 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2487.118219][T23111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2487.128321][T23111] Call Trace:
[ 2487.131646][T23111]  <TASK>
[ 2487.134609][T23111]  dump_stack_lvl+0xd1/0x138
[ 2487.139358][T23111]  dump_header+0x10b/0x85f
[ 2487.143846][T23111]  oom_kill_process.cold+0x10/0x15
[ 2487.149012][T23111]  out_of_memory+0x35c/0x14a0
[ 2487.153748][T23111]  ? oom_killer_disable+0x280/0x280
[ 2487.159000][T23111]  ? mark_held_locks+0x9f/0xe0
[ 2487.163827][T23111]  mem_cgroup_out_of_memory+0x206/0x270
[ 2487.169406][T23111]  ? mem_cgroup_margin+0x130/0x130
[ 2487.174561][T23111]  memory_max_write+0x2f9/0x3c0
[ 2487.179430][T23111]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2487.185515][T23111]  ? lock_release+0x810/0x810
[ 2487.190228][T23111]  cgroup_file_write+0x1e2/0x770
[ 2487.195203][T23111]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2487.201290][T23111]  ? kill_css+0x370/0x370
[ 2487.205637][T23111]  ? __virt_addr_valid+0x61/0x2e0
[ 2487.210693][T23111]  ? kill_css+0x370/0x370
[ 2487.215141][T23111]  kernfs_fop_write_iter+0x3f1/0x600
[ 2487.220459][T23111]  vfs_write+0x9ed/0xdd0
[ 2487.224721][T23111]  ? kernel_write+0x630/0x630
[ 2487.229430][T23111]  ? __fget_files+0x26a/0x440
[ 2487.234152][T23111]  ksys_write+0x12b/0x250
[ 2487.238496][T23111]  ? __ia32_sys_read+0xb0/0xb0
[ 2487.243315][T23111]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2487.248888][T23111]  do_syscall_64+0x39/0xb0
[ 2487.253340][T23111]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2487.259349][T23111] RIP: 0033:0x7fd2c188c0c9
[ 2487.263775][T23111] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2487.283400][T23111] RSP: 002b:00007fd2c26d0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2487.291827][T23111] RAX: ffffffffffffffda RBX: 00007fd2c19abf80 RCX: 00007fd2c188c0c9
[ 2487.299980][T23111] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006
[ 2487.307959][T23111] RBP: 00007fd2c18e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2487.316131][T23111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2487.324213][T23111] R13: 00007ffd5777996f R14: 00007fd2c26d0300 R15: 0000000000022000
[ 2487.332247][T23111]  </TASK>
[ 2487.348951][T23111] memory: usage 10648kB, limit 0kB, failcnt 3510
[ 2487.388754][T23111] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2487.396092][T23111] Memory cgroup stats for /syz4:
[ 2487.405844][T23111] anon 118784
[ 2487.405844][T23111] file 10444800
[ 2487.405844][T23111] kernel 319488
[ 2487.405844][T23111] kernel_stack 65536
[ 2487.405844][T23111] pagetables 81920
[ 2487.405844][T23111] sec_pagetables 0
[ 2487.405844][T23111] percpu 64
[ 2487.405844][T23111] sock 0
[ 2487.405844][T23111] vmalloc 0
[ 2487.405844][T23111] shmem 10444800
[ 2487.405844][T23111] zswap 0
[ 2487.405844][T23111] zswapped 0
[ 2487.405844][T23111] file_mapped 245760
[ 2487.405844][T23111] file_dirty 0
[ 2487.405844][T23111] file_writeback 0
[ 2487.405844][T23111] swapcached 0
[ 2487.405844][T23111] anon_thp 0
[ 2487.405844][T23111] file_thp 0
[ 2487.405844][T23111] shmem_thp 0
[ 2487.405844][T23111] inactive_anon 118784
[ 2487.405844][T23111] active_anon 10444800
[ 2487.405844][T23111] inactive_file 0
[ 2487.405844][T23111] active_file 0
[ 2487.405844][T23111] unevictable 0
[ 2487.405844][T23111] slab_reclaimable 47848
[ 2487.405844][T23111] slab_unreclaimable 102408
[ 2487.405844][T23111] slab 150256
[ 2487.512430][T23111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23109,uid=0
[ 2487.569724][T23111] Memory cgroup out of memory: Killed process 23109 (syz-executor.4) total-vm:54540kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000
18:59:59 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

18:59:59 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:59 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x3900, 0x12)

18:59:59 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x1200, 0x12)

18:59:59 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

18:59:59 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2487.891802][T22930] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2487.968667][T22930] CPU: 1 PID: 22930 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2487.979140][T22930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2487.989324][T22930] Call Trace:
[ 2487.992631][T22930]  <TASK>
[ 2487.995589][T22930]  dump_stack_lvl+0xd1/0x138
[ 2488.000223][T22930]  dump_header+0x10b/0x85f
[ 2488.004693][T22930]  oom_kill_process.cold+0x10/0x15
[ 2488.009863][T22930]  out_of_memory+0x35c/0x14a0
[ 2488.014602][T22930]  ? find_held_lock+0x2d/0x110
[ 2488.019703][T22930]  ? oom_killer_disable+0x280/0x280
[ 2488.024971][T22930]  ? find_held_lock+0x2d/0x110
[ 2488.029799][T22930]  mem_cgroup_out_of_memory+0x206/0x270
[ 2488.035404][T22930]  ? mem_cgroup_margin+0x130/0x130
[ 2488.040571][T22930]  ? lock_downgrade+0x6e0/0x6e0
[ 2488.045460][T22930]  try_charge_memcg+0xefb/0x12f0
[ 2488.050435][T22930]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2488.056452][T22930]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2488.062221][T22930]  ? lock_downgrade+0x6e0/0x6e0
[ 2488.067150][T22930]  obj_cgroup_charge+0x2af/0x5e0
[ 2488.072131][T22930]  kmem_cache_alloc_lru+0x145/0x760
[ 2488.077353][T22930]  ? __d_alloc+0x32/0x980
[ 2488.081708][T22930]  __d_alloc+0x32/0x980
[ 2488.085968][T22930]  ? __lock_acquire+0x166e/0x56d0
[ 2488.091009][T22930]  d_alloc+0x4e/0x240
[ 2488.095012][T22930]  d_alloc_parallel+0xe8/0x1410
[ 2488.099907][T22930]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2488.105903][T22930]  ? __d_lookup_rcu+0x4c0/0x4c0
[ 2488.110786][T22930]  ? lockdep_init_map_type+0x21e/0x800
[ 2488.116260][T22930]  ? lockdep_init_map_type+0x21e/0x800
[ 2488.121742][T22930]  __lookup_slow+0x193/0x460
[ 2488.126351][T22930]  ? __lookup_hash+0x180/0x180
[ 2488.131140][T22930]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2488.136667][T22930]  ? scarlett2_usb_get_mix+0x2f6/0x318
[ 2488.142159][T22930]  ? lookup_fast+0x14e/0x520
[ 2488.146857][T22930]  walk_component+0x33f/0x5a0
[ 2488.151576][T22930]  path_lookupat+0x1ba/0x840
[ 2488.156190][T22930]  filename_lookup+0x1d2/0x590
[ 2488.160976][T22930]  ? may_linkat+0x500/0x500
[ 2488.165517][T22930]  ? __might_fault+0xd9/0x180
[ 2488.170233][T22930]  ? __phys_addr_symbol+0x30/0x70
[ 2488.175286][T22930]  ? __check_object_size+0x2e2/0x5a0
[ 2488.180594][T22930]  ? strncpy_from_user+0x28b/0x3c0
[ 2488.185732][T22930]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2488.191155][T22930]  user_path_at_empty+0x46/0x60
[ 2488.196030][T22930]  __x64_sys_umount+0xfc/0x190
[ 2488.200811][T22930]  ? path_umount+0x10b0/0x10b0
[ 2488.205612][T22930]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2488.211186][T22930]  do_syscall_64+0x39/0xb0
[ 2488.215625][T22930]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2488.221533][T22930] RIP: 0033:0x7fd2c188d537
[ 2488.225955][T22930] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2488.245575][T22930] RSP: 002b:00007ffd57778ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2488.253999][T22930] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd2c188d537
[ 2488.261977][T22930] RDX: 00007ffd57778b9e RSI: 000000000000000a RDI: 00007ffd57778b90
[ 2488.269964][T22930] RBP: 00007ffd57778b90 R08: 00000000ffffffff R09: 00007ffd57778960
[ 2488.277966][T22930] R10: 0000555555b228bb R11: 0000000000000246 R12: 00007fd2c18e6b24
[ 2488.285990][T22930] R13: 00007ffd57779c50 R14: 0000555555b22810 R15: 00007ffd57779c90
[ 2488.293991][T22930]  </TASK>
18:59:59 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

[ 2488.861172][T22930] memory: usage 10368kB, limit 0kB, failcnt 3529
[ 2488.871220][T22930] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2488.902162][T22930] Memory cgroup stats for /syz4:
[ 2488.902361][T22930] anon 40960
[ 2488.902361][T22930] file 10444800
[ 2488.902361][T22930] kernel 131072
[ 2488.902361][T22930] kernel_stack 0
[ 2488.902361][T22930] pagetables 8192
[ 2488.902361][T22930] sec_pagetables 0
[ 2488.902361][T22930] percpu 64
[ 2488.902361][T22930] sock 0
[ 2488.902361][T22930] vmalloc 0
[ 2488.902361][T22930] shmem 10444800
[ 2488.902361][T22930] zswap 0
[ 2488.902361][T22930] zswapped 0
[ 2488.902361][T22930] file_mapped 225280
[ 2488.902361][T22930] file_dirty 0
[ 2488.902361][T22930] file_writeback 0
[ 2488.902361][T22930] swapcached 0
[ 2488.902361][T22930] anon_thp 0
[ 2488.902361][T22930] file_thp 0
[ 2488.902361][T22930] shmem_thp 0
[ 2488.902361][T22930] inactive_anon 40960
[ 2488.902361][T22930] active_anon 10444800
[ 2488.902361][T22930] inactive_file 0
[ 2488.902361][T22930] active_file 0
[ 2488.902361][T22930] unevictable 0
[ 2488.902361][T22930] slab_reclaimable 37664
[ 2488.902361][T22930] slab_unreclaimable 71440
[ 2488.902361][T22930] slab 109104
19:00:00 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000004501000000000010180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

19:00:00 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2489.246112][T22930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22930,uid=0
19:00:00 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

[ 2489.300024][T22930] Memory cgroup out of memory: Killed process 22930 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
19:00:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2489.444330][T22920] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2489.508860][T22920] CPU: 1 PID: 22920 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2489.519346][T22920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2489.529444][T22920] Call Trace:
[ 2489.532752][T22920]  <TASK>
[ 2489.535694][T22920]  dump_stack_lvl+0xd1/0x138
[ 2489.540308][T22920]  dump_header+0x10b/0x85f
[ 2489.544753][T22920]  oom_kill_process.cold+0x10/0x15
[ 2489.549892][T22920]  out_of_memory+0x35c/0x14a0
[ 2489.554600][T22920]  ? find_held_lock+0x2d/0x110
[ 2489.559413][T22920]  ? oom_killer_disable+0x280/0x280
[ 2489.564637][T22920]  ? find_held_lock+0x2d/0x110
[ 2489.569424][T22920]  mem_cgroup_out_of_memory+0x206/0x270
[ 2489.575002][T22920]  ? mem_cgroup_margin+0x130/0x130
[ 2489.580161][T22920]  ? lock_downgrade+0x6e0/0x6e0
[ 2489.585058][T22920]  try_charge_memcg+0xefb/0x12f0
[ 2489.590017][T22920]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2489.596018][T22920]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2489.601765][T22920]  ? lock_downgrade+0x6e0/0x6e0
[ 2489.606648][T22920]  ? lock_downgrade+0x6e0/0x6e0
[ 2489.611640][T22920]  __memcg_kmem_charge_page+0x16e/0x3b0
[ 2489.617229][T22920]  __alloc_pages+0x1f3/0x5b0
[ 2489.621848][T22920]  ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0
[ 2489.628654][T22920]  ? copy_page_range+0x1ff7/0x3b40
[ 2489.633816][T22920]  alloc_pages+0x1aa/0x270
[ 2489.638290][T22920]  get_zeroed_page+0x14/0x40
[ 2489.642915][T22920]  __pud_alloc+0x3b/0x180
[ 2489.647296][T22920]  copy_page_range+0x246b/0x3b40
[ 2489.652270][T22920]  ? mas_wr_modify+0x2da/0x16d0
[ 2489.657184][T22920]  ? mas_store+0x206/0x2e0
[ 2489.661642][T22920]  ? handle_mm_fault+0x850/0x850
[ 2489.666656][T22920]  ? anon_vma_fork+0xba/0x630
[ 2489.671370][T22920]  dup_mmap+0xc10/0x10b0
[ 2489.675668][T22920]  ? replace_mm_exe_file+0x4b0/0x4b0
[ 2489.680978][T22920]  ? lock_downgrade+0x6e0/0x6e0
[ 2489.685876][T22920]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2489.691720][T22920]  ? mm_init+0x8e0/0xc10
[ 2489.696004][T22920]  copy_process+0x440f/0x7520
[ 2489.700709][T22920]  ? _raw_spin_unlock+0x28/0x40
[ 2489.705586][T22920]  ? wp_page_reuse+0x197/0x570
[ 2489.710415][T22920]  ? __cleanup_sighand+0xb0/0xb0
[ 2489.715385][T22920]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2489.720790][T22920]  ? rwlock_bug.part.0+0x90/0x90
[ 2489.725746][T22920]  ? lock_chain_count+0x20/0x20
[ 2489.730623][T22920]  kernel_clone+0xeb/0x990
[ 2489.735077][T22920]  ? create_io_thread+0xf0/0xf0
[ 2489.739988][T22920]  ? find_held_lock+0x2d/0x110
[ 2489.744822][T22920]  __do_sys_clone+0xba/0x100
[ 2489.749470][T22920]  ? kernel_clone+0x990/0x990
[ 2489.754186][T22920]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2489.759765][T22920]  do_syscall_64+0x39/0xb0
[ 2489.764203][T22920]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2489.770115][T22920] RIP: 0033:0x7ff555289dfb
[ 2489.774563][T22920] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2489.794204][T22920] RSP: 002b:00007fff75126a40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2489.802742][T22920] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff555289dfb
[ 2489.810745][T22920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2489.818740][T22920] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555674b400
[ 2489.826724][T22920] R10: 000055555674b6d0 R11: 0000000000000246 R12: 0000000000000001
[ 2489.834726][T22920] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff75126b20
[ 2489.842728][T22920]  </TASK>
[ 2489.935803][T22920] memory: usage 10392kB, limit 0kB, failcnt 1290
[ 2489.946204][T22920] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2489.965448][T22920] Memory cgroup stats for /syz5:
[ 2489.965652][T22920] anon 40960
[ 2489.965652][T22920] file 10452992
[ 2489.965652][T22920] kernel 147456
[ 2489.965652][T22920] kernel_stack 32768
[ 2489.965652][T22920] pagetables 8192
[ 2489.965652][T22920] sec_pagetables 0
[ 2489.965652][T22920] percpu 64
[ 2489.965652][T22920] sock 0
[ 2489.965652][T22920] vmalloc 0
[ 2489.965652][T22920] shmem 10448896
[ 2489.965652][T22920] zswap 0
[ 2489.965652][T22920] zswapped 0
[ 2489.965652][T22920] file_mapped 241664
[ 2489.965652][T22920] file_dirty 0
[ 2489.965652][T22920] file_writeback 0
[ 2489.965652][T22920] swapcached 0
[ 2489.965652][T22920] anon_thp 0
[ 2489.965652][T22920] file_thp 0
[ 2489.965652][T22920] shmem_thp 0
[ 2489.965652][T22920] inactive_anon 40960
19:00:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2489.965652][T22920] active_anon 10448896
[ 2489.965652][T22920] inactive_file 0
[ 2489.965652][T22920] active_file 4096
[ 2489.965652][T22920] unevictable 0
[ 2489.965652][T22920] slab_reclaimable 38944
[ 2489.965652][T22920] slab_unreclaimable 53864
[ 2489.965652][T22920] slab 92808
19:00:01 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

[ 2490.071348][T22920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22920,uid=0
[ 2490.115821][T22920] Memory cgroup out of memory: Killed process 22920 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
19:00:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

[ 2490.691069][T14228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2490.700769][T14228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2490.709418][T14228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2490.718209][T14228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2490.726126][T14228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2490.734374][T14228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2491.163856][T23157] chnl_net:caif_netlink_parms(): no params data found
[ 2491.264828][T23157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2491.272159][T23157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2491.286038][T23157] device bridge_slave_0 entered promiscuous mode
[ 2491.303167][T23157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2491.310533][T23157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2491.319645][T23157] device bridge_slave_1 entered promiscuous mode
[ 2491.378163][T23157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2491.417773][T15447] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2491.443426][T23157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2491.494826][T23157] team0: Port device team_slave_0 added
[ 2491.524545][T15447] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2491.566070][T23157] team0: Port device team_slave_1 added
[ 2491.620169][T15447] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2491.681322][T23157] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2491.688302][T23157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2491.796735][T23157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2491.865393][T15447] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2491.911839][T23157] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2491.926016][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2491.934839][T23157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2491.962587][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2491.974680][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2491.983519][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2491.991192][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2491.999873][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2492.064685][T23157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2492.226750][T23157] device hsr_slave_0 entered promiscuous mode
[ 2492.240431][T23157] device hsr_slave_1 entered promiscuous mode
[ 2492.270013][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2492.280226][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2492.289423][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2492.298450][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2492.306449][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2492.314439][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2492.605914][T15447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2492.716488][T15447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2492.758895][T14228] Bluetooth: hci0: command 0x0409 tx timeout
[ 2492.865725][T15447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2493.039409][T15447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2493.382311][T23190] chnl_net:caif_netlink_parms(): no params data found
[ 2493.415444][T23186] chnl_net:caif_netlink_parms(): no params data found
[ 2493.827792][T23190] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2493.839169][T23190] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2493.847475][T23190] device bridge_slave_0 entered promiscuous mode
[ 2493.869969][T23186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2493.877116][T23186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2493.909911][T23186] device bridge_slave_0 entered promiscuous mode
[ 2493.923977][T23190] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2493.948707][T23190] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2493.956990][T23190] device bridge_slave_1 entered promiscuous mode
[ 2494.020117][T23186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2494.027909][T23186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2494.048580][T14228] Bluetooth: hci1: command 0x0409 tx timeout
[ 2494.049815][T23186] device bridge_slave_1 entered promiscuous mode
[ 2494.128355][T23157] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2494.188054][T23157] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2494.209415][T23190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2494.223248][T23186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2494.246589][T23157] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2494.269974][T23190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2494.312092][T23186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2494.330138][T23157] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2494.358811][ T5115] Bluetooth: hci2: command 0x0409 tx timeout
[ 2494.425010][T23190] team0: Port device team_slave_0 added
[ 2494.435198][T23186] team0: Port device team_slave_0 added
[ 2494.451542][T23190] team0: Port device team_slave_1 added
[ 2494.473400][T23186] team0: Port device team_slave_1 added
[ 2494.537082][T23190] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2494.546250][T23190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2494.575409][T23190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2494.587163][T23186] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2494.594455][T23186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2494.621195][T23186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2494.651642][T23190] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2494.658942][T23190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2494.686139][T23190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2494.699446][T23186] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2494.706432][T23186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2494.732862][T23186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2494.828413][T23186] device hsr_slave_0 entered promiscuous mode
[ 2494.839472][ T5115] Bluetooth: hci0: command 0x041b tx timeout
[ 2494.850810][T23186] device hsr_slave_1 entered promiscuous mode
[ 2494.857318][T23186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2494.867863][T23186] Cannot create hsr debugfs directory
[ 2494.877465][T23190] device hsr_slave_0 entered promiscuous mode
[ 2494.884772][T23190] device hsr_slave_1 entered promiscuous mode
[ 2494.891460][T23190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2494.899939][T23190] Cannot create hsr debugfs directory
[ 2494.945686][T23157] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2495.084927][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2495.094799][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2495.106688][T23157] 8021q: adding VLAN 0 to HW filter on device team0
[ 2495.169621][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2495.178257][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2495.191517][T15074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2495.198712][T15074] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2495.211364][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2495.305112][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2495.329449][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2495.338104][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2495.345280][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2495.362282][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2495.375831][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2495.389217][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2495.458569][T15447] device hsr_slave_0 left promiscuous mode
[ 2495.465143][T15447] device hsr_slave_1 left promiscuous mode
[ 2495.479508][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2495.486955][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2495.505608][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2495.525049][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2495.538184][T15447] device bridge_slave_1 left promiscuous mode
[ 2495.553299][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2495.563190][T15447] device bridge_slave_0 left promiscuous mode
[ 2495.570650][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2495.585069][T15447] device hsr_slave_0 left promiscuous mode
[ 2495.591723][T15447] device hsr_slave_1 left promiscuous mode
[ 2495.598311][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2495.606844][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2495.616924][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2495.624787][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2495.634737][T15447] device bridge_slave_1 left promiscuous mode
[ 2495.642533][T15447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2495.651788][T15447] device bridge_slave_0 left promiscuous mode
[ 2495.658198][T15447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2495.682762][T15447] device veth1_macvtap left promiscuous mode
[ 2495.695647][T15447] device veth0_macvtap left promiscuous mode
[ 2495.706997][T15447] device veth1_vlan left promiscuous mode
[ 2495.713166][T15447] device veth0_vlan left promiscuous mode
[ 2495.722630][T15447] device veth1_macvtap left promiscuous mode
[ 2495.728944][T15447] device veth0_macvtap left promiscuous mode
[ 2495.735191][T15447] device veth1_vlan left promiscuous mode
[ 2495.741721][T15447] device veth0_vlan left promiscuous mode
[ 2496.118741][T14228] Bluetooth: hci1: command 0x041b tx timeout
[ 2496.171153][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2496.197967][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2496.264847][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2496.283450][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2496.388362][T15447] bond0 (unregistering): Released all slaves
[ 2496.438880][T14228] Bluetooth: hci2: command 0x041b tx timeout
[ 2496.582192][T15447] team0 (unregistering): Port device team_slave_1 removed
[ 2496.599979][T15447] team0 (unregistering): Port device team_slave_0 removed
[ 2496.615007][T15447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2496.633810][T15447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2496.744039][T15447] bond0 (unregistering): Released all slaves
[ 2496.816699][T23157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2496.836023][T23157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2496.848297][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2496.867682][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2496.877431][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2496.907266][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2496.916633][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2496.924829][T14228] Bluetooth: hci0: command 0x040f tx timeout
[ 2496.931788][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2496.942418][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2497.606793][T23157] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2497.629930][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2497.637461][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2497.659629][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2497.668433][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2497.691956][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2497.701087][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2497.781028][T23157] device veth0_vlan entered promiscuous mode
[ 2497.798970][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2497.807018][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2497.826965][T23157] device veth1_vlan entered promiscuous mode
[ 2497.855577][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2497.915797][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2497.931988][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2497.948212][T23157] device veth0_macvtap entered promiscuous mode
[ 2498.002539][T23157] device veth1_macvtap entered promiscuous mode
[ 2498.036373][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2498.076218][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2498.122027][T23157] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2498.161914][T23157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2498.188745][T23157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2498.198696][T14228] Bluetooth: hci1: command 0x040f tx timeout
[ 2498.222390][T23157] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2498.246284][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2498.257814][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2498.269045][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2498.277788][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2498.292621][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2498.303108][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2498.337372][T23157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2498.370112][T23157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2498.385264][T23157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2498.394345][T23157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2498.416360][T23190] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2498.453413][T23190] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2498.515631][T23190] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2498.522593][ T5115] Bluetooth: hci2: command 0x040f tx timeout
[ 2498.585911][T23190] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2498.719756][T23186] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2498.754844][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2498.782964][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2498.791870][T23186] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2498.831300][T23186] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2498.852389][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2498.879488][T14864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2498.887626][T14864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2498.899696][T23186] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2498.940387][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2498.962716][T23190] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2499.000817][ T5115] Bluetooth: hci0: command 0x0419 tx timeout
[ 2499.035282][T23190] 8021q: adding VLAN 0 to HW filter on device team0
[ 2499.049638][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2499.057636][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2499.089559][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2499.111597][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2499.170134][T15071] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2499.177314][T15071] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2499.231824][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2499.257302][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2499.272720][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2499.322081][T23811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2499.329273][T23811] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2499.361383][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2499.373696][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2499.399411][T23186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2499.409188][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2499.449345][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2499.476135][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2499.487436][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2499.502578][T23260] syz-executor.1 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_NOFAIL|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000
[ 2499.518434][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2499.533780][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2499.541989][T23260] CPU: 1 PID: 23260 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2499.552454][T23260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2499.562542][T23260] Call Trace:
[ 2499.565938][T23260]  <TASK>
[ 2499.568891][T23260]  dump_stack_lvl+0xd1/0x138
[ 2499.573526][T23260]  dump_header+0x10b/0x85f
[ 2499.578000][T23260]  oom_kill_process.cold+0x10/0x15
[ 2499.583157][T23260]  out_of_memory+0x35c/0x14a0
[ 2499.587885][T23260]  ? find_held_lock+0x2d/0x110
[ 2499.592703][T23260]  ? oom_killer_disable+0x280/0x280
[ 2499.597973][T23260]  ? find_held_lock+0x2d/0x110
[ 2499.602816][T23260]  mem_cgroup_out_of_memory+0x206/0x270
[ 2499.608781][T23260]  ? mem_cgroup_margin+0x130/0x130
[ 2499.613957][T23260]  ? lock_downgrade+0x6e0/0x6e0
[ 2499.618881][T23260]  try_charge_memcg+0xefb/0x12f0
[ 2499.623861][T23260]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2499.629886][T23260]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2499.635659][T23260]  ? lock_downgrade+0x6e0/0x6e0
[ 2499.640655][T23260]  obj_cgroup_charge+0x2af/0x5e0
[ 2499.645632][T23260]  ? alloc_buffer_head+0x24/0x150
[ 2499.650693][T23260]  kmem_cache_alloc+0xb5/0x430
[ 2499.655496][T23260]  alloc_buffer_head+0x24/0x150
[ 2499.660379][T23260]  alloc_page_buffers+0x284/0x790
[ 2499.665443][T23260]  create_empty_buffers+0x30/0xf30
[ 2499.670636][T23260]  ? __filemap_get_folio+0x3bf/0xd80
[ 2499.675980][T23260]  ext4_block_write_begin+0x10a7/0x15f0
[ 2499.681584][T23260]  ? filemap_add_folio+0x1e0/0x1e0
[ 2499.686821][T23260]  ? ext4_da_release_space+0x680/0x680
[ 2499.692331][T23260]  ? mpage_prepare_extent_to_map+0x1e00/0x1e00
[ 2499.698532][T23260]  ? PageHeadHuge+0x1a2/0x200
[ 2499.703264][T23260]  ext4_da_write_begin+0x450/0xb50
[ 2499.708431][T23260]  ? ext4_write_begin+0x1140/0x1140
[ 2499.713708][T23260]  generic_perform_write+0x256/0x570
[ 2499.719045][T23260]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2499.724483][T23260]  ? discard_new_inode+0x1a0/0x1a0
[ 2499.729645][T23260]  ? down_write_killable+0x250/0x250
[ 2499.734982][T23260]  ext4_buffered_write_iter+0x15b/0x460
[ 2499.740574][T23260]  ext4_file_write_iter+0x8bf/0x1710
[ 2499.745902][T23260]  ? lock_release+0x810/0x810
[ 2499.750627][T23260]  ? ext4_file_mmap+0x440/0x440
[ 2499.755523][T23260]  vfs_write+0x9ed/0xdd0
[ 2499.759807][T23260]  ? kernel_write+0x630/0x630
[ 2499.764524][T23260]  ? __fget_files+0x26a/0x440
[ 2499.769606][T23260]  ksys_write+0x12b/0x250
[ 2499.773968][T23260]  ? __ia32_sys_read+0xb0/0xb0
[ 2499.778789][T23260]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2499.784387][T23260]  do_syscall_64+0x39/0xb0
[ 2499.788865][T23260]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2499.794804][T23260] RIP: 0033:0x7f5691e8c0c9
[ 2499.799266][T23260] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2499.818915][T23260] RSP: 002b:00007f5692c00168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2499.827362][T23260] RAX: ffffffffffffffda RBX: 00007f5691fabf80 RCX: 00007f5691e8c0c9
[ 2499.835363][T23260] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2499.843362][T23260] RBP: 00007f5691ee7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2499.851363][T23260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2499.859370][T23260] R13: 00007fff4a13596f R14: 00007f5692c00300 R15: 0000000000022000
[ 2499.867499][T23260]  </TASK>
[ 2499.889254][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2499.908278][T23186] 8021q: adding VLAN 0 to HW filter on device team0
[ 2499.941138][T23190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2499.974610][T23190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2500.005570][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2500.020539][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2500.059030][T23260] memory: usage 8628kB, limit 4kB, failcnt 768
[ 2500.078325][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2500.080789][T23260] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2500.089444][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2500.129297][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2500.136449][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2500.144112][T23260] Memory cgroup stats for /syz1:
[ 2500.144310][T23260] anon 122880
[ 2500.144310][T23260] file 8359936
[ 2500.144310][T23260] kernel 331776
[ 2500.144310][T23260] kernel_stack 98304
[ 2500.144310][T23260] pagetables 81920
[ 2500.144310][T23260] sec_pagetables 0
[ 2500.144310][T23260] percpu 64
[ 2500.144310][T23260] sock 0
[ 2500.144310][T23260] vmalloc 0
[ 2500.144310][T23260] shmem 8351744
[ 2500.144310][T23260] zswap 0
[ 2500.144310][T23260] zswapped 0
[ 2500.144310][T23260] file_mapped 188416
[ 2500.144310][T23260] file_dirty 0
[ 2500.144310][T23260] file_writeback 0
[ 2500.144310][T23260] swapcached 0
[ 2500.144310][T23260] anon_thp 0
[ 2500.144310][T23260] file_thp 0
[ 2500.144310][T23260] shmem_thp 0
[ 2500.144310][T23260] inactive_anon 122880
[ 2500.144310][T23260] active_anon 8351744
[ 2500.144310][T23260] inactive_file 8192
[ 2500.144310][T23260] active_file 0
[ 2500.144310][T23260] unevictable 0
[ 2500.144310][T23260] slab_reclaimable 39264
[ 2500.144310][T23260] slab_unreclaimable 82440
[ 2500.144310][T23260] slab 121704
[ 2500.165369][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2500.258675][T23260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23259,uid=0
[ 2500.278694][ T5115] Bluetooth: hci1: command 0x0419 tx timeout
[ 2500.298634][T23260] Memory cgroup out of memory: Killed process 23259 (syz-executor.1) total-vm:56720kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2500.339524][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2500.348041][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2500.355237][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2500.363144][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2500.373099][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2500.436366][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2500.450207][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2500.470010][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2500.491655][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2500.515207][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2500.543823][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2500.574212][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2500.598694][ T5115] Bluetooth: hci2: command 0x0419 tx timeout
[ 2500.612509][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2500.635771][T23186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2500.897493][T23190] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2500.936603][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2500.950742][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2500.987536][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2501.005164][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2501.072883][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2501.082512][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2501.106844][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2501.128149][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2501.143053][T23190] device veth0_vlan entered promiscuous mode
[ 2501.164934][T23190] device veth1_vlan entered promiscuous mode
[ 2501.196271][T23190] device veth0_macvtap entered promiscuous mode
[ 2501.204543][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2501.219233][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2501.227719][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2501.244781][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2501.254594][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2501.268955][T23190] device veth1_macvtap entered promiscuous mode
[ 2501.284028][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2501.302165][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2501.310188][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2501.326071][T23186] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2501.347657][T23190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2501.363813][T23190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2501.374222][T23190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2501.388610][T23190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2501.405392][T23190] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2501.416373][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2501.425427][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2501.460985][T23190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2501.477406][T23190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2501.498318][T23190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2501.509817][T23190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2501.521830][T23190] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2501.530108][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2501.539904][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2501.549272][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2501.557895][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2501.573047][T23186] device veth0_vlan entered promiscuous mode
[ 2501.585915][T23190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2501.595703][T23190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2501.604951][T23190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2501.613907][T23190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2501.625323][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2501.634602][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2501.649791][T23186] device veth1_vlan entered promiscuous mode
[ 2501.667580][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2501.676285][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2501.684177][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2501.758639][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2501.766925][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2501.783255][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2501.796856][T23186] device veth0_macvtap entered promiscuous mode
[ 2501.819973][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2501.828235][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2501.854561][T23186] device veth1_macvtap entered promiscuous mode
[ 2501.862397][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2501.880198][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2501.888219][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2501.905418][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2501.934541][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2501.940136][T23186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2501.968672][T23186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2501.979055][T23186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2501.990165][T23186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2502.000471][T23186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2502.012082][T23186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2502.025695][T23186] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2502.038214][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2502.047699][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2502.057068][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2502.068340][T23186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2502.079576][T23186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2502.089783][T23186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2502.100697][T23186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2502.111756][T23186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2502.123279][T23186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2502.136859][T23186] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2502.153391][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2502.162336][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2502.183017][T23186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2502.198350][T23186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2502.213475][T23186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2502.224117][T23186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2502.332913][T15447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2502.365322][T15447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2502.372676][T15966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2502.372749][T15966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2502.375089][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2502.415167][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2502.829684][T23301] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2502.892098][T23301] CPU: 1 PID: 23301 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2502.902598][T23301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2502.912702][T23301] Call Trace:
[ 2502.916012][T23301]  <TASK>
[ 2502.918970][T23301]  dump_stack_lvl+0xd1/0x138
[ 2502.923608][T23301]  dump_header+0x10b/0x85f
[ 2502.928170][T23301]  oom_kill_process.cold+0x10/0x15
[ 2502.933343][T23301]  out_of_memory+0x35c/0x14a0
[ 2502.938093][T23301]  ? find_held_lock+0x2d/0x110
[ 2502.942914][T23301]  ? oom_killer_disable+0x280/0x280
[ 2502.948174][T23301]  ? find_held_lock+0x2d/0x110
[ 2502.952992][T23301]  mem_cgroup_out_of_memory+0x206/0x270
[ 2502.958621][T23301]  ? mem_cgroup_margin+0x130/0x130
[ 2502.963796][T23301]  ? lock_downgrade+0x6e0/0x6e0
[ 2502.968711][T23301]  try_charge_memcg+0xefb/0x12f0
[ 2502.973704][T23301]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2502.979738][T23301]  ? lock_downgrade+0x6e0/0x6e0
[ 2502.984669][T23301]  charge_memcg+0x90/0x3b0
[ 2502.989132][T23301]  __mem_cgroup_charge+0x2b/0x90
[ 2502.994107][T23301]  ? folio_flags.constprop.0+0x53/0x150
[ 2502.999704][T23301]  __filemap_add_folio+0x615/0xf80
[ 2503.004872][T23301]  ? filemap_write_and_wait_range+0x120/0x120
[ 2503.011166][T23301]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2503.016586][T23301]  ? alloc_pages+0x1b2/0x270
[ 2503.021242][T23301]  ? folio_alloc+0x43/0x70
[ 2503.025716][T23301]  filemap_add_folio+0xaf/0x1e0
[ 2503.030621][T23301]  ? __filemap_add_folio+0xf80/0xf80
[ 2503.035955][T23301]  ? xas_load+0x6a/0x140
[ 2503.040273][T23301]  __filemap_get_folio+0x389/0xd80
[ 2503.045436][T23301]  ? filemap_add_folio+0x1e0/0x1e0
[ 2503.050608][T23301]  ? asm_exc_page_fault+0x26/0x30
[ 2503.055683][T23301]  pagecache_get_page+0x2e/0x280
[ 2503.060687][T23301]  ext4_da_write_begin+0x421/0xb50
[ 2503.065909][T23301]  ? ext4_write_begin+0x1140/0x1140
[ 2503.071192][T23301]  generic_perform_write+0x256/0x570
[ 2503.076641][T23301]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2503.082349][T23301]  ? discard_new_inode+0x1a0/0x1a0
[ 2503.087615][T23301]  ? down_write_killable+0x250/0x250
[ 2503.092965][T23301]  ext4_buffered_write_iter+0x15b/0x460
[ 2503.098857][T23301]  ext4_file_write_iter+0x8bf/0x1710
[ 2503.104204][T23301]  ? lock_release+0x810/0x810
[ 2503.108940][T23301]  ? ext4_file_mmap+0x440/0x440
[ 2503.113852][T23301]  vfs_write+0x9ed/0xdd0
[ 2503.118163][T23301]  ? kernel_write+0x630/0x630
[ 2503.122948][T23301]  ? __fget_files+0x26a/0x440
[ 2503.127694][T23301]  ksys_write+0x12b/0x250
[ 2503.132079][T23301]  ? __ia32_sys_read+0xb0/0xb0
[ 2503.136913][T23301]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2503.142543][T23301]  do_syscall_64+0x39/0xb0
[ 2503.147023][T23301]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2503.152968][T23301] RIP: 0033:0x7f4cebc8c0c9
[ 2503.157436][T23301] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2503.177530][T23301] RSP: 002b:00007f4cec972168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2503.186444][T23301] RAX: ffffffffffffffda RBX: 00007f4cebdabf80 RCX: 00007f4cebc8c0c9
[ 2503.194470][T23301] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2503.202586][T23301] RBP: 00007f4cebce7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2503.210967][T23301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2503.219033][T23301] R13: 00007ffefc2f0d0f R14: 00007f4cec972300 R15: 0000000000022000
[ 2503.227326][T23301]  </TASK>
[ 2503.245248][T23301] memory: usage 10708kB, limit 12kB, failcnt 1902
[ 2503.251833][T23301] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2503.258854][T23301] Memory cgroup stats for /syz3:
[ 2503.259044][T23301] anon 126976
[ 2503.259044][T23301] file 10452992
[ 2503.259044][T23301] kernel 286720
[ 2503.259044][T23301] kernel_stack 32768
[ 2503.259044][T23301] pagetables 81920
[ 2503.259044][T23301] sec_pagetables 0
[ 2503.259044][T23301] percpu 64
[ 2503.259044][T23301] sock 0
[ 2503.259044][T23301] vmalloc 0
[ 2503.259044][T23301] shmem 10452992
[ 2503.259044][T23301] zswap 0
[ 2503.259044][T23301] zswapped 0
[ 2503.259044][T23301] file_mapped 319488
[ 2503.259044][T23301] file_dirty 0
[ 2503.259044][T23301] file_writeback 0
[ 2503.259044][T23301] swapcached 0
[ 2503.259044][T23301] anon_thp 0
[ 2503.259044][T23301] file_thp 0
[ 2503.259044][T23301] shmem_thp 0
[ 2503.259044][T23301] inactive_anon 126976
[ 2503.259044][T23301] active_anon 10452992
[ 2503.259044][T23301] inactive_file 0
[ 2503.259044][T23301] active_file 0
[ 2503.259044][T23301] unevictable 0
[ 2503.259044][T23301] slab_reclaimable 51248
[ 2503.259044][T23301] slab_unreclaimable 91128
[ 2503.259044][T23301] slab 142376
[ 2503.370421][T23301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23190,uid=0
[ 2503.389992][T23301] Memory cgroup out of memory: Killed process 23190 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
19:00:16 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x3b00, 0x12)

19:00:16 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

19:00:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

19:00:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

19:00:16 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:16 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2504.644416][T23157] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0
[ 2504.738338][T23157] CPU: 0 PID: 23157 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2504.748924][T23157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2504.759039][T23157] Call Trace:
[ 2504.762353][T23157]  <TASK>
[ 2504.765297][T23157]  dump_stack_lvl+0xd1/0x138
[ 2504.769911][T23157]  dump_header+0x10b/0x85f
[ 2504.774446][T23157]  oom_kill_process.cold+0x10/0x15
[ 2504.779600][T23157]  out_of_memory+0x35c/0x14a0
[ 2504.784326][T23157]  ? find_held_lock+0x2d/0x110
[ 2504.789128][T23157]  ? oom_killer_disable+0x280/0x280
[ 2504.794380][T23157]  ? find_held_lock+0x2d/0x110
[ 2504.799177][T23157]  mem_cgroup_out_of_memory+0x206/0x270
[ 2504.804749][T23157]  ? mem_cgroup_margin+0x130/0x130
[ 2504.809891][T23157]  ? lock_downgrade+0x6e0/0x6e0
[ 2504.814790][T23157]  try_charge_memcg+0xefb/0x12f0
[ 2504.819770][T23157]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2504.826026][T23157]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2504.831770][T23157]  ? lock_downgrade+0x6e0/0x6e0
[ 2504.836642][T23157]  ? lock_downgrade+0x6e0/0x6e0
[ 2504.841507][T23157]  ? rcu_read_unlock+0x9/0x60
[ 2504.846261][T23157]  obj_cgroup_charge+0x2af/0x5e0
[ 2504.851215][T23157]  ? copy_process+0x3aa/0x7520
[ 2504.855995][T23157]  kmem_cache_alloc_node+0xb7/0x460
[ 2504.861209][T23157]  copy_process+0x3aa/0x7520
[ 2504.865830][T23157]  ? _raw_spin_unlock+0x28/0x40
[ 2504.870697][T23157]  ? wp_page_reuse+0x197/0x570
[ 2504.875486][T23157]  ? do_wp_page+0x844/0x3370
[ 2504.880106][T23157]  ? __cleanup_sighand+0xb0/0xb0
[ 2504.885057][T23157]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2504.890456][T23157]  ? rwlock_bug.part.0+0x90/0x90
[ 2504.895409][T23157]  ? lock_chain_count+0x20/0x20
[ 2504.900279][T23157]  kernel_clone+0xeb/0x990
[ 2504.904720][T23157]  ? create_io_thread+0xf0/0xf0
[ 2504.909765][T23157]  ? find_held_lock+0x2d/0x110
[ 2504.914571][T23157]  __do_sys_clone+0xba/0x100
[ 2504.919247][T23157]  ? kernel_clone+0x990/0x990
[ 2504.923959][T23157]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2504.929533][T23157]  do_syscall_64+0x39/0xb0
[ 2504.933971][T23157]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2504.939880][T23157] RIP: 0033:0x7f5691e89dfb
[ 2504.944313][T23157] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2504.963957][T23157] RSP: 002b:00007fff4a135bb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2504.972382][T23157] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5691e89dfb
[ 2504.980449][T23157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2504.988428][T23157] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555652f400
[ 2504.996406][T23157] R10: 000055555652f6d0 R11: 0000000000000246 R12: 0000000000000001
[ 2505.004409][T23157] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff4a135c90
[ 2505.012936][T23157]  </TASK>
[ 2505.091002][T18399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
19:00:16 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x3f00, 0x12)

[ 2505.249613][T18399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2505.378340][T18399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2505.483935][T18399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2505.678716][T23157] memory: usage 8280kB, limit 4kB, failcnt 787
[ 2505.684951][T23157] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2505.709580][T23157] Memory cgroup stats for /syz1:
[ 2505.709881][T23157] anon 40960
[ 2505.709881][T23157] file 8359936
[ 2505.709881][T23157] kernel 77824
[ 2505.709881][T23157] kernel_stack 0
[ 2505.709881][T23157] pagetables 8192
[ 2505.709881][T23157] sec_pagetables 0
[ 2505.709881][T23157] percpu 0
[ 2505.709881][T23157] sock 0
[ 2505.709881][T23157] vmalloc 0
[ 2505.709881][T23157] shmem 8351744
[ 2505.709881][T23157] zswap 0
[ 2505.709881][T23157] zswapped 0
[ 2505.709881][T23157] file_mapped 188416
[ 2505.709881][T23157] file_dirty 0
[ 2505.709881][T23157] file_writeback 0
[ 2505.709881][T23157] swapcached 0
[ 2505.709881][T23157] anon_thp 0
[ 2505.709881][T23157] file_thp 0
[ 2505.709881][T23157] shmem_thp 0
[ 2505.709881][T23157] inactive_anon 40960
[ 2505.709881][T23157] active_anon 8351744
[ 2505.709881][T23157] inactive_file 4096
[ 2505.709881][T23157] active_file 4096
[ 2505.709881][T23157] unevictable 0
[ 2505.709881][T23157] slab_reclaimable 27088
[ 2505.709881][T23157] slab_unreclaimable 32296
[ 2505.709881][T23157] slab 59384
19:00:17 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2505.842366][T23157] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23157,uid=0
[ 2505.858629][T23157] Memory cgroup out of memory: Killed process 23157 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
19:00:17 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r3, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r4 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r4, 0x1, r5, 0x3)

19:00:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x3900, 0x12)

19:00:17 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:18 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:18 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2506.755283][T23382] syz-executor.2 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2506.853313][T23382] CPU: 1 PID: 23382 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2506.863803][T23382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2506.873904][T23382] Call Trace:
[ 2506.877208][T23382]  <TASK>
[ 2506.880176][T23382]  dump_stack_lvl+0xd1/0x138
[ 2506.884823][T23382]  dump_header+0x10b/0x85f
[ 2506.889293][T23382]  oom_kill_process.cold+0x10/0x15
[ 2506.894464][T23382]  out_of_memory+0x35c/0x14a0
[ 2506.899213][T23382]  ? find_held_lock+0x2d/0x110
[ 2506.904049][T23382]  ? oom_killer_disable+0x280/0x280
[ 2506.909320][T23382]  ? find_held_lock+0x2d/0x110
[ 2506.914149][T23382]  mem_cgroup_out_of_memory+0x206/0x270
[ 2506.919748][T23382]  ? mem_cgroup_margin+0x130/0x130
[ 2506.924905][T23382]  ? lock_downgrade+0x6e0/0x6e0
[ 2506.929814][T23382]  try_charge_memcg+0xefb/0x12f0
[ 2506.934804][T23382]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2506.940853][T23382]  ? lock_downgrade+0x6e0/0x6e0
[ 2506.945991][T23382]  charge_memcg+0x90/0x3b0
[ 2506.950460][T23382]  __mem_cgroup_charge+0x2b/0x90
[ 2506.955451][T23382]  ? folio_flags.constprop.0+0x53/0x150
[ 2506.961054][T23382]  __filemap_add_folio+0x615/0xf80
[ 2506.966232][T23382]  ? filemap_write_and_wait_range+0x120/0x120
[ 2506.972362][T23382]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2506.977871][T23382]  ? alloc_pages+0x1b2/0x270
[ 2506.982511][T23382]  ? folio_alloc+0x43/0x70
[ 2506.986977][T23382]  filemap_add_folio+0xaf/0x1e0
[ 2506.991912][T23382]  ? __filemap_add_folio+0xf80/0xf80
[ 2506.997240][T23382]  ? xas_load+0x6a/0x140
[ 2507.001531][T23382]  __filemap_get_folio+0x389/0xd80
[ 2507.006763][T23382]  ? filemap_add_folio+0x1e0/0x1e0
[ 2507.011906][T23382]  ? asm_exc_page_fault+0x26/0x30
[ 2507.016958][T23382]  pagecache_get_page+0x2e/0x280
[ 2507.021914][T23382]  ext4_da_write_begin+0x421/0xb50
[ 2507.027058][T23382]  ? ext4_write_begin+0x1140/0x1140
[ 2507.032301][T23382]  generic_perform_write+0x256/0x570
[ 2507.037612][T23382]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2507.043024][T23382]  ? discard_new_inode+0x1a0/0x1a0
[ 2507.048248][T23382]  ? down_write_killable+0x250/0x250
[ 2507.053564][T23382]  ext4_buffered_write_iter+0x15b/0x460
[ 2507.059128][T23382]  ext4_file_write_iter+0x8bf/0x1710
[ 2507.064437][T23382]  ? lock_release+0x810/0x810
[ 2507.069149][T23382]  ? ext4_file_mmap+0x440/0x440
[ 2507.074030][T23382]  vfs_write+0x9ed/0xdd0
[ 2507.078294][T23382]  ? kernel_write+0x630/0x630
[ 2507.082992][T23382]  ? __fget_files+0x26a/0x440
[ 2507.087724][T23382]  ksys_write+0x12b/0x250
[ 2507.092073][T23382]  ? __ia32_sys_read+0xb0/0xb0
[ 2507.096858][T23382]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2507.102433][T23382]  do_syscall_64+0x39/0xb0
[ 2507.106872][T23382]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2507.112780][T23382] RIP: 0033:0x7f14bba8c0c9
[ 2507.117226][T23382] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2507.136849][T23382] RSP: 002b:00007f14bc7b6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2507.145310][T23382] RAX: ffffffffffffffda RBX: 00007f14bbbabf80 RCX: 00007f14bba8c0c9
[ 2507.153292][T23382] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2507.161274][T23382] RBP: 00007f14bbae7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2507.169283][T23382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2507.177269][T23382] R13: 00007fff0a2185bf R14: 00007f14bc7b6300 R15: 0000000000022000
[ 2507.185363][T23382]  </TASK>
[ 2507.303898][T23382] memory: usage 10728kB, limit 12kB, failcnt 950
[ 2507.365951][T23382] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2507.446618][T18399] device hsr_slave_0 left promiscuous mode
[ 2507.453894][T23382] Memory cgroup stats for /syz2:
[ 2507.454098][T23382] anon 151552
[ 2507.454098][T23382] file 10452992
[ 2507.454098][T23382] kernel 262144
[ 2507.454098][T23382] kernel_stack 32768
[ 2507.454098][T23382] pagetables 77824
[ 2507.454098][T23382] sec_pagetables 0
[ 2507.454098][T23382] percpu 64
[ 2507.454098][T23382] sock 0
[ 2507.454098][T23382] vmalloc 0
[ 2507.454098][T23382] shmem 10452992
[ 2507.454098][T23382] zswap 0
[ 2507.454098][T23382] zswapped 0
[ 2507.454098][T23382] file_mapped 253952
[ 2507.454098][T23382] file_dirty 0
[ 2507.454098][T23382] file_writeback 0
[ 2507.454098][T23382] swapcached 0
[ 2507.454098][T23382] anon_thp 0
[ 2507.454098][T23382] file_thp 0
[ 2507.454098][T23382] shmem_thp 0
[ 2507.454098][T23382] inactive_anon 151552
[ 2507.454098][T23382] active_anon 10452992
[ 2507.454098][T23382] inactive_file 0
[ 2507.454098][T23382] active_file 0
[ 2507.454098][T23382] unevictable 0
[ 2507.454098][T23382] slab_reclaimable 50000
[ 2507.454098][T23382] slab_unreclaimable 72584
[ 2507.454098][T23382] slab 122584
[ 2507.566031][T18399] device hsr_slave_1 left promiscuous mode
[ 2507.598889][T18399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2507.625625][T18399] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2507.672507][T18399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2507.703535][T18399] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2507.747233][T18399] device bridge_slave_1 left promiscuous mode
[ 2507.774373][T18399] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2507.790454][T18399] device bridge_slave_0 left promiscuous mode
[ 2507.796825][T18399] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2507.834078][T18399] device veth1_macvtap left promiscuous mode
[ 2507.842293][T18399] device veth0_macvtap left promiscuous mode
[ 2507.858917][T18399] device veth1_vlan left promiscuous mode
[ 2507.864951][T18399] device veth0_vlan left promiscuous mode
[ 2507.879377][T23382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23381,uid=0
[ 2507.941768][T23382] Memory cgroup out of memory: Killed process 23382 (syz-executor.2) total-vm:56852kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2507.994235][T14228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2508.003884][T14228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2508.018961][T14228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2508.027458][T14228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2508.035380][T14228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2508.390262][T18399] team0 (unregistering): Port device team_slave_1 removed
[ 2508.417916][T18399] team0 (unregistering): Port device team_slave_0 removed
[ 2508.441068][T18399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2508.467656][T18399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2508.630744][T18399] bond0 (unregistering): Released all slaves
[ 2508.688841][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2508.698252][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2508.707929][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2508.716563][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2508.726822][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2508.736292][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2508.802869][T14228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2508.828728][T14228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2508.838439][T14228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2508.856390][T14228] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2508.865708][T14228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2508.874791][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2509.124004][T23401] chnl_net:caif_netlink_parms(): no params data found
[ 2509.377091][T23410] chnl_net:caif_netlink_parms(): no params data found
[ 2509.465658][T23413] chnl_net:caif_netlink_parms(): no params data found
[ 2509.505789][T23401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2509.513464][T23401] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2509.559909][T23401] device bridge_slave_0 entered promiscuous mode
[ 2509.627791][T23401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2509.648712][T23401] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2509.667287][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2509.676958][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2509.686088][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2509.696144][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2509.704247][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2509.711736][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2509.748758][T23401] device bridge_slave_1 entered promiscuous mode
[ 2509.963245][T23401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2509.993199][T23410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2510.011014][T23410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2510.026787][T23410] device bridge_slave_0 entered promiscuous mode
[ 2510.037814][T23413] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2510.051908][T23413] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2510.065991][T23413] device bridge_slave_0 entered promiscuous mode
[ 2510.082101][T23401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2510.108410][T23410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2510.116365][T23410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2510.123723][ T5115] Bluetooth: hci0: command 0x0409 tx timeout
[ 2510.141890][T23410] device bridge_slave_1 entered promiscuous mode
[ 2510.153018][T23413] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2510.160512][T23413] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2510.168922][T23413] device bridge_slave_1 entered promiscuous mode
[ 2510.283441][T23413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2510.341563][T23410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2510.353784][T23413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2510.367120][T23401] team0: Port device team_slave_0 added
[ 2510.384115][T23401] team0: Port device team_slave_1 added
[ 2510.406673][T23410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2510.476753][T23401] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2510.490375][T23401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2510.526465][T23401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2510.580395][T23413] team0: Port device team_slave_0 added
[ 2510.596232][T23401] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2510.618001][T23401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2510.653865][T23401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2510.673910][T23410] team0: Port device team_slave_0 added
[ 2510.697377][T23413] team0: Port device team_slave_1 added
[ 2510.743615][T23410] team0: Port device team_slave_1 added
[ 2510.758770][ T5115] Bluetooth: hci2: command 0x0409 tx timeout
[ 2510.870808][T23410] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2510.877801][T23410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2510.919000][ T5115] Bluetooth: hci3: command 0x0409 tx timeout
[ 2510.950682][T23410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2510.970056][T23413] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2510.977047][T23413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2511.038847][T23413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2511.138104][T23410] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2511.145968][T23410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2511.188619][T23410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2511.220071][T23413] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2511.227536][T23413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2511.291576][T23413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2511.311757][T23401] device hsr_slave_0 entered promiscuous mode
[ 2511.339872][T23401] device hsr_slave_1 entered promiscuous mode
[ 2511.355409][T23401] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2511.378728][T23401] Cannot create hsr debugfs directory
[ 2511.553465][T23410] device hsr_slave_0 entered promiscuous mode
[ 2511.577862][T23410] device hsr_slave_1 entered promiscuous mode
[ 2511.584806][T23410] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2511.592862][T23410] Cannot create hsr debugfs directory
[ 2511.616743][T23439] chnl_net:caif_netlink_parms(): no params data found
[ 2511.632774][T23413] device hsr_slave_0 entered promiscuous mode
[ 2511.646935][T23413] device hsr_slave_1 entered promiscuous mode
[ 2511.658177][T23413] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2511.666336][T23413] Cannot create hsr debugfs directory
[ 2511.798750][T14228] Bluetooth: hci4: command 0x0409 tx timeout
[ 2511.807890][T15331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2512.009528][T15331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2512.159544][T15331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2512.199641][T14228] Bluetooth: hci0: command 0x041b tx timeout
[ 2512.296508][T15331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2512.322302][T23439] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2512.338829][T23439] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2512.347238][T23439] device bridge_slave_0 entered promiscuous mode
[ 2512.406729][T23439] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2512.417818][T23439] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2512.435860][T23439] device bridge_slave_1 entered promiscuous mode
[ 2512.571176][T23439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2512.621979][T23439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2512.845951][T23439] team0: Port device team_slave_0 added
[ 2512.846544][ T5115] Bluetooth: hci2: command 0x041b tx timeout
[ 2512.891694][T23439] team0: Port device team_slave_1 added
[ 2512.964155][T23439] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2512.979275][T23439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2513.005911][ T5115] Bluetooth: hci3: command 0x041b tx timeout
[ 2513.013354][T23439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2513.044425][T23439] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2513.055423][T23439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2513.092964][T23439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2513.159027][T23439] device hsr_slave_0 entered promiscuous mode
[ 2513.166103][T23439] device hsr_slave_1 entered promiscuous mode
[ 2513.173999][T23439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2513.181970][T23439] Cannot create hsr debugfs directory
[ 2513.261813][T23401] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2513.368201][T23401] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2513.425435][T23401] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2513.454720][T23401] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2513.878881][ T5115] Bluetooth: hci4: command 0x041b tx timeout
[ 2513.937981][T23401] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2514.065376][T23401] 8021q: adding VLAN 0 to HW filter on device team0
[ 2514.179353][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2514.187311][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2514.196704][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2514.207205][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2514.216284][T23004] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2514.223466][T23004] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2514.231823][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2514.240969][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2514.250043][T23004] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2514.257169][T23004] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2514.265401][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2514.278800][ T5115] Bluetooth: hci0: command 0x040f tx timeout
[ 2514.335098][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2514.353670][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2514.375159][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2514.395185][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2514.414992][T23401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2514.437479][T23401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2514.480544][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2514.488341][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2514.507869][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2514.519106][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2514.527718][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2514.542106][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2514.593757][T15331] device hsr_slave_0 left promiscuous mode
[ 2514.600834][T15331] device hsr_slave_1 left promiscuous mode
[ 2514.608283][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2514.616932][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2514.641459][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2514.657729][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2514.700743][T15331] device bridge_slave_1 left promiscuous mode
[ 2514.707337][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2514.738347][T15331] device bridge_slave_0 left promiscuous mode
[ 2514.768833][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2514.869007][T15331] device veth1_macvtap left promiscuous mode
[ 2514.875109][T15331] device veth0_macvtap left promiscuous mode
[ 2514.898844][T15331] device veth1_vlan left promiscuous mode
[ 2514.904738][T15331] device veth0_vlan left promiscuous mode
[ 2514.918606][ T5115] Bluetooth: hci2: command 0x040f tx timeout
[ 2515.078603][ T5115] Bluetooth: hci3: command 0x040f tx timeout
[ 2515.567568][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2515.597228][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2515.624282][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2515.642446][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2515.796197][T15331] bond0 (unregistering): Released all slaves
[ 2515.958631][ T5115] Bluetooth: hci4: command 0x040f tx timeout
[ 2516.059648][T23413] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2516.105170][T23413] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2516.277294][T23401] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2516.337710][T23413] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2516.358791][ T5115] Bluetooth: hci0: command 0x0419 tx timeout
[ 2516.361093][T23413] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2516.411444][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2516.427761][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2516.942812][T23413] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2516.997555][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2517.004970][ T5115] Bluetooth: hci2: command 0x0419 tx timeout
[ 2517.013198][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2517.046433][T23413] 8021q: adding VLAN 0 to HW filter on device team0
[ 2517.099165][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2517.107961][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2517.139120][T26601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2517.146353][T26601] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2517.168644][ T5115] Bluetooth: hci3: command 0x0419 tx timeout
[ 2517.175106][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2517.199261][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2517.207801][T26601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2517.214966][T26601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2517.223288][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2517.281234][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2517.290538][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2517.317630][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2517.340581][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2517.357606][T23410] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2517.427165][T23413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2517.441862][T23413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2517.455747][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2517.465545][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2517.483829][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2517.509667][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2517.518202][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2517.539823][T23410] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2517.571522][T23410] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2517.614340][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2517.640761][T23410] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2517.673216][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2517.689419][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2517.757053][T23401] device veth0_vlan entered promiscuous mode
[ 2517.809289][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2517.818383][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2517.847526][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2517.889081][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2517.958039][T23401] device veth1_vlan entered promiscuous mode
[ 2518.033403][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2518.050122][ T5115] Bluetooth: hci4: command 0x0419 tx timeout
[ 2518.060051][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2518.128933][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2518.137708][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2518.235586][T23401] device veth0_macvtap entered promiscuous mode
[ 2518.264836][T23401] device veth1_macvtap entered promiscuous mode
[ 2518.347254][T23401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2518.386611][T23401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2518.417254][T23401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2518.450646][T23401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2518.462797][T23401] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2518.482264][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2518.493974][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2518.519992][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2518.529234][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2518.559606][T23439] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2518.592121][T23401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2518.626462][T23401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2518.656453][T23401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2518.670560][T23401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2518.694259][T23401] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2518.715066][T23439] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2518.751210][T23439] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2518.770531][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2518.780731][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2518.790256][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2518.797801][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2518.809599][T23401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2518.818356][T23401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2518.848881][T23401] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2518.857645][T23401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2518.885940][T23410] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2518.898019][T23439] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2518.932562][T23413] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2519.005908][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2519.015265][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2519.040865][T23410] 8021q: adding VLAN 0 to HW filter on device team0
[ 2519.139525][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2519.157238][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2519.166175][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2519.173374][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2519.241957][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2519.259687][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2519.276897][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2519.286677][T15074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2519.293869][T15074] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2519.302732][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2519.312296][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2519.350324][T18399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2519.368844][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2519.378363][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2519.378612][T18399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2519.396666][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2519.449094][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2519.457281][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2519.479051][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2519.490474][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2519.519860][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2519.547083][T23410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2519.588047][T23410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2519.611445][T23439] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2519.619999][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2519.636901][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2519.659492][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2519.685014][T23439] 8021q: adding VLAN 0 to HW filter on device team0
[ 2519.714851][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2519.729344][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2519.773098][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2519.789961][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2519.798564][T15074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2519.805675][T15074] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2519.851337][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2519.869203][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2519.887147][T15074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2519.894379][T15074] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2519.929469][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2519.979481][T23595] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2519.984456][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2519.998033][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2520.007146][T23595] CPU: 0 PID: 23595 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2520.017613][T23595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2520.027789][T23595] Call Trace:
[ 2520.031096][T23595]  <TASK>
[ 2520.034049][T23595]  dump_stack_lvl+0xd1/0x138
[ 2520.038333][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2520.038661][T23595]  dump_header+0x10b/0x85f
[ 2520.038707][T23595]  oom_kill_process.cold+0x10/0x15
[ 2520.056181][T23595]  out_of_memory+0x35c/0x14a0
[ 2520.060896][T23595]  ? oom_killer_disable+0x280/0x280
[ 2520.066129][T23595]  mem_cgroup_out_of_memory+0x206/0x270
[ 2520.071700][T23595]  ? mem_cgroup_margin+0x130/0x130
[ 2520.076890][T23595]  memory_max_write+0x2f9/0x3c0
[ 2520.081770][T23595]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2520.087852][T23595]  ? lock_release+0x810/0x810
[ 2520.092548][T23595]  cgroup_file_write+0x1e2/0x770
[ 2520.097508][T23595]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2520.103591][T23595]  ? kill_css+0x370/0x370
[ 2520.107950][T23595]  ? __virt_addr_valid+0x61/0x2e0
[ 2520.113008][T23595]  ? kill_css+0x370/0x370
[ 2520.117358][T23595]  kernfs_fop_write_iter+0x3f1/0x600
[ 2520.122687][T23595]  vfs_write+0x9ed/0xdd0
[ 2520.126956][T23595]  ? kernel_write+0x630/0x630
[ 2520.131709][T23595]  ? __fget_files+0x26a/0x440
[ 2520.136418][T23595]  ksys_write+0x12b/0x250
[ 2520.140764][T23595]  ? __ia32_sys_read+0xb0/0xb0
[ 2520.145548][T23595]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2520.151214][T23595]  do_syscall_64+0x39/0xb0
[ 2520.155666][T23595]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2520.161582][T23595] RIP: 0033:0x7f12b4a8c0c9
[ 2520.166008][T23595] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2520.185629][T23595] RSP: 002b:00007f12b5755168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2520.194077][T23595] RAX: ffffffffffffffda RBX: 00007f12b4bac050 RCX: 00007f12b4a8c0c9
[ 2520.202076][T23595] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006
[ 2520.210059][T23595] RBP: 00007f12b4ae7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2520.218038][T23595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2520.226020][T23595] R13: 00007fff2d9e50ff R14: 00007f12b5755300 R15: 0000000000022000
[ 2520.234131][T23595]  </TASK>
[ 2520.248867][T23595] memory: usage 10672kB, limit 0kB, failcnt 1307
[ 2520.264089][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2520.309673][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2520.327186][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2520.349540][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2520.362949][T23439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2520.407796][T23439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2520.446173][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2520.465645][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2520.515652][T23595] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2520.520017][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2520.529828][T23595] Memory cgroup stats for /syz5:
[ 2520.530931][T23595] anon 122880
[ 2520.530931][T23595] file 10448896
[ 2520.530931][T23595] kernel 335872
[ 2520.530931][T23595] kernel_stack 98304
[ 2520.530931][T23595] pagetables 77824
[ 2520.530931][T23595] sec_pagetables 0
[ 2520.530931][T23595] percpu 64
[ 2520.530931][T23595] sock 0
[ 2520.530931][T23595] vmalloc 0
[ 2520.530931][T23595] shmem 10448896
[ 2520.530931][T23595] zswap 0
[ 2520.530931][T23595] zswapped 0
[ 2520.530931][T23595] file_mapped 249856
[ 2520.530931][T23595] file_dirty 0
[ 2520.530931][T23595] file_writeback 0
[ 2520.530931][T23595] swapcached 0
[ 2520.530931][T23595] anon_thp 0
[ 2520.530931][T23595] file_thp 0
[ 2520.530931][T23595] shmem_thp 0
[ 2520.530931][T23595] inactive_anon 122880
[ 2520.530931][T23595] active_anon 10448896
[ 2520.530931][T23595] inactive_file 0
[ 2520.530931][T23595] active_file 0
[ 2520.530931][T23595] unevictable 0
[ 2520.530931][T23595] slab_reclaimable 46312
[ 2520.530931][T23595] slab_unreclaimable 81792
[ 2520.530931][T23595] slab 128104
[ 2520.559411][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2520.651602][T23595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23592,uid=0
[ 2520.751425][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2520.786696][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2520.797862][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2520.813723][T23595] Memory cgroup out of memory: Killed process 23592 (syz-executor.5) total-vm:56720kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2520.839864][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2520.848431][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2520.865601][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2520.877436][T23413] device veth0_vlan entered promiscuous mode
[ 2520.908010][T23413] device veth1_vlan entered promiscuous mode
[ 2520.932240][T23410] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2520.979922][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2520.988216][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2520.997951][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2521.017887][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2521.043004][T23413] device veth0_macvtap entered promiscuous mode
[ 2521.065509][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2521.074626][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2521.093063][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2521.119672][T23413] device veth1_macvtap entered promiscuous mode
[ 2521.144025][T23410] device veth0_vlan entered promiscuous mode
[ 2521.162944][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2521.172688][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2521.181335][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2521.202645][T23413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2521.213409][T23413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.223880][T23413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2521.236477][T23413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.247882][T23413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2521.267527][T23413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.289308][T23413] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2521.302906][T23410] device veth1_vlan entered promiscuous mode
[ 2521.316406][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2521.339522][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2521.347512][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2521.365669][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2521.375420][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2521.385094][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2521.393219][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2521.403426][T23413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2521.417712][T23413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.435635][T23413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2521.449370][T23413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.459771][T23413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2521.478648][T23413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.516236][T23413] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2521.545873][T23439] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2521.562692][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2521.577194][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2521.601997][T23413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2521.611335][T23413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2521.620925][T23413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2521.632285][T23413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2521.697128][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2521.706887][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2521.725014][T23410] device veth0_macvtap entered promiscuous mode
[ 2521.768070][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2521.777087][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2521.787240][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2521.810931][T23410] device veth1_macvtap entered promiscuous mode
[ 2521.835269][T23439] device veth0_vlan entered promiscuous mode
[ 2521.876909][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2521.885855][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2521.898418][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2521.919778][T23410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2521.934458][T23410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.945657][T23410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2521.956421][T23410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.968448][T23410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2521.980006][T23410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2521.990140][T23410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2522.000714][T23410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.012497][T23410] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2522.028712][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2522.037060][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2522.045974][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2522.055234][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2522.066618][T23439] device veth1_vlan entered promiscuous mode
[ 2522.077930][T23410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2522.098596][T23410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.108445][T23410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2522.119748][T23410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.129735][T23410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2522.147867][T23410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.157847][T23410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2522.172785][T23410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.186405][T23410] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2522.197781][T23410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2522.207691][T23410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2522.217109][T23410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2522.236189][T23410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2522.268326][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2522.277529][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2522.293295][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2522.333678][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2522.351090][T18399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2522.381292][T18399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2522.395115][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2522.407585][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2522.431290][T23439] device veth0_macvtap entered promiscuous mode
[ 2522.441990][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2522.459749][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2522.483382][T23439] device veth1_macvtap entered promiscuous mode
[ 2522.485622][T15444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2522.514703][T15444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2522.556639][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2522.565775][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2522.590742][T15444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2522.631273][T15444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2522.631749][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2522.665796][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.684680][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2522.699130][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.709456][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2522.720964][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.735560][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2522.751093][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.769003][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2522.788590][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2522.802544][T23439] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2522.820910][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2522.834667][T23641] syz-executor.4 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2522.838115][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2522.848906][T23641] CPU: 0 PID: 23641 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2522.864264][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2522.865712][T23641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2522.865728][T23641] Call Trace:
[ 2522.865736][T23641]  <TASK>
[ 2522.865749][T23641]  dump_stack_lvl+0xd1/0x138
[ 2522.877857][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2522.883854][T23641]  dump_header+0x10b/0x85f
[ 2522.883905][T23641]  oom_kill_process.cold+0x10/0x15
[ 2522.897338][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2522.903171][T23641]  out_of_memory+0x35c/0x14a0
[ 2522.903221][T23641]  ? find_held_lock+0x2d/0x110
[ 2522.903257][T23641]  ? oom_killer_disable+0x280/0x280
[ 2522.903298][T23641]  ? find_held_lock+0x2d/0x110
[ 2522.903340][T23641]  mem_cgroup_out_of_memory+0x206/0x270
[ 2522.903380][T23641]  ? mem_cgroup_margin+0x130/0x130
[ 2522.903414][T23641]  ? lock_downgrade+0x6e0/0x6e0
[ 2522.903458][T23641]  try_charge_memcg+0xefb/0x12f0
[ 2522.903495][T23641]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2522.903541][T23641]  ? lock_downgrade+0x6e0/0x6e0
[ 2522.903581][T23641]  charge_memcg+0x90/0x3b0
[ 2522.903612][T23641]  __mem_cgroup_charge+0x2b/0x90
[ 2522.923111][T18532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2522.925194][T23641]  ? folio_flags.constprop.0+0x53/0x150
[ 2522.993614][T23641]  __filemap_add_folio+0x615/0xf80
[ 2522.998852][T23641]  ? filemap_write_and_wait_range+0x120/0x120
[ 2523.004978][T23641]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2523.010422][T23641]  ? alloc_pages+0x1b2/0x270
[ 2523.015059][T23641]  ? folio_alloc+0x43/0x70
[ 2523.019513][T23641]  filemap_add_folio+0xaf/0x1e0
[ 2523.024398][T23641]  ? __filemap_add_folio+0xf80/0xf80
[ 2523.029751][T23641]  ? xas_load+0x6a/0x140
[ 2523.034062][T23641]  __filemap_get_folio+0x389/0xd80
[ 2523.039229][T23641]  ? filemap_add_folio+0x1e0/0x1e0
[ 2523.045081][T23641]  ? asm_exc_page_fault+0x26/0x30
[ 2523.050133][T23641]  pagecache_get_page+0x2e/0x280
[ 2523.055107][T23641]  ext4_da_write_begin+0x421/0xb50
[ 2523.060259][T23641]  ? ext4_write_begin+0x1140/0x1140
[ 2523.065519][T23641]  generic_perform_write+0x256/0x570
[ 2523.070858][T23641]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2523.076263][T23641]  ? discard_new_inode+0x1a0/0x1a0
[ 2523.081407][T23641]  ? down_write_killable+0x250/0x250
[ 2523.086747][T23641]  ext4_buffered_write_iter+0x15b/0x460
[ 2523.092368][T23641]  ext4_file_write_iter+0x8bf/0x1710
[ 2523.097692][T23641]  ? lock_release+0x810/0x810
[ 2523.102481][T23641]  ? ext4_file_mmap+0x440/0x440
[ 2523.107432][T23641]  vfs_write+0x9ed/0xdd0
[ 2523.111716][T23641]  ? kernel_write+0x630/0x630
[ 2523.116442][T23641]  ? __fget_files+0x26a/0x440
[ 2523.121145][T23641]  ksys_write+0x12b/0x250
[ 2523.125498][T23641]  ? __ia32_sys_read+0xb0/0xb0
[ 2523.130292][T23641]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2523.135875][T23641]  do_syscall_64+0x39/0xb0
[ 2523.140315][T23641]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2523.146221][T23641] RIP: 0033:0x7f3d61c8c0c9
[ 2523.150651][T23641] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2523.170294][T23641] RSP: 002b:00007f3d62a77168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2523.178720][T23641] RAX: ffffffffffffffda RBX: 00007f3d61dabf80 RCX: 00007f3d61c8c0c9
[ 2523.186700][T23641] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2523.194689][T23641] RBP: 00007f3d61ce7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2523.202772][T23641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2523.210769][T23641] R13: 00007ffd5e5bb95f R14: 00007f3d62a77300 R15: 0000000000022000
[ 2523.218784][T23641]  </TASK>
[ 2523.230499][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2523.258065][T23641] memory: usage 10672kB, limit 0kB, failcnt 3574
[ 2523.265702][T23641] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2523.272768][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2523.282822][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2523.293511][T23641] Memory cgroup stats for /syz4:
[ 2523.293730][T23641] anon 122880
[ 2523.293730][T23641] file 10461184
[ 2523.293730][T23641] kernel 344064
[ 2523.293730][T23641] kernel_stack 98304
[ 2523.293730][T23641] pagetables 81920
[ 2523.293730][T23641] sec_pagetables 0
[ 2523.293730][T23641] percpu 64
[ 2523.293730][T23641] sock 0
[ 2523.293730][T23641] vmalloc 0
[ 2523.293730][T23641] shmem 10444800
[ 2523.293730][T23641] zswap 0
[ 2523.293730][T23641] zswapped 0
[ 2523.293730][T23641] file_mapped 245760
[ 2523.293730][T23641] file_dirty 16384
[ 2523.293730][T23641] file_writeback 0
[ 2523.293730][T23641] swapcached 0
[ 2523.293730][T23641] anon_thp 0
[ 2523.293730][T23641] file_thp 0
[ 2523.293730][T23641] shmem_thp 0
[ 2523.293730][T23641] inactive_anon 122880
[ 2523.293730][T23641] active_anon 10444800
[ 2523.293730][T23641] inactive_file 16384
[ 2523.293730][T23641] active_file 0
[ 2523.293730][T23641] unevictable 0
[ 2523.293730][T23641] slab_reclaimable 47544
[ 2523.293730][T23641] slab_unreclaimable 81792
[ 2523.395783][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2523.406821][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2523.420270][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2523.430652][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2523.441401][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2523.457287][T23439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2523.468308][T23439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2523.490959][T23439] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2523.503017][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2523.514556][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2523.530123][T23439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2523.540998][T23439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2523.550624][T23439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2523.561322][T23439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2523.574760][T23641] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23640,uid=0
[ 2523.666684][T23641] Memory cgroup out of memory: Killed process 23640 (syz-executor.4) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2523.745160][T15447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2523.780595][T15447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
19:00:35 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

19:00:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:35 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:35 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2523.804079][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2523.826827][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2523.841132][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2523.854306][T23186] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0
[ 2523.898855][T23186] CPU: 1 PID: 23186 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2523.909432][T23186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2523.909755][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2523.919494][T23186] Call Trace:
[ 2523.919507][T23186]  <TASK>
[ 2523.919518][T23186]  dump_stack_lvl+0xd1/0x138
[ 2523.919554][T23186]  dump_header+0x10b/0x85f
[ 2523.919591][T23186]  oom_kill_process.cold+0x10/0x15
[ 2523.919628][T23186]  out_of_memory+0x35c/0x14a0
[ 2523.919668][T23186]  ? find_held_lock+0x2d/0x110
[ 2523.919701][T23186]  ? oom_killer_disable+0x280/0x280
[ 2523.919738][T23186]  ? find_held_lock+0x2d/0x110
[ 2523.919775][T23186]  mem_cgroup_out_of_memory+0x206/0x270
[ 2523.919811][T23186]  ? mem_cgroup_margin+0x130/0x130
[ 2523.977463][T23186]  ? lock_downgrade+0x6e0/0x6e0
[ 2523.982374][T23186]  try_charge_memcg+0xefb/0x12f0
[ 2523.987456][T23186]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2523.993519][T23186]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2523.999290][T23186]  ? lock_downgrade+0x6e0/0x6e0
[ 2524.004152][T23186]  ? lock_downgrade+0x6e0/0x6e0
[ 2524.009010][T23186]  ? rcu_read_unlock+0x9/0x60
[ 2524.013716][T23186]  obj_cgroup_charge+0x2af/0x5e0
[ 2524.018669][T23186]  ? copy_process+0x3aa/0x7520
[ 2524.023445][T23186]  kmem_cache_alloc_node+0xb7/0x460
[ 2524.028668][T23186]  copy_process+0x3aa/0x7520
[ 2524.033279][T23186]  ? _raw_spin_unlock+0x28/0x40
[ 2524.038147][T23186]  ? wp_page_reuse+0x197/0x570
[ 2524.042928][T23186]  ? do_wp_page+0x844/0x3370
[ 2524.047539][T23186]  ? __cleanup_sighand+0xb0/0xb0
[ 2524.052487][T23186]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2524.057888][T23186]  ? rwlock_bug.part.0+0x90/0x90
[ 2524.062921][T23186]  ? lock_chain_count+0x20/0x20
[ 2524.067782][T23186]  kernel_clone+0xeb/0x990
[ 2524.072212][T23186]  ? create_io_thread+0xf0/0xf0
[ 2524.077086][T23186]  ? find_held_lock+0x2d/0x110
[ 2524.081881][T23186]  __do_sys_clone+0xba/0x100
[ 2524.086508][T23186]  ? kernel_clone+0x990/0x990
[ 2524.091220][T23186]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2524.096790][T23186]  do_syscall_64+0x39/0xb0
[ 2524.101226][T23186]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2524.107133][T23186] RIP: 0033:0x7f14bba89dfb
[ 2524.111593][T23186] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2524.131297][T23186] RSP: 002b:00007fff0a218800 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2524.139727][T23186] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14bba89dfb
[ 2524.147724][T23186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2524.155702][T23186] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055555647c400
[ 2524.163698][T23186] R10: 000055555647c6d0 R11: 0000000000000246 R12: 0000000000000001
[ 2524.172381][T23186] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff0a2188e0
[ 2524.180384][T23186]  </TASK>
19:00:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2524.336455][T23186] memory: usage 10340kB, limit 12kB, failcnt 969
[ 2524.366595][T23186] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2524.397262][T23186] Memory cgroup stats for /syz2:
[ 2524.397480][T23186] anon 45056
[ 2524.397480][T23186] file 10452992
[ 2524.397480][T23186] kernel 90112
[ 2524.397480][T23186] kernel_stack 0
[ 2524.397480][T23186] pagetables 8192
[ 2524.397480][T23186] sec_pagetables 0
[ 2524.397480][T23186] percpu 0
[ 2524.397480][T23186] sock 0
[ 2524.397480][T23186] vmalloc 0
[ 2524.397480][T23186] shmem 10452992
[ 2524.397480][T23186] zswap 0
[ 2524.397480][T23186] zswapped 0
[ 2524.397480][T23186] file_mapped 241664
[ 2524.397480][T23186] file_dirty 0
[ 2524.397480][T23186] file_writeback 0
[ 2524.397480][T23186] swapcached 0
[ 2524.397480][T23186] anon_thp 0
[ 2524.397480][T23186] file_thp 0
[ 2524.397480][T23186] shmem_thp 0
[ 2524.397480][T23186] inactive_anon 45056
[ 2524.397480][T23186] active_anon 10452992
[ 2524.397480][T23186] inactive_file 0
[ 2524.397480][T23186] active_file 0
[ 2524.397480][T23186] unevictable 0
[ 2524.397480][T23186] slab_reclaimable 39872
[ 2524.397480][T23186] slab_unreclaimable 32296
[ 2524.397480][T23186] slab 72168
19:00:36 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4300, 0x12)

[ 2524.546848][T23186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23186,uid=0
[ 2524.577815][T23186] Memory cgroup out of memory: Killed process 23186 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
19:00:36 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x3f00, 0x12)

[ 2524.659499][T23401] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0
[ 2524.682951][T23401] CPU: 1 PID: 23401 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2524.693541][T23401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2524.703744][T23401] Call Trace:
[ 2524.707058][T23401]  <TASK>
[ 2524.710036][T23401]  dump_stack_lvl+0xd1/0x138
[ 2524.714648][T23401]  dump_header+0x10b/0x85f
[ 2524.719088][T23401]  oom_kill_process.cold+0x10/0x15
[ 2524.724224][T23401]  out_of_memory+0x35c/0x14a0
[ 2524.728953][T23401]  ? oom_killer_disable+0x280/0x280
[ 2524.734175][T23401]  ? find_held_lock+0x2d/0x110
[ 2524.738972][T23401]  mem_cgroup_out_of_memory+0x206/0x270
[ 2524.744571][T23401]  ? mem_cgroup_margin+0x130/0x130
[ 2524.749723][T23401]  ? lock_downgrade+0x6e0/0x6e0
[ 2524.754610][T23401]  try_charge_memcg+0xefb/0x12f0
[ 2524.759574][T23401]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2524.765574][T23401]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2524.771323][T23401]  ? lock_downgrade+0x6e0/0x6e0
[ 2524.776193][T23401]  ? lock_downgrade+0x6e0/0x6e0
[ 2524.781057][T23401]  ? rcu_read_unlock+0x9/0x60
[ 2524.785763][T23401]  obj_cgroup_charge+0x2af/0x5e0
[ 2524.790722][T23401]  ? copy_process+0x3aa/0x7520
[ 2524.795500][T23401]  kmem_cache_alloc_node+0xb7/0x460
[ 2524.800713][T23401]  copy_process+0x3aa/0x7520
[ 2524.805343][T23401]  ? _raw_spin_unlock+0x28/0x40
[ 2524.810296][T23401]  ? wp_page_reuse+0x197/0x570
[ 2524.815078][T23401]  ? do_wp_page+0x844/0x3370
[ 2524.819694][T23401]  ? __cleanup_sighand+0xb0/0xb0
[ 2524.824731][T23401]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2524.830125][T23401]  ? rwlock_bug.part.0+0x90/0x90
[ 2524.835075][T23401]  ? lock_chain_count+0x20/0x20
[ 2524.839950][T23401]  kernel_clone+0xeb/0x990
[ 2524.844398][T23401]  ? create_io_thread+0xf0/0xf0
[ 2524.849271][T23401]  ? find_held_lock+0x2d/0x110
[ 2524.854070][T23401]  __do_sys_clone+0xba/0x100
[ 2524.858678][T23401]  ? kernel_clone+0x990/0x990
[ 2524.863385][T23401]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2524.868964][T23401]  do_syscall_64+0x39/0xb0
[ 2524.873420][T23401]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2524.879326][T23401] RIP: 0033:0x7f12b4a89dfb
[ 2524.883757][T23401] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2524.903397][T23401] RSP: 002b:00007fff2d9e5340 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2524.911822][T23401] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12b4a89dfb
[ 2524.919817][T23401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2524.927796][T23401] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556f87400
[ 2524.935780][T23401] R10: 0000555556f876d0 R11: 0000000000000246 R12: 0000000000000001
[ 2524.943758][T23401] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff2d9e5420
[ 2524.951845][T23401]  </TASK>
[ 2524.997263][T23401] memory: usage 10332kB, limit 0kB, failcnt 1362
[ 2525.012100][T23401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2525.023656][T23401] Memory cgroup stats for /syz5:
[ 2525.024019][T23401] anon 45056
[ 2525.024019][T23401] file 10448896
[ 2525.024019][T23401] kernel 86016
[ 2525.024019][T23401] kernel_stack 0
[ 2525.024019][T23401] pagetables 8192
[ 2525.024019][T23401] sec_pagetables 0
[ 2525.024019][T23401] percpu 0
[ 2525.024019][T23401] sock 0
[ 2525.024019][T23401] vmalloc 0
[ 2525.024019][T23401] shmem 10448896
[ 2525.024019][T23401] zswap 0
[ 2525.024019][T23401] zswapped 0
[ 2525.024019][T23401] file_mapped 241664
[ 2525.024019][T23401] file_dirty 0
[ 2525.024019][T23401] file_writeback 0
[ 2525.024019][T23401] swapcached 0
[ 2525.024019][T23401] anon_thp 0
[ 2525.024019][T23401] file_thp 0
[ 2525.024019][T23401] shmem_thp 0
[ 2525.024019][T23401] inactive_anon 45056
[ 2525.024019][T23401] active_anon 10448896
[ 2525.024019][T23401] inactive_file 0
[ 2525.024019][T23401] active_file 0
[ 2525.024019][T23401] unevictable 0
[ 2525.024019][T23401] slab_reclaimable 36128
[ 2525.024019][T23401] slab_unreclaimable 32296
[ 2525.024019][T23401] slab 68424
19:00:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2525.358687][T23401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23401,uid=0
[ 2525.389543][T23401] Memory cgroup out of memory: Killed process 23401 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2525.443459][T23413] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0
[ 2525.494089][T23413] CPU: 0 PID: 23413 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2525.504577][T23413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2525.514663][T23413] Call Trace:
[ 2525.517982][T23413]  <TASK>
[ 2525.520942][T23413]  dump_stack_lvl+0xd1/0x138
[ 2525.525668][T23413]  dump_header+0x10b/0x85f
[ 2525.530150][T23413]  oom_kill_process.cold+0x10/0x15
[ 2525.535317][T23413]  out_of_memory+0x35c/0x14a0
[ 2525.540066][T23413]  ? oom_killer_disable+0x280/0x280
[ 2525.545327][T23413]  ? find_held_lock+0x2d/0x110
[ 2525.550164][T23413]  mem_cgroup_out_of_memory+0x206/0x270
[ 2525.555772][T23413]  ? mem_cgroup_margin+0x130/0x130
[ 2525.560951][T23413]  ? lock_downgrade+0x6e0/0x6e0
[ 2525.565873][T23413]  try_charge_memcg+0xefb/0x12f0
[ 2525.570866][T23413]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2525.576895][T23413]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2525.582675][T23413]  ? lock_downgrade+0x6e0/0x6e0
[ 2525.587573][T23413]  ? lock_downgrade+0x6e0/0x6e0
[ 2525.592473][T23413]  ? rcu_read_unlock+0x9/0x60
[ 2525.597216][T23413]  obj_cgroup_charge+0x2af/0x5e0
[ 2525.602182][T23413]  ? __alloc_file+0x21/0x270
[ 2525.606792][T23413]  kmem_cache_alloc+0xb5/0x430
[ 2525.611607][T23413]  __alloc_file+0x21/0x270
[ 2525.616040][T23413]  alloc_empty_file+0x71/0x170
[ 2525.620835][T23413]  path_openat+0xe1/0x2a50
[ 2525.625282][T23413]  ? path_lookupat+0x840/0x840
[ 2525.630071][T23413]  do_filp_open+0x1ba/0x410
[ 2525.634595][T23413]  ? may_open_dev+0xf0/0xf0
[ 2525.639133][T23413]  ? find_held_lock+0x2d/0x110
[ 2525.643944][T23413]  ? do_raw_spin_lock+0x124/0x2b0
[ 2525.648983][T23413]  ? rwlock_bug.part.0+0x90/0x90
[ 2525.653947][T23413]  ? _raw_spin_unlock+0x28/0x40
[ 2525.658818][T23413]  ? alloc_fd+0x2d8/0x6d0
[ 2525.663256][T23413]  do_sys_openat2+0x16d/0x4c0
[ 2525.667952][T23413]  ? path_umount+0x6b8/0x10b0
[ 2525.672645][T23413]  ? putname+0x102/0x140
[ 2525.676904][T23413]  ? build_open_flags+0x6f0/0x6f0
[ 2525.681943][T23413]  ? may_mount+0xa0/0xa0
[ 2525.686228][T23413]  __x64_sys_openat+0x143/0x1f0
[ 2525.691089][T23413]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2525.696046][T23413]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2525.701622][T23413]  do_syscall_64+0x39/0xb0
[ 2525.706106][T23413]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2525.712027][T23413] RIP: 0033:0x7f3d61c8bc38
[ 2525.716462][T23413] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00
[ 2525.736083][T23413] RSP: 002b:00007ffd5e5baa50 EFLAGS: 00000287 ORIG_RAX: 0000000000000101
[ 2525.744507][T23413] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3d61c8bc38
[ 2525.752501][T23413] RDX: 0000000000090800 RSI: 00007ffd5e5bbc40 RDI: 00000000ffffff9c
[ 2525.760502][T23413] RBP: 00007ffd5e5bbc1c R08: 0000000000090800 R09: 00007ffd5e5bbc40
[ 2525.768495][T23413] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f3d61ce6b24
[ 2525.776509][T23413] R13: 00007ffd5e5bbc40 R14: 0000000000000010 R15: 00007ffd5e5bbc80
[ 2525.784551][T23413]  </TASK>
[ 2525.841528][T15331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2525.869304][T23413] memory: usage 10332kB, limit 0kB, failcnt 3611
[ 2525.875843][T23413] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2525.892855][T23413] Memory cgroup stats for /syz4:
[ 2525.893069][T23413] anon 36864
[ 2525.893069][T23413] file 10444800
[ 2525.893069][T23413] kernel 94208
[ 2525.893069][T23413] kernel_stack 0
[ 2525.893069][T23413] pagetables 8192
[ 2525.893069][T23413] sec_pagetables 0
[ 2525.893069][T23413] percpu 0
[ 2525.893069][T23413] sock 0
[ 2525.893069][T23413] vmalloc 0
[ 2525.893069][T23413] shmem 10444800
[ 2525.893069][T23413] zswap 0
[ 2525.893069][T23413] zswapped 0
[ 2525.893069][T23413] file_mapped 225280
[ 2525.893069][T23413] file_dirty 0
[ 2525.893069][T23413] file_writeback 0
[ 2525.893069][T23413] swapcached 0
[ 2525.893069][T23413] anon_thp 0
[ 2525.893069][T23413] file_thp 0
[ 2525.893069][T23413] shmem_thp 0
[ 2525.893069][T23413] inactive_anon 36864
[ 2525.893069][T23413] active_anon 10444800
[ 2525.893069][T23413] inactive_file 0
[ 2525.893069][T23413] active_file 0
[ 2525.893069][T23413] unevictable 0
[ 2525.893069][T23413] slab_reclaimable 41552
[ 2525.893069][T23413] slab_unreclaimable 34848
[ 2525.893069][T23413] slab 76400
19:00:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:37 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x3900, 0x12)

[ 2526.168317][T15331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2526.309480][T23413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23413,uid=0
[ 2526.360867][T15331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2526.517137][T15331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2526.885461][T23413] Memory cgroup out of memory: Killed process 23413 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2526.908987][T23410] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2526.928586][T23410] CPU: 0 PID: 23410 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2526.939073][T23410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2526.949164][T23410] Call Trace:
[ 2526.952477][T23410]  <TASK>
[ 2526.955432][T23410]  dump_stack_lvl+0xd1/0x138
[ 2526.960077][T23410]  dump_header+0x10b/0x85f
[ 2526.964552][T23410]  oom_kill_process.cold+0x10/0x15
[ 2526.969723][T23410]  out_of_memory+0x35c/0x14a0
[ 2526.974462][T23410]  ? oom_killer_disable+0x280/0x280
[ 2526.979720][T23410]  ? find_held_lock+0x2d/0x110
[ 2526.984538][T23410]  mem_cgroup_out_of_memory+0x206/0x270
[ 2526.990134][T23410]  ? mem_cgroup_margin+0x130/0x130
[ 2526.995292][T23410]  ? lock_downgrade+0x6e0/0x6e0
[ 2527.000200][T23410]  try_charge_memcg+0xefb/0x12f0
[ 2527.005186][T23410]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2527.011210][T23410]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2527.016994][T23410]  ? lock_downgrade+0x6e0/0x6e0
[ 2527.022079][T23410]  ? lock_downgrade+0x6e0/0x6e0
[ 2527.026992][T23410]  __memcg_kmem_charge_page+0x16e/0x3b0
[ 2527.032591][T23410]  __alloc_pages+0x1f3/0x5b0
[ 2527.037207][T23410]  ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0
[ 2527.043984][T23410]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2527.050190][T23410]  alloc_pages+0x1aa/0x270
[ 2527.054623][T23410]  pte_alloc_one+0x1a/0x230
[ 2527.059144][T23410]  __pte_alloc+0x6d/0x260
[ 2527.063505][T23410]  ? pmd_install+0x160/0x160
[ 2527.068125][T23410]  copy_page_range+0x17a8/0x3b40
[ 2527.073124][T23410]  ? mas_store+0x206/0x2e0
[ 2527.077563][T23410]  ? handle_mm_fault+0x850/0x850
[ 2527.082537][T23410]  ? up_write+0x1b0/0x520
[ 2527.086891][T23410]  dup_mmap+0xc10/0x10b0
[ 2527.091157][T23410]  ? replace_mm_exe_file+0x4b0/0x4b0
[ 2527.096462][T23410]  ? lock_downgrade+0x6e0/0x6e0
[ 2527.101333][T23410]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2527.107177][T23410]  ? mm_init+0x8e0/0xc10
[ 2527.111439][T23410]  copy_process+0x440f/0x7520
[ 2527.116132][T23410]  ? _raw_spin_unlock+0x28/0x40
[ 2527.121005][T23410]  ? wp_page_reuse+0x197/0x570
[ 2527.125809][T23410]  ? __cleanup_sighand+0xb0/0xb0
[ 2527.130856][T23410]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2527.136253][T23410]  ? rwlock_bug.part.0+0x90/0x90
[ 2527.141642][T23410]  ? lock_chain_count+0x20/0x20
[ 2527.146617][T23410]  kernel_clone+0xeb/0x990
[ 2527.151068][T23410]  ? create_io_thread+0xf0/0xf0
[ 2527.155954][T23410]  ? find_held_lock+0x2d/0x110
[ 2527.160752][T23410]  __do_sys_clone+0xba/0x100
[ 2527.165351][T23410]  ? kernel_clone+0x990/0x990
[ 2527.170075][T23410]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2527.175652][T23410]  do_syscall_64+0x39/0xb0
[ 2527.180090][T23410]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2527.185997][T23410] RIP: 0033:0x7f1d58689dfb
[ 2527.190437][T23410] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2527.210057][T23410] RSP: 002b:00007ffedf77ac80 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2527.218487][T23410] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d58689dfb
[ 2527.226469][T23410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2527.234461][T23410] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555731400
[ 2527.242440][T23410] R10: 00005555557316d0 R11: 0000000000000246 R12: 0000000000000001
[ 2527.250419][T23410] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffedf77ad60
[ 2527.258418][T23410]  </TASK>
[ 2527.282916][T23410] memory: usage 10436kB, limit 12kB, failcnt 1931
[ 2527.300436][T23410] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2527.315705][T23410] Memory cgroup stats for /syz3:
[ 2527.315893][T23410] anon 40960
[ 2527.315893][T23410] file 10452992
[ 2527.315893][T23410] kernel 192512
[ 2527.315893][T23410] kernel_stack 32768
[ 2527.315893][T23410] pagetables 40960
[ 2527.315893][T23410] sec_pagetables 0
[ 2527.315893][T23410] percpu 64
[ 2527.315893][T23410] sock 0
[ 2527.315893][T23410] vmalloc 0
[ 2527.315893][T23410] shmem 10452992
[ 2527.315893][T23410] zswap 0
[ 2527.315893][T23410] zswapped 0
[ 2527.315893][T23410] file_mapped 311296
[ 2527.315893][T23410] file_dirty 0
[ 2527.315893][T23410] file_writeback 0
[ 2527.315893][T23410] swapcached 0
[ 2527.315893][T23410] anon_thp 0
[ 2527.315893][T23410] file_thp 0
[ 2527.315893][T23410] shmem_thp 0
[ 2527.315893][T23410] inactive_anon 40960
[ 2527.315893][T23410] active_anon 10452992
[ 2527.315893][T23410] inactive_file 0
[ 2527.315893][T23410] active_file 0
[ 2527.315893][T23410] unevictable 0
[ 2527.315893][T23410] slab_reclaimable 37280
[ 2527.315893][T23410] slab_unreclaimable 57576
[ 2527.315893][T23410] slab 94856
[ 2527.427415][T23410] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23410,uid=0
[ 2527.443671][T23410] Memory cgroup out of memory: Killed process 23410 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2527.463848][T23684] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2527.480215][T23684] CPU: 0 PID: 23684 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2527.490687][T23684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2527.500818][T23684] Call Trace:
[ 2527.504298][T23684]  <TASK>
[ 2527.507254][T23684]  dump_stack_lvl+0xd1/0x138
[ 2527.511904][T23684]  dump_header+0x10b/0x85f
[ 2527.516377][T23684]  oom_kill_process.cold+0x10/0x15
[ 2527.521546][T23684]  out_of_memory+0x35c/0x14a0
[ 2527.526274][T23684]  ? oom_killer_disable+0x280/0x280
[ 2527.531516][T23684]  ? find_held_lock+0x2d/0x110
[ 2527.536303][T23684]  mem_cgroup_out_of_memory+0x206/0x270
[ 2527.541871][T23684]  ? mem_cgroup_margin+0x130/0x130
[ 2527.547001][T23684]  ? lock_downgrade+0x6e0/0x6e0
[ 2527.551873][T23684]  try_charge_memcg+0xefb/0x12f0
[ 2527.556830][T23684]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2527.562829][T23684]  ? lock_downgrade+0x6e0/0x6e0
[ 2527.567961][T23684]  charge_memcg+0x90/0x3b0
[ 2527.572391][T23684]  __mem_cgroup_charge+0x2b/0x90
[ 2527.577341][T23684]  ? copy_mc_to_kernel+0x3e/0x90
[ 2527.582311][T23684]  do_wp_page+0x7ec/0x3370
[ 2527.586752][T23684]  ? lock_release+0x810/0x810
[ 2527.591435][T23684]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2527.596847][T23684]  ? do_raw_spin_lock+0x124/0x2b0
[ 2527.601893][T23684]  ? rwlock_bug.part.0+0x90/0x90
[ 2527.606851][T23684]  ? lock_chain_count+0x20/0x20
[ 2527.611893][T23684]  __handle_mm_fault+0x1f58/0x3c90
[ 2527.617076][T23684]  ? vm_iomap_memory+0x190/0x190
[ 2527.622072][T23684]  handle_mm_fault+0x1b6/0x850
[ 2527.626876][T23684]  do_user_addr_fault+0x475/0x1210
[ 2527.632010][T23684]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2527.637582][T23684]  exc_page_fault+0x98/0x170
[ 2527.642212][T23684]  asm_exc_page_fault+0x26/0x30
[ 2527.647074][T23684] RIP: 0033:0x7f085d089e1e
[ 2527.651501][T23684] Code: b8 38 00 00 00 0f 05 48 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 00 48 8b 05 c7 09 c5 00 48 85 c0 74 04 <48> 83 00 04 49 8d 81 e0 02 00 00 48 83 3d 4f 81 0f 00 00 49 89 81
[ 2527.671667][T23684] RSP: 002b:00007ffcfadb4380 EFLAGS: 00010202
[ 2527.677745][T23684] RAX: 00007f085dcd5720 RBX: 0000000000000000 RCX: 00007f085d089dfb
[ 2527.685726][T23684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2527.693712][T23684] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556218400
[ 2527.701703][T23684] R10: 00005555562186d0 R11: 0000000000000246 R12: 0000000000000001
[ 2527.709693][T23684] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcfadb4460
[ 2527.717696][T23684]  </TASK>
[ 2527.749738][T23684] memory: usage 8424kB, limit 12kB, failcnt 866
[ 2527.756186][T23684] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2527.770286][T23684] Memory cgroup stats for /syz1:
[ 2527.770493][T23684] anon 61440
[ 2527.770493][T23684] file 8355840
[ 2527.770493][T23684] kernel 208896
[ 2527.770493][T23684] kernel_stack 32768
[ 2527.770493][T23684] pagetables 57344
[ 2527.770493][T23684] sec_pagetables 0
[ 2527.770493][T23684] percpu 64
[ 2527.770493][T23684] sock 0
[ 2527.770493][T23684] vmalloc 0
[ 2527.770493][T23684] shmem 8351744
[ 2527.770493][T23684] zswap 0
[ 2527.770493][T23684] zswapped 0
[ 2527.770493][T23684] file_mapped 188416
[ 2527.770493][T23684] file_dirty 0
[ 2527.770493][T23684] file_writeback 0
[ 2527.770493][T23684] swapcached 0
[ 2527.770493][T23684] anon_thp 0
[ 2527.770493][T23684] file_thp 0
[ 2527.770493][T23684] shmem_thp 0
[ 2527.770493][T23684] inactive_anon 61440
[ 2527.770493][T23684] active_anon 8351744
[ 2527.770493][T23684] inactive_file 0
[ 2527.770493][T23684] active_file 4096
[ 2527.770493][T23684] unevictable 0
[ 2527.770493][T23684] slab_reclaimable 29424
[ 2527.770493][T23684] slab_unreclaimable 60984
[ 2527.770493][T23684] slab 90408
[ 2527.898663][T23684] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23439,uid=0
19:00:39 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

19:00:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:39 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2527.940363][T23684] Memory cgroup out of memory: Killed process 23439 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
19:00:39 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4500, 0x12)

19:00:39 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000581000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

19:00:40 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000581000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:00:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x3900, 0x12)

19:00:40 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4700, 0x12)

19:00:40 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000581000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2528.792999][T14228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2528.802877][T14228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2528.818091][T14228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2528.826365][T14228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2528.836377][T14228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2528.841931][ T1200] ieee802154 phy0 wpan0: encryption failed: -22
[ 2528.851587][ T1200] ieee802154 phy1 wpan1: encryption failed: -22
[ 2529.291285][T15331] device hsr_slave_0 left promiscuous mode
[ 2529.320244][T15331] device hsr_slave_1 left promiscuous mode
[ 2529.331734][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2529.358734][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2529.388815][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2529.396358][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2529.441439][T15331] device bridge_slave_1 left promiscuous mode
[ 2529.468204][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2529.499051][T15331] device bridge_slave_0 left promiscuous mode
[ 2529.505342][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2529.555131][T15331] device veth1_macvtap left promiscuous mode
[ 2529.574100][T15331] device veth0_macvtap left promiscuous mode
[ 2529.584347][T15331] device veth1_vlan left promiscuous mode
[ 2529.604700][T15331] device veth0_vlan left promiscuous mode
[ 2529.966487][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2529.984640][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2530.022866][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2530.046482][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2530.256576][T15331] bond0 (unregistering): Released all slaves
[ 2530.401246][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2530.410717][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2530.420006][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2530.428575][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2530.436572][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2530.445595][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2530.597433][T23711] chnl_net:caif_netlink_parms(): no params data found
[ 2530.738756][T23711] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2530.746019][T23711] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2530.777016][T23711] device bridge_slave_0 entered promiscuous mode
[ 2530.892517][T23711] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2530.918839][ T5115] Bluetooth: hci0: command 0x0409 tx timeout
[ 2530.930447][T23711] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2530.959008][T23711] device bridge_slave_1 entered promiscuous mode
[ 2531.090899][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2531.101643][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2531.110125][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2531.118159][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2531.128353][T23711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2531.139746][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2531.147092][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2531.229912][T23711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2531.306676][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2531.318266][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2531.327339][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2531.337305][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2531.346593][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2531.354144][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2531.397366][T23740] chnl_net:caif_netlink_parms(): no params data found
[ 2531.442561][T23711] team0: Port device team_slave_0 added
[ 2531.547265][T23711] team0: Port device team_slave_1 added
[ 2531.710448][T23711] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2531.717443][T23711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2531.760246][T23711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2531.816726][T23711] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2531.824000][T23711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2531.868619][T23711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2531.999797][T23740] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2532.006941][T23740] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2532.041086][T23740] device bridge_slave_0 entered promiscuous mode
[ 2532.110011][T23740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2532.118404][T23740] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2532.139346][T23740] device bridge_slave_1 entered promiscuous mode
[ 2532.228066][T23711] device hsr_slave_0 entered promiscuous mode
[ 2532.247062][T23711] device hsr_slave_1 entered promiscuous mode
[ 2532.363394][T23740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2532.382706][T23757] chnl_net:caif_netlink_parms(): no params data found
[ 2532.439645][T23740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2532.521719][ T5115] Bluetooth: hci1: command 0x0409 tx timeout
[ 2532.541389][T23740] team0: Port device team_slave_0 added
[ 2532.577795][T23740] team0: Port device team_slave_1 added
[ 2532.704860][T23762] chnl_net:caif_netlink_parms(): no params data found
[ 2532.715779][T23740] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2532.727386][T23740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2532.788786][T23740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2532.856176][T23740] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2532.871325][T23740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2532.928609][T23740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2532.998671][ T5115] Bluetooth: hci0: command 0x041b tx timeout
[ 2533.037081][T23757] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2533.068811][T23757] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2533.077216][T23757] device bridge_slave_0 entered promiscuous mode
[ 2533.240223][ T5115] Bluetooth: hci2: command 0x0409 tx timeout
[ 2533.302047][T23757] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2533.319203][T23757] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2533.327599][T23757] device bridge_slave_1 entered promiscuous mode
[ 2533.399016][ T5115] Bluetooth: hci3: command 0x0409 tx timeout
[ 2533.472052][T23740] device hsr_slave_0 entered promiscuous mode
[ 2533.479738][T23740] device hsr_slave_1 entered promiscuous mode
[ 2533.498587][T23740] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2533.506205][T23740] Cannot create hsr debugfs directory
[ 2533.642113][T23757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2533.745553][T23757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2533.806960][T23762] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2533.834496][T23762] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2533.845320][T23762] device bridge_slave_0 entered promiscuous mode
[ 2533.944596][T23757] team0: Port device team_slave_0 added
[ 2533.955973][T23762] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2533.978837][T23762] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2533.992173][T23762] device bridge_slave_1 entered promiscuous mode
[ 2534.034390][T23757] team0: Port device team_slave_1 added
[ 2534.116227][T15331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2534.222134][T23762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2534.246438][T23757] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2534.263232][T23757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2534.290353][T23757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2534.308878][T15331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2534.329723][T23762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2534.342925][T23757] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2534.368818][T23757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2534.416258][T23757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2534.458777][T15331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2534.561783][T15331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2534.602401][ T5115] Bluetooth: hci1: command 0x041b tx timeout
[ 2534.641301][T23762] team0: Port device team_slave_0 added
[ 2534.689973][T23762] team0: Port device team_slave_1 added
[ 2534.861975][T23757] device hsr_slave_0 entered promiscuous mode
[ 2534.889071][T23757] device hsr_slave_1 entered promiscuous mode
[ 2534.898732][T23757] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2534.906394][T23757] Cannot create hsr debugfs directory
[ 2534.980904][T23740] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2535.030900][T23711] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2535.056419][T23762] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2535.065397][T23762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2535.098745][ T5115] Bluetooth: hci0: command 0x040f tx timeout
[ 2535.107759][T23762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2535.318708][ T5115] Bluetooth: hci2: command 0x041b tx timeout
[ 2535.413622][T23711] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2535.478669][ T5115] Bluetooth: hci3: command 0x041b tx timeout
[ 2535.510559][T23740] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2535.565496][T23762] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2535.578697][T23762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2535.638688][T23762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2535.674133][T23711] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2535.789855][T23740] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2535.912752][T23711] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2535.969624][T23740] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2536.226732][T15331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2536.283761][T23762] device hsr_slave_0 entered promiscuous mode
[ 2536.311788][T23762] device hsr_slave_1 entered promiscuous mode
[ 2536.328841][T23762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2536.336448][T23762] Cannot create hsr debugfs directory
[ 2536.367443][T15331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2536.458124][T15331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2536.599547][T15331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2536.678874][ T5115] Bluetooth: hci1: command 0x040f tx timeout
[ 2536.810626][T23740] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2536.834941][T23711] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2536.879086][T23740] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2536.911624][T23711] 8021q: adding VLAN 0 to HW filter on device team0
[ 2536.928067][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2536.937143][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2536.946303][T23740] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2537.082010][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2537.110510][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2537.139298][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2537.146442][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2537.159745][ T5115] Bluetooth: hci0: command 0x0419 tx timeout
[ 2537.179983][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2537.208978][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2537.230519][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2537.237684][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2537.262156][T23740] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2537.348637][T15331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2537.398621][ T5115] Bluetooth: hci2: command 0x040f tx timeout
[ 2537.407905][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2537.420515][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2537.449620][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2537.509002][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2537.534663][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2537.558693][ T5115] Bluetooth: hci3: command 0x040f tx timeout
[ 2537.584024][T15331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2537.660567][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2537.679364][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2537.709259][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2537.729164][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2537.745935][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2537.783342][T23711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2537.839597][T15331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2537.973764][T15331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2538.269302][T23757] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2538.464164][T23757] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2538.501387][T23757] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2538.552819][T23740] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2538.657019][T23757] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2538.769345][T23740] 8021q: adding VLAN 0 to HW filter on device team0
[ 2538.769755][ T5115] Bluetooth: hci1: command 0x0419 tx timeout
[ 2538.783109][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2538.791562][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2538.799197][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2538.807467][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2538.841754][T23711] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2539.070810][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2539.083157][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2539.092241][T26499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2539.099507][T26499] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2539.107225][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2539.116224][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2539.125199][T26499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2539.132341][T26499] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2539.142291][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2539.219039][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2539.227726][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2539.265929][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2539.275195][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2539.285477][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2539.297073][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2539.376259][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2539.395390][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2539.414018][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2539.488697][T14228] Bluetooth: hci2: command 0x0419 tx timeout
[ 2539.504846][T23711] device veth0_vlan entered promiscuous mode
[ 2539.522818][T23762] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2539.534942][T23740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2539.546408][T23740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2539.556293][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2539.565870][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2539.596975][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2539.609763][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2539.624093][T23711] device veth1_vlan entered promiscuous mode
[ 2539.638775][ T5115] Bluetooth: hci3: command 0x0419 tx timeout
[ 2539.674162][T23762] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2539.684116][T23762] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2539.703440][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2539.712130][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2539.725041][T23757] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2539.785099][T23762] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2539.830863][T23757] 8021q: adding VLAN 0 to HW filter on device team0
[ 2539.849368][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2539.857913][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2539.887392][T23711] device veth0_macvtap entered promiscuous mode
[ 2539.991564][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2540.003729][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2540.013771][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2540.022904][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2540.031820][T23811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2540.038984][T23811] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2540.047344][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2540.062061][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2540.071202][T23811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2540.078325][T23811] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2540.103880][T23711] device veth1_macvtap entered promiscuous mode
[ 2540.192690][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2540.208057][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2540.246968][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2540.264765][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2540.274706][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2540.444566][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2540.456813][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2540.466922][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2540.476521][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2540.488863][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2540.501859][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.513795][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2540.525340][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.537617][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2540.549070][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.559983][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2540.576838][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.587228][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2540.598519][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.610703][T23711] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2540.680256][T23757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2540.705355][T23757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2540.729008][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2540.737353][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2540.759845][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2540.774373][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2540.789395][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2540.809210][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2540.828794][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2540.840794][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2540.866848][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.878752][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2540.889741][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.899971][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2540.910955][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.925745][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2540.937462][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.947862][T23711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2540.958384][T23711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2540.970093][T23711] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2541.007844][T23740] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2541.050340][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2541.072076][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2541.093184][T23711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2541.120684][T23711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2541.146128][T23711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2541.154989][T23711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2541.330513][T23762] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2541.441004][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2541.469300][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2541.479889][T23762] 8021q: adding VLAN 0 to HW filter on device team0
[ 2541.499957][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2541.519291][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2541.531414][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2541.589334][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2541.597514][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2541.624394][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2541.634108][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2541.646969][T18322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2541.654292][T18322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2541.667479][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2541.675553][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2541.685855][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2541.695107][T18322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2541.702268][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2541.710667][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2541.718282][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2541.796853][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2541.819961][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2541.839479][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2541.859200][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2541.887561][T23757] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2541.921996][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2541.930822][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2541.953678][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2541.990290][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
19:00:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

19:00:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x3900, 0x12)

19:00:53 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2542.053027][T23762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2542.069242][T23762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2542.146235][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2542.167288][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2542.284153][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2542.299973][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2542.326804][T23904] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2542.348788][T23904] CPU: 1 PID: 23904 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2542.359267][T23904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2542.369367][T23904] Call Trace:
[ 2542.369948][T23757] device veth0_vlan entered promiscuous mode
[ 2542.372655][T23904]  <TASK>
[ 2542.381612][T23904]  dump_stack_lvl+0xd1/0x138
[ 2542.386264][T23904]  dump_header+0x10b/0x85f
[ 2542.390745][T23904]  oom_kill_process.cold+0x10/0x15
[ 2542.395925][T23904]  out_of_memory+0x35c/0x14a0
[ 2542.400667][T23904]  ? _raw_spin_unlock_irqrestore+0x41/0x70
[ 2542.406530][T23904]  ? oom_killer_disable+0x280/0x280
[ 2542.411798][T23904]  ? find_held_lock+0x2d/0x110
[ 2542.416615][T23904]  mem_cgroup_out_of_memory+0x206/0x270
[ 2542.422227][T23904]  ? mem_cgroup_margin+0x130/0x130
[ 2542.427401][T23904]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2542.433282][T23904]  memory_max_write+0x2f9/0x3c0
[ 2542.438158][T23904]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2542.444252][T23904]  ? lock_release+0x810/0x810
[ 2542.448953][T23904]  cgroup_file_write+0x1e2/0x770
[ 2542.454031][T23904]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2542.460148][T23904]  ? kill_css+0x370/0x370
[ 2542.464530][T23904]  ? __virt_addr_valid+0x61/0x2e0
[ 2542.469596][T23904]  ? kill_css+0x370/0x370
[ 2542.473950][T23904]  kernfs_fop_write_iter+0x3f1/0x600
[ 2542.479269][T23904]  vfs_write+0x9ed/0xdd0
[ 2542.483544][T23904]  ? kernel_write+0x630/0x630
[ 2542.488265][T23904]  ? __fget_files+0x26a/0x440
[ 2542.492990][T23904]  ksys_write+0x12b/0x250
[ 2542.497370][T23904]  ? __ia32_sys_read+0xb0/0xb0
[ 2542.502195][T23904]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2542.507778][T23904]  do_syscall_64+0x39/0xb0
[ 2542.512221][T23904]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2542.518134][T23904] RIP: 0033:0x7f14fdc8c0c9
[ 2542.522571][T23904] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2542.542284][T23904] RSP: 002b:00007f14fea05168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2542.550717][T23904] RAX: ffffffffffffffda RBX: 00007f14fddac050 RCX: 00007f14fdc8c0c9
[ 2542.558702][T23904] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006
[ 2542.566686][T23904] RBP: 00007f14fdce7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2542.574679][T23904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2542.582659][T23904] R13: 00007ffd41ac5c2f R14: 00007f14fea05300 R15: 0000000000022000
[ 2542.590667][T23904]  </TASK>
[ 2542.649314][T23904] memory: usage 10680kB, limit 0kB, failcnt 995
[ 2542.670733][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2542.689587][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2542.698177][T23904] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2542.716961][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2542.725153][T23904] Memory cgroup stats for /syz2:
[ 2542.725390][T23904] anon 139264
[ 2542.725390][T23904] file 10452992
[ 2542.725390][T23904] kernel 344064
[ 2542.725390][T23904] kernel_stack 98304
[ 2542.725390][T23904] pagetables 81920
[ 2542.725390][T23904] sec_pagetables 0
[ 2542.725390][T23904] percpu 64
[ 2542.725390][T23904] sock 0
[ 2542.725390][T23904] vmalloc 0
[ 2542.725390][T23904] shmem 10452992
[ 2542.725390][T23904] zswap 0
[ 2542.725390][T23904] zswapped 0
[ 2542.725390][T23904] file_mapped 253952
[ 2542.725390][T23904] file_dirty 0
[ 2542.725390][T23904] file_writeback 0
[ 2542.725390][T23904] swapcached 0
[ 2542.725390][T23904] anon_thp 0
[ 2542.725390][T23904] file_thp 0
[ 2542.725390][T23904] shmem_thp 0
[ 2542.725390][T23904] inactive_anon 139264
[ 2542.725390][T23904] active_anon 10452992
[ 2542.725390][T23904] inactive_file 0
[ 2542.725390][T23904] active_file 0
[ 2542.725390][T23904] unevictable 0
[ 2542.725390][T23904] slab_reclaimable 48752
[ 2542.725390][T23904] slab_unreclaimable 82440
[ 2542.725390][T23904] slab 131192
[ 2542.833388][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2542.852288][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2542.869119][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2542.893285][T23740] device veth0_vlan entered promiscuous mode
[ 2542.921661][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2542.951211][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2542.980262][T23757] device veth1_vlan entered promiscuous mode
[ 2542.993924][T23740] device veth1_vlan entered promiscuous mode
[ 2543.023716][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2543.039308][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2543.057602][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2543.078063][T18322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2543.162737][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2543.181852][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2543.207995][T23757] device veth0_macvtap entered promiscuous mode
[ 2543.228270][T23740] device veth0_macvtap entered promiscuous mode
[ 2543.243648][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2543.259574][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2543.285015][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2543.308274][T23757] device veth1_macvtap entered promiscuous mode
[ 2543.344113][T23740] device veth1_macvtap entered promiscuous mode
[ 2543.401777][T23762] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2543.427698][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.459803][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.480052][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.502828][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.520043][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.526859][T23904] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23899,uid=0
[ 2543.542395][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.571627][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.589111][T23904] Memory cgroup out of memory: Killed process 23904 (syz-executor.2) total-vm:56720kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2543.595504][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.630284][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.650024][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.673583][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.709830][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.740380][T23740] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2543.747825][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2543.759398][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2543.780394][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2543.799738][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2543.807320][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2543.827263][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2543.848195][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2543.871784][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.887132][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.910246][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.928809][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.948629][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2543.972193][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2543.990881][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2544.012801][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.034952][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2544.058589][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.078583][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2544.093306][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.105350][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2544.116183][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.138221][T23757] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2544.162079][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.173304][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.195627][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.221754][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.238621][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.259106][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.269616][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.282719][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.292666][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.303434][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.313335][T23740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.323865][T23740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.335612][T23740] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2544.343104][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2544.352426][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2544.361573][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2544.370479][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2544.382440][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.402551][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.440501][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.476004][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.510913][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.538624][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.558576][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.578617][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.604341][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.638542][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.648420][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.704599][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.724026][T23757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2544.734920][T23757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2544.760216][T23757] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2544.770457][T23740] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2544.808683][T23740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2544.831704][T23740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2544.848532][T23740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2544.859014][T14228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2544.869773][T14228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2544.878366][T14228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2544.888276][T14228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2544.896021][T14228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2544.903500][T14228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2544.952147][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2544.964980][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2544.975131][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2544.990568][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2545.016567][T23757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2545.042328][T23757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2545.058653][T23757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2545.067412][T23757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2545.102850][T15331] device hsr_slave_0 left promiscuous mode
[ 2545.131074][T15331] device hsr_slave_1 left promiscuous mode
[ 2545.144742][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2545.158677][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2545.181239][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2545.198640][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2545.208277][T15331] device bridge_slave_1 left promiscuous mode
[ 2545.226724][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2545.240132][T15331] device bridge_slave_0 left promiscuous mode
[ 2545.246437][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2545.286466][T15331] device hsr_slave_0 left promiscuous mode
[ 2545.297537][T15331] device hsr_slave_1 left promiscuous mode
[ 2545.316584][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2545.332420][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2545.350511][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2545.358024][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2545.382745][T15331] device bridge_slave_1 left promiscuous mode
[ 2545.399675][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2545.414021][T15331] device bridge_slave_0 left promiscuous mode
[ 2545.432271][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2545.443894][T15331] device hsr_slave_0 left promiscuous mode
[ 2545.450973][T15331] device hsr_slave_1 left promiscuous mode
[ 2545.457304][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2545.465394][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2545.474229][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2545.482093][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2545.503284][T15331] device bridge_slave_1 left promiscuous mode
[ 2545.509704][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2545.518088][T15331] device bridge_slave_0 left promiscuous mode
[ 2545.525146][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2545.542101][T15331] device hsr_slave_0 left promiscuous mode
[ 2545.548677][T15331] device hsr_slave_1 left promiscuous mode
[ 2545.555133][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2545.562756][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2545.572932][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2545.580564][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2545.589390][T15331] device bridge_slave_1 left promiscuous mode
[ 2545.595645][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2545.604286][T15331] device bridge_slave_0 left promiscuous mode
[ 2545.610980][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2545.632352][T15331] device veth1_macvtap left promiscuous mode
[ 2545.638532][T15331] device veth0_macvtap left promiscuous mode
[ 2545.647139][T15331] device veth1_vlan left promiscuous mode
[ 2545.653898][T15331] device veth0_vlan left promiscuous mode
[ 2545.661000][T15331] device veth1_macvtap left promiscuous mode
[ 2545.667032][T15331] device veth0_macvtap left promiscuous mode
[ 2545.673361][T15331] device veth1_vlan left promiscuous mode
[ 2545.679328][T15331] device veth0_vlan left promiscuous mode
[ 2545.686182][T15331] device veth1_macvtap left promiscuous mode
[ 2545.692628][T15331] device veth0_macvtap left promiscuous mode
[ 2545.698915][T15331] device veth1_vlan left promiscuous mode
[ 2545.704705][T15331] device veth0_vlan left promiscuous mode
[ 2545.712748][T15331] device veth1_macvtap left promiscuous mode
[ 2545.719607][T15331] device veth0_macvtap left promiscuous mode
[ 2545.725779][T15331] device veth1_vlan left promiscuous mode
[ 2545.732707][T15331] device veth0_vlan left promiscuous mode
[ 2546.196087][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2546.222519][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2546.235013][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2546.252869][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2546.336671][T15331] bond0 (unregistering): Released all slaves
[ 2546.490491][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2546.506506][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2546.518162][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2546.538116][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2546.615291][T15331] bond0 (unregistering): Released all slaves
[ 2546.744188][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2546.758449][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2546.784710][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2546.798002][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2546.885599][T15331] bond0 (unregistering): Released all slaves
[ 2546.918718][T14228] Bluetooth: hci4: command 0x0409 tx timeout
[ 2547.004072][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2547.017078][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2547.033238][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2547.047779][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2547.132436][T15331] bond0 (unregistering): Released all slaves
[ 2547.295457][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2547.306636][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2547.316077][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2547.324827][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2547.348830][T23762] device veth0_vlan entered promiscuous mode
[ 2547.440715][T23762] device veth1_vlan entered promiscuous mode
[ 2547.454105][T15447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2547.468100][T15447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2547.582007][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2547.592646][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2547.601111][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2547.629313][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2547.639458][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2547.670770][T23762] device veth0_macvtap entered promiscuous mode
[ 2547.716982][T23762] device veth1_macvtap entered promiscuous mode
[ 2547.741350][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2547.759753][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2547.767486][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2547.782978][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2547.799627][T23762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2547.815582][T23762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2547.828419][T23762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2547.856437][T23762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2547.867675][T23762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2547.879522][T23762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2547.890776][T23762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2547.905318][T23762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2547.923770][T23762] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2547.942509][T23762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2547.965849][T23762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2547.985123][T23762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2548.006181][T23762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2548.024272][T23762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2548.046419][T23762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2548.066701][T23762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2548.089453][T23762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2548.110828][T23762] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2548.127624][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2548.145955][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2548.154522][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2548.173201][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2548.187737][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2548.197802][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2548.214440][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2548.227280][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2548.246132][T23944] chnl_net:caif_netlink_parms(): no params data found
[ 2548.267036][T23762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2548.276730][T23762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2548.285793][T23762] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2548.296951][T23762] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2548.311533][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2548.349795][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2548.435727][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
19:01:00 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

19:01:00 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:01:00 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x1200, 0x12)

[ 2548.746111][T23944] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2548.775228][T23944] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2548.826248][T23711] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0
[ 2548.838013][T23944] device bridge_slave_0 entered promiscuous mode
[ 2548.845718][T23711] CPU: 1 PID: 23711 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2548.856191][T23711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2548.866262][T23711] Call Trace:
[ 2548.869573][T23711]  <TASK>
[ 2548.872511][T23711]  dump_stack_lvl+0xd1/0x138
[ 2548.877131][T23711]  dump_header+0x10b/0x85f
[ 2548.881600][T23711]  oom_kill_process.cold+0x10/0x15
[ 2548.886775][T23711]  out_of_memory+0x35c/0x14a0
[ 2548.891499][T23711]  ? find_held_lock+0x2d/0x110
[ 2548.896301][T23711]  ? oom_killer_disable+0x280/0x280
[ 2548.901620][T23711]  ? find_held_lock+0x2d/0x110
[ 2548.906410][T23711]  mem_cgroup_out_of_memory+0x206/0x270
[ 2548.911984][T23711]  ? mem_cgroup_margin+0x130/0x130
[ 2548.917151][T23711]  ? lock_downgrade+0x6e0/0x6e0
[ 2548.922036][T23711]  try_charge_memcg+0xefb/0x12f0
[ 2548.926998][T23711]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2548.932995][T23711]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2548.938767][T23711]  ? lock_downgrade+0x6e0/0x6e0
[ 2548.943632][T23711]  ? lock_downgrade+0x6e0/0x6e0
[ 2548.948495][T23711]  ? rcu_read_unlock+0x9/0x60
[ 2548.953211][T23711]  obj_cgroup_charge+0x2af/0x5e0
[ 2548.958180][T23711]  ? copy_process+0x3aa/0x7520
[ 2548.962963][T23711]  kmem_cache_alloc_node+0xb7/0x460
[ 2548.968224][T23711]  copy_process+0x3aa/0x7520
[ 2548.972879][T23711]  ? _raw_spin_unlock+0x28/0x40
[ 2548.977774][T23711]  ? wp_page_reuse+0x197/0x570
[ 2548.982563][T23711]  ? do_wp_page+0x844/0x3370
[ 2548.987211][T23711]  ? __cleanup_sighand+0xb0/0xb0
[ 2548.992195][T23711]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2548.997623][T23711]  ? rwlock_bug.part.0+0x90/0x90
[ 2549.002579][T23711]  ? lock_chain_count+0x20/0x20
[ 2549.007446][T23711]  kernel_clone+0xeb/0x990
[ 2549.011898][T23711]  ? create_io_thread+0xf0/0xf0
[ 2549.016771][T23711]  ? find_held_lock+0x2d/0x110
[ 2549.021564][T23711]  __do_sys_clone+0xba/0x100
[ 2549.026195][T23711]  ? kernel_clone+0x990/0x990
[ 2549.030902][T23711]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2549.036505][T23711]  do_syscall_64+0x39/0xb0
[ 2549.040962][T23711]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2549.046890][T23711] RIP: 0033:0x7f14fdc89dfb
[ 2549.051327][T23711] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2549.070981][T23711] RSP: 002b:00007ffd41ac5e70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2549.079409][T23711] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14fdc89dfb
[ 2549.087408][T23711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2549.095405][T23711] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556c1f400
[ 2549.103383][T23711] R10: 0000555556c1f6d0 R11: 0000000000000246 R12: 0000000000000001
[ 2549.111363][T23711] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd41ac5f50
[ 2549.119363][T23711]  </TASK>
[ 2549.123803][T14228] Bluetooth: hci4: command 0x041b tx timeout
[ 2549.170439][T23711] memory: usage 10336kB, limit 0kB, failcnt 1041
[ 2549.176842][T23711] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2549.189223][T23711] Memory cgroup stats for /syz2:
[ 2549.189430][T23711] anon 40960
[ 2549.189430][T23711] file 10452992
[ 2549.189430][T23711] kernel 90112
[ 2549.189430][T23711] kernel_stack 0
[ 2549.189430][T23711] pagetables 8192
[ 2549.189430][T23711] sec_pagetables 0
[ 2549.189430][T23711] percpu 0
[ 2549.189430][T23711] sock 0
[ 2549.189430][T23711] vmalloc 0
[ 2549.189430][T23711] shmem 10452992
[ 2549.189430][T23711] zswap 0
[ 2549.189430][T23711] zswapped 0
[ 2549.189430][T23711] file_mapped 241664
[ 2549.189430][T23711] file_dirty 0
[ 2549.189430][T23711] file_writeback 0
[ 2549.189430][T23711] swapcached 0
[ 2549.189430][T23711] anon_thp 0
[ 2549.189430][T23711] file_thp 0
[ 2549.189430][T23711] shmem_thp 0
[ 2549.189430][T23711] inactive_anon 40960
[ 2549.189430][T23711] active_anon 10452992
[ 2549.189430][T23711] inactive_file 0
[ 2549.189430][T23711] active_file 0
[ 2549.189430][T23711] unevictable 0
[ 2549.189430][T23711] slab_reclaimable 39872
[ 2549.189430][T23711] slab_unreclaimable 32296
[ 2549.189430][T23711] slab 72168
[ 2549.357011][T23711] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=23711,uid=0
[ 2549.385059][T23944] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2549.396138][T23944] bridge0: port 2(bridge_slave_1) entered disabled state
19:01:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4b00, 0x12)

[ 2549.439073][T23944] device bridge_slave_1 entered promiscuous mode
[ 2549.461691][T23711] Memory cgroup out of memory: Killed process 23711 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2549.549575][T23891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2549.557758][T23891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2549.676345][T23944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2549.723416][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2549.777893][T23757] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2549.803566][T23757] CPU: 0 PID: 23757 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2549.814068][T23757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2549.824160][T23757] Call Trace:
[ 2549.827470][T23757]  <TASK>
[ 2549.830440][T23757]  dump_stack_lvl+0xd1/0x138
[ 2549.835085][T23757]  dump_header+0x10b/0x85f
[ 2549.839567][T23757]  oom_kill_process.cold+0x10/0x15
[ 2549.844746][T23757]  out_of_memory+0x35c/0x14a0
[ 2549.849486][T23757]  ? find_held_lock+0x2d/0x110
[ 2549.854320][T23757]  ? oom_killer_disable+0x280/0x280
[ 2549.859586][T23757]  ? find_held_lock+0x2d/0x110
[ 2549.864410][T23757]  mem_cgroup_out_of_memory+0x206/0x270
[ 2549.869997][T23757]  ? mem_cgroup_margin+0x130/0x130
[ 2549.875160][T23757]  ? lock_downgrade+0x6e0/0x6e0
[ 2549.880042][T23757]  try_charge_memcg+0xefb/0x12f0
[ 2549.884998][T23757]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2549.890995][T23757]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2549.896825][T23757]  ? lock_downgrade+0x6e0/0x6e0
[ 2549.901697][T23757]  ? lock_downgrade+0x6e0/0x6e0
[ 2549.906644][T23757]  __memcg_kmem_charge_page+0x16e/0x3b0
[ 2549.912220][T23757]  memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2549.918397][T23757]  copy_process+0x4e3/0x7520
[ 2549.923007][T23757]  ? _raw_spin_unlock+0x28/0x40
[ 2549.927871][T23757]  ? wp_page_reuse+0x197/0x570
[ 2549.932655][T23757]  ? do_wp_page+0x844/0x3370
[ 2549.937272][T23757]  ? __cleanup_sighand+0xb0/0xb0
[ 2549.942250][T23757]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2549.947733][T23757]  ? rwlock_bug.part.0+0x90/0x90
[ 2549.952947][T23757]  ? lock_chain_count+0x20/0x20
[ 2549.957812][T23757]  kernel_clone+0xeb/0x990
[ 2549.962246][T23757]  ? create_io_thread+0xf0/0xf0
[ 2549.967121][T23757]  ? find_held_lock+0x2d/0x110
[ 2549.971917][T23757]  __do_sys_clone+0xba/0x100
[ 2549.976524][T23757]  ? kernel_clone+0x990/0x990
[ 2549.981233][T23757]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2549.986894][T23757]  do_syscall_64+0x39/0xb0
[ 2549.991332][T23757]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2549.997243][T23757] RIP: 0033:0x7f1a32289dfb
[ 2550.001666][T23757] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2550.021391][T23757] RSP: 002b:00007ffedd443370 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2550.029819][T23757] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1a32289dfb
[ 2550.037799][T23757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2550.045780][T23757] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556fa2400
[ 2550.053861][T23757] R10: 0000555556fa26d0 R11: 0000000000000246 R12: 0000000000000001
[ 2550.061858][T23757] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffedd443450
[ 2550.069868][T23757]  </TASK>
[ 2550.104948][T23944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2550.127317][T23891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2550.168005][T23891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2550.195011][T23944] team0: Port device team_slave_0 added
[ 2550.195342][T23757] memory: usage 10396kB, limit 16kB, failcnt 1978
[ 2550.210225][T23757] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2550.217128][T23757] Memory cgroup stats for /syz3:
[ 2550.217343][T23757] anon 45056
[ 2550.217343][T23757] file 10452992
[ 2550.217343][T23757] kernel 147456
[ 2550.217343][T23757] kernel_stack 0
[ 2550.217343][T23757] pagetables 8192
[ 2550.217343][T23757] sec_pagetables 0
[ 2550.217343][T23757] percpu 0
[ 2550.217343][T23757] sock 0
[ 2550.217343][T23757] vmalloc 0
[ 2550.217343][T23757] shmem 10452992
[ 2550.217343][T23757] zswap 0
[ 2550.217343][T23757] zswapped 0
[ 2550.217343][T23757] file_mapped 311296
[ 2550.217343][T23757] file_dirty 0
[ 2550.217343][T23757] file_writeback 0
[ 2550.217343][T23757] swapcached 0
[ 2550.217343][T23757] anon_thp 0
[ 2550.217343][T23757] file_thp 0
[ 2550.217343][T23757] shmem_thp 0
[ 2550.217343][T23757] inactive_anon 45056
[ 2550.217343][T23757] active_anon 10452992
[ 2550.217343][T23757] inactive_file 0
[ 2550.217343][T23757] active_file 0
[ 2550.217343][T23757] unevictable 0
[ 2550.217343][T23757] slab_reclaimable 37280
[ 2550.217343][T23757] slab_unreclaimable 66504
[ 2550.217343][T23757] slab 103784
[ 2550.314882][T23006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2550.334888][T23944] team0: Port device team_slave_1 added
[ 2550.488751][T23944] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2550.495751][T23944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2550.609430][T23944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2550.628780][T23757] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23757,uid=0
[ 2550.635230][T23944] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2550.656937][T23944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2550.685043][T23944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2550.699961][T23757] Memory cgroup out of memory: Killed process 23757 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2550.749373][T24011] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2550.807585][T24011] CPU: 1 PID: 24011 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2550.818075][T24011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2550.828167][T24011] Call Trace:
[ 2550.831524][T24011]  <TASK>
[ 2550.834486][T24011]  dump_stack_lvl+0xd1/0x138
[ 2550.839135][T24011]  dump_header+0x10b/0x85f
[ 2550.843623][T24011]  oom_kill_process.cold+0x10/0x15
[ 2550.848767][T24011]  out_of_memory+0x35c/0x14a0
[ 2550.853483][T24011]  ? oom_killer_disable+0x280/0x280
[ 2550.858716][T24011]  ? find_held_lock+0x2d/0x110
[ 2550.863545][T24011]  mem_cgroup_out_of_memory+0x206/0x270
[ 2550.869133][T24011]  ? mem_cgroup_margin+0x130/0x130
[ 2550.874315][T24011]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2550.880246][T24011]  memory_max_write+0x2f9/0x3c0
[ 2550.885145][T24011]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2550.891247][T24011]  ? lock_release+0x810/0x810
[ 2550.895944][T24011]  cgroup_file_write+0x1e2/0x770
[ 2550.900907][T24011]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2550.907013][T24011]  ? kill_css+0x370/0x370
[ 2550.911372][T24011]  ? kill_css+0x370/0x370
[ 2550.915722][T24011]  kernfs_fop_write_iter+0x3f1/0x600
[ 2550.921044][T24011]  vfs_write+0x9ed/0xdd0
[ 2550.925319][T24011]  ? kernel_write+0x630/0x630
[ 2550.930024][T24011]  ? __fget_files+0x26a/0x440
[ 2550.934735][T24011]  ksys_write+0x12b/0x250
[ 2550.939085][T24011]  ? __ia32_sys_read+0xb0/0xb0
[ 2550.943892][T24011]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2550.949556][T24011]  do_syscall_64+0x39/0xb0
[ 2550.954005][T24011]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2550.959938][T24011] RIP: 0033:0x7f324b48c0c9
[ 2550.964391][T24011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2550.984220][T24011] RSP: 002b:00007f324c1cb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2550.992653][T24011] RAX: ffffffffffffffda RBX: 00007f324b5ac050 RCX: 00007f324b48c0c9
[ 2551.000643][T24011] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005
[ 2551.008627][T24011] RBP: 00007f324b4e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2551.016637][T24011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2551.024616][T24011] R13: 00007ffd5eb45d5f R14: 00007f324c1cb300 R15: 0000000000022000
[ 2551.032621][T24011]  </TASK>
[ 2551.141616][T23944] device hsr_slave_0 entered promiscuous mode
[ 2551.152856][T23944] device hsr_slave_1 entered promiscuous mode
[ 2551.159238][T14228] Bluetooth: hci4: command 0x040f tx timeout
[ 2551.208933][T23944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2551.224413][T23944] Cannot create hsr debugfs directory
[ 2551.354408][T24011] memory: usage 10672kB, limit 0kB, failcnt 3668
[ 2551.365200][T24011] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2551.374880][T24011] Memory cgroup stats for /syz4:
[ 2551.375085][T24011] anon 122880
[ 2551.375085][T24011] file 10448896
[ 2551.375085][T24011] kernel 294912
[ 2551.375085][T24011] kernel_stack 32768
[ 2551.375085][T24011] pagetables 77824
[ 2551.375085][T24011] sec_pagetables 0
[ 2551.375085][T24011] percpu 64
[ 2551.375085][T24011] sock 0
[ 2551.375085][T24011] vmalloc 0
[ 2551.375085][T24011] shmem 10444800
[ 2551.375085][T24011] zswap 0
[ 2551.375085][T24011] zswapped 0
[ 2551.375085][T24011] file_mapped 245760
[ 2551.375085][T24011] file_dirty 4096
[ 2551.375085][T24011] file_writeback 0
[ 2551.375085][T24011] swapcached 0
[ 2551.375085][T24011] anon_thp 0
[ 2551.375085][T24011] file_thp 0
[ 2551.375085][T24011] shmem_thp 0
[ 2551.375085][T24011] inactive_anon 122880
[ 2551.375085][T24011] active_anon 10444800
[ 2551.375085][T24011] inactive_file 0
[ 2551.375085][T24011] active_file 0
[ 2551.375085][T24011] unevictable 0
[ 2551.375085][T24011] slab_reclaimable 46584
[ 2551.375085][T24011] slab_unreclaimable 108504
[ 2551.375085][T24011] slab 155088
19:01:03 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

19:01:03 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:01:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x1200, 0x12)

19:01:03 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4d00, 0x12)

19:01:03 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4700, 0x12)

[ 2551.564122][T24011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24009,uid=0
[ 2551.582004][T24011] Memory cgroup out of memory: Killed process 24011 (syz-executor.4) total-vm:54672kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2551.666356][T23740] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0
[ 2551.721696][T23740] CPU: 0 PID: 23740 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2551.732280][T23740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2551.742389][T23740] Call Trace:
[ 2551.745706][T23740]  <TASK>
[ 2551.748667][T23740]  dump_stack_lvl+0xd1/0x138
[ 2551.753483][T23740]  dump_header+0x10b/0x85f
[ 2551.757975][T23740]  oom_kill_process.cold+0x10/0x15
[ 2551.763153][T23740]  out_of_memory+0x35c/0x14a0
[ 2551.767897][T23740]  ? find_held_lock+0x2d/0x110
[ 2551.772717][T23740]  ? oom_killer_disable+0x280/0x280
[ 2551.777962][T23740]  ? find_held_lock+0x2d/0x110
[ 2551.782763][T23740]  mem_cgroup_out_of_memory+0x206/0x270
[ 2551.788358][T23740]  ? mem_cgroup_margin+0x130/0x130
[ 2551.793499][T23740]  ? lock_downgrade+0x6e0/0x6e0
[ 2551.798376][T23740]  try_charge_memcg+0xefb/0x12f0
[ 2551.803333][T23740]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2551.809330][T23740]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2551.815076][T23740]  ? lock_downgrade+0x6e0/0x6e0
[ 2551.820193][T23740]  ? lock_downgrade+0x6e0/0x6e0
[ 2551.825066][T23740]  ? rcu_read_unlock+0x9/0x60
[ 2551.829769][T23740]  obj_cgroup_charge+0x2af/0x5e0
[ 2551.834726][T23740]  ? copy_process+0x3aa/0x7520
[ 2551.839500][T23740]  kmem_cache_alloc_node+0xb7/0x460
[ 2551.844718][T23740]  copy_process+0x3aa/0x7520
[ 2551.849346][T23740]  ? _raw_spin_unlock+0x28/0x40
[ 2551.854432][T23740]  ? wp_page_reuse+0x197/0x570
[ 2551.859219][T23740]  ? do_wp_page+0x844/0x3370
[ 2551.863842][T23740]  ? __cleanup_sighand+0xb0/0xb0
[ 2551.868798][T23740]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2551.874214][T23740]  ? rwlock_bug.part.0+0x90/0x90
[ 2551.879165][T23740]  ? lock_chain_count+0x20/0x20
[ 2551.884032][T23740]  kernel_clone+0xeb/0x990
[ 2551.888464][T23740]  ? create_io_thread+0xf0/0xf0
[ 2551.893338][T23740]  ? find_held_lock+0x2d/0x110
[ 2551.898134][T23740]  __do_sys_clone+0xba/0x100
[ 2551.902740][T23740]  ? kernel_clone+0x990/0x990
[ 2551.907444][T23740]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2551.913018][T23740]  do_syscall_64+0x39/0xb0
[ 2551.917461][T23740]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2551.923366][T23740] RIP: 0033:0x7f7ec2a89dfb
[ 2551.927794][T23740] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2551.947499][T23740] RSP: 002b:00007ffe99019d90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2551.955931][T23740] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7ec2a89dfb
[ 2551.963931][T23740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2551.971926][T23740] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555555a2400
[ 2551.979934][T23740] R10: 00005555555a26d0 R11: 0000000000000246 R12: 0000000000000001
[ 2551.987953][T23740] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe99019e70
[ 2551.995983][T23740]  </TASK>
19:01:04 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2552.780988][T23740] memory: usage 10352kB, limit 0kB, failcnt 1398
[ 2552.787612][T23740] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2552.812385][T23740] Memory cgroup stats for /syz5:
[ 2552.812600][T23740] anon 36864
[ 2552.812600][T23740] file 10448896
[ 2552.812600][T23740] kernel 114688
[ 2552.812600][T23740] kernel_stack 0
[ 2552.812600][T23740] pagetables 8192
[ 2552.812600][T23740] sec_pagetables 0
[ 2552.812600][T23740] percpu 0
[ 2552.812600][T23740] sock 0
[ 2552.812600][T23740] vmalloc 0
[ 2552.812600][T23740] shmem 10448896
[ 2552.812600][T23740] zswap 0
[ 2552.812600][T23740] zswapped 0
[ 2552.812600][T23740] file_mapped 241664
[ 2552.812600][T23740] file_dirty 0
[ 2552.812600][T23740] file_writeback 0
[ 2552.812600][T23740] swapcached 0
[ 2552.812600][T23740] anon_thp 0
[ 2552.812600][T23740] file_thp 0
[ 2552.812600][T23740] shmem_thp 0
[ 2552.812600][T23740] inactive_anon 36864
[ 2552.812600][T23740] active_anon 10448896
[ 2552.812600][T23740] inactive_file 0
[ 2552.812600][T23740] active_file 0
[ 2552.812600][T23740] unevictable 0
[ 2552.812600][T23740] slab_reclaimable 36128
[ 2552.812600][T23740] slab_unreclaimable 59008
[ 2552.812600][T23740] slab 95136
[ 2553.100023][T23944] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2553.134262][T23944] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2553.161950][T23944] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2553.181691][T23944] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2553.219883][T23740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23740,uid=0
[ 2553.238949][ T5115] Bluetooth: hci4: command 0x0419 tx timeout
[ 2553.310082][T23740] Memory cgroup out of memory: Killed process 23740 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2553.393970][T23762] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2553.448570][T23762] CPU: 1 PID: 23762 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2553.459195][T23762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2553.469750][T23762] Call Trace:
[ 2553.473049][T23762]  <TASK>
[ 2553.476003][T23762]  dump_stack_lvl+0xd1/0x138
[ 2553.480654][T23762]  dump_header+0x10b/0x85f
[ 2553.485430][T23762]  oom_kill_process.cold+0x10/0x15
[ 2553.490567][T23762]  out_of_memory+0x35c/0x14a0
[ 2553.495290][T23762]  ? oom_killer_disable+0x280/0x280
[ 2553.500521][T23762]  ? find_held_lock+0x2d/0x110
[ 2553.505398][T23762]  mem_cgroup_out_of_memory+0x206/0x270
[ 2553.511109][T23762]  ? mem_cgroup_margin+0x130/0x130
[ 2553.516276][T23762]  ? lock_downgrade+0x6e0/0x6e0
[ 2553.521252][T23762]  try_charge_memcg+0xefb/0x12f0
[ 2553.526223][T23762]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2553.532395][T23762]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2553.538169][T23762]  ? lock_downgrade+0x6e0/0x6e0
[ 2553.543037][T23762]  ? lock_downgrade+0x6e0/0x6e0
[ 2553.547931][T23762]  __memcg_kmem_charge_page+0x16e/0x3b0
[ 2553.553499][T23762]  __alloc_pages+0x1f3/0x5b0
[ 2553.558223][T23762]  ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0
[ 2553.565005][T23762]  ? find_held_lock+0x2d/0x110
[ 2553.569800][T23762]  ? lock_downgrade+0x6e0/0x6e0
[ 2553.574665][T23762]  ? do_raw_spin_lock+0x124/0x2b0
[ 2553.579709][T23762]  alloc_pages+0x1aa/0x270
[ 2553.584409][T23762]  __pmd_alloc+0x3f/0x5d0
[ 2553.588772][T23762]  ? __pud_alloc+0xe4/0x180
[ 2553.593311][T23762]  copy_page_range+0x2829/0x3b40
[ 2553.598299][T23762]  ? mas_store+0x206/0x2e0
[ 2553.602756][T23762]  ? handle_mm_fault+0x850/0x850
[ 2553.607733][T23762]  ? anon_vma_fork+0xba/0x630
[ 2553.612622][T23762]  dup_mmap+0xc10/0x10b0
[ 2553.616895][T23762]  ? replace_mm_exe_file+0x4b0/0x4b0
[ 2553.622207][T23762]  ? lock_downgrade+0x6e0/0x6e0
[ 2553.627080][T23762]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2553.632936][T23762]  ? mm_init+0x8e0/0xc10
[ 2553.637196][T23762]  copy_process+0x440f/0x7520
[ 2553.641917][T23762]  ? _raw_spin_unlock+0x28/0x40
[ 2553.646786][T23762]  ? wp_page_reuse+0x197/0x570
[ 2553.651600][T23762]  ? __cleanup_sighand+0xb0/0xb0
[ 2553.656558][T23762]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2553.662308][T23762]  ? rwlock_bug.part.0+0x90/0x90
[ 2553.667264][T23762]  ? lock_chain_count+0x20/0x20
[ 2553.672135][T23762]  kernel_clone+0xeb/0x990
[ 2553.676577][T23762]  ? create_io_thread+0xf0/0xf0
[ 2553.681456][T23762]  ? find_held_lock+0x2d/0x110
[ 2553.686357][T23762]  __do_sys_clone+0xba/0x100
[ 2553.690964][T23762]  ? kernel_clone+0x990/0x990
[ 2553.695775][T23762]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2553.701350][T23762]  do_syscall_64+0x39/0xb0
[ 2553.705791][T23762]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2553.711799][T23762] RIP: 0033:0x7f324b489dfb
[ 2553.716239][T23762] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2553.735916][T23762] RSP: 002b:00007ffd5eb45fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2553.744366][T23762] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f324b489dfb
[ 2553.752356][T23762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2553.760338][T23762] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555557a7400
[ 2553.768407][T23762] R10: 00005555557a76d0 R11: 0000000000000246 R12: 0000000000000001
[ 2553.776481][T23762] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd5eb46080
[ 2553.784506][T23762]  </TASK>
[ 2553.831153][T23944] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2553.848730][T23762] memory: usage 10432kB, limit 0kB, failcnt 3687
[ 2553.856539][T23762] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2553.878613][T23762] Memory cgroup stats for /syz4:
[ 2553.878821][T23762] anon 45056
[ 2553.878821][T23762] file 10444800
[ 2553.878821][T23762] kernel 176128
[ 2553.878821][T23762] kernel_stack 32768
[ 2553.878821][T23762] pagetables 8192
[ 2553.878821][T23762] sec_pagetables 0
[ 2553.878821][T23762] percpu 64
[ 2553.878821][T23762] sock 0
[ 2553.878821][T23762] vmalloc 0
[ 2553.878821][T23762] shmem 10444800
[ 2553.878821][T23762] zswap 0
[ 2553.878821][T23762] zswapped 0
[ 2553.878821][T23762] file_mapped 225280
[ 2553.878821][T23762] file_dirty 0
[ 2553.878821][T23762] file_writeback 0
[ 2553.878821][T23762] swapcached 0
[ 2553.878821][T23762] anon_thp 0
[ 2553.878821][T23762] file_thp 0
[ 2553.878821][T23762] shmem_thp 0
[ 2553.878821][T23762] inactive_anon 45056
[ 2553.878821][T23762] active_anon 10444800
[ 2553.878821][T23762] inactive_file 0
[ 2553.878821][T23762] active_file 0
[ 2553.878821][T23762] unevictable 0
[ 2553.878821][T23762] slab_reclaimable 37280
[ 2553.878821][T23762] slab_unreclaimable 83128
[ 2553.878821][T23762] slab 120408
[ 2553.982116][T23944] 8021q: adding VLAN 0 to HW filter on device team0
[ 2554.049531][T23944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2554.070346][T23944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2554.148741][T23762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23762,uid=0
[ 2554.211701][T23762] Memory cgroup out of memory: Killed process 23762 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2554.549232][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2554.558227][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2554.589340][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2554.598188][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2554.641564][T14228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2554.649225][T23004] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2554.656355][T23004] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2554.664857][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2554.672887][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2554.680637][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2554.690349][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2554.697737][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2554.706409][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2554.715240][T23004] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2554.722469][T23004] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2554.730499][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2554.742824][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2554.751846][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2554.761434][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2554.770594][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2554.779204][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2554.787929][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2554.796959][T23004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2554.812714][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2554.821296][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2554.832751][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2554.926601][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2554.959334][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2554.970461][T23944] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2555.149839][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2555.163177][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2555.252098][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2555.289512][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2555.354325][T23944] device veth0_vlan entered promiscuous mode
[ 2555.421808][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2555.439382][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2555.485682][T23944] device veth1_vlan entered promiscuous mode
[ 2555.653705][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2555.709941][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2555.748129][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2555.762417][T23944] device veth0_macvtap entered promiscuous mode
[ 2555.795402][T23944] device veth1_macvtap entered promiscuous mode
[ 2555.821936][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2555.836902][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2555.846162][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2555.854127][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2555.862925][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2555.885734][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2555.897480][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2555.907897][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2555.936326][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2555.957744][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2555.968648][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2555.998603][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2556.009762][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2556.019996][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2556.030850][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2556.044873][T23944] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2556.056913][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2556.067831][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2556.089062][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2556.118522][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2556.138535][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2556.158527][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2556.178181][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2556.189134][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2556.199604][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2556.210763][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2556.222500][T23944] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2556.234381][T24053] chnl_net:caif_netlink_parms(): no params data found
[ 2556.246259][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2556.255244][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2556.271501][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2556.283305][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2556.292825][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2556.302067][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2556.332033][T23944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2556.341895][T23944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2556.351631][T23944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2556.362429][T23944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2556.598217][T24053] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2556.607350][T24053] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2556.619345][T24053] device bridge_slave_0 entered promiscuous mode
[ 2556.634875][T24053] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2556.642192][T24053] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2556.651345][T24053] device bridge_slave_1 entered promiscuous mode
[ 2556.745561][T23891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2556.757664][T24053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2556.757871][T23891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2556.767350][ T5119] Bluetooth: hci0: command 0x0409 tx timeout
[ 2556.804678][T24053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2556.828424][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2556.953669][T24053] team0: Port device team_slave_0 added
[ 2556.994768][T15331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2557.014053][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2557.029526][T24053] team0: Port device team_slave_1 added
[ 2557.040172][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2557.092113][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2557.128031][T15331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2557.174275][T24053] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2557.198405][T24053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2557.274228][T24053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2557.301354][T24053] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2557.319021][T24053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2557.378581][T24053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2557.464183][T15331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2557.555155][T24071] chnl_net:caif_netlink_parms(): no params data found
[ 2557.630896][T24103] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2557.671247][T15331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2557.681232][T24103] CPU: 1 PID: 24103 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2557.691974][T24103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2557.702067][T24103] Call Trace:
[ 2557.705376][T24103]  <TASK>
[ 2557.708346][T24103]  dump_stack_lvl+0xd1/0x138
[ 2557.712986][T24103]  dump_header+0x10b/0x85f
[ 2557.717456][T24103]  oom_kill_process.cold+0x10/0x15
[ 2557.722638][T24103]  out_of_memory+0x35c/0x14a0
[ 2557.727379][T24103]  ? oom_killer_disable+0x280/0x280
[ 2557.732648][T24103]  ? find_held_lock+0x2d/0x110
[ 2557.737466][T24103]  mem_cgroup_out_of_memory+0x206/0x270
[ 2557.743064][T24103]  ? mem_cgroup_margin+0x130/0x130
[ 2557.748240][T24103]  ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 2557.754098][T24103]  memory_max_write+0x2f9/0x3c0
[ 2557.758999][T24103]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2557.765118][T24103]  ? lock_release+0x810/0x810
[ 2557.769867][T24103]  cgroup_file_write+0x1e2/0x770
[ 2557.774845][T24103]  ? mem_cgroup_force_empty_write+0x160/0x160
[ 2557.780945][T24103]  ? kill_css+0x370/0x370
[ 2557.785309][T24103]  ? __virt_addr_valid+0x61/0x2e0
[ 2557.790386][T24103]  ? kill_css+0x370/0x370
[ 2557.794753][T24103]  kernfs_fop_write_iter+0x3f1/0x600
[ 2557.800076][T24103]  vfs_write+0x9ed/0xdd0
[ 2557.804342][T24103]  ? kernel_write+0x630/0x630
[ 2557.809043][T24103]  ? __fget_files+0x26a/0x440
[ 2557.813771][T24103]  ksys_write+0x12b/0x250
[ 2557.818119][T24103]  ? __ia32_sys_read+0xb0/0xb0
[ 2557.823006][T24103]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2557.828592][T24103]  do_syscall_64+0x39/0xb0
[ 2557.833042][T24103]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2557.838954][T24103] RIP: 0033:0x7fefc1a8c0c9
[ 2557.843382][T24103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2557.863032][T24103] RSP: 002b:00007fefc288d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2557.871463][T24103] RAX: ffffffffffffffda RBX: 00007fefc1bac120 RCX: 00007fefc1a8c0c9
[ 2557.879456][T24103] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000006
[ 2557.887456][T24103] RBP: 00007fefc1ae7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2557.895466][T24103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2557.903462][T24103] R13: 00007ffd374cd5ff R14: 00007fefc288d300 R15: 0000000000022000
[ 2557.911479][T24103]  </TASK>
[ 2557.922484][ T5119] Bluetooth: hci1: command 0x0409 tx timeout
[ 2557.956486][T24103] memory: usage 8644kB, limit 12kB, failcnt 909
[ 2557.968871][T24103] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2558.009027][T24103] Memory cgroup stats for /syz1:
[ 2558.009249][T24103] anon 126976
[ 2558.009249][T24103] file 8355840
[ 2558.009249][T24103] kernel 368640
[ 2558.009249][T24103] kernel_stack 131072
[ 2558.009249][T24103] pagetables 81920
[ 2558.009249][T24103] sec_pagetables 0
[ 2558.009249][T24103] percpu 64
[ 2558.009249][T24103] sock 0
[ 2558.009249][T24103] vmalloc 0
[ 2558.009249][T24103] shmem 8351744
[ 2558.009249][T24103] zswap 0
[ 2558.009249][T24103] zswapped 0
[ 2558.009249][T24103] file_mapped 188416
[ 2558.009249][T24103] file_dirty 0
[ 2558.009249][T24103] file_writeback 0
[ 2558.009249][T24103] swapcached 0
[ 2558.009249][T24103] anon_thp 0
[ 2558.009249][T24103] file_thp 0
[ 2558.009249][T24103] shmem_thp 0
[ 2558.009249][T24103] inactive_anon 126976
[ 2558.009249][T24103] active_anon 8351744
[ 2558.009249][T24103] inactive_file 4096
[ 2558.009249][T24103] active_file 0
[ 2558.009249][T24103] unevictable 0
[ 2558.009249][T24103] slab_reclaimable 39824
[ 2558.009249][T24103] slab_unreclaimable 91128
[ 2558.009249][T24103] slab 130952
[ 2558.113726][T24053] device hsr_slave_0 entered promiscuous mode
[ 2558.123695][T24053] device hsr_slave_1 entered promiscuous mode
[ 2558.131191][T24103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=24097,uid=0
[ 2558.146974][T24053] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2558.154739][T24053] Cannot create hsr debugfs directory
19:01:09 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0xa77, 0x12)

19:01:09 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:01:09 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4700, 0x12)

19:01:09 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

[ 2558.161102][T24103] Memory cgroup out of memory: Killed process 24097 (syz-executor.1) total-vm:56852kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2558.305557][T23944] syz-executor.1 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0
[ 2558.316778][T23944] CPU: 0 PID: 23944 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2558.327237][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2558.337335][T23944] Call Trace:
[ 2558.340629][T23944]  <TASK>
[ 2558.343578][T23944]  dump_stack_lvl+0xd1/0x138
[ 2558.348192][T23944]  dump_header+0x10b/0x85f
[ 2558.352632][T23944]  oom_kill_process.cold+0x10/0x15
[ 2558.357772][T23944]  out_of_memory+0x35c/0x14a0
[ 2558.362502][T23944]  ? find_held_lock+0x2d/0x110
[ 2558.367306][T23944]  ? oom_killer_disable+0x280/0x280
[ 2558.372550][T23944]  ? find_held_lock+0x2d/0x110
[ 2558.377348][T23944]  mem_cgroup_out_of_memory+0x206/0x270
[ 2558.382926][T23944]  ? mem_cgroup_margin+0x130/0x130
[ 2558.388060][T23944]  ? lock_downgrade+0x6e0/0x6e0
[ 2558.392949][T23944]  try_charge_memcg+0xefb/0x12f0
[ 2558.397909][T23944]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2558.403911][T23944]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2558.409660][T23944]  ? lock_downgrade+0x6e0/0x6e0
[ 2558.414529][T23944]  ? lock_downgrade+0x6e0/0x6e0
[ 2558.419405][T23944]  obj_cgroup_charge+0x2af/0x5e0
[ 2558.424553][T23944]  __kmem_cache_alloc_node+0xb2/0x430
[ 2558.429940][T23944]  ? kvmalloc_node+0xa2/0x1a0
[ 2558.434663][T23944]  ? kvmalloc_node+0xa2/0x1a0
[ 2558.439382][T23944]  __kmalloc_node+0x4d/0xd0
[ 2558.443912][T23944]  kvmalloc_node+0xa2/0x1a0
[ 2558.448445][T23944]  xt_alloc_table_info+0x40/0xa0
[ 2558.453408][T23944]  do_ipt_set_ctl+0x514/0xb10
[ 2558.458101][T23944]  ? trace_contention_end+0x153/0x1e0
[ 2558.463502][T23944]  ? __mutex_lock+0x231/0x1360
[ 2558.468308][T23944]  ? compat_do_replace.constprop.0+0x400/0x400
[ 2558.474484][T23944]  ? do_ip_setsockopt+0x231/0x3a10
[ 2558.479614][T23944]  ? wait_for_completion_io_timeout+0x20/0x20
[ 2558.485694][T23944]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2558.491128][T23944]  ? nf_sockopt_find.constprop.0+0x22d/0x2a0
[ 2558.497134][T23944]  nf_setsockopt+0x87/0xe0
[ 2558.501587][T23944]  ip_setsockopt+0xf2/0x110
[ 2558.506108][T23944]  tcp_setsockopt+0x9f/0x100
[ 2558.510730][T23944]  ? sock_common_recvmsg+0x190/0x190
[ 2558.516027][T23944]  __sys_setsockopt+0x2c6/0x5b0
[ 2558.520903][T23944]  ? __ia32_sys_recv+0x100/0x100
[ 2558.525863][T23944]  ? up_write+0x520/0x520
[ 2558.530217][T23944]  ? __traceiter_irq_enable+0xa0/0xa0
[ 2558.535619][T23944]  __x64_sys_setsockopt+0xbe/0x160
[ 2558.540754][T23944]  do_syscall_64+0x39/0xb0
[ 2558.545220][T23944]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2558.551188][T23944] RIP: 0033:0x7fefc1a8d71a
[ 2558.555614][T23944] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2558.575235][T23944] RSP: 002b:00007ffd374cd168 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2558.583660][T23944] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fefc1a8d71a
[ 2558.591651][T23944] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[ 2558.599734][T23944] RBP: 00007ffd374cd190 R08: 0000000000000240 R09: ffffffffff000000
[ 2558.607812][T23944] R10: 00007fefc1b871c0 R11: 0000000000000206 R12: 00007ffd374cd1f0
[ 2558.615809][T23944] R13: 0000000000000003 R14: 00007ffd374cd18c R15: 00007fefc1b87160
[ 2558.623815][T23944]  </TASK>
[ 2558.648837][T23944] memory: usage 8304kB, limit 12kB, failcnt 945
[ 2558.668145][T23944] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2558.688617][T23944] Memory cgroup stats for /syz1:
[ 2558.688864][T23944] anon 45056
[ 2558.688864][T23944] file 8355840
[ 2558.688864][T23944] kernel 102400
[ 2558.688864][T23944] kernel_stack 0
[ 2558.688864][T23944] pagetables 8192
[ 2558.688864][T23944] sec_pagetables 0
[ 2558.688864][T23944] percpu 64
[ 2558.688864][T23944] sock 0
[ 2558.688864][T23944] vmalloc 0
[ 2558.688864][T23944] shmem 8351744
[ 2558.688864][T23944] zswap 0
[ 2558.688864][T23944] zswapped 0
[ 2558.688864][T23944] file_mapped 188416
[ 2558.688864][T23944] file_dirty 0
[ 2558.688864][T23944] file_writeback 0
[ 2558.688864][T23944] swapcached 0
[ 2558.688864][T23944] anon_thp 0
[ 2558.688864][T23944] file_thp 0
[ 2558.688864][T23944] shmem_thp 0
[ 2558.688864][T23944] inactive_anon 45056
[ 2558.688864][T23944] active_anon 8351744
[ 2558.688864][T23944] inactive_file 4096
[ 2558.688864][T23944] active_file 0
[ 2558.688864][T23944] unevictable 0
[ 2558.688864][T23944] slab_reclaimable 31352
[ 2558.688864][T23944] slab_unreclaimable 47872
[ 2558.688864][T23944] slab 79224
[ 2558.797678][T23944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=23944,uid=0
[ 2558.838853][ T5119] Bluetooth: hci0: command 0x041b tx timeout
19:01:10 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb200000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2558.839874][T23944] Memory cgroup out of memory: Killed process 23944 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2558.888897][T24071] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2558.896057][T24071] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2558.978327][T24071] device bridge_slave_0 entered promiscuous mode
[ 2559.048686][T24071] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2559.069697][T24071] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2559.098429][T24071] device bridge_slave_1 entered promiscuous mode
19:01:11 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2559.399473][T15331] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2559.490584][T24071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
19:01:11 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2559.673175][T15331] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
19:01:11 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2559.747296][T24071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2559.899331][T15331] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2559.958637][ T5119] Bluetooth: hci1: command 0x041b tx timeout
[ 2559.984663][T24071] team0: Port device team_slave_0 added
[ 2560.002007][T24071] team0: Port device team_slave_1 added
[ 2560.165698][T15331] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2560.220234][T24071] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2560.227233][T24071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2560.348543][T24071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2560.422922][T24053] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2560.484002][T24071] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2560.499851][T24071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2560.599052][T24071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2560.739703][T24053] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2560.928863][ T5119] Bluetooth: hci0: command 0x040f tx timeout
[ 2561.023404][T24053] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.036086][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2561.057098][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2561.069594][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2561.077248][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2561.088717][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2561.100651][T24071] device hsr_slave_0 entered promiscuous mode
[ 2561.139092][T24071] device hsr_slave_1 entered promiscuous mode
[ 2561.167557][T24071] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2561.184972][T24071] Cannot create hsr debugfs directory
[ 2561.252202][T24053] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.499723][T15331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.695501][T15331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.798233][T15331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.990860][T15331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2562.048739][ T5119] Bluetooth: hci1: command 0x040f tx timeout
[ 2562.151680][T24053] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2562.181775][T24053] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2562.270503][T24053] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2562.311018][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2562.313384][T24138] chnl_net:caif_netlink_parms(): no params data found
[ 2562.320132][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2562.335273][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2562.343275][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2562.358874][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2562.383122][T24053] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2562.970419][T24138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2562.977558][T24138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2563.000343][ T5119] Bluetooth: hci0: command 0x0419 tx timeout
[ 2563.007789][T24138] device bridge_slave_0 entered promiscuous mode
[ 2563.169584][ T5119] Bluetooth: hci2: command 0x0409 tx timeout
[ 2563.312931][T24138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2563.329383][T24138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2563.337710][T24138] device bridge_slave_1 entered promiscuous mode
[ 2563.486495][T24053] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2563.606337][T24138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2563.628213][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2563.637733][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2563.654889][T24053] 8021q: adding VLAN 0 to HW filter on device team0
[ 2563.668965][T24138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2563.979762][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2563.989375][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2563.997994][T23811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2564.005190][T23811] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2564.013658][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2564.022585][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2564.031683][T23811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2564.038859][T23811] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2564.047136][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2564.067341][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2564.118782][ T5119] Bluetooth: hci1: command 0x0419 tx timeout
[ 2564.189327][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2564.216845][T24138] team0: Port device team_slave_0 added
[ 2564.249845][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2564.261255][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2564.310003][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2564.329087][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2564.424714][T24053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2564.438932][ T5119] Bluetooth: hci3: command 0x0409 tx timeout
[ 2564.450861][T24053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2564.472478][T24138] team0: Port device team_slave_1 added
[ 2564.478599][T24071] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2564.499159][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2564.507338][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2564.517154][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2564.600772][T24071] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2564.621209][T24156] chnl_net:caif_netlink_parms(): no params data found
[ 2564.726015][T24071] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2564.759204][T24138] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2564.766211][T24138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2564.797799][T24138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2564.812942][T24138] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2564.822295][T24138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2564.849310][T24138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2564.868371][T24071] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2565.068353][T24138] device hsr_slave_0 entered promiscuous mode
[ 2565.075599][T24138] device hsr_slave_1 entered promiscuous mode
[ 2565.083056][T24138] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2565.096605][T24138] Cannot create hsr debugfs directory
[ 2565.124513][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2565.132359][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2565.146422][T24053] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2565.239182][ T5119] Bluetooth: hci2: command 0x041b tx timeout
[ 2565.258414][T24156] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2565.265926][T24156] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2565.274939][T24156] device bridge_slave_0 entered promiscuous mode
[ 2565.307364][T24156] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2565.319520][T24156] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2565.331315][T24156] device bridge_slave_1 entered promiscuous mode
[ 2565.360720][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2565.371672][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2565.404359][T24071] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2565.482037][T24156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2565.511764][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2565.520458][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2565.531955][T24053] device veth0_vlan entered promiscuous mode
[ 2565.548850][T24156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2565.590749][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2565.609607][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2565.617704][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2565.638108][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2565.662038][T24071] 8021q: adding VLAN 0 to HW filter on device team0
[ 2565.801793][T24053] device veth1_vlan entered promiscuous mode
[ 2565.854729][T24156] team0: Port device team_slave_0 added
[ 2565.869391][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2565.883132][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2565.894004][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2565.903373][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2565.913310][T14417] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2565.920481][T14417] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2565.942961][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2565.952085][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2565.961288][T14417] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2565.968412][T14417] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2566.056042][T24156] team0: Port device team_slave_1 added
[ 2566.084211][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2566.107070][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2566.125246][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2566.146581][T24053] device veth0_macvtap entered promiscuous mode
[ 2566.202452][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2566.215570][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2566.226230][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2566.239097][T24053] device veth1_macvtap entered promiscuous mode
[ 2566.254737][T24156] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2566.263691][T24156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2566.301240][T24156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2566.328655][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2566.343336][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2566.352619][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2566.361416][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2566.377406][T24156] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2566.387734][T24156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2566.426952][T24156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2566.511168][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2566.519345][ T5119] Bluetooth: hci3: command 0x041b tx timeout
[ 2566.538135][T24071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2566.561443][T24071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2566.623626][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2566.633204][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2566.644919][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2566.656016][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2566.666455][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2566.677206][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2566.687502][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2566.698299][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2566.708816][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2566.719677][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2566.731933][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2566.742982][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2566.753161][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2566.764172][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2566.776131][T24053] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2566.969009][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2566.989481][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2567.034584][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.049422][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.063390][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.088624][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.108594][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.128553][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.148694][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.169959][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.188515][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.212490][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.236319][T24053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2567.248180][T24053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2567.273512][T24053] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2567.293663][T24156] device hsr_slave_0 entered promiscuous mode
[ 2567.309621][T24156] device hsr_slave_1 entered promiscuous mode
[ 2567.329054][ T5119] Bluetooth: hci2: command 0x040f tx timeout
[ 2567.335736][T24156] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2567.347631][T24156] Cannot create hsr debugfs directory
[ 2567.403841][T15331] device hsr_slave_0 left promiscuous mode
[ 2567.428837][T15331] device hsr_slave_1 left promiscuous mode
[ 2567.440551][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2567.448032][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2567.475599][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2567.483883][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2567.501114][T15331] device bridge_slave_1 left promiscuous mode
[ 2567.507417][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2567.530105][T15331] device bridge_slave_0 left promiscuous mode
[ 2567.536479][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2567.569592][T15331] device hsr_slave_0 left promiscuous mode
[ 2567.576208][T15331] device hsr_slave_1 left promiscuous mode
[ 2567.583020][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2567.596778][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2567.621726][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2567.648778][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2567.670895][T15331] device bridge_slave_1 left promiscuous mode
[ 2567.677484][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2567.686908][T15331] device bridge_slave_0 left promiscuous mode
[ 2567.706868][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2567.730864][T15331] device hsr_slave_0 left promiscuous mode
[ 2567.750017][T15331] device hsr_slave_1 left promiscuous mode
[ 2567.758833][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2567.766390][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2567.793414][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2567.801188][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2567.810880][T15331] device bridge_slave_1 left promiscuous mode
[ 2567.817150][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2567.826192][T15331] device bridge_slave_0 left promiscuous mode
[ 2567.832861][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2567.848955][T15331] device hsr_slave_0 left promiscuous mode
[ 2567.856037][T15331] device hsr_slave_1 left promiscuous mode
[ 2567.862765][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2567.870325][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2567.881847][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2567.889576][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2567.910955][T15331] device bridge_slave_1 left promiscuous mode
[ 2567.917294][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2567.938832][T15331] device bridge_slave_0 left promiscuous mode
[ 2567.945076][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2568.011344][T15331] device veth1_macvtap left promiscuous mode
[ 2568.017443][T15331] device veth0_macvtap left promiscuous mode
[ 2568.035981][T15331] device veth1_vlan left promiscuous mode
[ 2568.054971][T15331] device veth0_vlan left promiscuous mode
[ 2568.080125][T15331] device veth1_macvtap left promiscuous mode
[ 2568.086203][T15331] device veth0_macvtap left promiscuous mode
[ 2568.097589][T15331] device veth1_vlan left promiscuous mode
[ 2568.107668][T15331] device veth0_vlan left promiscuous mode
[ 2568.131858][T15331] device veth1_macvtap left promiscuous mode
[ 2568.137950][T15331] device veth0_macvtap left promiscuous mode
[ 2568.156351][T15331] device veth1_vlan left promiscuous mode
[ 2568.183341][T15331] device veth0_vlan left promiscuous mode
[ 2568.200914][T15331] device veth1_macvtap left promiscuous mode
[ 2568.207001][T15331] device veth0_macvtap left promiscuous mode
[ 2568.229021][T15331] device veth1_vlan left promiscuous mode
[ 2568.234916][T15331] device veth0_vlan left promiscuous mode
[ 2568.598661][ T5119] Bluetooth: hci3: command 0x040f tx timeout
[ 2569.358895][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2569.398718][ T5119] Bluetooth: hci2: command 0x0419 tx timeout
[ 2569.399311][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2569.430204][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2569.461106][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2569.689389][T15331] bond0 (unregistering): Released all slaves
[ 2569.971674][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2569.988200][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2570.009933][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2570.028209][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2570.220566][T15331] bond0 (unregistering): Released all slaves
[ 2570.577613][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2570.596249][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2570.612113][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2570.629940][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2570.678643][ T5119] Bluetooth: hci3: command 0x0419 tx timeout
[ 2570.820310][T15331] bond0 (unregistering): Released all slaves
[ 2571.133373][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2571.183744][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2571.211897][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2571.230052][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2571.361781][T15331] bond0 (unregistering): Released all slaves
[ 2571.459376][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2571.468222][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2571.496786][T24053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2571.520819][T24053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2571.530249][T24053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2571.543424][T24053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2571.578187][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2571.586551][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2571.633950][T24138] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2571.675218][T24071] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2571.683703][T24138] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2571.740181][T24138] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2571.804138][T24138] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2571.839533][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2571.849895][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2571.917646][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2571.926217][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2571.936042][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2571.944739][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2571.968224][T24071] device veth0_vlan entered promiscuous mode
[ 2571.975814][T15968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2571.987982][T15968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2572.032589][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2572.075257][T24071] device veth1_vlan entered promiscuous mode
[ 2572.189644][T14864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2572.197762][T14864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2572.250537][T24071] device veth0_macvtap entered promiscuous mode
[ 2572.299688][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2572.309886][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2572.318334][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2572.330491][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2572.339827][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2572.356827][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2572.443131][T24071] device veth1_macvtap entered promiscuous mode
[ 2572.509086][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2572.552887][T24138] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2572.601575][T24071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2572.623630][T24071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2572.639650][T24071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2572.666394][T24071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2572.701111][T24071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2572.740093][T24071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2572.768998][T24071] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2572.810494][T24138] 8021q: adding VLAN 0 to HW filter on device team0
[ 2572.821620][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2572.844723][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2572.875799][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2572.884478][T24214] syz-executor.2 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2572.897791][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2572.932381][T24071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2572.947644][T24214] CPU: 1 PID: 24214 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2572.958143][T24214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2572.968231][T24214] Call Trace:
[ 2572.971548][T24214]  <TASK>
[ 2572.974505][T24214]  dump_stack_lvl+0xd1/0x138
[ 2572.979141][T24214]  dump_header+0x10b/0x85f
[ 2572.983605][T24214]  oom_kill_process.cold+0x10/0x15
[ 2572.988766][T24214]  out_of_memory+0x35c/0x14a0
[ 2572.993498][T24214]  ? find_held_lock+0x2d/0x110
[ 2572.998306][T24214]  ? oom_killer_disable+0x280/0x280
[ 2573.003568][T24214]  ? find_held_lock+0x2d/0x110
[ 2573.008429][T24214]  mem_cgroup_out_of_memory+0x206/0x270
[ 2573.014020][T24214]  ? mem_cgroup_margin+0x130/0x130
[ 2573.019184][T24214]  ? lock_downgrade+0x6e0/0x6e0
[ 2573.024096][T24214]  try_charge_memcg+0xefb/0x12f0
[ 2573.027909][T24071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2573.029054][T24214]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2573.029091][T24214]  ? lock_downgrade+0x6e0/0x6e0
[ 2573.029132][T24214]  charge_memcg+0x90/0x3b0
[ 2573.029162][T24214]  __mem_cgroup_charge+0x2b/0x90
[ 2573.029189][T24214]  ? folio_flags.constprop.0+0x53/0x150
[ 2573.029222][T24214]  __filemap_add_folio+0x615/0xf80
[ 2573.050912][T24071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2573.054262][T24214]  ? filemap_write_and_wait_range+0x120/0x120
[ 2573.066617][T24071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2573.069810][T24214]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2573.069843][T24214]  ? alloc_pages+0x1b2/0x270
[ 2573.069873][T24214]  ? folio_alloc+0x43/0x70
[ 2573.069902][T24214]  filemap_add_folio+0xaf/0x1e0
[ 2573.069936][T24214]  ? __filemap_add_folio+0xf80/0xf80
[ 2573.069971][T24214]  ? xas_load+0x6a/0x140
[ 2573.094436][T24071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2573.096228][T24214]  __filemap_get_folio+0x389/0xd80
[ 2573.105224][T24071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2573.106166][T24214]  ? filemap_add_folio+0x1e0/0x1e0
[ 2573.118267][T24071] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2573.120781][T24214]  ? asm_exc_page_fault+0x26/0x30
[ 2573.120823][T24214]  pagecache_get_page+0x2e/0x280
[ 2573.120855][T24214]  ext4_da_write_begin+0x421/0xb50
[ 2573.120903][T24214]  ? ext4_write_begin+0x1140/0x1140
[ 2573.120948][T24214]  generic_perform_write+0x256/0x570
[ 2573.120988][T24214]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2573.190292][T24138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2573.193334][T24214]  ? discard_new_inode+0x1a0/0x1a0
[ 2573.207269][T24138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2573.209436][T24214]  ? down_write_killable+0x250/0x250
[ 2573.209482][T24214]  ext4_buffered_write_iter+0x15b/0x460
[ 2573.209514][T24214]  ext4_file_write_iter+0x8bf/0x1710
[ 2573.209549][T24214]  ? lock_release+0x810/0x810
[ 2573.246310][T24214]  ? ext4_file_mmap+0x440/0x440
[ 2573.251222][T24214]  vfs_write+0x9ed/0xdd0
[ 2573.255513][T24214]  ? kernel_write+0x630/0x630
[ 2573.260240][T24214]  ? __fget_files+0x26a/0x440
[ 2573.264978][T24214]  ksys_write+0x12b/0x250
[ 2573.269350][T24214]  ? __ia32_sys_read+0xb0/0xb0
[ 2573.274154][T24214]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2573.279760][T24214]  do_syscall_64+0x39/0xb0
[ 2573.284228][T24214]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2573.290161][T24214] RIP: 0033:0x7f161f08c0c9
[ 2573.294604][T24214] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2573.314253][T24214] RSP: 002b:00007f161fe5a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2573.322710][T24214] RAX: ffffffffffffffda RBX: 00007f161f1abf80 RCX: 00007f161f08c0c9
[ 2573.330723][T24214] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2573.338725][T24214] RBP: 00007f161f0e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2573.346733][T24214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2573.354788][T24214] R13: 00007fff5b46f2af R14: 00007f161fe5a300 R15: 0000000000022000
[ 2573.362830][T24214]  </TASK>
[ 2573.397498][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2573.414721][T24214] memory: usage 10696kB, limit 4kB, failcnt 1089
[ 2573.419571][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2573.428219][T24214] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2573.455576][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2573.463971][T24214] Memory cgroup stats for /syz2:
[ 2573.464158][T24214] anon 122880
[ 2573.464158][T24214] file 10457088
[ 2573.464158][T24214] kernel 372736
[ 2573.464158][T24214] kernel_stack 98304
[ 2573.464158][T24214] pagetables 81920
[ 2573.464158][T24214] sec_pagetables 0
[ 2573.464158][T24214] percpu 64
[ 2573.464158][T24214] sock 0
[ 2573.464158][T24214] vmalloc 0
[ 2573.464158][T24214] shmem 10452992
[ 2573.464158][T24214] zswap 0
[ 2573.464158][T24214] zswapped 0
[ 2573.464158][T24214] file_mapped 253952
[ 2573.464158][T24214] file_dirty 4096
[ 2573.464158][T24214] file_writeback 0
[ 2573.464158][T24214] swapcached 0
[ 2573.464158][T24214] anon_thp 0
[ 2573.464158][T24214] file_thp 0
[ 2573.464158][T24214] shmem_thp 0
[ 2573.464158][T24214] inactive_anon 122880
[ 2573.464158][T24214] active_anon 10452992
[ 2573.464158][T24214] inactive_file 0
[ 2573.464158][T24214] active_file 0
[ 2573.464158][T24214] unevictable 0
[ 2573.464158][T24214] slab_reclaimable 52376
[ 2573.464158][T24214] slab_unreclaimable 109152
[ 2573.464158][T24214] slab 161528
[ 2573.469551][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2573.573376][T24214] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24213,uid=0
[ 2573.593862][T24214] Memory cgroup out of memory: Killed process 24213 (syz-executor.2) total-vm:56720kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2573.623665][T18323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2573.630895][T18323] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2573.639380][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2573.648697][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
19:01:25 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2573.670491][T18323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2573.677347][T24053] syz-executor.2 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=0
[ 2573.677641][T18323] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2573.708676][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2573.714711][T24053] CPU: 1 PID: 24053 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2573.717586][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2573.726994][T24053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2573.727010][T24053] Call Trace:
[ 2573.727018][T24053]  <TASK>
[ 2573.727028][T24053]  dump_stack_lvl+0xd1/0x138
[ 2573.727062][T24053]  dump_header+0x10b/0x85f
[ 2573.727100][T24053]  oom_kill_process.cold+0x10/0x15
[ 2573.727145][T24053]  out_of_memory+0x35c/0x14a0
[ 2573.727184][T24053]  ? find_held_lock+0x2d/0x110
[ 2573.727217][T24053]  ? oom_killer_disable+0x280/0x280
[ 2573.727257][T24053]  ? find_held_lock+0x2d/0x110
[ 2573.727293][T24053]  mem_cgroup_out_of_memory+0x206/0x270
[ 2573.727328][T24053]  ? mem_cgroup_margin+0x130/0x130
[ 2573.727359][T24053]  ? lock_downgrade+0x6e0/0x6e0
[ 2573.727399][T24053]  try_charge_memcg+0xefb/0x12f0
[ 2573.727435][T24053]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2573.727464][T24053]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2573.727501][T24053]  ? lock_downgrade+0x6e0/0x6e0
[ 2573.738851][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2573.745438][T24053]  ? lock_downgrade+0x6e0/0x6e0
[ 2573.750049][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2573.751646][T24053]  ? rcu_read_unlock+0x9/0x60
[ 2573.757428][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2573.760675][T24053]  obj_cgroup_charge+0x2af/0x5e0
[ 2573.760712][T24053]  __kmem_cache_alloc_node+0xb2/0x430
[ 2573.760734][T24053]  ? kvmalloc_node+0xa2/0x1a0
[ 2573.760766][T24053]  ? kvmalloc_node+0xa2/0x1a0
[ 2573.760791][T24053]  __kmalloc_node+0x4d/0xd0
[ 2573.768225][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2573.770616][T24053]  kvmalloc_node+0xa2/0x1a0
[ 2573.770655][T24053]  alloc_fdtable+0xf4/0x2a0
[ 2573.770679][T24053]  dup_fd+0x722/0xcb0
[ 2573.770707][T24053]  ? gen8_ppgtt_insert+0x1930/0x2000
[ 2573.776711][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2573.780670][T24053]  copy_process+0x24ea/0x7520
[ 2573.780703][T24053]  ? _raw_spin_unlock+0x28/0x40
[ 2573.780730][T24053]  ? wp_page_reuse+0x197/0x570
[ 2573.780775][T24053]  ? __cleanup_sighand+0xb0/0xb0
[ 2573.780798][T24053]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2573.780832][T24053]  ? rwlock_bug.part.0+0x90/0x90
[ 2573.787851][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2573.791141][T24053]  ? lock_chain_count+0x20/0x20
[ 2573.791179][T24053]  kernel_clone+0xeb/0x990
[ 2573.791210][T24053]  ? create_io_thread+0xf0/0xf0
[ 2573.791242][T24053]  ? find_held_lock+0x2d/0x110
[ 2573.791286][T24053]  __do_sys_clone+0xba/0x100
[ 2573.791312][T24053]  ? kernel_clone+0x990/0x990
[ 2573.791357][T24053]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2573.791399][T24053]  do_syscall_64+0x39/0xb0
[ 2573.791433][T24053]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2573.791461][T24053] RIP: 0033:0x7f161f089dfb
[ 2573.791483][T24053] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2573.791505][T24053] RSP: 002b:00007fff5b46f4f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2573.800511][T24071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2573.801464][T24053] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f161f089dfb
[ 2573.806398][T24071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2573.812352][T24053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2573.812369][T24053] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555555d5a400
[ 2573.812383][T24053] R10: 0000555555d5a6d0 R11: 0000000000000246 R12: 0000000000000001
[ 2573.812395][T24053] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff5b46f5d0
[ 2573.812428][T24053]  </TASK>
[ 2573.823454][T24053] memory: usage 10516kB, limit 4kB, failcnt 1126
[ 2573.848075][T24071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2573.871420][T24053] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2573.872561][T24071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2573.876638][T24053] Memory cgroup stats for /syz2:
[ 2574.124886][T24053] anon 40960
[ 2574.124886][T24053] file 10452992
[ 2574.124886][T24053] kernel 176128
[ 2574.124886][T24053] kernel_stack 32768
[ 2574.124886][T24053] pagetables 8192
[ 2574.124886][T24053] sec_pagetables 0
[ 2574.124886][T24053] percpu 64
[ 2574.124886][T24053] sock 0
[ 2574.124886][T24053] vmalloc 0
[ 2574.124886][T24053] shmem 10452992
[ 2574.124886][T24053] zswap 0
[ 2574.124886][T24053] zswapped 0
[ 2574.124886][T24053] file_mapped 241664
[ 2574.124886][T24053] file_dirty 0
[ 2574.124886][T24053] file_writeback 0
[ 2574.124886][T24053] swapcached 0
[ 2574.124886][T24053] anon_thp 0
[ 2574.124886][T24053] file_thp 0
[ 2574.124886][T24053] shmem_thp 0
[ 2574.124886][T24053] inactive_anon 40960
[ 2574.124886][T24053] active_anon 10452992
[ 2574.124886][T24053] inactive_file 0
[ 2574.124886][T24053] active_file 0
[ 2574.124886][T24053] unevictable 0
[ 2574.124886][T24053] slab_reclaimable 46304
[ 2574.124886][T24053] slab_unreclaimable 82936
[ 2574.124886][T24053] slab 129240
[ 2574.233992][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2574.244707][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2574.254680][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2574.454970][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2574.487182][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2574.520652][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2574.524173][T24053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1
[ 2574.529486][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2574.537812][T24053] ,oom_memcg=
[ 2574.554299][T24138] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2574.572359][T24156] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2574.573569][T24053] /syz2,task_memcg=/syz2
[ 2574.590679][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2574.605006][T24053] ,task=syz-executor.2,pid=24053,uid=0
[ 2574.613049][T24053] Memory cgroup out of memory: Killed process 24053 (syz-executor.2) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2574.626666][T24156] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2574.639858][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2574.648029][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2574.659487][T24156] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2574.679255][T24156] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2574.782942][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2575.101223][T24156] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2575.189853][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2575.197816][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2575.223877][T24156] 8021q: adding VLAN 0 to HW filter on device team0
[ 2575.235979][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2575.280193][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2575.328891][T23854] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2575.336042][T23854] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2575.450634][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2575.459516][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2575.528841][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2575.538303][T23854] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2575.545503][T23854] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2575.579037][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2575.588047][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2575.610380][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2575.644311][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2575.655450][T24224] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2575.679872][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2575.702766][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2575.712873][T24224] CPU: 0 PID: 24224 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2575.723310][T24156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2575.723420][T24224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2575.743855][T24224] Call Trace:
[ 2575.747173][T24224]  <TASK>
[ 2575.750163][T24224]  dump_stack_lvl+0xd1/0x138
[ 2575.754138][T24156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2575.754785][T24224]  dump_header+0x10b/0x85f
[ 2575.766355][T24224]  oom_kill_process.cold+0x10/0x15
[ 2575.771547][T24224]  out_of_memory+0x35c/0x14a0
[ 2575.776292][T24224]  ? find_held_lock+0x2d/0x110
[ 2575.781114][T24224]  ? oom_killer_disable+0x280/0x280
[ 2575.786456][T24224]  ? find_held_lock+0x2d/0x110
[ 2575.791268][T24224]  mem_cgroup_out_of_memory+0x206/0x270
[ 2575.796858][T24224]  ? mem_cgroup_margin+0x130/0x130
[ 2575.802009][T24224]  ? lock_downgrade+0x6e0/0x6e0
[ 2575.806911][T24224]  try_charge_memcg+0xefb/0x12f0
[ 2575.811904][T24224]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2575.817934][T24224]  ? lock_downgrade+0x6e0/0x6e0
[ 2575.822838][T24224]  charge_memcg+0x90/0x3b0
[ 2575.827296][T24224]  __mem_cgroup_charge+0x2b/0x90
[ 2575.832271][T24224]  ? folio_flags.constprop.0+0x53/0x150
[ 2575.837858][T24224]  __filemap_add_folio+0x615/0xf80
[ 2575.843022][T24224]  ? filemap_write_and_wait_range+0x120/0x120
[ 2575.849139][T24224]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2575.854544][T24224]  ? alloc_pages+0x1b2/0x270
[ 2575.859174][T24224]  ? folio_alloc+0x43/0x70
[ 2575.863656][T24224]  filemap_add_folio+0xaf/0x1e0
[ 2575.868558][T24224]  ? __filemap_add_folio+0xf80/0xf80
[ 2575.873903][T24224]  ? xas_load+0x6a/0x140
[ 2575.878213][T24224]  __filemap_get_folio+0x389/0xd80
[ 2575.883383][T24224]  ? filemap_add_folio+0x1e0/0x1e0
[ 2575.888547][T24224]  ? asm_exc_page_fault+0x26/0x30
[ 2575.893620][T24224]  pagecache_get_page+0x2e/0x280
[ 2575.898612][T24224]  ext4_da_write_begin+0x421/0xb50
[ 2575.903783][T24224]  ? ext4_write_begin+0x1140/0x1140
[ 2575.909031][T24224]  generic_perform_write+0x256/0x570
[ 2575.914369][T24224]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2575.919804][T24224]  ? discard_new_inode+0x1a0/0x1a0
[ 2575.924960][T24224]  ? down_write_killable+0x250/0x250
[ 2575.930296][T24224]  ext4_buffered_write_iter+0x15b/0x460
[ 2575.935888][T24224]  ext4_file_write_iter+0x8bf/0x1710
[ 2575.941234][T24224]  ? lock_release+0x810/0x810
[ 2575.945960][T24224]  ? ext4_file_mmap+0x440/0x440
[ 2575.950872][T24224]  vfs_write+0x9ed/0xdd0
[ 2575.955169][T24224]  ? kernel_write+0x630/0x630
[ 2575.959903][T24224]  ? __fget_files+0x26a/0x440
[ 2575.964642][T24224]  ksys_write+0x12b/0x250
[ 2575.969022][T24224]  ? __ia32_sys_read+0xb0/0xb0
[ 2575.973839][T24224]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2575.979446][T24224]  do_syscall_64+0x39/0xb0
[ 2575.983916][T24224]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2575.989853][T24224] RIP: 0033:0x7f4e7ac8c0c9
[ 2575.994306][T24224] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2576.013957][T24224] RSP: 002b:00007f4e7ba03168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2576.022414][T24224] RAX: ffffffffffffffda RBX: 00007f4e7adabf80 RCX: 00007f4e7ac8c0c9
[ 2576.030426][T24224] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2576.038426][T24224] RBP: 00007f4e7ace7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2576.046524][T24224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2576.054532][T24224] R13: 00007ffe2aaf406f R14: 00007f4e7ba03300 R15: 0000000000022000
[ 2576.062577][T24224]  </TASK>
[ 2576.079471][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2576.079537][T24224] memory: usage 10736kB, limit 16kB, failcnt 2036
[ 2576.091771][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2576.093264][T24224] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2576.108147][T24224] Memory cgroup stats for /syz3:
[ 2576.108368][T24224] anon 126976
[ 2576.108368][T24224] file 10452992
[ 2576.108368][T24224] kernel 311296
[ 2576.108368][T24224] kernel_stack 32768
[ 2576.108368][T24224] pagetables 81920
[ 2576.108368][T24224] sec_pagetables 0
[ 2576.108368][T24224] percpu 64
[ 2576.108368][T24224] sock 0
[ 2576.108368][T24224] vmalloc 0
[ 2576.108368][T24224] shmem 10452992
[ 2576.108368][T24224] zswap 0
[ 2576.108368][T24224] zswapped 0
[ 2576.108368][T24224] file_mapped 319488
[ 2576.108368][T24224] file_dirty 0
[ 2576.108368][T24224] file_writeback 0
[ 2576.108368][T24224] swapcached 0
[ 2576.108368][T24224] anon_thp 0
[ 2576.108368][T24224] file_thp 0
[ 2576.108368][T24224] shmem_thp 0
[ 2576.108368][T24224] inactive_anon 126976
[ 2576.108368][T24224] active_anon 10452992
[ 2576.108368][T24224] inactive_file 0
[ 2576.108368][T24224] active_file 0
[ 2576.108368][T24224] unevictable 0
[ 2576.108368][T24224] slab_reclaimable 50544
[ 2576.108368][T24224] slab_unreclaimable 117840
[ 2576.108368][T24224] slab 168384
[ 2576.135733][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2576.242864][T24224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24223,uid=0
[ 2576.279841][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2576.289920][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2576.310384][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2576.319709][T24224] Memory cgroup out of memory: Killed process 24224 (syz-executor.3) total-vm:54804kB, anon-rss:372kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2576.328253][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2576.350618][T24138] device veth0_vlan entered promiscuous mode
19:01:28 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x5000, 0x12)

19:01:28 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0xa77, 0x12)

19:01:28 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb20000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:01:28 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2576.388773][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2576.396738][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2576.410963][T24138] device veth1_vlan entered promiscuous mode
[ 2576.508940][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2576.517323][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2576.539704][T24071] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2576.540752][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2576.563431][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2576.584531][T24156] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2576.586353][T24071] CPU: 1 PID: 24071 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2576.601891][T24071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2576.611983][T24071] Call Trace:
[ 2576.615304][T24071]  <TASK>
[ 2576.618289][T24071]  dump_stack_lvl+0xd1/0x138
[ 2576.622926][T24071]  dump_header+0x10b/0x85f
[ 2576.627477][T24071]  oom_kill_process.cold+0x10/0x15
[ 2576.632754][T24071]  out_of_memory+0x35c/0x14a0
[ 2576.637521][T24071]  ? find_held_lock+0x2d/0x110
[ 2576.642436][T24071]  ? oom_killer_disable+0x280/0x280
[ 2576.647695][T24071]  ? find_held_lock+0x2d/0x110
[ 2576.652517][T24071]  mem_cgroup_out_of_memory+0x206/0x270
[ 2576.658115][T24071]  ? mem_cgroup_margin+0x130/0x130
[ 2576.663280][T24071]  ? lock_downgrade+0x6e0/0x6e0
[ 2576.668183][T24071]  try_charge_memcg+0xefb/0x12f0
[ 2576.673163][T24071]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2576.679192][T24071]  ? lock_downgrade+0x6e0/0x6e0
[ 2576.684103][T24071]  charge_memcg+0x90/0x3b0
[ 2576.688560][T24071]  __mem_cgroup_charge+0x2b/0x90
[ 2576.693531][T24071]  ? _compound_head+0x5d/0x150
[ 2576.698353][T24071]  __handle_mm_fault+0x187d/0x3c90
[ 2576.703517][T24071]  ? vm_iomap_memory+0x190/0x190
[ 2576.708520][T24071]  handle_mm_fault+0x1b6/0x850
[ 2576.713424][T24071]  do_user_addr_fault+0x475/0x1210
[ 2576.718605][T24071]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2576.724201][T24071]  exc_page_fault+0x98/0x170
[ 2576.728859][T24071]  asm_exc_page_fault+0x26/0x30
[ 2576.733757][T24071] RIP: 0033:0x7f4e7ac5a7d5
[ 2576.738218][T24071] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 0d 0a 00 e8 75 c9 ff ff
[ 2576.740222][T24138] device veth0_macvtap entered promiscuous mode
[ 2576.758133][T24071] RSP: 002b:00007ffe2aaf3010 EFLAGS: 00010206
[ 2576.758159][T24071] RAX: 00000000000187c1 RBX: 00007f4e7ad885e0 RCX: 00005555572c0840
[ 2576.758174][T24071] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004
[ 2576.758188][T24071] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007f4e7ad88640
[ 2576.758201][T24071] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802
[ 2576.758215][T24071] R13: 0000000000008040 R14: 0000000000000804 R15: 00005555572b8800
[ 2576.758261][T24071]  </TASK>
19:01:28 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb20000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2576.862481][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2576.882123][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2576.925214][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2576.976347][T24138] device veth1_macvtap entered promiscuous mode
[ 2577.037598][T24071] memory: usage 10380kB, limit 16kB, failcnt 2060
[ 2577.050100][T24071] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2577.064313][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2577.068981][T24071] Memory cgroup stats for /syz3:
[ 2577.108715][T24071] anon 36864
[ 2577.108715][T24071] file 10452992
[ 2577.108715][T24071] kernel 139264
[ 2577.108715][T24071] kernel_stack 0
[ 2577.108715][T24071] pagetables 8192
[ 2577.108715][T24071] sec_pagetables 0
[ 2577.108715][T24071] percpu 64
[ 2577.108715][T24071] sock 0
[ 2577.108715][T24071] vmalloc 0
[ 2577.108715][T24071] shmem 10452992
[ 2577.108715][T24071] zswap 0
[ 2577.108715][T24071] zswapped 0
[ 2577.108715][T24071] file_mapped 311296
[ 2577.108715][T24071] file_dirty 0
[ 2577.108715][T24071] file_writeback 0
[ 2577.108715][T24071] swapcached 0
[ 2577.108715][T24071] anon_thp 0
[ 2577.108715][T24071] file_thp 0
[ 2577.108715][T24071] shmem_thp 0
[ 2577.108715][T24071] inactive_anon 36864
[ 2577.108715][T24071] active_anon 10452992
[ 2577.108715][T24071] inactive_file 0
[ 2577.108715][T24071] active_file 0
[ 2577.108715][T24071] unevictable 0
[ 2577.108715][T24071] slab_reclaimable 46648
[ 2577.108715][T24071] slab_unreclaimable 71440
[ 2577.108715][T24071] slab 118088
[ 2577.124538][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.398270][T24071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24071,uid=0
[ 2577.418621][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2577.449383][T24071] Memory cgroup out of memory: Killed process 24071 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2577.458565][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.508538][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2577.548522][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.578531][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2577.608507][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.660828][T24138] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2577.670229][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2577.696937][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2577.718975][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2577.854868][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2577.896324][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.938715][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2577.968674][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2577.998540][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2578.022743][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2578.058537][T24138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2578.088580][T24138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2578.131676][T24138] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2578.153425][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2578.170696][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2578.213096][T24138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2578.241623][T24138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2578.262605][T24138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2578.295134][T24138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2578.553096][T23891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2578.579942][T23891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2578.621798][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2578.636300][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2578.645457][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2578.672080][T14864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2578.721027][T14864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2578.730508][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2578.740167][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2578.762543][T24156] device veth0_vlan entered promiscuous mode
[ 2578.774678][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2578.789545][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2578.797565][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2578.824959][T24156] device veth1_vlan entered promiscuous mode
[ 2578.951110][T15331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2579.006036][T24156] device veth0_macvtap entered promiscuous mode
[ 2579.035232][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2579.039775][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2579.051805][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2579.061035][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2579.061939][T24249] syz-executor.4 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2579.075962][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2579.082281][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2579.090551][T14228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2579.104624][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2579.105569][T24249] CPU: 0 PID: 24249 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2579.116239][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2579.122946][T24249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2579.122963][T24249] Call Trace:
[ 2579.122972][T24249]  <TASK>
[ 2579.122983][T24249]  dump_stack_lvl+0xd1/0x138
[ 2579.123021][T24249]  dump_header+0x10b/0x85f
[ 2579.156479][T24249]  oom_kill_process.cold+0x10/0x15
[ 2579.161935][T24249]  out_of_memory+0x35c/0x14a0
[ 2579.166589][T14228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2579.166651][T24249]  ? find_held_lock+0x2d/0x110
[ 2579.178590][T24249]  ? oom_killer_disable+0x280/0x280
[ 2579.183859][T24249]  ? find_held_lock+0x2d/0x110
[ 2579.188679][T24249]  mem_cgroup_out_of_memory+0x206/0x270
[ 2579.194365][T24249]  ? mem_cgroup_margin+0x130/0x130
[ 2579.199669][T24249]  ? lock_downgrade+0x6e0/0x6e0
[ 2579.204663][T24249]  try_charge_memcg+0xefb/0x12f0
[ 2579.209646][T24249]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2579.215671][T24249]  ? lock_downgrade+0x6e0/0x6e0
[ 2579.220592][T24249]  charge_memcg+0x90/0x3b0
[ 2579.225061][T24249]  __mem_cgroup_charge+0x2b/0x90
[ 2579.230030][T24249]  ? folio_flags.constprop.0+0x53/0x150
[ 2579.235619][T24249]  __filemap_add_folio+0x615/0xf80
[ 2579.240789][T24249]  ? filemap_write_and_wait_range+0x120/0x120
[ 2579.246914][T24249]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2579.252335][T24249]  ? alloc_pages+0x1b2/0x270
[ 2579.256964][T24249]  ? folio_alloc+0x43/0x70
[ 2579.261427][T24249]  filemap_add_folio+0xaf/0x1e0
[ 2579.266324][T24249]  ? __filemap_add_folio+0xf80/0xf80
[ 2579.271655][T24249]  ? xas_load+0x6a/0x140
[ 2579.275994][T24249]  __filemap_get_folio+0x389/0xd80
[ 2579.281154][T24249]  ? filemap_add_folio+0x1e0/0x1e0
[ 2579.286314][T24249]  ? asm_exc_page_fault+0x26/0x30
[ 2579.291398][T24249]  pagecache_get_page+0x2e/0x280
[ 2579.296396][T24249]  ext4_da_write_begin+0x421/0xb50
[ 2579.301571][T24249]  ? ext4_write_begin+0x1140/0x1140
[ 2579.306830][T24249]  generic_perform_write+0x256/0x570
[ 2579.312168][T24249]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2579.317673][T24249]  ? discard_new_inode+0x1a0/0x1a0
[ 2579.322843][T24249]  ? down_write_killable+0x250/0x250
[ 2579.328180][T24249]  ext4_buffered_write_iter+0x15b/0x460
[ 2579.333767][T24249]  ext4_file_write_iter+0x8bf/0x1710
[ 2579.339103][T24249]  ? lock_release+0x810/0x810
[ 2579.343812][T24249]  ? ext4_file_mmap+0x440/0x440
[ 2579.348708][T24249]  vfs_write+0x9ed/0xdd0
[ 2579.352987][T24249]  ? kernel_write+0x630/0x630
[ 2579.357705][T24249]  ? __fget_files+0x26a/0x440
[ 2579.362442][T24249]  ksys_write+0x12b/0x250
[ 2579.366898][T24249]  ? __ia32_sys_read+0xb0/0xb0
[ 2579.371816][T24249]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2579.377434][T24249]  do_syscall_64+0x39/0xb0
[ 2579.381907][T24249]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2579.387832][T24249] RIP: 0033:0x7f64a508c0c9
[ 2579.392273][T24249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2579.412527][T24249] RSP: 002b:00007f64a5da7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2579.421873][T24249] RAX: ffffffffffffffda RBX: 00007f64a51abf80 RCX: 00007f64a508c0c9
[ 2579.429897][T24249] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2579.438066][T24249] RBP: 00007f64a50e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2579.446063][T24249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2579.454339][T24249] R13: 00007ffdc5f10abf R14: 00007f64a5da7300 R15: 0000000000022000
[ 2579.462380][T24249]  </TASK>
[ 2579.509476][T15331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2579.512654][T24249] memory: usage 10644kB, limit 0kB, failcnt 3729
[ 2579.542950][T24156] device veth1_macvtap entered promiscuous mode
[ 2579.557467][T24249] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2579.567496][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2579.568128][T24249] Memory cgroup stats for 
[ 2579.576514][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2579.613764][T24249] /syz4:
[ 2579.613966][T24249] anon 118784
[ 2579.613966][T24249] file 10444800
[ 2579.613966][T24249] kernel 335872
[ 2579.613966][T24249] kernel_stack 98304
[ 2579.613966][T24249] pagetables 77824
[ 2579.613966][T24249] sec_pagetables 0
[ 2579.613966][T24249] percpu 64
[ 2579.613966][T24249] sock 0
[ 2579.613966][T24249] vmalloc 0
[ 2579.613966][T24249] shmem 10444800
[ 2579.613966][T24249] zswap 0
[ 2579.613966][T24249] zswapped 0
[ 2579.613966][T24249] file_mapped 245760
[ 2579.613966][T24249] file_dirty 0
[ 2579.613966][T24249] file_writeback 0
[ 2579.613966][T24249] swapcached 0
[ 2579.613966][T24249] anon_thp 0
[ 2579.613966][T24249] file_thp 0
[ 2579.613966][T24249] shmem_thp 0
[ 2579.613966][T24249] inactive_anon 118784
[ 2579.613966][T24249] active_anon 10444800
[ 2579.613966][T24249] inactive_file 0
[ 2579.613966][T24249] active_file 0
[ 2579.613966][T24249] unevictable 0
[ 2579.613966][T24249] slab_reclaimable 48360
[ 2579.613966][T24249] slab_unreclaimable 82440
[ 2579.613966][T24249] slab 130800
[ 2579.715301][T15331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2579.767758][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2579.786694][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2579.797112][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2579.808631][T24249] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24138,uid=0
[ 2579.820975][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2579.842998][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2579.856310][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2579.873923][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2579.886054][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2579.908655][T24249] Memory cgroup out of memory: Killed process 24138 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2579.913323][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2579.949492][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2579.974422][T24156] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2580.038060][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2580.050774][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2580.059832][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2580.072560][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2580.081641][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2580.086573][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2580.109581][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2580.117566][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2580.163660][T15331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2580.223065][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2580.233895][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2580.244946][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2580.256702][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2580.267034][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2580.280379][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2580.290661][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2580.301998][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2580.312183][T24156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2580.323511][T24156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2580.335227][T24156] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2580.352457][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2580.366288][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2580.384029][T24156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2580.393853][T24156] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2580.403317][T24156] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2580.412383][T24156] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2580.789197][T15331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2580.836748][T23891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2580.868255][T23891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2580.931452][T15331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2580.968176][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2581.007521][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2581.038707][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2581.071525][T15331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2581.104941][T24254] chnl_net:caif_netlink_parms(): no params data found
[ 2581.117296][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2581.142121][T24251] chnl_net:caif_netlink_parms(): no params data found
[ 2581.233305][T15331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2581.559022][ T5115] Bluetooth: hci0: command 0x0409 tx timeout
[ 2581.616299][T24265] syz-executor.5 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2581.629142][T24265] CPU: 1 PID: 24265 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2581.639605][T24265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2581.649695][T24265] Call Trace:
[ 2581.653008][T24265]  <TASK>
[ 2581.655985][T24265]  dump_stack_lvl+0xd1/0x138
[ 2581.660640][T24265]  dump_header+0x10b/0x85f
[ 2581.665116][T24265]  oom_kill_process.cold+0x10/0x15
[ 2581.670290][T24265]  out_of_memory+0x35c/0x14a0
[ 2581.675025][T24265]  ? find_held_lock+0x2d/0x110
[ 2581.679838][T24265]  ? oom_killer_disable+0x280/0x280
[ 2581.685093][T24265]  ? find_held_lock+0x2d/0x110
[ 2581.689924][T24265]  mem_cgroup_out_of_memory+0x206/0x270
[ 2581.695521][T24265]  ? mem_cgroup_margin+0x130/0x130
[ 2581.700682][T24265]  ? lock_downgrade+0x6e0/0x6e0
[ 2581.705592][T24265]  try_charge_memcg+0xefb/0x12f0
[ 2581.710590][T24265]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2581.716619][T24265]  ? lock_downgrade+0x6e0/0x6e0
[ 2581.721535][T24265]  charge_memcg+0x90/0x3b0
[ 2581.726000][T24265]  __mem_cgroup_charge+0x2b/0x90
[ 2581.730980][T24265]  ? folio_flags.constprop.0+0x53/0x150
[ 2581.736686][T24265]  __filemap_add_folio+0x615/0xf80
[ 2581.741946][T24265]  ? filemap_write_and_wait_range+0x120/0x120
[ 2581.748065][T24265]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2581.753469][T24265]  ? alloc_pages+0x1b2/0x270
[ 2581.758174][T24265]  ? folio_alloc+0x43/0x70
[ 2581.762631][T24265]  filemap_add_folio+0xaf/0x1e0
[ 2581.767907][T24265]  ? __filemap_add_folio+0xf80/0xf80
[ 2581.773235][T24265]  ? xas_load+0x6a/0x140
[ 2581.777516][T24265]  __filemap_get_folio+0x389/0xd80
[ 2581.782664][T24265]  ? filemap_add_folio+0x1e0/0x1e0
[ 2581.787813][T24265]  ? asm_exc_page_fault+0x26/0x30
[ 2581.792868][T24265]  pagecache_get_page+0x2e/0x280
[ 2581.797834][T24265]  ext4_da_write_begin+0x421/0xb50
[ 2581.802982][T24265]  ? ext4_write_begin+0x1140/0x1140
[ 2581.808225][T24265]  generic_perform_write+0x256/0x570
[ 2581.813623][T24265]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2581.819012][T24265]  ? discard_new_inode+0x1a0/0x1a0
[ 2581.824150][T24265]  ? down_write_killable+0x250/0x250
[ 2581.829461][T24265]  ext4_buffered_write_iter+0x15b/0x460
[ 2581.835030][T24265]  ext4_file_write_iter+0x8bf/0x1710
[ 2581.840338][T24265]  ? lock_release+0x810/0x810
[ 2581.845029][T24265]  ? ext4_file_mmap+0x440/0x440
[ 2581.849920][T24265]  vfs_write+0x9ed/0xdd0
[ 2581.854198][T24265]  ? kernel_write+0x630/0x630
[ 2581.858908][T24265]  ? __fget_files+0x26a/0x440
[ 2581.863629][T24265]  ksys_write+0x12b/0x250
[ 2581.867976][T24265]  ? __ia32_sys_read+0xb0/0xb0
[ 2581.872792][T24265]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2581.878367][T24265]  do_syscall_64+0x39/0xb0
[ 2581.882812][T24265]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2581.888720][T24265] RIP: 0033:0x7fd85c28c0c9
[ 2581.893144][T24265] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2581.912790][T24265] RSP: 002b:00007fd85d0c8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2581.921223][T24265] RAX: ffffffffffffffda RBX: 00007fd85c3abf80 RCX: 00007fd85c28c0c9
[ 2581.929309][T24265] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2581.937285][T24265] RBP: 00007fd85c2e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2581.945267][T24265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2581.953257][T24265] R13: 00007ffc0ea4d14f R14: 00007fd85d0c8300 R15: 0000000000022000
[ 2581.961260][T24265]  </TASK>
[ 2581.969774][T24254] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2581.976916][T24254] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2581.986459][T24254] device bridge_slave_0 entered promiscuous mode
[ 2582.001945][T24265] memory: usage 10704kB, limit 16kB, failcnt 1450
[ 2582.009075][T24265] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2582.016062][T24265] Memory cgroup stats for /syz5:
[ 2582.016271][T24265] anon 126976
[ 2582.016271][T24265] file 10452992
[ 2582.016271][T24265] kernel 380928
[ 2582.016271][T24265] kernel_stack 131072
[ 2582.016271][T24265] pagetables 81920
[ 2582.016271][T24265] sec_pagetables 0
[ 2582.016271][T24265] percpu 64
[ 2582.016271][T24265] sock 0
[ 2582.016271][T24265] vmalloc 0
[ 2582.016271][T24265] shmem 10448896
[ 2582.016271][T24265] zswap 0
[ 2582.016271][T24265] zswapped 0
[ 2582.016271][T24265] file_mapped 249856
[ 2582.016271][T24265] file_dirty 0
[ 2582.016271][T24265] file_writeback 0
[ 2582.016271][T24265] swapcached 0
[ 2582.016271][T24265] anon_thp 0
[ 2582.016271][T24265] file_thp 0
[ 2582.016271][T24265] shmem_thp 0
[ 2582.016271][T24265] inactive_anon 126976
[ 2582.016271][T24265] active_anon 10448896
[ 2582.016271][T24265] inactive_file 4096
[ 2582.016271][T24265] active_file 0
[ 2582.016271][T24265] unevictable 0
[ 2582.016271][T24265] slab_reclaimable 51984
[ 2582.016271][T24265] slab_unreclaimable 91128
[ 2582.016271][T24265] slab 143112
[ 2582.147666][T24254] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2582.170425][T24254] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2582.198734][ T5115] Bluetooth: hci1: command 0x0409 tx timeout
[ 2582.207098][T24254] device bridge_slave_1 entered promiscuous mode
[ 2582.350596][T24251] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2582.357754][T24251] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2582.392238][T24251] device bridge_slave_0 entered promiscuous mode
[ 2582.411705][T24251] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2582.428620][T24251] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2582.440387][T24251] device bridge_slave_1 entered promiscuous mode
[ 2582.458086][T24265] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24264,uid=0
[ 2582.484742][T24254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2582.508638][T24265] Memory cgroup out of memory: Killed process 24265 (syz-executor.5) total-vm:56852kB, anon-rss:500kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000
19:01:34 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb20000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:01:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb20000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:01:34 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x5400, 0x12)

19:01:34 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

[ 2582.583839][T24254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2582.664576][T24156] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2582.730530][T24251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2582.751218][T24156] CPU: 1 PID: 24156 Comm: syz-executor.5 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2582.761786][T24156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2582.771939][T24156] Call Trace:
[ 2582.775225][T24156]  <TASK>
[ 2582.778163][T24156]  dump_stack_lvl+0xd1/0x138
[ 2582.782775][T24156]  dump_header+0x10b/0x85f
[ 2582.787218][T24156]  oom_kill_process.cold+0x10/0x15
[ 2582.792356][T24156]  out_of_memory+0x35c/0x14a0
[ 2582.797059][T24156]  ? find_held_lock+0x2d/0x110
[ 2582.801881][T24156]  ? oom_killer_disable+0x280/0x280
[ 2582.807106][T24156]  ? find_held_lock+0x2d/0x110
[ 2582.811901][T24156]  mem_cgroup_out_of_memory+0x206/0x270
[ 2582.817483][T24156]  ? mem_cgroup_margin+0x130/0x130
[ 2582.822700][T24156]  ? lock_downgrade+0x6e0/0x6e0
[ 2582.827579][T24156]  try_charge_memcg+0xefb/0x12f0
[ 2582.832533][T24156]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2582.838536][T24156]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2582.844277][T24156]  ? lock_downgrade+0x6e0/0x6e0
[ 2582.849156][T24156]  obj_cgroup_charge+0x2af/0x5e0
[ 2582.854110][T24156]  kmem_cache_alloc_lru+0x145/0x760
[ 2582.859403][T24156]  ? __d_alloc+0x32/0x980
[ 2582.863753][T24156]  __d_alloc+0x32/0x980
[ 2582.867939][T24156]  d_alloc+0x4e/0x240
[ 2582.872066][T24156]  __lookup_hash+0xc8/0x180
[ 2582.876581][T24156]  filename_create+0x1d6/0x4a0
[ 2582.881361][T24156]  ? filename_parentat+0x5a0/0x5a0
[ 2582.886486][T24156]  ? lock_downgrade+0x6e0/0x6e0
[ 2582.891348][T24156]  ? __virt_addr_valid+0x61/0x2e0
[ 2582.896403][T24156]  ? __phys_addr+0xc8/0x140
[ 2582.900927][T24156]  do_mkdirat+0x9d/0x2f0
[ 2582.905191][T24156]  ? __ia32_sys_mknod+0xb0/0xb0
[ 2582.910071][T24156]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2582.915466][T24156]  __x64_sys_mkdirat+0x119/0x170
[ 2582.920449][T24156]  do_syscall_64+0x39/0xb0
[ 2582.924885][T24156]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2582.930789][T24156] RIP: 0033:0x7fd85c28b0e7
[ 2582.935211][T24156] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2582.954826][T24156] RSP: 002b:00007ffc0ea4d3a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102
[ 2582.963251][T24156] RAX: ffffffffffffffda RBX: 00007ffc0ea4d430 RCX: 00007fd85c28b0e7
[ 2582.971230][T24156] RDX: 00000000000001ff RSI: 00007ffc0ea4d430 RDI: 00000000ffffff9c
[ 2582.979651][T24156] RBP: 00007ffc0ea4d40c R08: 0000000000000000 R09: 0000000000000003
[ 2582.987633][T24156] R10: 00007ffc0ea4d147 R11: 0000000000000202 R12: 0000000000000032
[ 2582.995612][T24156] R13: 000000000027679e R14: 0000000000000011 R15: 00007ffc0ea4d470
[ 2583.003703][T24156]  </TASK>
[ 2583.083324][T15331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2583.158334][T24251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2583.222879][T15331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2583.288042][T24254] team0: Port device team_slave_0 added
[ 2583.335618][T24254] team0: Port device team_slave_1 added
[ 2583.383945][T15331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2583.424056][T24251] team0: Port device team_slave_0 added
[ 2583.454502][T24251] team0: Port device team_slave_1 added
19:01:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2583.503943][T24254] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2583.534507][T24254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2583.620470][T24254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2583.639075][ T5115] Bluetooth: hci0: command 0x041b tx timeout
[ 2583.673812][T15331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2583.785280][T24254] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2583.798835][T24254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2583.851426][T24254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2583.904840][T24251] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2583.918202][T24251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2583.946146][T24156] memory: usage 10352kB, limit 16kB, failcnt 1469
[ 2583.988662][T24156] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2584.001250][T24156] Memory cgroup stats for /syz5:
[ 2584.001447][T24156] anon 45056
[ 2584.001447][T24156] file 10448896
[ 2584.001447][T24156] kernel 106496
[ 2584.001447][T24156] kernel_stack 0
[ 2584.001447][T24156] pagetables 8192
[ 2584.001447][T24156] sec_pagetables 0
[ 2584.001447][T24156] percpu 64
[ 2584.001447][T24156] sock 0
[ 2584.001447][T24156] vmalloc 0
[ 2584.001447][T24156] shmem 10448896
[ 2584.001447][T24156] zswap 0
[ 2584.001447][T24156] zswapped 0
[ 2584.001447][T24156] file_mapped 241664
[ 2584.001447][T24156] file_dirty 0
[ 2584.001447][T24156] file_writeback 0
[ 2584.001447][T24156] swapcached 0
[ 2584.001447][T24156] anon_thp 0
[ 2584.001447][T24156] file_thp 0
[ 2584.001447][T24156] shmem_thp 0
[ 2584.001447][T24156] inactive_anon 45056
[ 2584.001447][T24156] active_anon 10448896
[ 2584.001447][T24156] inactive_file 0
[ 2584.001447][T24156] active_file 0
[ 2584.001447][T24156] unevictable 0
[ 2584.001447][T24156] slab_reclaimable 36128
[ 2584.001447][T24156] slab_unreclaimable 44080
[ 2584.001447][T24156] slab 80208
[ 2584.118600][T24251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
19:01:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x0, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2584.264974][T24251] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2584.278791][ T5115] Bluetooth: hci1: command 0x041b tx timeout
[ 2584.284872][T24251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
19:01:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x0, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2584.317933][T24251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2584.345426][T24254] device hsr_slave_0 entered promiscuous mode
[ 2584.370746][T24254] device hsr_slave_1 entered promiscuous mode
[ 2584.409042][T24156] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24156,uid=0
[ 2584.539187][T24156] Memory cgroup out of memory: Killed process 24156 (syz-executor.5) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
19:01:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x0, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2584.787027][T24251] device hsr_slave_0 entered promiscuous mode
[ 2584.831577][T24251] device hsr_slave_1 entered promiscuous mode
[ 2584.869042][T24251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2584.876674][T24251] Cannot create hsr debugfs directory
[ 2585.333675][T14228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2585.343085][T14228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2585.351827][T14228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2585.361376][T14228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2585.372369][T14228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2585.379811][T14228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2585.727689][T14228] Bluetooth: hci0: command 0x040f tx timeout
[ 2586.358971][T14228] Bluetooth: hci1: command 0x040f tx timeout
[ 2586.406879][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2586.418965][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2586.427659][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2586.436727][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2586.452446][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2586.460196][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2586.461161][T24307] chnl_net:caif_netlink_parms(): no params data found
[ 2586.672884][T24254] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2586.795572][T24254] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2586.932436][T24254] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2586.997888][T24254] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2587.281394][T24307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2587.299830][T24307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2587.322622][T24307] device bridge_slave_0 entered promiscuous mode
[ 2587.381001][T24307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2587.388162][T24307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2587.400153][T24307] device bridge_slave_1 entered promiscuous mode
[ 2587.478806][T14228] Bluetooth: hci2: command 0x0409 tx timeout
[ 2587.523862][T24307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2587.575580][T24307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2587.747860][T24307] team0: Port device team_slave_0 added
[ 2587.771724][T24251] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2587.798756][T14228] Bluetooth: hci0: command 0x0419 tx timeout
[ 2587.815853][T24307] team0: Port device team_slave_1 added
[ 2587.884690][T24254] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2587.900448][T24329] chnl_net:caif_netlink_parms(): no params data found
[ 2587.922418][T24251] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2587.954831][T24307] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2587.962110][T24307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2587.988872][T24307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2588.018323][T24254] 8021q: adding VLAN 0 to HW filter on device team0
[ 2588.048189][T24251] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2588.062285][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2588.073520][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2588.089475][T24251] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2588.113474][T24307] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2588.123758][T24307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2588.160892][T24307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2588.206302][T15331] device hsr_slave_0 left promiscuous mode
[ 2588.226425][T15331] device hsr_slave_1 left promiscuous mode
[ 2588.236522][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2588.244688][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2588.255251][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2588.274691][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2588.287961][T15331] device bridge_slave_1 left promiscuous mode
[ 2588.294591][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2588.303754][T15331] device bridge_slave_0 left promiscuous mode
[ 2588.311312][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2588.325144][T15331] device hsr_slave_0 left promiscuous mode
[ 2588.333302][T15331] device hsr_slave_1 left promiscuous mode
[ 2588.341842][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2588.349724][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2588.360983][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2588.368670][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2588.378248][T15331] device bridge_slave_1 left promiscuous mode
[ 2588.385335][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2588.394894][T15331] device bridge_slave_0 left promiscuous mode
[ 2588.401600][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2588.414817][T15331] device hsr_slave_0 left promiscuous mode
[ 2588.421742][T15331] device hsr_slave_1 left promiscuous mode
[ 2588.428247][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2588.436333][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2588.443656][T14228] Bluetooth: hci1: command 0x0419 tx timeout
[ 2588.468082][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2588.476184][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2588.499406][T15331] device bridge_slave_1 left promiscuous mode
[ 2588.505684][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2588.527840][T15331] device bridge_slave_0 left promiscuous mode
[ 2588.535856][T14228] Bluetooth: hci3: command 0x0409 tx timeout
[ 2588.544936][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2588.566178][T15331] device veth1_macvtap left promiscuous mode
[ 2588.574849][T15331] device veth0_macvtap left promiscuous mode
[ 2588.581369][T15331] device veth1_vlan left promiscuous mode
[ 2588.587238][T15331] device veth0_vlan left promiscuous mode
[ 2588.595643][T15331] device veth1_macvtap left promiscuous mode
[ 2588.602030][T15331] device veth0_macvtap left promiscuous mode
[ 2588.608349][T15331] device veth1_vlan left promiscuous mode
[ 2588.614526][T15331] device veth0_vlan left promiscuous mode
[ 2588.623112][T15331] device veth1_macvtap left promiscuous mode
[ 2588.634786][T15331] device veth0_macvtap left promiscuous mode
[ 2588.642139][T15331] device veth1_vlan left promiscuous mode
[ 2588.648121][T15331] device veth0_vlan left promiscuous mode
[ 2589.194262][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2589.211841][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2589.229156][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2589.245696][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2589.326862][T15331] bond0 (unregistering): Released all slaves
[ 2589.494373][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2589.508159][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2589.525196][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2589.545410][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2589.558752][T14228] Bluetooth: hci2: command 0x041b tx timeout
[ 2589.644737][T15331] bond0 (unregistering): Released all slaves
[ 2589.776286][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2589.793510][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2589.805760][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2589.824538][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2589.902665][T15331] bond0 (unregistering): Released all slaves
[ 2589.954755][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2589.963764][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2589.973517][T26601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2589.980732][T26601] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2589.988389][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2590.007395][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2590.016221][T26601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2590.023398][T26601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2590.091398][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2590.100339][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2590.174159][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2590.243933][T24307] device hsr_slave_0 entered promiscuous mode
[ 2590.251137][T24307] device hsr_slave_1 entered promiscuous mode
[ 2590.257688][T24307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2590.268057][T24307] Cannot create hsr debugfs directory
[ 2590.282212][ T1200] ieee802154 phy0 wpan0: encryption failed: -22
[ 2590.288650][ T1200] ieee802154 phy1 wpan1: encryption failed: -22
[ 2590.303563][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2590.325104][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2590.334513][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2590.343673][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2590.364916][T24329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2590.372837][T24329] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2590.382509][T24329] device bridge_slave_0 entered promiscuous mode
[ 2590.407319][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2590.423053][T24254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2590.436067][T24254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2590.445653][T24329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2590.454273][T24329] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2590.463242][T24329] device bridge_slave_1 entered promiscuous mode
[ 2590.487476][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2590.496881][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2590.569325][T24329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2590.600215][T14228] Bluetooth: hci3: command 0x041b tx timeout
[ 2590.620738][T24329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2590.656223][T24251] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2590.767319][T24251] 8021q: adding VLAN 0 to HW filter on device team0
[ 2590.782919][T24329] team0: Port device team_slave_0 added
[ 2590.803490][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2590.819536][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2590.836673][T24329] team0: Port device team_slave_1 added
[ 2590.960770][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2590.979391][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2590.998986][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2591.006161][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2591.018985][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2591.039182][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2591.059030][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2591.066188][ T6748] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2591.080449][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2591.113199][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2591.129622][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2591.149407][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2591.170712][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2591.190992][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2591.209468][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2591.229650][T24329] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2591.236653][T24329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2591.264132][T24329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2591.277840][T24329] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2591.296663][T24329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2591.324237][T24329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2591.379298][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2591.470039][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2591.479378][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2591.487821][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2591.526001][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2591.590239][T24251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2591.602399][T24254] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2591.638604][T14228] Bluetooth: hci2: command 0x040f tx timeout
[ 2591.874480][T24329] device hsr_slave_0 entered promiscuous mode
[ 2591.928970][T24329] device hsr_slave_1 entered promiscuous mode
[ 2591.960228][T24329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2591.967856][T24329] Cannot create hsr debugfs directory
[ 2592.255717][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2592.269369][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2592.407123][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2592.427081][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2592.461567][T24254] device veth0_vlan entered promiscuous mode
[ 2592.474056][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2592.482559][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2592.565544][T24254] device veth1_vlan entered promiscuous mode
[ 2592.625066][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2592.636619][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2592.655269][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2592.667640][T26499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2592.678709][T14228] Bluetooth: hci3: command 0x040f tx timeout
[ 2592.687786][T24251] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2592.779102][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2592.787959][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2592.797627][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2592.821679][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2592.861148][T24254] device veth0_macvtap entered promiscuous mode
[ 2592.889420][T24251] device veth0_vlan entered promiscuous mode
[ 2592.909533][T24307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2592.923770][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2592.932793][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2592.949761][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2592.961858][T24254] device veth1_macvtap entered promiscuous mode
[ 2593.069726][T24329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2593.106687][T24251] device veth1_vlan entered promiscuous mode
[ 2593.129490][T24307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2593.178996][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2593.187233][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2593.210017][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2593.218242][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2593.329764][T24329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2593.398360][T24307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2593.454176][T24329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2593.514275][T24254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2593.552934][T24254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2593.575369][T24254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2593.587987][T24254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2593.606634][T24254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2593.619438][T24254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2593.639759][T24254] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2593.662111][T24307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2593.703499][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2593.718787][T14228] Bluetooth: hci2: command 0x0419 tx timeout
[ 2593.726688][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2593.759549][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2593.768403][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2593.861738][T24329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2593.914797][T24251] device veth0_macvtap entered promiscuous mode
[ 2593.952314][T24254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2594.008488][T24254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.048537][T24254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2594.068618][T24254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.088574][T24254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2594.108493][T24254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.140978][T24254] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2594.188647][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2594.197306][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2594.226477][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2594.237696][T24251] device veth1_macvtap entered promiscuous mode
[ 2594.255595][T24254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2594.273838][T24254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2594.292520][T24254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2594.308660][T24254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2594.398418][T24251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2594.428611][T24251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.448897][T24251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2594.468528][T24251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.483629][T24251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2594.504766][T24251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.523140][T24251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2594.533773][T24251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.545743][T24251] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2594.586786][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2594.610549][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2594.639885][T24251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2594.662725][T24251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.677316][T24251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2594.728608][T24251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.759213][T14228] Bluetooth: hci3: command 0x0419 tx timeout
[ 2594.765693][T24251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2594.801688][T24251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.838680][T24251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2594.888581][T24251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2594.919243][T24251] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2594.987937][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2595.003340][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2595.081749][T24307] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2595.119746][T24251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2595.148516][T24251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2595.157641][T24251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2595.188516][T24251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2595.238393][T24307] 8021q: adding VLAN 0 to HW filter on device team0
[ 2595.270209][T18399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2595.278329][T18399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2595.295336][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2595.309361][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2595.402021][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2595.412879][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2595.429004][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2595.436138][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2595.453361][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2595.466312][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2595.480947][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2595.488089][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2595.499729][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2595.507787][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2595.554562][T24329] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2595.579213][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2595.630216][T24329] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2595.631094][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2595.650143][T24329] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2595.668607][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2595.709052][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2595.718043][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2595.748828][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2595.763953][T24329] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2595.801478][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2595.822492][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2595.849638][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2595.858184][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2595.884889][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2595.894647][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2595.936471][T24307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2595.967319][T15447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2596.078717][T15447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2596.101259][T15968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2596.101533][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2596.149340][T15968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2596.229688][T26501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2596.391364][T24438] syz-executor.1 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2596.438825][T24438] CPU: 0 PID: 24438 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2596.449411][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2596.459585][T24438] Call Trace:
[ 2596.462887][T24438]  <TASK>
[ 2596.465844][T24438]  dump_stack_lvl+0xd1/0x138
[ 2596.470488][T24438]  dump_header+0x10b/0x85f
[ 2596.474959][T24438]  oom_kill_process.cold+0x10/0x15
[ 2596.480127][T24438]  out_of_memory+0x35c/0x14a0
[ 2596.484863][T24438]  ? find_held_lock+0x2d/0x110
[ 2596.489727][T24438]  ? oom_killer_disable+0x280/0x280
[ 2596.494990][T24438]  ? find_held_lock+0x2d/0x110
[ 2596.499813][T24438]  mem_cgroup_out_of_memory+0x206/0x270
[ 2596.505437][T24438]  ? mem_cgroup_margin+0x130/0x130
[ 2596.510649][T24438]  ? lock_downgrade+0x6e0/0x6e0
[ 2596.515573][T24438]  try_charge_memcg+0xefb/0x12f0
[ 2596.520578][T24438]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2596.526615][T24438]  ? lock_downgrade+0x6e0/0x6e0
[ 2596.531505][T24438]  charge_memcg+0x90/0x3b0
[ 2596.535950][T24438]  __mem_cgroup_charge+0x2b/0x90
[ 2596.540927][T24438]  ? folio_flags.constprop.0+0x53/0x150
[ 2596.546684][T24438]  __filemap_add_folio+0x615/0xf80
[ 2596.551860][T24438]  ? filemap_write_and_wait_range+0x120/0x120
[ 2596.557967][T24438]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2596.563364][T24438]  ? alloc_pages+0x1b2/0x270
[ 2596.568061][T24438]  ? folio_alloc+0x43/0x70
[ 2596.572672][T24438]  filemap_add_folio+0xaf/0x1e0
[ 2596.577583][T24438]  ? __filemap_add_folio+0xf80/0xf80
[ 2596.582906][T24438]  ? xas_load+0x6a/0x140
[ 2596.587185][T24438]  __filemap_get_folio+0x389/0xd80
[ 2596.592340][T24438]  ? filemap_add_folio+0x1e0/0x1e0
[ 2596.597483][T24438]  ? asm_exc_page_fault+0x26/0x30
[ 2596.602541][T24438]  pagecache_get_page+0x2e/0x280
[ 2596.607523][T24438]  ext4_da_write_begin+0x421/0xb50
[ 2596.612775][T24438]  ? ext4_write_begin+0x1140/0x1140
[ 2596.618019][T24438]  generic_perform_write+0x256/0x570
[ 2596.623348][T24438]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2596.628754][T24438]  ? discard_new_inode+0x1a0/0x1a0
[ 2596.634350][T24438]  ? down_write_killable+0x250/0x250
[ 2596.639687][T24438]  ext4_buffered_write_iter+0x15b/0x460
[ 2596.645272][T24438]  ext4_file_write_iter+0x8bf/0x1710
[ 2596.650616][T24438]  ? lock_release+0x810/0x810
[ 2596.655316][T24438]  ? ext4_file_mmap+0x440/0x440
[ 2596.660203][T24438]  vfs_write+0x9ed/0xdd0
[ 2596.664478][T24438]  ? kernel_write+0x630/0x630
[ 2596.669199][T24438]  ? __fget_files+0x26a/0x440
[ 2596.673908][T24438]  ksys_write+0x12b/0x250
[ 2596.678255][T24438]  ? __ia32_sys_read+0xb0/0xb0
[ 2596.683039][T24438]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2596.688617][T24438]  do_syscall_64+0x39/0xb0
[ 2596.693074][T24438]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2596.698996][T24438] RIP: 0033:0x7fe0b608c0c9
[ 2596.703434][T24438] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2596.723066][T24438] RSP: 002b:00007fe0b6d64168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2596.731498][T24438] RAX: ffffffffffffffda RBX: 00007fe0b61abf80 RCX: 00007fe0b608c0c9
[ 2596.739481][T24438] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2596.747478][T24438] RBP: 00007fe0b60e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2596.755498][T24438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2596.763497][T24438] R13: 00007ffc968cdadf R14: 00007fe0b6d64300 R15: 0000000000022000
[ 2596.771502][T24438]  </TASK>
[ 2596.808747][T24438] memory: usage 8636kB, limit 0kB, failcnt 985
[ 2596.837123][T24438] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2596.972613][T24438] Memory cgroup stats for /syz1:
[ 2596.972854][T24438] anon 122880
[ 2596.972854][T24438] file 8355840
[ 2596.972854][T24438] kernel 364544
[ 2596.972854][T24438] kernel_stack 131072
[ 2596.972854][T24438] pagetables 77824
[ 2596.972854][T24438] sec_pagetables 0
[ 2596.972854][T24438] percpu 64
[ 2596.972854][T24438] sock 0
[ 2596.972854][T24438] vmalloc 0
[ 2596.972854][T24438] shmem 8351744
[ 2596.972854][T24438] zswap 0
[ 2596.972854][T24438] zswapped 0
[ 2596.972854][T24438] file_mapped 188416
[ 2596.972854][T24438] file_dirty 0
[ 2596.972854][T24438] file_writeback 0
[ 2596.972854][T24438] swapcached 0
[ 2596.972854][T24438] anon_thp 0
[ 2596.972854][T24438] file_thp 0
[ 2596.972854][T24438] shmem_thp 0
[ 2596.972854][T24438] inactive_anon 122880
[ 2596.972854][T24438] active_anon 8351744
[ 2596.972854][T24438] inactive_file 4096
[ 2596.972854][T24438] active_file 0
[ 2596.972854][T24438] unevictable 0
[ 2596.972854][T24438] slab_reclaimable 36712
[ 2596.972854][T24438] slab_unreclaimable 90480
[ 2596.972854][T24438] slab 127192
[ 2597.164188][T15331] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2597.286420][T24329] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2597.339718][T15331] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2597.358549][T24438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=24254,uid=0
[ 2597.508849][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2597.516426][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2597.524858][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2597.533761][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2597.547423][T24307] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2597.579236][T15331] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2597.641178][T24329] 8021q: adding VLAN 0 to HW filter on device team0
[ 2597.686970][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2597.699083][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2597.707721][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2597.714931][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2597.723879][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2597.732751][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2597.741970][T24438] Memory cgroup out of memory: Killed process 24254 (syz-executor.1) total-vm:50568kB, anon-rss:364kB, file-rss:9088kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0
[ 2597.760875][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2597.767989][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2597.776704][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2597.876697][T15331] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2597.914342][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2597.939501][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2597.959636][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2598.133593][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2598.150241][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2598.170282][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
19:01:49 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4d00, 0x12)

19:01:49 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x4, 0x0, 0x0, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2598.208000][T24307] device veth0_vlan entered promiscuous mode
19:01:49 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb20000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:01:49 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2598.272135][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2598.301847][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
19:01:50 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x4, 0x0, 0x0, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2598.349551][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2598.419220][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2598.448413][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2598.458316][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2598.489557][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2598.514058][T24329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2598.536224][T24307] device veth1_vlan entered promiscuous mode
19:01:50 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4d00, 0x12)

[ 2598.575577][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2598.611174][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2598.645719][T23854] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2598.822838][T24307] device veth0_macvtap entered promiscuous mode
[ 2598.871162][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2598.891003][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2598.910146][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2598.932448][T24307] device veth1_macvtap entered promiscuous mode
[ 2598.972148][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2598.982071][T18323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2599.037922][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2599.068511][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.078388][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2599.108630][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.128544][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2599.148620][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.175695][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2599.192094][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.218617][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2599.247742][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.270210][T24307] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2599.289038][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2599.297790][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2599.331388][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2599.358563][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.388514][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2599.428495][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.438381][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2599.488508][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.523436][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2599.542037][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.568880][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2599.608837][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2599.620537][T24307] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2599.682469][T24329] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2599.712655][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2599.739573][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2599.778679][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2599.786274][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2599.822251][T24307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2599.843133][T24307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2599.878941][T24307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2599.887819][T24307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2600.248171][T15447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2600.269225][T15447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2600.360573][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2600.461619][T18399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2600.488736][T18399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2600.499335][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2600.793672][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2600.840531][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2600.948920][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2600.959723][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2600.960154][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2600.979165][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2600.988270][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2600.997049][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2601.007416][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2601.049603][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2601.097387][T24508] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2601.111547][T24508] CPU: 1 PID: 24508 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2601.122019][T24508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2601.127929][T24329] device veth0_vlan entered promiscuous mode
[ 2601.132081][T24508] Call Trace:
[ 2601.132093][T24508]  <TASK>
[ 2601.132102][T24508]  dump_stack_lvl+0xd1/0x138
[ 2601.132141][T24508]  dump_header+0x10b/0x85f
[ 2601.153331][T24508]  oom_kill_process.cold+0x10/0x15
[ 2601.158496][T24508]  out_of_memory+0x35c/0x14a0
[ 2601.163202][T24508]  ? find_held_lock+0x2d/0x110
[ 2601.167992][T24508]  ? oom_killer_disable+0x280/0x280
[ 2601.173229][T24508]  ? find_held_lock+0x2d/0x110
[ 2601.178040][T24508]  mem_cgroup_out_of_memory+0x206/0x270
[ 2601.183611][T24508]  ? mem_cgroup_margin+0x130/0x130
[ 2601.188754][T24508]  ? lock_downgrade+0x6e0/0x6e0
[ 2601.193647][T24508]  try_charge_memcg+0xefb/0x12f0
[ 2601.198610][T24508]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2601.204614][T24508]  ? lock_downgrade+0x6e0/0x6e0
[ 2601.209515][T24508]  charge_memcg+0x90/0x3b0
[ 2601.214039][T24508]  __mem_cgroup_charge+0x2b/0x90
[ 2601.219027][T24508]  ? folio_flags.constprop.0+0x53/0x150
[ 2601.224591][T24508]  __filemap_add_folio+0x615/0xf80
[ 2601.229734][T24508]  ? filemap_write_and_wait_range+0x120/0x120
[ 2601.235836][T24508]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2601.241226][T24508]  ? alloc_pages+0x1b2/0x270
[ 2601.245837][T24508]  ? folio_alloc+0x43/0x70
[ 2601.250358][T24508]  filemap_add_folio+0xaf/0x1e0
[ 2601.255249][T24508]  ? __filemap_add_folio+0xf80/0xf80
[ 2601.260607][T24508]  ? xas_load+0x6a/0x140
[ 2601.264896][T24508]  __filemap_get_folio+0x389/0xd80
[ 2601.270039][T24508]  ? filemap_add_folio+0x1e0/0x1e0
[ 2601.275201][T24508]  ? asm_exc_page_fault+0x26/0x30
[ 2601.280261][T24508]  pagecache_get_page+0x2e/0x280
[ 2601.285221][T24508]  ext4_da_write_begin+0x421/0xb50
[ 2601.290387][T24508]  ? ext4_write_begin+0x1140/0x1140
[ 2601.295629][T24508]  generic_perform_write+0x256/0x570
[ 2601.300960][T24508]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2601.306364][T24508]  ? discard_new_inode+0x1a0/0x1a0
[ 2601.311493][T24508]  ? down_write_killable+0x250/0x250
[ 2601.316802][T24508]  ext4_buffered_write_iter+0x15b/0x460
[ 2601.322367][T24508]  ext4_file_write_iter+0x8bf/0x1710
[ 2601.327685][T24508]  ? lock_release+0x810/0x810
[ 2601.332380][T24508]  ? ext4_file_mmap+0x440/0x440
[ 2601.337263][T24508]  vfs_write+0x9ed/0xdd0
[ 2601.341785][T24508]  ? kernel_write+0x630/0x630
[ 2601.346481][T24508]  ? __fget_files+0x26a/0x440
[ 2601.351186][T24508]  ksys_write+0x12b/0x250
[ 2601.355535][T24508]  ? __ia32_sys_read+0xb0/0xb0
[ 2601.360320][T24508]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2601.365904][T24508]  do_syscall_64+0x39/0xb0
[ 2601.370346][T24508]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2601.376279][T24508] RIP: 0033:0x7f425fc8c0c9
[ 2601.380724][T24508] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2601.400372][T24508] RSP: 002b:00007f4260a3e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2601.408820][T24508] RAX: ffffffffffffffda RBX: 00007f425fdabf80 RCX: 00007f425fc8c0c9
[ 2601.416807][T24508] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2601.424789][T24508] RBP: 00007f425fce7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2601.432766][T24508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2601.440761][T24508] R13: 00007ffe4558384f R14: 00007f4260a3e300 R15: 0000000000022000
[ 2601.448779][T24508]  </TASK>
[ 2601.469016][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2601.476970][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2601.489857][T24508] memory: usage 10772kB, limit 20kB, failcnt 2112
[ 2601.516204][T24329] device veth1_vlan entered promiscuous mode
[ 2601.540931][T24508] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2601.560509][T24508] Memory cgroup stats for /syz3:
[ 2601.560735][T24508] anon 131072
[ 2601.560735][T24508] file 10457088
[ 2601.560735][T24508] kernel 274432
[ 2601.560735][T24508] kernel_stack 32768
[ 2601.560735][T24508] pagetables 90112
[ 2601.560735][T24508] sec_pagetables 0
[ 2601.560735][T24508] percpu 64
[ 2601.560735][T24508] sock 0
[ 2601.560735][T24508] vmalloc 0
[ 2601.560735][T24508] shmem 10452992
[ 2601.560735][T24508] zswap 0
[ 2601.560735][T24508] zswapped 0
[ 2601.560735][T24508] file_mapped 319488
[ 2601.560735][T24508] file_dirty 0
[ 2601.560735][T24508] file_writeback 0
[ 2601.560735][T24508] swapcached 0
[ 2601.560735][T24508] anon_thp 0
[ 2601.560735][T24508] file_thp 0
[ 2601.560735][T24508] shmem_thp 0
[ 2601.560735][T24508] inactive_anon 131072
[ 2601.560735][T24508] active_anon 10452992
[ 2601.560735][T24508] inactive_file 4096
[ 2601.560735][T24508] active_file 0
[ 2601.560735][T24508] unevictable 0
[ 2601.560735][T24508] slab_reclaimable 46944
[ 2601.560735][T24508] slab_unreclaimable 73680
[ 2601.560735][T24508] slab 120624
[ 2601.679916][T24508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24507,uid=0
[ 2601.697384][T24508] Memory cgroup out of memory: Killed process 24508 (syz-executor.3) total-vm:56984kB, anon-rss:372kB, file-rss:11008kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000
19:01:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x6500, 0x12)

[ 2601.722718][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2601.746706][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2601.763710][T24307] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2601.773857][T24307] CPU: 0 PID: 24307 Comm: syz-executor.3 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2601.784315][T24307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2601.794406][T24307] Call Trace:
[ 2601.797706][T24307]  <TASK>
[ 2601.800676][T24307]  dump_stack_lvl+0xd1/0x138
[ 2601.805321][T24307]  dump_header+0x10b/0x85f
[ 2601.809794][T24307]  oom_kill_process.cold+0x10/0x15
[ 2601.814982][T24307]  out_of_memory+0x35c/0x14a0
[ 2601.819724][T24307]  ? find_held_lock+0x2d/0x110
[ 2601.824542][T24307]  ? oom_killer_disable+0x280/0x280
[ 2601.829811][T24307]  ? find_held_lock+0x2d/0x110
[ 2601.834665][T24307]  mem_cgroup_out_of_memory+0x206/0x270
[ 2601.840266][T24307]  ? mem_cgroup_margin+0x130/0x130
[ 2601.845515][T24307]  ? lock_downgrade+0x6e0/0x6e0
[ 2601.850513][T24307]  try_charge_memcg+0xefb/0x12f0
[ 2601.855514][T24307]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2601.861797][T24307]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2601.867590][T24307]  ? lock_downgrade+0x6e0/0x6e0
[ 2601.872471][T24307]  ? lock_downgrade+0x6e0/0x6e0
[ 2601.877362][T24307]  __memcg_kmem_charge_page+0x16e/0x3b0
[ 2601.882929][T24307]  memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2601.889104][T24307]  copy_process+0x4e3/0x7520
[ 2601.893715][T24307]  ? _raw_spin_unlock+0x28/0x40
[ 2601.898581][T24307]  ? wp_page_reuse+0x197/0x570
[ 2601.903367][T24307]  ? do_wp_page+0x844/0x3370
[ 2601.907988][T24307]  ? __cleanup_sighand+0xb0/0xb0
[ 2601.912941][T24307]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2601.918340][T24307]  ? rwlock_bug.part.0+0x90/0x90
[ 2601.923295][T24307]  ? lock_chain_count+0x20/0x20
[ 2601.928169][T24307]  kernel_clone+0xeb/0x990
[ 2601.932603][T24307]  ? create_io_thread+0xf0/0xf0
[ 2601.937478][T24307]  ? find_held_lock+0x2d/0x110
[ 2601.942295][T24307]  __do_sys_clone+0xba/0x100
[ 2601.946913][T24307]  ? kernel_clone+0x990/0x990
[ 2601.951623][T24307]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2601.957466][T24307]  do_syscall_64+0x39/0xb0
[ 2601.961919][T24307]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2601.967830][T24307] RIP: 0033:0x7f425fc89dfb
[ 2601.972261][T24307] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2601.991987][T24307] RSP: 002b:00007ffe45583a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2602.000418][T24307] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f425fc89dfb
[ 2602.008402][T24307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2602.016383][T24307] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555563b9400
[ 2602.024361][T24307] R10: 00005555563b96d0 R11: 0000000000000246 R12: 0000000000000001
[ 2602.032341][T24307] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe45583b70
[ 2602.040338][T24307]  </TASK>
[ 2602.050474][T24329] device veth0_macvtap entered promiscuous mode
[ 2602.126264][T24329] device veth1_macvtap entered promiscuous mode
[ 2602.197578][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2602.197832][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.216062][T24307] memory: usage 10400kB, limit 20kB, failcnt 2149
[ 2602.223247][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2602.227184][T24307] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2602.241295][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2602.246421][T24307] Memory cgroup stats for /syz3:
[ 2602.248653][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.265935][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.266439][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2602.286759][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.287794][T24307] anon 24576
[ 2602.287794][T24307] file 10452992
[ 2602.287794][T24307] kernel 126976
[ 2602.287794][T24307] kernel_stack 0
[ 2602.287794][T24307] pagetables 8192
[ 2602.287794][T24307] sec_pagetables 0
[ 2602.287794][T24307] percpu 64
[ 2602.287794][T24307] sock 0
[ 2602.287794][T24307] vmalloc 0
[ 2602.287794][T24307] shmem 10452992
[ 2602.287794][T24307] zswap 0
[ 2602.287794][T24307] zswapped 0
[ 2602.287794][T24307] file_mapped 311296
[ 2602.287794][T24307] file_dirty 0
[ 2602.287794][T24307] file_writeback 0
[ 2602.287794][T24307] swapcached 0
[ 2602.287794][T24307] anon_thp 0
[ 2602.287794][T24307] file_thp 0
[ 2602.287794][T24307] shmem_thp 0
[ 2602.287794][T24307] inactive_anon 24576
[ 2602.287794][T24307] active_anon 10452992
[ 2602.287794][T24307] inactive_file 0
[ 2602.287794][T24307] active_file 0
[ 2602.287794][T24307] unevictable 0
[ 2602.287794][T24307] slab_reclaimable 38048
[ 2602.287794][T24307] slab_unreclaimable 55464
[ 2602.287794][T24307] slab 93512
[ 2602.326758][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.388992][T24307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24307,uid=0
[ 2602.402670][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2602.417024][T24307] Memory cgroup out of memory: Killed process 24307 (syz-executor.3) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2602.424548][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2602.494361][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.515066][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.538534][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.558564][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.578973][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.597480][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2602.619906][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.660089][T24329] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2602.687934][T24513] chnl_net:caif_netlink_parms(): no params data found
[ 2602.711842][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2602.720326][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2602.728758][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2602.737814][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2602.835358][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2602.846794][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.859452][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2602.870037][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.881016][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2602.900785][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.917794][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2602.930571][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.940980][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2602.952722][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.963163][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2602.976535][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2602.988332][T24329] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2603.002309][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2603.019624][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2603.079589][ T5115] Bluetooth: hci1: command 0x0409 tx timeout
[ 2603.105504][T24329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2603.126255][T24329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2603.137739][T24329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2603.149158][T24329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2603.579077][T18399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2603.587930][T18399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2603.637069][T15331] device hsr_slave_0 left promiscuous mode
[ 2603.657475][T15331] device hsr_slave_1 left promiscuous mode
[ 2603.668892][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2603.676385][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2603.686613][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2603.695475][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2603.706041][T15331] device bridge_slave_1 left promiscuous mode
[ 2603.712512][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2603.723303][T15331] device bridge_slave_0 left promiscuous mode
[ 2603.731444][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2603.746621][T15331] device hsr_slave_0 left promiscuous mode
[ 2603.762615][T15331] device hsr_slave_1 left promiscuous mode
[ 2603.779906][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2603.787391][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2603.811603][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2603.828606][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2603.848978][T15331] device bridge_slave_1 left promiscuous mode
[ 2603.855323][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2603.875279][T15331] device bridge_slave_0 left promiscuous mode
[ 2603.890250][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2603.917469][T15331] device veth1_macvtap left promiscuous mode
[ 2603.934305][T15331] device veth0_macvtap left promiscuous mode
[ 2603.944702][T15331] device veth1_vlan left promiscuous mode
[ 2603.957814][T15331] device veth0_vlan left promiscuous mode
[ 2603.968107][T15331] device veth1_macvtap left promiscuous mode
[ 2603.974836][T15331] device veth0_macvtap left promiscuous mode
[ 2603.981130][T15331] device veth1_vlan left promiscuous mode
[ 2603.986989][T15331] device veth0_vlan left promiscuous mode
[ 2604.378774][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2604.396632][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2604.410520][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2604.424342][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2604.502570][T15331] bond0 (unregistering): Released all slaves
[ 2604.518948][ T5115] Bluetooth: hci4: command 0x0409 tx timeout
[ 2604.633677][T15331] team0 (unregistering): Port device team_slave_1 removed
[ 2604.647578][T15331] team0 (unregistering): Port device team_slave_0 removed
[ 2604.668360][T15331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2604.693564][T15331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2604.775174][T15331] bond0 (unregistering): Released all slaves
[ 2604.825356][T24513] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2604.832630][T24513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2604.842020][T24513] device bridge_slave_0 entered promiscuous mode
[ 2604.856292][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2604.914208][T24513] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2604.924622][T24513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2604.932999][T24513] device bridge_slave_1 entered promiscuous mode
[ 2604.952076][T23891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2604.968105][T23891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2604.982042][T24524] chnl_net:caif_netlink_parms(): no params data found
[ 2605.014107][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2605.039078][T24513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2605.056835][T24513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2605.159581][ T5115] Bluetooth: hci1: command 0x041b tx timeout
[ 2605.189882][T24513] team0: Port device team_slave_0 added
[ 2605.234154][T24570] syz-executor.4 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2605.248575][T24570] CPU: 0 PID: 24570 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2605.259059][T24570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2605.269259][T24570] Call Trace:
[ 2605.272577][T24570]  <TASK>
[ 2605.275581][T24570]  dump_stack_lvl+0xd1/0x138
[ 2605.280225][T24570]  dump_header+0x10b/0x85f
[ 2605.284741][T24570]  oom_kill_process.cold+0x10/0x15
[ 2605.289919][T24570]  out_of_memory+0x35c/0x14a0
[ 2605.294657][T24570]  ? find_held_lock+0x2d/0x110
[ 2605.299472][T24570]  ? oom_killer_disable+0x280/0x280
[ 2605.304762][T24570]  ? find_held_lock+0x2d/0x110
[ 2605.309589][T24570]  mem_cgroup_out_of_memory+0x206/0x270
[ 2605.315188][T24570]  ? mem_cgroup_margin+0x130/0x130
[ 2605.320344][T24570]  ? lock_downgrade+0x6e0/0x6e0
[ 2605.325241][T24570]  try_charge_memcg+0xefb/0x12f0
[ 2605.330223][T24570]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2605.336238][T24570]  ? lock_downgrade+0x6e0/0x6e0
[ 2605.341141][T24570]  charge_memcg+0x90/0x3b0
[ 2605.345584][T24570]  __mem_cgroup_charge+0x2b/0x90
[ 2605.350538][T24570]  ? folio_flags.constprop.0+0x53/0x150
[ 2605.356118][T24570]  __filemap_add_folio+0x615/0xf80
[ 2605.361282][T24570]  ? filemap_write_and_wait_range+0x120/0x120
[ 2605.367389][T24570]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2605.372811][T24570]  ? alloc_pages+0x1b2/0x270
[ 2605.377461][T24570]  ? folio_alloc+0x43/0x70
[ 2605.381914][T24570]  filemap_add_folio+0xaf/0x1e0
[ 2605.386910][T24570]  ? __filemap_add_folio+0xf80/0xf80
[ 2605.392269][T24570]  ? xas_load+0x6a/0x140
[ 2605.396557][T24570]  __filemap_get_folio+0x389/0xd80
[ 2605.401702][T24570]  ? filemap_add_folio+0x1e0/0x1e0
[ 2605.406858][T24570]  ? asm_exc_page_fault+0x26/0x30
[ 2605.411959][T24570]  pagecache_get_page+0x2e/0x280
[ 2605.419506][T24570]  ext4_da_write_begin+0x421/0xb50
[ 2605.424664][T24570]  ? ext4_write_begin+0x1140/0x1140
[ 2605.429921][T24570]  generic_perform_write+0x256/0x570
[ 2605.435283][T24570]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2605.440710][T24570]  ? discard_new_inode+0x1a0/0x1a0
[ 2605.445975][T24570]  ? down_write_killable+0x250/0x250
[ 2605.451437][T24570]  ext4_buffered_write_iter+0x15b/0x460
[ 2605.457068][T24570]  ext4_file_write_iter+0x8bf/0x1710
[ 2605.462391][T24570]  ? lock_release+0x810/0x810
[ 2605.467226][T24570]  ? ext4_file_mmap+0x440/0x440
[ 2605.472152][T24570]  vfs_write+0x9ed/0xdd0
[ 2605.476418][T24570]  ? kernel_write+0x630/0x630
[ 2605.481137][T24570]  ? __fget_files+0x26a/0x440
[ 2605.485989][T24570]  ksys_write+0x12b/0x250
[ 2605.490373][T24570]  ? __ia32_sys_read+0xb0/0xb0
[ 2605.495189][T24570]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2605.500894][T24570]  do_syscall_64+0x39/0xb0
[ 2605.505353][T24570]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2605.511293][T24570] RIP: 0033:0x7f490548c0c9
[ 2605.515742][T24570] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2605.535404][T24570] RSP: 002b:00007f4906157168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2605.543892][T24570] RAX: ffffffffffffffda RBX: 00007f49055abf80 RCX: 00007f490548c0c9
[ 2605.551917][T24570] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
[ 2605.560015][T24570] RBP: 00007f49054e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2605.568268][T24570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2605.576275][T24570] R13: 00007ffcf68edabf R14: 00007f4906157300 R15: 0000000000022000
[ 2605.584341][T24570]  </TASK>
[ 2605.591353][T24570] memory: usage 10700kB, limit 0kB, failcnt 3751
[ 2605.600552][T24513] team0: Port device team_slave_1 added
[ 2605.608906][T24570] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2605.621079][T24570] Memory cgroup stats for /syz4:
[ 2605.621268][T24570] anon 118784
[ 2605.621268][T24570] file 10444800
[ 2605.621268][T24570] kernel 360448
[ 2605.621268][T24570] kernel_stack 98304
[ 2605.621268][T24570] pagetables 77824
[ 2605.621268][T24570] sec_pagetables 0
[ 2605.621268][T24570] percpu 64
[ 2605.621268][T24570] sock 0
[ 2605.621268][T24570] vmalloc 0
[ 2605.621268][T24570] shmem 10444800
[ 2605.621268][T24570] zswap 0
[ 2605.621268][T24570] zswapped 0
[ 2605.621268][T24570] file_mapped 245760
[ 2605.621268][T24570] file_dirty 0
[ 2605.621268][T24570] file_writeback 0
[ 2605.621268][T24570] swapcached 0
[ 2605.621268][T24570] anon_thp 0
[ 2605.621268][T24570] file_thp 0
[ 2605.621268][T24570] shmem_thp 0
[ 2605.621268][T24570] inactive_anon 118784
[ 2605.621268][T24570] active_anon 10444800
[ 2605.621268][T24570] inactive_file 0
[ 2605.621268][T24570] active_file 0
[ 2605.621268][T24570] unevictable 0
[ 2605.621268][T24570] slab_reclaimable 46264
[ 2605.621268][T24570] slab_unreclaimable 111096
[ 2605.621268][T24570] slab 157360
[ 2605.739159][T24524] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2605.746348][T24524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2605.757124][T24524] device bridge_slave_0 entered promiscuous mode
[ 2605.773738][T24570] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24569,uid=0
[ 2605.790924][T24570] Memory cgroup out of memory: Killed process 24569 (syz-executor.4) total-vm:54672kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2605.810504][T24513] batman_adv: batadv0: Adding interface: batadv_slave_0
19:01:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

19:01:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x4d00, 0x12)

19:01:57 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x4, 0x0, 0x0, 0x5000000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

19:01:57 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/user\x00')
close(0xffffffffffffffff)
openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
write$cgroup_int(r2, &(0x7f0000000040)=0x6700, 0x12)

[ 2605.817500][T24513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2605.855453][T24513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2605.867732][T24524] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2605.875976][T24524] bridge0: port 2(bridge_slave_1) entered disabled state
19:01:57 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2605.945591][T24524] device bridge_slave_1 entered promiscuous mode
[ 2605.982876][T24329] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2606.019880][T24329] CPU: 1 PID: 24329 Comm: syz-executor.4 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2606.030366][T24329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2606.040468][T24329] Call Trace:
[ 2606.043790][T24329]  <TASK>
[ 2606.046757][T24329]  dump_stack_lvl+0xd1/0x138
[ 2606.051419][T24329]  dump_header+0x10b/0x85f
[ 2606.055888][T24329]  oom_kill_process.cold+0x10/0x15
[ 2606.061061][T24329]  out_of_memory+0x35c/0x14a0
[ 2606.065800][T24329]  ? find_held_lock+0x2d/0x110
[ 2606.070613][T24329]  ? oom_killer_disable+0x280/0x280
[ 2606.075907][T24329]  ? find_held_lock+0x2d/0x110
[ 2606.080751][T24329]  mem_cgroup_out_of_memory+0x206/0x270
[ 2606.086435][T24329]  ? mem_cgroup_margin+0x130/0x130
[ 2606.091683][T24329]  ? lock_downgrade+0x6e0/0x6e0
[ 2606.096609][T24329]  try_charge_memcg+0xefb/0x12f0
[ 2606.101616][T24329]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2606.107753][T24329]  ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2606.113529][T24329]  ? lock_downgrade+0x6e0/0x6e0
[ 2606.118434][T24329]  ? lock_downgrade+0x6e0/0x6e0
[ 2606.123379][T24329]  __memcg_kmem_charge_page+0x16e/0x3b0
[ 2606.128989][T24329]  memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2606.135213][T24329]  copy_process+0x4e3/0x7520
[ 2606.139846][T24329]  ? _raw_spin_unlock+0x28/0x40
[ 2606.144746][T24329]  ? wp_page_reuse+0x197/0x570
[ 2606.149569][T24329]  ? do_wp_page+0x844/0x3370
[ 2606.154389][T24329]  ? __cleanup_sighand+0xb0/0xb0
[ 2606.159449][T24329]  ? finish_mkwrite_fault+0x3d0/0x3d0
[ 2606.164885][T24329]  ? rwlock_bug.part.0+0x90/0x90
[ 2606.169884][T24329]  ? lock_chain_count+0x20/0x20
[ 2606.175008][T24329]  kernel_clone+0xeb/0x990
[ 2606.179481][T24329]  ? create_io_thread+0xf0/0xf0
[ 2606.184428][T24329]  ? find_held_lock+0x2d/0x110
[ 2606.189260][T24329]  __do_sys_clone+0xba/0x100
[ 2606.193904][T24329]  ? kernel_clone+0x990/0x990
[ 2606.198684][T24329]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2606.204306][T24329]  do_syscall_64+0x39/0xb0
[ 2606.208785][T24329]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2606.214734][T24329] RIP: 0033:0x7f4905489dfb
[ 2606.219189][T24329] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00
[ 2606.238955][T24329] RSP: 002b:00007ffcf68edd00 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2606.247413][T24329] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4905489dfb
[ 2606.255424][T24329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2606.263441][T24329] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556324400
[ 2606.271445][T24329] R10: 00005555563246d0 R11: 0000000000000246 R12: 0000000000000001
[ 2606.279449][T24329] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcf68edde0
[ 2606.287478][T24329]  </TASK>
[ 2606.318822][T24329] memory: usage 10392kB, limit 0kB, failcnt 3787
[ 2606.335273][T24329] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2606.368207][T24513] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2606.389996][T24513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2606.431301][T24329] Memory cgroup stats for /syz4:
[ 2606.431475][T24329] anon 36864
[ 2606.431475][T24329] file 10444800
[ 2606.431475][T24329] kernel 159744
[ 2606.431475][T24329] kernel_stack 0
[ 2606.431475][T24329] pagetables 8192
[ 2606.431475][T24329] sec_pagetables 0
[ 2606.431475][T24329] percpu 64
[ 2606.431475][T24329] sock 0
[ 2606.431475][T24329] vmalloc 0
[ 2606.431475][T24329] shmem 10444800
[ 2606.431475][T24329] zswap 0
[ 2606.431475][T24329] zswapped 0
[ 2606.431475][T24329] file_mapped 225280
[ 2606.431475][T24329] file_dirty 0
[ 2606.431475][T24329] file_writeback 0
[ 2606.431475][T24329] swapcached 0
[ 2606.431475][T24329] anon_thp 0
[ 2606.431475][T24329] file_thp 0
[ 2606.431475][T24329] shmem_thp 0
[ 2606.431475][T24329] inactive_anon 36864
[ 2606.431475][T24329] active_anon 10444800
[ 2606.431475][T24329] inactive_file 0
[ 2606.431475][T24329] active_file 0
[ 2606.431475][T24329] unevictable 0
[ 2606.431475][T24329] slab_reclaimable 37280
[ 2606.431475][T24329] slab_unreclaimable 78288
[ 2606.431475][T24329] slab 115568
19:01:58 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2606.561941][T24513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2606.598920][ T5115] Bluetooth: hci4: command 0x041b tx timeout
[ 2606.645336][T24524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2606.748300][T24524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2606.811156][T24329] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24329,uid=0
[ 2606.827156][T24329] Memory cgroup out of memory: Killed process 24329 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0
[ 2606.866302][T24513] device hsr_slave_0 entered promiscuous mode
[ 2606.896002][T24578] syz-executor.2 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000
[ 2606.914789][T24513] device hsr_slave_1 entered promiscuous mode
[ 2606.934826][T24513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2606.937806][T24578] CPU: 1 PID: 24578 Comm: syz-executor.2 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2606.953048][T24578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2606.964274][T24578] Call Trace:
[ 2606.967582][T24578]  <TASK>
[ 2606.970551][T24578]  dump_stack_lvl+0xd1/0x138
[ 2606.975202][T24578]  dump_header+0x10b/0x85f
[ 2606.978527][T24513] Cannot create hsr debugfs directory
[ 2606.979667][T24578]  oom_kill_process.cold+0x10/0x15
[ 2606.990187][T24578]  out_of_memory+0x35c/0x14a0
[ 2606.994967][T24578]  ? oom_killer_disable+0x280/0x280
[ 2607.000250][T24578]  ? find_held_lock+0x2d/0x110
[ 2607.005086][T24578]  mem_cgroup_out_of_memory+0x206/0x270
[ 2607.010699][T24578]  ? mem_cgroup_margin+0x130/0x130
[ 2607.015867][T24578]  ? lock_downgrade+0x6e0/0x6e0
[ 2607.020811][T24578]  try_charge_memcg+0xefb/0x12f0
[ 2607.026348][T24578]  ? mem_cgroup_handle_over_high+0x520/0x520
[ 2607.032402][T24578]  ? lock_downgrade+0x6e0/0x6e0
[ 2607.037325][T24578]  charge_memcg+0x90/0x3b0
[ 2607.041800][T24578]  __mem_cgroup_charge+0x2b/0x90
[ 2607.046800][T24578]  ? folio_flags.constprop.0+0x53/0x150
[ 2607.052395][T24578]  __filemap_add_folio+0x615/0xf80
[ 2607.057575][T24578]  ? filemap_write_and_wait_range+0x120/0x120
[ 2607.063719][T24578]  ? memcg_list_lru_alloc+0xb00/0xb00
[ 2607.069144][T24578]  ? alloc_pages+0x1b2/0x270
[ 2607.073999][T24578]  ? folio_alloc+0x43/0x70
[ 2607.078553][T24578]  filemap_add_folio+0xaf/0x1e0
[ 2607.083490][T24578]  ? __filemap_add_folio+0xf80/0xf80
[ 2607.088847][T24578]  ? xas_load+0x6a/0x140
[ 2607.093145][T24578]  __filemap_get_folio+0x389/0xd80
[ 2607.098329][T24578]  ? filemap_add_folio+0x1e0/0x1e0
[ 2607.103518][T24578]  ? asm_exc_page_fault+0x26/0x30
[ 2607.108614][T24578]  pagecache_get_page+0x2e/0x280
[ 2607.113641][T24578]  ext4_da_write_begin+0x421/0xb50
[ 2607.118821][T24578]  ? ext4_write_begin+0x1140/0x1140
[ 2607.125661][T24578]  generic_perform_write+0x256/0x570
[ 2607.131015][T24578]  ? folio_add_wait_queue+0x1c0/0x1c0
[ 2607.136528][T24578]  ? discard_new_inode+0x1a0/0x1a0
[ 2607.141707][T24578]  ? down_write_killable+0x250/0x250
[ 2607.147073][T24578]  ext4_buffered_write_iter+0x15b/0x460
[ 2607.152842][T24578]  ext4_file_write_iter+0x8bf/0x1710
[ 2607.158305][T24578]  ? lock_release+0x810/0x810
[ 2607.163054][T24578]  ? ext4_file_mmap+0x440/0x440
[ 2607.168094][T24578]  vfs_write+0x9ed/0xdd0
[ 2607.172390][T24578]  ? kernel_write+0x630/0x630
[ 2607.177123][T24578]  ? __fget_files+0x26a/0x440
[ 2607.181851][T24578]  ksys_write+0x12b/0x250
[ 2607.186244][T24578]  ? __ia32_sys_read+0xb0/0xb0
[ 2607.191049][T24578]  ? rcu_read_lock_sched_held+0x3e/0x70
[ 2607.196662][T24578]  do_syscall_64+0x39/0xb0
[ 2607.201311][T24578]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2607.207231][T24578] RIP: 0033:0x7f4f0328c0c9
[ 2607.211646][T24578] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2607.231258][T24578] RSP: 002b:00007f4f03f98168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2607.239055][ T5115] Bluetooth: hci1: command 0x040f tx timeout
[ 2607.239662][T24578] RAX: ffffffffffffffda RBX: 00007f4f033abf80 RCX: 00007f4f0328c0c9
[ 2607.253679][T24578] RDX: 000000011ffffce1 RSI: 0000000020000080 RDI: 0000000000000003
19:01:58 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140))
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2a, 0x2, 0x9, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000058100000000000000000001fb2000000000000"], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
r3 = syz_clone(0x80008880, &(0x7f00000000c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000500)="233525d528277c85cc27400f74044203600ffb9ee6ad4a55ed78ef515636a347b572493b2b4da88fe6b74a7fd2a5bd050838f648c760d68cd234cb51c9e850b4d0000f2e20fd785839dcef9c4d099797666e1647fbbe615d80de9a347bd0c3506976663e1e905821ba54cc983f806fcbf09541152f5b9b1a48ecb409b8c783a5b9ad7d74086f20e3468e61f64827fbee52c92d600732a83f355c8838d4014d7eea31e850eda7debf8efd628a674b1a068335715ed00df77702")
r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3f, 0x81, 0x80, 0x0, 0xf, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x4, 0xff, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xf, r1, 0xb)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x1, 0x3, 0x0, 0x9, 0x2c300, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x9, 0x3ff, 0x0, 0x13785f2c, 0x1000, 0xca4, 0x0, 0x37, 0x0, 0x4}, r3, 0x1, r4, 0x3)

[ 2607.261670][T24578] RBP: 00007f4f032e7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2607.269649][T24578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2607.277713][T24578] R13: 00007ffe22c3c6df R14: 00007f4f03f98300 R15: 0000000000022000
[ 2607.285800][T24578]  </TASK>
[ 2607.297512][T24578] memory: usage 10616kB, limit 16kB, failcnt 1178
[ 2607.318297][T24578] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2607.344571][T24578] Memory cgroup stats for /syz2:
[ 2607.344798][T24578] anon 143360
[ 2607.344798][T24578] file 10452992
[ 2607.344798][T24578] kernel 262144
[ 2607.344798][T24578] kernel_stack 32768
[ 2607.344798][T24578] pagetables 77824
[ 2607.344798][T24578] sec_pagetables 0
[ 2607.344798][T24578] percpu 64
[ 2607.344798][T24578] sock 0
[ 2607.344798][T24578] vmalloc 0
[ 2607.344798][T24578] shmem 10452992
[ 2607.344798][T24578] zswap 0
[ 2607.344798][T24578] zswapped 0
[ 2607.344798][T24578] file_mapped 253952
[ 2607.344798][T24578] file_dirty 0
[ 2607.344798][T24578] file_writeback 0
[ 2607.344798][T24578] swapcached 0
[ 2607.344798][T24578] anon_thp 0
[ 2607.344798][T24578] file_thp 0
[ 2607.344798][T24578] shmem_thp 0
[ 2607.344798][T24578] inactive_anon 143360
[ 2607.344798][T24578] active_anon 10452992
[ 2607.344798][T24578] inactive_file 0
[ 2607.344798][T24578] active_file 0
[ 2607.344798][T24578] unevictable 0
[ 2607.344798][T24578] slab_reclaimable 51040
[ 2607.344798][T24578] slab_unreclaimable 71720
[ 2607.344798][T24578] slab 122760
[ 2607.496356][T24578] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=24576,uid=0
[ 2607.514426][T24578] Memory cgroup out of memory: Killed process 24578 (syz-executor.2) total-vm:56720kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:128kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2607.590642][T24524] team0: Port device team_slave_0 added
[ 2607.643478][T24524] team0: Port device team_slave_1 added
[ 2607.713199][T24524] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2607.720692][T24524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2607.747954][T24524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2607.760996][T24524] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2607.767984][T24524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2607.800321][T24524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2607.953402][T24524] device hsr_slave_0 entered promiscuous mode
[ 2607.999081][T24524] device hsr_slave_1 entered promiscuous mode
[ 2608.042153][T24524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2608.058511][T24524] Cannot create hsr debugfs directory
[ 2608.678903][ T5115] Bluetooth: hci4: command 0x040f tx timeout
[ 2608.932283][T14228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2608.941543][T14228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2608.951224][T14228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2608.960039][T14228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2608.968225][T14228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2608.976195][T14228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2609.160091][T24524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2609.194684][T24513] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2609.292481][T24524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2609.328769][T14228] Bluetooth: hci1: command 0x0419 tx timeout
[ 2609.352644][T24513] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2609.395444][T24513] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2609.539634][T24524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2609.603166][T24513] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2609.705125][T24524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2609.872746][T24605] chnl_net:caif_netlink_parms(): no params data found
[ 2610.198326][T24513] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2610.229151][T24605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2610.236312][T24605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2610.260016][T24605] device bridge_slave_0 entered promiscuous mode
[ 2610.320765][T24605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2610.328119][T24605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2610.347789][T24605] device bridge_slave_1 entered promiscuous mode
[ 2610.403309][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2610.419493][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2610.427918][T24524] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2610.477108][T24605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2610.500441][T24513] 8021q: adding VLAN 0 to HW filter on device team0
[ 2610.509417][T24524] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2610.531483][T24605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2610.549831][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2610.569616][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2610.578330][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2610.585522][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2610.618957][T24524] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2610.662286][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2610.679640][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2610.698812][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2610.718969][T14390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2610.726195][T14390] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2610.748931][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2610.759551][T14228] Bluetooth: hci4: command 0x0419 tx timeout
[ 2610.769157][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2610.778224][T24524] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2610.845745][T24605] team0: Port device team_slave_0 added
[ 2610.854530][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2610.866423][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2610.886278][T24605] team0: Port device team_slave_1 added
[ 2610.912869][T24513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2610.935090][T24513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2610.958613][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2610.967688][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2610.978535][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2610.988737][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2610.997335][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2611.005763][T14228] Bluetooth: hci2: command 0x0409 tx timeout
[ 2611.016119][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2611.084586][T24605] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2611.108822][T24605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2611.145880][T24605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2611.174274][T24605] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2611.201851][T24605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2611.248501][T24605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2611.365481][T24605] device hsr_slave_0 entered promiscuous mode
[ 2611.388282][T24605] device hsr_slave_1 entered promiscuous mode
[ 2611.397968][T24605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2611.407187][T24605] Cannot create hsr debugfs directory
[ 2611.517439][T15331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2611.669547][T15331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2611.729739][T24513] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2611.789242][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2611.796827][T23855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2611.838780][T15331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2612.055605][T15331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2612.129978][T24524] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2612.232816][T24524] 8021q: adding VLAN 0 to HW filter on device team0
[ 2612.248948][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2612.257963][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2612.329657][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2612.350519][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2612.369601][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2612.376770][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2612.460206][T24605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2612.549553][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2612.557749][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2612.583822][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2612.609332][T26601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2612.616520][T26601] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2612.638923][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2612.647950][T26601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2612.759381][T24605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2612.970929][T24605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2613.030789][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2613.051225][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2613.078857][T14228] Bluetooth: hci2: command 0x041b tx timeout
[ 2613.099518][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2613.107674][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2613.128996][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2613.137541][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2613.189663][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2613.198227][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2613.239441][ T6748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2613.289588][T24605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2613.332409][T24524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2613.404255][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2613.421828][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2613.458567][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2613.472194][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2613.479868][T15331] ------------[ cut here ]------------
[ 2613.485444][T15331] DEBUG_LOCKS_WARN_ON(1)
[ 2613.485521][T15331] WARNING: CPU: 1 PID: 15331 at kernel/locking/lockdep.c:231 __lock_acquire+0xecf/0x56d0
[ 2613.499589][T15331] Modules linked in:
[ 2613.503544][T15331] CPU: 1 PID: 15331 Comm: kworker/u4:1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2613.513985][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2613.524134][T15331] Workqueue: netns cleanup_net
[ 2613.528925][T15331] RIP: 0010:__lock_acquire+0xecf/0x56d0
[ 2613.534484][T15331] Code: a8 13 73 8e e8 d2 bb 6b 00 8b 05 54 79 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 d7 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8
[ 2613.554092][T15331] RSP: 0018:ffffc9000379f5e0 EFLAGS: 00010086
[ 2613.560338][T15331] RAX: 0000000000000000 RBX: 000000000000095a RCX: 0000000000000000
[ 2613.568402][T15331] RDX: ffff8880269e3a80 RSI: ffffffff8166710c RDI: fffff520006f3eae
[ 2613.576638][T15331] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[ 2613.584652][T15331] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003
[ 2613.592803][T15331] R13: ffff8880269e3a80 R14: ffff8880269e44b8 R15: dffffc0000000000
[ 2613.600771][T15331] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 2613.609833][T15331] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2613.616471][T15331] CR2: 00007f1d25ab4690 CR3: 000000002a3bd000 CR4: 00000000003506e0
[ 2613.624586][T15331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2613.632649][T15331] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2613.640773][T15331] Call Trace:
[ 2613.644153][T15331]  <TASK>
[ 2613.647079][T15331]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2613.653070][T15331]  ? find_held_lock+0x2d/0x110
[ 2613.658482][T15331]  lock_acquire+0x1e3/0x630
[ 2613.663085][T15331]  ? finish_task_switch.isra.0+0x130/0xc80
[ 2613.668899][T15331]  ? lock_release+0x810/0x810
[ 2613.673585][T15331]  ? find_held_lock+0x2d/0x110
[ 2613.679784][T15331]  ? __schedule+0xb02/0x5450
[ 2613.684400][T15331]  ? lock_downgrade+0x6e0/0x6e0
[ 2613.689264][T15331]  finish_task_switch.isra.0+0x192/0xc80
[ 2613.694916][T15331]  ? finish_task_switch.isra.0+0x130/0xc80
[ 2613.700770][T15331]  ? __switch_to+0x5d0/0x10a0
[ 2613.705710][T15331]  ? __switch_to_asm+0x3e/0x60
[ 2613.710586][T15331]  __schedule+0xb92/0x5450
[ 2613.715027][T15331]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2613.721013][T15331]  ? io_schedule_timeout+0x150/0x150
[ 2613.726318][T15331]  ? __mutex_lock+0xa43/0x1360
[ 2613.731197][T15331]  schedule+0xde/0x1b0
[ 2613.735554][T15331]  schedule_preempt_disabled+0x13/0x20
[ 2613.741905][T15331]  __mutex_lock+0xa48/0x1360
[ 2613.746525][T15331]  ? devlink_pernet_pre_exit+0x10a/0x220
[ 2613.753148][T15331]  ? mutex_lock_io_nested+0x11a0/0x11a0
[ 2613.758772][T15331]  ? lock_downgrade+0x6e0/0x6e0
[ 2613.763634][T15331]  ? devlink_try_get+0x15d/0x1e0
[ 2613.768801][T15331]  devlink_pernet_pre_exit+0x10a/0x220
[ 2613.774284][T15331]  ? devlinks_xa_find_get+0x220/0x220
[ 2613.779694][T15331]  ? cttimeout_net_pre_exit+0x10d/0x500
[ 2613.785313][T15331]  ? devlinks_xa_find_get+0x220/0x220
[ 2613.790701][T15331]  cleanup_net+0x455/0xb10
[ 2613.795115][T15331]  ? unregister_pernet_device+0x80/0x80
[ 2613.800770][T15331]  process_one_work+0x9bf/0x1710
[ 2613.805811][T15331]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 2613.811206][T15331]  ? rwlock_bug.part.0+0x90/0x90
[ 2613.816172][T15331]  ? ct_nmi_exit+0x115/0x200
[ 2613.820824][T15331]  ? _raw_spin_lock_irq+0x45/0x50
[ 2613.825878][T15331]  worker_thread+0x669/0x1090
[ 2613.830557][T15331]  ? __kthread_parkme+0x163/0x220
[ 2613.835660][T15331]  ? process_one_work+0x1710/0x1710
[ 2613.840951][T15331]  kthread+0x2e8/0x3a0
[ 2613.845038][T15331]  ? kthread_complete_and_exit+0x40/0x40
[ 2613.851045][T15331]  ret_from_fork+0x1f/0x30
[ 2613.855481][T15331]  </TASK>
[ 2613.858514][T15331] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2613.865807][T15331] CPU: 1 PID: 15331 Comm: kworker/u4:1 Not tainted 6.2.0-rc2-syzkaller-00351-g00b8f39f1d15 #0
[ 2613.876043][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 2613.886104][T15331] Workqueue: netns cleanup_net
[ 2613.891140][T15331] Call Trace:
[ 2613.894518][T15331]  <TASK>
[ 2613.897481][T15331]  dump_stack_lvl+0xd1/0x138
[ 2613.902171][T15331]  panic+0x2cc/0x626
[ 2613.906080][T15331]  ? panic_print_sys_info.part.0+0x110/0x110
[ 2613.912339][T15331]  ? __lock_acquire+0xecf/0x56d0
[ 2613.917298][T15331]  check_panic_on_warn.cold+0x19/0x35
[ 2613.922698][T15331]  __warn+0xf2/0x1a0
[ 2613.926592][T15331]  ? __wake_up_klogd.part.0+0x99/0xf0
[ 2613.932004][T15331]  ? __lock_acquire+0xecf/0x56d0
[ 2613.936967][T15331]  report_bug+0x1c0/0x210
[ 2613.941312][T15331]  handle_bug+0x3c/0x70
[ 2613.945583][T15331]  exc_invalid_op+0x18/0x50
[ 2613.950167][T15331]  asm_exc_invalid_op+0x1a/0x20
[ 2613.955833][T15331] RIP: 0010:__lock_acquire+0xecf/0x56d0
[ 2613.961389][T15331] Code: a8 13 73 8e e8 d2 bb 6b 00 8b 05 54 79 0f 0d 85 c0 0f 85 79 f8 ff ff 48 c7 c6 40 51 4c 8a 48 c7 c7 a0 4a 4c 8a e8 91 d7 5b 08 <0f> 0b 31 c0 e9 73 f7 ff ff 48 63 5c 24 18 be 08 00 00 00 48 89 d8
[ 2613.981014][T15331] RSP: 0018:ffffc9000379f5e0 EFLAGS: 00010086
[ 2613.987094][T15331] RAX: 0000000000000000 RBX: 000000000000095a RCX: 0000000000000000
[ 2613.995246][T15331] RDX: ffff8880269e3a80 RSI: ffffffff8166710c RDI: fffff520006f3eae
[ 2614.003318][T15331] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[ 2614.011274][T15331] R10: 0000000080000002 R11: 0000000000000001 R12: 0000000000000003
[ 2614.019238][T15331] R13: ffff8880269e3a80 R14: ffff8880269e44b8 R15: dffffc0000000000
[ 2614.027232][T15331]  ? vprintk+0x8c/0xa0
[ 2614.031340][T15331]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2614.037517][T15331]  ? find_held_lock+0x2d/0x110
[ 2614.042327][T15331]  lock_acquire+0x1e3/0x630
[ 2614.046853][T15331]  ? finish_task_switch.isra.0+0x130/0xc80
[ 2614.052765][T15331]  ? lock_release+0x810/0x810
[ 2614.057448][T15331]  ? find_held_lock+0x2d/0x110
[ 2614.062209][T15331]  ? __schedule+0xb02/0x5450
[ 2614.066825][T15331]  ? lock_downgrade+0x6e0/0x6e0
[ 2614.071779][T15331]  finish_task_switch.isra.0+0x192/0xc80
[ 2614.078570][T15331]  ? finish_task_switch.isra.0+0x130/0xc80
[ 2614.084482][T15331]  ? __switch_to+0x5d0/0x10a0
[ 2614.089151][T15331]  ? __switch_to_asm+0x3e/0x60
[ 2614.093913][T15331]  __schedule+0xb92/0x5450
[ 2614.098330][T15331]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2614.104331][T15331]  ? io_schedule_timeout+0x150/0x150
[ 2614.109633][T15331]  ? __mutex_lock+0xa43/0x1360
[ 2614.114504][T15331]  schedule+0xde/0x1b0
[ 2614.118703][T15331]  schedule_preempt_disabled+0x13/0x20
[ 2614.124186][T15331]  __mutex_lock+0xa48/0x1360
[ 2614.128778][T15331]  ? devlink_pernet_pre_exit+0x10a/0x220
[ 2614.134497][T15331]  ? mutex_lock_io_nested+0x11a0/0x11a0
[ 2614.140160][T15331]  ? lock_downgrade+0x6e0/0x6e0
[ 2614.145021][T15331]  ? devlink_try_get+0x15d/0x1e0
[ 2614.150207][T15331]  devlink_pernet_pre_exit+0x10a/0x220
[ 2614.155805][T15331]  ? devlinks_xa_find_get+0x220/0x220
[ 2614.161230][T15331]  ? cttimeout_net_pre_exit+0x10d/0x500
[ 2614.166885][T15331]  ? devlinks_xa_find_get+0x220/0x220
[ 2614.172281][T15331]  cleanup_net+0x455/0xb10
[ 2614.176954][T15331]  ? unregister_pernet_device+0x80/0x80
[ 2614.182715][T15331]  process_one_work+0x9bf/0x1710
[ 2614.187689][T15331]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 2614.193098][T15331]  ? rwlock_bug.part.0+0x90/0x90
[ 2614.198035][T15331]  ? ct_nmi_exit+0x115/0x200
[ 2614.202622][T15331]  ? _raw_spin_lock_irq+0x45/0x50
[ 2614.207653][T15331]  worker_thread+0x669/0x1090
[ 2614.212340][T15331]  ? __kthread_parkme+0x163/0x220
[ 2614.217549][T15331]  ? process_one_work+0x1710/0x1710
[ 2614.222855][T15331]  kthread+0x2e8/0x3a0
[ 2614.226959][T15331]  ? kthread_complete_and_exit+0x40/0x40
[ 2614.232621][T15331]  ret_from_fork+0x1f/0x30
[ 2614.237134][T15331]  </TASK>
[ 2615.314589][T15331] Shutting down cpus with NMI
[ 2615.319570][T15331] Kernel Offset: disabled
[ 2615.323900][T15331] Rebooting in 86400 seconds..