RACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) io_uring_enter(r8, 0x2d66, 0x9fa9, 0x2, &(0x7f00000000c0)={[0xffff]}, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001440)="c537e81c48ce3152286b6a8398039bf88c462bbd7824ae38b184404f5e75314a401ebf72b945433199f527ad9e90dd81d74740ee70b9fce0a218f3ae59ee348d700ff60ef74e3a99750040d94edbf12b041f5f3a5e0001c079132bcf6fadb3f727009af01aaeb27b5389700a8062ffdf1a0cd70b1159abd6b0ad9606af6a23268b3d661d1ed404d88e97a1a63c82d6afdbe9e0a1bb3c52859784a2f85a4d799515f7f7fed7fcb9d8ebe392e729fd9436f0a1e172af922b86", 0xb8}, {&(0x7f0000001a00)="3b03936f4ca865b7b65f3aba909db23f7bc2f506363a346f9c97a1f6ffd70acd467de45dbe61a8d47a3b0e9d47056c03ea9371c4275efc3252e2bd0987a578edf6a4dbb30e3462937d2a7b41be99d67aba6f8291cc42901d7af6ec51c8c900ce4a2969ad7338114354679ae34e2e8a1bc865c35751fc50c24642928613e721d3c8aa1b2891fdccbfb77abea08130d31c415b05b1d9be71ebbbd1da77714355cd8637ab79b654d97ed10575ac4443a99cdf6ac7b2df6e83dbdc6b2178f52b9b649626c9b1666a137de473edb2a34f5435bc3bc8e8c15301ef550ed6011947f4e5773672c831f9f8528d05532e3d15f9f0", 0xf0}, {&(0x7f0000001640)="e3dc1d48bae889722c6cf34f5f07c7efd4721c275926c7911047b3eb8c788c60e562d4f630155c8ae7cfb3a00b7aadb6333fe740ec6ff211e30c2b4686187836b51bb9cc40c909915040e411040f", 0x4e}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f00000015c0)="e8bc4c5e1c18e86ea47cb02e4c9a20a4ef06785710b609ae8cb00841604e3794837063f31eaaf03ab1f2226d", 0x2c}, {&(0x7f0000001b00)="273e26bb46031c9fd248c10afe92dd8a4808905a55704182713481ac05151ef4e97cef02cea1cdf3b0550f32ce6c5fa4040c446c2b0ef6c1a0f7720da1686f65147657d6db61ab8d", 0x48}], 0x6, &(0x7f0000001c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000000040001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x48, 0x400800c}}], 0x1, 0x20000085) 19:27:48 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2fb010000000000, 0x0, 0x0) 19:27:48 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x26e010000000000, 0x0, 0x0) 19:27:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x38000) [ 551.106506][T15717] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 551.124718][T15717] CPU: 0 PID: 15717 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 551.134957][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 551.144983][T15717] Call Trace: [ 551.148247][T15717] dump_stack+0x18e/0x1d5 [ 551.152546][T15717] dump_header+0xdb/0x700 [ 551.156845][T15717] oom_kill_process+0xf0/0x2d0 [ 551.161579][T15717] out_of_memory+0x55f/0x7f0 [ 551.166151][T15717] mem_cgroup_oom+0x638/0x760 [ 551.170820][T15717] try_charge+0xc41/0x1100 [ 551.175224][T15717] ? get_mem_cgroup_from_mm+0x251/0x280 [ 551.180756][T15717] mem_cgroup_try_charge+0xd5/0x2a0 [ 551.185942][T15717] wp_page_copy+0x33d/0x1830 [ 551.190529][T15717] ? _raw_spin_unlock+0x49/0x60 [ 551.195365][T15717] ? do_wp_page+0x535/0x8b0 [ 551.199854][T15717] handle_mm_fault+0xeab/0x3b90 [ 551.204694][T15717] do_user_addr_fault+0x4a4/0xb30 [ 551.209703][T15717] page_fault+0x2f/0x40 [ 551.213924][T15717] RIP: 0033:0x7f930849f73d [ 551.218321][T15717] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 551.237914][T15717] RSP: 002b:00007ffd403f0f40 EFLAGS: 00010202 [ 551.243976][T15717] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 19:27:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x189) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000000540)=@md0, &(0x7f0000000580)='\x00', &(0x7f00000005c0)='ocfs2\x00', 0x114000, &(0x7f0000000600)='\x00') (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fdatasync(r0) r1 = fcntl$dupfd(r0, 0x0, r0) chdir(&(0x7f0000000000)='./file0\x00') (async) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) r4 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x43000) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0xffffffff, 0xae, &(0x7f0000000200)="42f5462426928e3d05f6b5156bbe8e6f77bc1f90f525166e5f6ef6a6c05f7b5e5ed8a30ccef9a1b1505b238ae5b6d262ee596ce586bebce425bdef278a2f2a49c37e7ba92f870f7f00897515f86a26dd70a330bcf2fa019ab1e557b0c918ed0e68bb0adfa86b29fb0c12bcaad90e139cf4d22bcfbce97c1ea1c4c7a424c19f7b78d8431a2a262f31cf2363e98548f10fa4a0fadfb6ed52bb94e8194d4e0ada14c6f74857aba14634874a2bda997d", 0x1}, {0xff, 0x87, &(0x7f0000000300)="301df43d0ecdf63a3b4135d920a8e40b02fff04da7b00cfaaab1d30e098026f74e4fe6c83dca9bd081a2a960ea3d1216a6032af0b789cb789cc5b787d2116dfa5ad17079ad3e163a501355d66887659d2ecada660d5171e3f03bb3bbec85b190b7252732d0541049ae7b95d8e94c89f91d7f31653670ead7fb8d208b685006f7fc0e7a3757f029", 0x1}, {0x40, 0x4d, &(0x7f00000003c0)="4f4de74d7e249818896dc44cd475beba0159f0ebbdef12726cba5cfcc52963a3d52c8f36428dc18bcb3ba06109c2a882a5cee6f87a4a8972f269ceb418d1657a5635811e66f6a3bf224ed6f807", 0x0, 0x1}]}) (async) sendfile(r3, r3, 0x0, 0x3) (async) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500), 0x2, 0x2) [ 551.251940][T15717] RDX: 00007ffd403f1638 RSI: 00007f930853c603 RDI: 00007ffd403f14b0 [ 551.259895][T15717] RBP: 00007ffd403f1490 R08: 0000000000000000 R09: 00007ffd403f15a0 [ 551.267871][T15717] R10: 00007f930853c603 R11: 0000000000000206 R12: 00007ffd403f14b0 [ 551.275829][T15717] R13: 00007f930853c603 R14: 00007ffd403f1638 R15: 00007ffd403f1638 19:27:48 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) chdir(&(0x7f0000000080)='./file0\x00') sendfile(r3, r3, 0x0, 0x3) 19:27:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x39000) 19:27:48 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2fc000000000000, 0x0, 0x0) 19:27:48 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) chdir(&(0x7f0000000080)='./file0\x00') sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) sendfile(r3, r3, 0x0, 0x3) (async) [ 551.389697][T15717] memory: usage 307200kB, limit 307200kB, failcnt 100361 [ 551.396843][T15717] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 551.425493][T15717] Memory cgroup stats for /syz5: [ 551.425564][T15717] anon 314490880 [ 551.425564][T15717] file 73728 [ 551.425564][T15717] kernel_stack 0 [ 551.425564][T15717] slab 0 [ 551.425564][T15717] sock 0 [ 551.425564][T15717] shmem 0 [ 551.425564][T15717] file_mapped 0 [ 551.425564][T15717] file_dirty 0 [ 551.425564][T15717] file_writeback 0 [ 551.425564][T15717] anon_thp 0 [ 551.425564][T15717] inactive_anon 0 [ 551.425564][T15717] active_anon 314535936 [ 551.425564][T15717] inactive_file 0 [ 551.425564][T15717] active_file 0 [ 551.425564][T15717] unevictable 0 [ 551.425564][T15717] slab_reclaimable 0 [ 551.425564][T15717] slab_unreclaimable 0 [ 551.425564][T15717] pgfault 370491 [ 551.425564][T15717] pgmajfault 0 [ 551.425564][T15717] workingset_refault 0 [ 551.425564][T15717] workingset_activate 0 [ 551.425564][T15717] workingset_nodereclaim 0 [ 551.425564][T15717] pgrefill 3144 [ 551.425564][T15717] pgscan 2772 [ 551.425564][T15717] pgsteal 82 [ 551.425564][T15717] pgactivate 2640 [ 551.518971][T15717] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15612,uid=0 [ 551.534675][T15717] Memory cgroup out of memory: Killed process 15612 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:15280kB, shmem-rss:60kB, UID:0 pgtables:80kB oom_score_adj:0 [ 551.552824][ T24] oom_reaper: reaped process 15612 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:60kB [ 551.574084][T15717] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 551.584557][T15717] CPU: 0 PID: 15717 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 551.594776][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 551.604948][T15717] Call Trace: [ 551.608231][T15717] dump_stack+0x18e/0x1d5 [ 551.612549][T15717] dump_header+0xdb/0x700 [ 551.616871][T15717] oom_kill_process+0xf0/0x2d0 [ 551.621626][T15717] out_of_memory+0x55f/0x7f0 [ 551.626201][T15717] mem_cgroup_oom+0x638/0x760 [ 551.630869][T15717] try_charge+0xc41/0x1100 [ 551.635363][T15717] ? get_mem_cgroup_from_mm+0x251/0x280 [ 551.640895][T15717] mem_cgroup_try_charge+0xd5/0x2a0 [ 551.646086][T15717] handle_mm_fault+0x158a/0x3b90 [ 551.651016][T15717] do_user_addr_fault+0x4a4/0xb30 [ 551.656037][T15717] page_fault+0x2f/0x40 [ 551.660177][T15717] RIP: 0033:0x7f93084810d9 [ 551.664577][T15717] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 551.684278][T15717] RSP: 002b:00007ffd403f1910 EFLAGS: 00010246 [ 551.690407][T15717] RAX: 0000000020000140 RBX: 0000000000000000 RCX: 0000000000000000 [ 551.698347][T15717] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000555556d042e8 [ 551.706287][T15717] RBP: 00007ffd403f1a08 R08: 0000000000000000 R09: 0000000000000000 [ 551.714226][T15717] R10: 0000000000014da0 R11: 0000000000000227 R12: 0000000000000001 [ 551.722252][T15717] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd403f1bf0 [ 551.730291][T15717] memory: usage 307200kB, limit 307200kB, failcnt 100772 [ 551.737324][T15717] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 551.744644][T15717] Memory cgroup stats for /syz5: [ 551.744693][T15717] anon 314490880 [ 551.744693][T15717] file 73728 [ 551.744693][T15717] kernel_stack 0 [ 551.744693][T15717] slab 0 [ 551.744693][T15717] sock 0 [ 551.744693][T15717] shmem 0 [ 551.744693][T15717] file_mapped 0 [ 551.744693][T15717] file_dirty 0 [ 551.744693][T15717] file_writeback 0 [ 551.744693][T15717] anon_thp 0 [ 551.744693][T15717] inactive_anon 0 [ 551.744693][T15717] active_anon 314535936 [ 551.744693][T15717] inactive_file 0 [ 551.744693][T15717] active_file 0 [ 551.744693][T15717] unevictable 0 [ 551.744693][T15717] slab_reclaimable 0 [ 551.744693][T15717] slab_unreclaimable 0 [ 551.744693][T15717] pgfault 370491 [ 551.744693][T15717] pgmajfault 0 [ 551.744693][T15717] workingset_refault 0 [ 551.744693][T15717] workingset_activate 0 [ 551.744693][T15717] workingset_nodereclaim 0 [ 551.744693][T15717] pgrefill 3144 [ 551.744693][T15717] pgscan 2772 [ 551.744693][T15717] pgsteal 82 [ 551.744693][T15717] pgactivate 2640 [ 551.837925][T15717] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15717,uid=0 [ 551.853240][T15717] Memory cgroup out of memory: Killed process 15717 (syz-executor.5) total-vm:52400kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 551.871832][ T24] oom_reaper: reaped process 15717 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 552.741086][T15746] device bridge_slave_1 left promiscuous mode [ 552.747220][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.754781][T15746] device bridge_slave_0 left promiscuous mode [ 552.761074][T15746] bridge0: port 1(bridge_slave_0) entered disabled state 19:27:53 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) chdir(&(0x7f0000000080)='./file0\x00') (async) sendfile(r3, r3, 0x0, 0x3) 19:27:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x3a000) 19:27:53 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x26f030000000000, 0x0, 0x0) 19:27:53 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2fd020000000000, 0x0, 0x0) 19:27:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x5e, 0x1008}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x400000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) io_uring_enter(r8, 0x2d66, 0x9fa9, 0x2, &(0x7f00000000c0)={[0xffff]}, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001440)="c537e81c48ce3152286b6a8398039bf88c462bbd7824ae38b184404f5e75314a401ebf72b945433199f527ad9e90dd81d74740ee70b9fce0a218f3ae59ee348d700ff60ef74e3a99750040d94edbf12b041f5f3a5e0001c079132bcf6fadb3f727009af01aaeb27b5389700a8062ffdf1a0cd70b1159abd6b0ad9606af6a23268b3d661d1ed404d88e97a1a63c82d6afdbe9e0a1bb3c52859784a2f85a4d799515f7f7fed7fcb9d8ebe392e729fd9436f0a1e172af922b86", 0xb8}, {&(0x7f0000001a00)="3b03936f4ca865b7b65f3aba909db23f7bc2f506363a346f9c97a1f6ffd70acd467de45dbe61a8d47a3b0e9d47056c03ea9371c4275efc3252e2bd0987a578edf6a4dbb30e3462937d2a7b41be99d67aba6f8291cc42901d7af6ec51c8c900ce4a2969ad7338114354679ae34e2e8a1bc865c35751fc50c24642928613e721d3c8aa1b2891fdccbfb77abea08130d31c415b05b1d9be71ebbbd1da77714355cd8637ab79b654d97ed10575ac4443a99cdf6ac7b2df6e83dbdc6b2178f52b9b649626c9b1666a137de473edb2a34f5435bc3bc8e8c15301ef550ed6011947f4e5773672c831f9f8528d05532e3d15f9f0", 0xf0}, {&(0x7f0000001640)="e3dc1d48bae889722c6cf34f5f07c7efd4721c275926c7911047b3eb8c788c60e562d4f630155c8ae7cfb3a00b7aadb6333fe740ec6ff211e30c2b4686187836b51bb9cc40c909915040e411040f", 0x4e}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f00000015c0)="e8bc4c5e1c18e86ea47cb02e4c9a20a4ef06785710b609ae8cb00841604e3794837063f31eaaf03ab1f2226d", 0x2c}, {&(0x7f0000001b00)="273e26bb46031c9fd248c10afe92dd8a4808905a55704182713481ac05151ef4e97cef02cea1cdf3b0550f32ce6c5fa4040c446c2b0ef6c1a0f7720da1686f65147657d6db61ab8d", 0x48}], 0x6, &(0x7f0000001c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000000040001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x48, 0x400800c}}], 0x1, 0x20000085) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) getpid() (async) sched_setscheduler(r0, 0x5, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x5e, 0x1008}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x400000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) io_uring_enter(r8, 0x2d66, 0x9fa9, 0x2, &(0x7f00000000c0)={[0xffff]}, 0x8) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001440)="c537e81c48ce3152286b6a8398039bf88c462bbd7824ae38b184404f5e75314a401ebf72b945433199f527ad9e90dd81d74740ee70b9fce0a218f3ae59ee348d700ff60ef74e3a99750040d94edbf12b041f5f3a5e0001c079132bcf6fadb3f727009af01aaeb27b5389700a8062ffdf1a0cd70b1159abd6b0ad9606af6a23268b3d661d1ed404d88e97a1a63c82d6afdbe9e0a1bb3c52859784a2f85a4d799515f7f7fed7fcb9d8ebe392e729fd9436f0a1e172af922b86", 0xb8}, {&(0x7f0000001a00)="3b03936f4ca865b7b65f3aba909db23f7bc2f506363a346f9c97a1f6ffd70acd467de45dbe61a8d47a3b0e9d47056c03ea9371c4275efc3252e2bd0987a578edf6a4dbb30e3462937d2a7b41be99d67aba6f8291cc42901d7af6ec51c8c900ce4a2969ad7338114354679ae34e2e8a1bc865c35751fc50c24642928613e721d3c8aa1b2891fdccbfb77abea08130d31c415b05b1d9be71ebbbd1da77714355cd8637ab79b654d97ed10575ac4443a99cdf6ac7b2df6e83dbdc6b2178f52b9b649626c9b1666a137de473edb2a34f5435bc3bc8e8c15301ef550ed6011947f4e5773672c831f9f8528d05532e3d15f9f0", 0xf0}, {&(0x7f0000001640)="e3dc1d48bae889722c6cf34f5f07c7efd4721c275926c7911047b3eb8c788c60e562d4f630155c8ae7cfb3a00b7aadb6333fe740ec6ff211e30c2b4686187836b51bb9cc40c909915040e411040f", 0x4e}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f00000015c0)="e8bc4c5e1c18e86ea47cb02e4c9a20a4ef06785710b609ae8cb00841604e3794837063f31eaaf03ab1f2226d", 0x2c}, {&(0x7f0000001b00)="273e26bb46031c9fd248c10afe92dd8a4808905a55704182713481ac05151ef4e97cef02cea1cdf3b0550f32ce6c5fa4040c446c2b0ef6c1a0f7720da1686f65147657d6db61ab8d", 0x48}], 0x6, &(0x7f0000001c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000000040001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x48, 0x400800c}}], 0x1, 0x20000085) (async) 19:27:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x890b, &(0x7f00000000c0)) 19:27:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='vfat\x00', 0x40000, &(0x7f0000000200)='memory.high\x00') r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:27:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x3b000) 19:27:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='vfat\x00', 0x40000, &(0x7f0000000200)='memory.high\x00') (async) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:27:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x3c000) 19:27:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='vfat\x00', 0x40000, &(0x7f0000000200)='memory.high\x00') (async) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:27:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x3d000) 19:27:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x3e000) 19:27:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ext3\x00', 0x10000, &(0x7f0000000200)='\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r4 = openat$cgroup_int(r3, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:27:54 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x270020000000000, 0x0, 0x0) 19:27:54 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2fe010000000000, 0x0, 0x0) [ 557.974874][T15816] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.982721][T15816] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.990598][T15816] device bridge_slave_0 entered promiscuous mode [ 557.997637][T15816] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.004770][T15816] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.012181][T15816] device bridge_slave_1 entered promiscuous mode [ 558.050428][T15816] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.057462][T15816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.064983][T15816] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.071992][T15816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.092194][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.099458][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.107464][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 558.115562][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 558.131356][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 558.139453][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.146468][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.153873][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 558.162103][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.169105][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.176437][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 558.184318][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 558.198676][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.211128][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.221840][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 558.238017][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 558.246344][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 558.265442][T15820] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 558.275657][T15820] CPU: 0 PID: 15820 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 558.285861][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 558.295889][T15820] Call Trace: [ 558.299151][T15820] dump_stack+0x18e/0x1d5 [ 558.303449][T15820] dump_header+0xdb/0x700 [ 558.307747][T15820] oom_kill_process+0xf0/0x2d0 [ 558.312476][T15820] out_of_memory+0x55f/0x7f0 [ 558.317098][T15820] mem_cgroup_oom+0x638/0x760 [ 558.321748][T15820] try_charge+0xc41/0x1100 [ 558.326162][T15820] ? get_mem_cgroup_from_mm+0x251/0x280 [ 558.331674][T15820] mem_cgroup_try_charge+0xd5/0x2a0 [ 558.336840][T15820] handle_mm_fault+0x158a/0x3b90 [ 558.341756][T15820] do_user_addr_fault+0x4a4/0xb30 [ 558.346748][T15820] page_fault+0x2f/0x40 [ 558.350872][T15820] RIP: 0033:0x7f884451bccf [ 558.355255][T15820] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 558.374834][T15820] RSP: 002b:00007fffe97957e0 EFLAGS: 00010246 [ 558.380981][T15820] RAX: 00007f88436c1000 RBX: 0000000000021000 RCX: 00007f884456c6b7 [ 558.388924][T15820] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f88436c2000 [ 558.396866][T15820] RBP: 00007fffe97958b0 R08: 00000000ffffffff R09: 00007f88436e1700 [ 558.404812][T15820] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fffe97959d0 [ 558.412755][T15820] R13: 00007f88436e1700 R14: 0000000000000000 R15: 0000000000022000 [ 558.422565][T15820] memory: usage 307200kB, limit 307200kB, failcnt 100795 [ 558.429636][T15820] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 558.436662][T15820] Memory cgroup stats for /syz5: [ 558.436707][T15820] anon 314490880 [ 558.436707][T15820] file 73728 [ 558.436707][T15820] kernel_stack 0 [ 558.436707][T15820] slab 0 [ 558.436707][T15820] sock 0 [ 558.436707][T15820] shmem 0 [ 558.436707][T15820] file_mapped 0 [ 558.436707][T15820] file_dirty 0 [ 558.436707][T15820] file_writeback 0 [ 558.436707][T15820] anon_thp 0 [ 558.436707][T15820] inactive_anon 0 [ 558.436707][T15820] active_anon 314535936 [ 558.436707][T15820] inactive_file 0 [ 558.436707][T15820] active_file 0 [ 558.436707][T15820] unevictable 0 [ 558.436707][T15820] slab_reclaimable 0 [ 558.436707][T15820] slab_unreclaimable 0 [ 558.436707][T15820] pgfault 370524 [ 558.436707][T15820] pgmajfault 0 [ 558.436707][T15820] workingset_refault 0 [ 558.436707][T15820] workingset_activate 0 [ 558.436707][T15820] workingset_nodereclaim 0 [ 558.436707][T15820] pgrefill 3144 [ 558.436707][T15820] pgscan 2772 [ 558.436707][T15820] pgsteal 82 [ 558.436707][T15820] pgactivate 2640 [ 558.530315][T15820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15820,uid=0 19:27:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x5e, 0x1008}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x400000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) close(r3) (async, rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async, rerun: 32) io_uring_enter(r8, 0x2d66, 0x9fa9, 0x2, &(0x7f00000000c0)={[0xffff]}, 0x8) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000240)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001440)="c537e81c48ce3152286b6a8398039bf88c462bbd7824ae38b184404f5e75314a401ebf72b945433199f527ad9e90dd81d74740ee70b9fce0a218f3ae59ee348d700ff60ef74e3a99750040d94edbf12b041f5f3a5e0001c079132bcf6fadb3f727009af01aaeb27b5389700a8062ffdf1a0cd70b1159abd6b0ad9606af6a23268b3d661d1ed404d88e97a1a63c82d6afdbe9e0a1bb3c52859784a2f85a4d799515f7f7fed7fcb9d8ebe392e729fd9436f0a1e172af922b86", 0xb8}, {&(0x7f0000001a00)="3b03936f4ca865b7b65f3aba909db23f7bc2f506363a346f9c97a1f6ffd70acd467de45dbe61a8d47a3b0e9d47056c03ea9371c4275efc3252e2bd0987a578edf6a4dbb30e3462937d2a7b41be99d67aba6f8291cc42901d7af6ec51c8c900ce4a2969ad7338114354679ae34e2e8a1bc865c35751fc50c24642928613e721d3c8aa1b2891fdccbfb77abea08130d31c415b05b1d9be71ebbbd1da77714355cd8637ab79b654d97ed10575ac4443a99cdf6ac7b2df6e83dbdc6b2178f52b9b649626c9b1666a137de473edb2a34f5435bc3bc8e8c15301ef550ed6011947f4e5773672c831f9f8528d05532e3d15f9f0", 0xf0}, {&(0x7f0000001640)="e3dc1d48bae889722c6cf34f5f07c7efd4721c275926c7911047b3eb8c788c60e562d4f630155c8ae7cfb3a00b7aadb6333fe740ec6ff211e30c2b4686187836b51bb9cc40c909915040e411040f", 0x4e}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f00000015c0)="e8bc4c5e1c18e86ea47cb02e4c9a20a4ef06785710b609ae8cb00841604e3794837063f31eaaf03ab1f2226d", 0x2c}, {&(0x7f0000001b00)="273e26bb46031c9fd248c10afe92dd8a4808905a55704182713481ac05151ef4e97cef02cea1cdf3b0550f32ce6c5fa4040c446c2b0ef6c1a0f7720da1686f65147657d6db61ab8d", 0x48}], 0x6, &(0x7f0000001c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000000040001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3], 0x48, 0x400800c}}], 0x1, 0x20000085) [ 558.545797][T15820] Memory cgroup out of memory: Killed process 15820 (syz-executor.5) total-vm:48692kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 558.563522][ T24] oom_reaper: reaped process 15820 (syz-executor.5), now anon-rss:0kB, file-rss:13648kB, shmem-rss:0kB [ 558.582048][T15821] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 558.592098][T15821] CPU: 0 PID: 15821 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 558.602337][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 558.612361][T15821] Call Trace: [ 558.615625][T15821] dump_stack+0x18e/0x1d5 [ 558.619954][T15821] dump_header+0xdb/0x700 [ 558.624269][T15821] oom_kill_process+0xf0/0x2d0 [ 558.629088][T15821] out_of_memory+0x55f/0x7f0 [ 558.633646][T15821] mem_cgroup_oom+0x638/0x760 [ 558.638292][T15821] try_charge+0xc41/0x1100 [ 558.642677][T15821] ? get_mem_cgroup_from_mm+0x251/0x280 [ 558.648192][T15821] mem_cgroup_try_charge+0xd5/0x2a0 [ 558.653364][T15821] wp_page_copy+0x33d/0x1830 [ 558.657929][T15821] ? _raw_spin_unlock+0x49/0x60 [ 558.662747][T15821] ? do_wp_page+0x535/0x8b0 [ 558.667219][T15821] handle_mm_fault+0xeab/0x3b90 [ 558.672043][T15821] do_user_addr_fault+0x4a4/0xb30 [ 558.677036][T15821] page_fault+0x2f/0x40 [ 558.681158][T15821] RIP: 0033:0x7f884452a73d [ 558.685542][T15821] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 558.705113][T15821] RSP: 002b:00007fffe9794eb0 EFLAGS: 00010202 [ 558.711150][T15821] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 [ 558.719091][T15821] RDX: 00007fffe97955a8 RSI: 00007f88445c7603 RDI: 00007fffe9795420 [ 558.727034][T15821] RBP: 00007fffe9795400 R08: 0000000000000000 R09: 00007fffe9795510 [ 558.734984][T15821] R10: 00007f88445c7603 R11: 0000000000000202 R12: 00007fffe9795420 [ 558.742926][T15821] R13: 00007f88445c7603 R14: 00007fffe97955a8 R15: 00007fffe97955a8 [ 558.751214][T15821] memory: usage 307200kB, limit 307200kB, failcnt 100812 [ 558.758250][T15821] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 558.765409][T15821] Memory cgroup stats for /syz5: [ 558.765454][T15821] anon 314490880 [ 558.765454][T15821] file 73728 [ 558.765454][T15821] kernel_stack 0 [ 558.765454][T15821] slab 0 [ 558.765454][T15821] sock 0 [ 558.765454][T15821] shmem 0 [ 558.765454][T15821] file_mapped 0 [ 558.765454][T15821] file_dirty 0 [ 558.765454][T15821] file_writeback 0 [ 558.765454][T15821] anon_thp 0 [ 558.765454][T15821] inactive_anon 0 [ 558.765454][T15821] active_anon 314535936 [ 558.765454][T15821] inactive_file 0 [ 558.765454][T15821] active_file 0 [ 558.765454][T15821] unevictable 0 [ 558.765454][T15821] slab_reclaimable 0 [ 558.765454][T15821] slab_unreclaimable 0 [ 558.765454][T15821] pgfault 370557 [ 558.765454][T15821] pgmajfault 0 [ 558.765454][T15821] workingset_refault 0 [ 558.765454][T15821] workingset_activate 0 [ 558.765454][T15821] workingset_nodereclaim 0 [ 558.765454][T15821] pgrefill 3144 [ 558.765454][T15821] pgscan 2772 [ 558.765454][T15821] pgsteal 82 [ 558.765454][T15821] pgactivate 2640 [ 558.859775][T15821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15816,uid=0 [ 558.875018][T15821] Memory cgroup out of memory: Killed process 15816 (syz-executor.5) total-vm:48560kB, anon-rss:440kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 558.892766][ T24] oom_reaper: reaped process 15816 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:60kB [ 558.904096][T15821] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 558.914140][T15821] CPU: 0 PID: 15821 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 558.924424][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 558.934444][T15821] Call Trace: [ 558.937708][T15821] dump_stack+0x18e/0x1d5 [ 558.942006][T15821] dump_header+0xdb/0x700 [ 558.946302][T15821] oom_kill_process+0xf0/0x2d0 [ 558.951033][T15821] out_of_memory+0x55f/0x7f0 [ 558.955591][T15821] mem_cgroup_oom+0x638/0x760 [ 558.960235][T15821] try_charge+0xc41/0x1100 [ 558.964621][T15821] ? get_mem_cgroup_from_mm+0x251/0x280 [ 558.970132][T15821] mem_cgroup_try_charge+0xd5/0x2a0 [ 558.975310][T15821] wp_page_copy+0x33d/0x1830 [ 558.979887][T15821] ? _raw_spin_unlock+0x49/0x60 [ 558.984709][T15821] ? do_wp_page+0x535/0x8b0 [ 558.989179][T15821] handle_mm_fault+0xeab/0x3b90 [ 558.993998][T15821] do_user_addr_fault+0x4a4/0xb30 [ 558.998993][T15821] page_fault+0x2f/0x40 [ 559.003121][T15821] RIP: 0033:0x7f884452a73d [ 559.007511][T15821] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 559.027084][T15821] RSP: 002b:00007fffe9794eb0 EFLAGS: 00010202 [ 559.033121][T15821] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 [ 559.041092][T15821] RDX: 00007fffe97955a8 RSI: 00007f88445c7603 RDI: 00007fffe9795420 [ 559.049905][T15821] RBP: 00007fffe9795400 R08: 0000000000000000 R09: 00007fffe9795510 [ 559.057846][T15821] R10: 00007f88445c7603 R11: 0000000000000202 R12: 00007fffe9795420 [ 559.065785][T15821] R13: 00007f88445c7603 R14: 00007fffe97955a8 R15: 00007fffe97955a8 [ 559.074209][T15821] memory: usage 307200kB, limit 307200kB, failcnt 101058 [ 559.081288][T15821] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 559.088145][T15821] Memory cgroup stats for /syz5: [ 559.088202][T15821] anon 314490880 [ 559.088202][T15821] file 73728 [ 559.088202][T15821] kernel_stack 0 [ 559.088202][T15821] slab 0 [ 559.088202][T15821] sock 0 [ 559.088202][T15821] shmem 0 [ 559.088202][T15821] file_mapped 0 [ 559.088202][T15821] file_dirty 0 [ 559.088202][T15821] file_writeback 0 [ 559.088202][T15821] anon_thp 0 [ 559.088202][T15821] inactive_anon 0 [ 559.088202][T15821] active_anon 314535936 [ 559.088202][T15821] inactive_file 0 [ 559.088202][T15821] active_file 0 [ 559.088202][T15821] unevictable 0 [ 559.088202][T15821] slab_reclaimable 0 [ 559.088202][T15821] slab_unreclaimable 0 [ 559.088202][T15821] pgfault 370557 [ 559.088202][T15821] pgmajfault 0 [ 559.088202][T15821] workingset_refault 0 [ 559.088202][T15821] workingset_activate 0 [ 559.088202][T15821] workingset_nodereclaim 0 [ 559.088202][T15821] pgrefill 3144 [ 559.088202][T15821] pgscan 2772 [ 559.088202][T15821] pgsteal 82 [ 559.088202][T15821] pgactivate 2640 [ 559.182227][T15821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15821,uid=0 [ 559.197517][T15821] Memory cgroup out of memory: Killed process 15821 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 559.214966][ T24] oom_reaper: reaped process 15821 (syz-executor.5), now anon-rss:0kB, file-rss:13652kB, shmem-rss:0kB [ 559.881413][T15739] device bridge_slave_1 left promiscuous mode [ 559.887544][T15739] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.895440][T15739] device bridge_slave_0 left promiscuous mode [ 559.901621][T15739] bridge0: port 1(bridge_slave_0) entered disabled state 19:27:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x890b, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_proto_private(r1, 0x890b, &(0x7f00000000c0)) (async) 19:27:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x3f000) 19:27:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ext3\x00', 0x10000, &(0x7f0000000200)='\x00') (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) r4 = openat$cgroup_int(r3, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:27:57 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x271010000000000, 0x0, 0x0) 19:27:57 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2ff000000000000, 0x0, 0x0) 19:27:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r0]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r4, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:27:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x40000) 19:27:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ext3\x00', 0x10000, &(0x7f0000000200)='\x00') open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 32) r4 = openat$cgroup_int(r3, &(0x7f0000000280)='memory.high\x00', 0x2, 0x0) (rerun: 32) sendfile(r4, r4, 0x0, 0x3) 19:27:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x41000) 19:27:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x42000) 19:27:58 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="c415948e7798b0a28cdf6f05a8a8dca1d8b755bc30a8", 0x16, 0x20000000, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x20c, 0x15, 0x200, 0x70bd28, 0x25dfdbfd, {0x1a, 0x53}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "b60d662c607c87487b8bd74aa6df74416c8a313edbb3a0299d8716fd3f4e74a866d9989855643addb4c27815f7120c686b682910346223f5b09a9cc2547ea20d5d2c53867a561e9ddf718e7b2bce96b49c5cf8f019fcd11dbd31f5aca33afe63d72762a723a48baeb615135eae3ba1cdd51e7370f765fa970d91f9ab1b5fbf75bb07cbec73e5487362cba1341a506158db7497b165b21544938953220389f229a71049eae6a6a4d6cb67c1a704a09883c206182e0c4b8c7f978039567c9c0dde82da68c986b35e5c5fd1c45501b0050665dc6df027558a44febabaf3d540e240997e6d69f1731c79ddc26d7e53db6aecc9f2a3af6c0db5b25c"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "e435bf1c9bc71d26126543a2204f4ded493b365cceaf801ca215d095f5e2f80de4dcb433ff75e7a941d1c9779a5a5d95a20ba7113f19601e1d2ca02823c93b6ffa1a2d5019b81c8739c461f4d3f52fb66159c30a3e8b002428840a493db7296dcbb7"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "0eee140ad7a3a403003cd0fa0a3417901a1960fda3251bd8c1c286416a495afeb1fdfc94d0b931bb25d8f93937ec1d44fe1a1d838415e01476de740d87f56f1cc1aa74a60092b259f3113d634c93975d2717f84eba2cb3ab31f432311727aaa523ec9af8a4c3497e8822fb375f3976094f5f96c8d6af31d03922e117b0890f5798a7c89e278e723274"}]}, 0x20c}}, 0x810) open(&(0x7f0000000040)='./file1\x00', 0x109800, 0x49) 19:27:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x43000) [ 562.039157][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.046342][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.054027][T15855] device bridge_slave_0 entered promiscuous mode [ 562.061397][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.068399][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.075779][T15855] device bridge_slave_1 entered promiscuous mode [ 562.114335][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.121373][T15855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.128588][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.135598][T15855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.155581][ T702] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.162756][ T702] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.169956][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 562.178188][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 562.188002][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 562.196264][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.203289][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.221823][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.229913][ T702] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.237018][ T702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.244329][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 562.252260][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 562.271289][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 562.279536][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 562.287522][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 562.300241][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 562.308586][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 562.327731][T15859] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 562.338472][T15859] CPU: 1 PID: 15859 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 562.348679][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 562.358701][T15859] Call Trace: [ 562.361962][T15859] dump_stack+0x18e/0x1d5 [ 562.366259][T15859] dump_header+0xdb/0x700 [ 562.370556][T15859] oom_kill_process+0xf0/0x2d0 [ 562.375287][T15859] out_of_memory+0x55f/0x7f0 [ 562.379846][T15859] mem_cgroup_oom+0x638/0x760 [ 562.384495][T15859] try_charge+0xc41/0x1100 [ 562.388878][T15859] ? get_mem_cgroup_from_mm+0x251/0x280 [ 562.394388][T15859] mem_cgroup_try_charge+0xd5/0x2a0 [ 562.399554][T15859] handle_mm_fault+0x158a/0x3b90 [ 562.404460][T15859] do_user_addr_fault+0x4a4/0xb30 [ 562.409451][T15859] page_fault+0x2f/0x40 [ 562.413577][T15859] RIP: 0033:0x7f092976dccf [ 562.417961][T15859] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 562.437544][T15859] RSP: 002b:00007ffef9cec430 EFLAGS: 00010246 [ 562.443580][T15859] RAX: 00007f0928913000 RBX: 0000000000021000 RCX: 00007f09297be6b7 [ 562.451516][T15859] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0928914000 [ 562.459472][T15859] RBP: 00007ffef9cec500 R08: 00000000ffffffff R09: 00007f0928933700 [ 562.467411][T15859] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffef9cec620 [ 562.475350][T15859] R13: 00007f0928933700 R14: 0000000000000000 R15: 0000000000022000 [ 562.484077][T15859] memory: usage 307200kB, limit 307200kB, failcnt 101080 [ 562.492196][T15859] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 562.499079][T15859] Memory cgroup stats for /syz5: [ 562.499130][T15859] anon 314490880 [ 562.499130][T15859] file 73728 [ 562.499130][T15859] kernel_stack 0 [ 562.499130][T15859] slab 0 [ 562.499130][T15859] sock 0 [ 562.499130][T15859] shmem 0 [ 562.499130][T15859] file_mapped 0 [ 562.499130][T15859] file_dirty 0 [ 562.499130][T15859] file_writeback 0 [ 562.499130][T15859] anon_thp 0 [ 562.499130][T15859] inactive_anon 0 [ 562.499130][T15859] active_anon 314535936 [ 562.499130][T15859] inactive_file 0 [ 562.499130][T15859] active_file 0 [ 562.499130][T15859] unevictable 0 [ 562.499130][T15859] slab_reclaimable 0 [ 562.499130][T15859] slab_unreclaimable 0 [ 562.499130][T15859] pgfault 370590 [ 562.499130][T15859] pgmajfault 0 [ 562.499130][T15859] workingset_refault 0 [ 562.499130][T15859] workingset_activate 0 [ 562.499130][T15859] workingset_nodereclaim 0 [ 562.499130][T15859] pgrefill 3144 [ 562.499130][T15859] pgscan 2772 [ 562.499130][T15859] pgsteal 82 [ 562.499130][T15859] pgactivate 2640 [ 562.592267][T15859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15859,uid=0 [ 562.608009][T15859] Memory cgroup out of memory: Killed process 15859 (syz-executor.5) total-vm:52532kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 562.625873][ T24] oom_reaper: reaped process 15859 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB 19:28:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_proto_private(r1, 0x890b, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_proto_private(r1, 0x890b, &(0x7f00000000c0)) (async) 19:28:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x44000) 19:28:02 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="c415948e7798b0a28cdf6f05a8a8dca1d8b755bc30a8", 0x16, 0x20000000, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0xa) (rerun: 32) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x20c, 0x15, 0x200, 0x70bd28, 0x25dfdbfd, {0x1a, 0x53}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "b60d662c607c87487b8bd74aa6df74416c8a313edbb3a0299d8716fd3f4e74a866d9989855643addb4c27815f7120c686b682910346223f5b09a9cc2547ea20d5d2c53867a561e9ddf718e7b2bce96b49c5cf8f019fcd11dbd31f5aca33afe63d72762a723a48baeb615135eae3ba1cdd51e7370f765fa970d91f9ab1b5fbf75bb07cbec73e5487362cba1341a506158db7497b165b21544938953220389f229a71049eae6a6a4d6cb67c1a704a09883c206182e0c4b8c7f978039567c9c0dde82da68c986b35e5c5fd1c45501b0050665dc6df027558a44febabaf3d540e240997e6d69f1731c79ddc26d7e53db6aecc9f2a3af6c0db5b25c"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "e435bf1c9bc71d26126543a2204f4ded493b365cceaf801ca215d095f5e2f80de4dcb433ff75e7a941d1c9779a5a5d95a20ba7113f19601e1d2ca02823c93b6ffa1a2d5019b81c8739c461f4d3f52fb66159c30a3e8b002428840a493db7296dcbb7"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "0eee140ad7a3a403003cd0fa0a3417901a1960fda3251bd8c1c286416a495afeb1fdfc94d0b931bb25d8f93937ec1d44fe1a1d838415e01476de740d87f56f1cc1aa74a60092b259f3113d634c93975d2717f84eba2cb3ab31f432311727aaa523ec9af8a4c3497e8822fb375f3976094f5f96c8d6af31d03922e117b0890f5798a7c89e278e723274"}]}, 0x20c}}, 0x810) open(&(0x7f0000000040)='./file1\x00', 0x109800, 0x49) 19:28:02 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x800000000000000, 0x0, 0x0) 19:28:02 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x272030000000000, 0x0, 0x0) 19:28:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r0]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r4, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r0]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r2) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r4, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:28:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x45000) 19:28:02 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="c415948e7798b0a28cdf6f05a8a8dca1d8b755bc30a8", 0x16, 0x20000000, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) (async, rerun: 64) r2 = fcntl$dupfd(r0, 0x0, r0) (rerun: 64) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0xa) (rerun: 64) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x20c, 0x15, 0x200, 0x70bd28, 0x25dfdbfd, {0x1a, 0x53}, [@INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "b60d662c607c87487b8bd74aa6df74416c8a313edbb3a0299d8716fd3f4e74a866d9989855643addb4c27815f7120c686b682910346223f5b09a9cc2547ea20d5d2c53867a561e9ddf718e7b2bce96b49c5cf8f019fcd11dbd31f5aca33afe63d72762a723a48baeb615135eae3ba1cdd51e7370f765fa970d91f9ab1b5fbf75bb07cbec73e5487362cba1341a506158db7497b165b21544938953220389f229a71049eae6a6a4d6cb67c1a704a09883c206182e0c4b8c7f978039567c9c0dde82da68c986b35e5c5fd1c45501b0050665dc6df027558a44febabaf3d540e240997e6d69f1731c79ddc26d7e53db6aecc9f2a3af6c0db5b25c"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "e435bf1c9bc71d26126543a2204f4ded493b365cceaf801ca215d095f5e2f80de4dcb433ff75e7a941d1c9779a5a5d95a20ba7113f19601e1d2ca02823c93b6ffa1a2d5019b81c8739c461f4d3f52fb66159c30a3e8b002428840a493db7296dcbb7"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "0eee140ad7a3a403003cd0fa0a3417901a1960fda3251bd8c1c286416a495afeb1fdfc94d0b931bb25d8f93937ec1d44fe1a1d838415e01476de740d87f56f1cc1aa74a60092b259f3113d634c93975d2717f84eba2cb3ab31f432311727aaa523ec9af8a4c3497e8822fb375f3976094f5f96c8d6af31d03922e117b0890f5798a7c89e278e723274"}]}, 0x20c}}, 0x810) open(&(0x7f0000000040)='./file1\x00', 0x109800, 0x49) 19:28:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x46000) [ 564.636887][T15866] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 564.656519][T15866] CPU: 0 PID: 15866 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 564.666759][T15866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 564.676803][T15866] Call Trace: [ 564.680089][T15866] dump_stack+0x18e/0x1d5 19:28:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x47000) [ 564.684412][T15866] dump_header+0xdb/0x700 [ 564.688730][T15866] oom_kill_process+0xf0/0x2d0 [ 564.693496][T15866] out_of_memory+0x55f/0x7f0 [ 564.698083][T15866] mem_cgroup_oom+0x638/0x760 [ 564.702747][T15866] try_charge+0xc41/0x1100 [ 564.707156][T15866] ? get_mem_cgroup_from_mm+0x251/0x280 [ 564.712689][T15866] mem_cgroup_try_charge+0xd5/0x2a0 [ 564.718321][T15866] wp_page_copy+0x33d/0x1830 [ 564.722909][T15866] ? _raw_spin_unlock+0x49/0x60 [ 564.727833][T15866] ? do_wp_page+0x535/0x8b0 [ 564.732325][T15866] handle_mm_fault+0xeab/0x3b90 19:28:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x48000) 19:28:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x49000) [ 564.737165][T15866] ? psi_memstall_leave+0xa8/0xd0 [ 564.742186][T15866] do_user_addr_fault+0x4a4/0xb30 [ 564.747198][T15866] page_fault+0x2f/0x40 [ 564.751342][T15866] RIP: 0033:0x7f092976c5ba [ 564.755742][T15866] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 564.775331][T15866] RSP: 002b:00007ffef9cec698 EFLAGS: 00010202 [ 564.781694][T15866] RAX: 000055555739b6c0 RBX: 0000000000000001 RCX: 00007f092a8193e0 [ 564.789654][T15866] RDX: 0000000000000001 RSI: 00007f09298b7ef0 RDI: 0000000000000001 [ 564.797872][T15866] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f09298b7ef0 [ 564.805828][T15866] R10: 000055555739b400 R11: 0000000000000202 R12: 0000000000000000 [ 564.813786][T15866] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffef9cec7b0 [ 564.849731][T15866] memory: usage 307200kB, limit 307200kB, failcnt 101097 [ 564.857878][T15866] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 564.877669][T15866] Memory cgroup stats for /syz5: [ 564.877741][T15866] anon 314490880 [ 564.877741][T15866] file 73728 [ 564.877741][T15866] kernel_stack 0 [ 564.877741][T15866] slab 0 [ 564.877741][T15866] sock 0 [ 564.877741][T15866] shmem 0 [ 564.877741][T15866] file_mapped 0 [ 564.877741][T15866] file_dirty 0 [ 564.877741][T15866] file_writeback 0 [ 564.877741][T15866] anon_thp 0 [ 564.877741][T15866] inactive_anon 0 [ 564.877741][T15866] active_anon 314535936 [ 564.877741][T15866] inactive_file 0 [ 564.877741][T15866] active_file 0 [ 564.877741][T15866] unevictable 0 [ 564.877741][T15866] slab_reclaimable 0 [ 564.877741][T15866] slab_unreclaimable 0 [ 564.877741][T15866] pgfault 370590 [ 564.877741][T15866] pgmajfault 0 [ 564.877741][T15866] workingset_refault 0 [ 564.877741][T15866] workingset_activate 0 [ 564.877741][T15866] workingset_nodereclaim 0 [ 564.877741][T15866] pgrefill 3144 [ 564.877741][T15866] pgscan 2772 [ 564.877741][T15866] pgsteal 82 [ 564.877741][T15866] pgactivate 2640 [ 564.977205][T15866] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15866,uid=0 [ 564.996213][T15866] Memory cgroup out of memory: Killed process 15866 (syz-executor.5) total-vm:48560kB, anon-rss:452kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 19:28:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000480)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="2c0000000000007bc01618c90001e70000010000008124c485dcea2ff0934adb49eac4199fcc5c442945296bae575adcce0e7b4b9a0c0e50cd94bfbd88161692c65e3a9121fc9cb60e13a6ad7c64bd5f4b77cd54d388895f1687b905ccba3f427b456495e9948aad8390088cec9eb1367336690ba38a019ccfadbd0f89a59383275c180bbedf11ba7278cd7d", @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="d1c5ffffffffffffffff14", @ANYRES32, @ANYBLOB="000000001c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8, 0x890}}], 0x1, 0x20040000) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x60) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x7, 0x0, &(0x7f0000000380), 0x5000, 0x0, 0x0) statx(r3, 0x0, 0x400, 0x20, &(0x7f000000bb00)) 19:28:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x4a000) 19:28:06 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) 19:28:06 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0xc00000000000000, 0x0, 0x0) 19:28:06 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x273020000000000, 0x0, 0x0) 19:28:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r0]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) close(r2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r4, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:06 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) [ 568.806446][T15902] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 568.820034][T15902] CPU: 1 PID: 15902 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 568.830276][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 568.840315][T15902] Call Trace: [ 568.843581][T15902] dump_stack+0x18e/0x1d5 [ 568.847968][T15902] dump_header+0xdb/0x700 [ 568.852291][T15902] oom_kill_process+0xf0/0x2d0 [ 568.857156][T15902] out_of_memory+0x55f/0x7f0 [ 568.861718][T15902] mem_cgroup_oom+0x638/0x760 [ 568.866907][T15902] try_charge+0xc41/0x1100 [ 568.871304][T15902] ? get_mem_cgroup_from_mm+0x251/0x280 [ 568.876841][T15902] mem_cgroup_try_charge+0xd5/0x2a0 [ 568.882045][T15902] wp_page_copy+0x33d/0x1830 [ 568.886633][T15902] ? _raw_spin_unlock+0x49/0x60 [ 568.891479][T15902] ? do_wp_page+0x535/0x8b0 [ 568.896061][T15902] handle_mm_fault+0xeab/0x3b90 [ 568.900906][T15902] do_user_addr_fault+0x4a4/0xb30 [ 568.905920][T15902] page_fault+0x2f/0x40 [ 568.910058][T15902] RIP: 0033:0x7f092976c546 [ 568.914456][T15902] Code: 49 8d 82 c0 02 00 00 48 89 05 ce ce 0a 01 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a ce 0a 01 <4c> 89 0d ab b9 14 00 31 d2 48 c7 05 9e ce 0a 01 00 00 00 00 4c 89 [ 568.934051][T15902] RSP: 002b:00007ffef9cec698 EFLAGS: 00010246 [ 568.940105][T15902] RAX: 000055555739b6c0 RBX: 0000000000000001 RCX: 00007f092a8193e0 [ 568.948086][T15902] RDX: 00007f092a8193e0 RSI: 00007f09298b7ef0 RDI: 0000000000000001 19:28:06 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) 19:28:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x4b000) 19:28:06 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x1000000000000000, 0x0, 0x0) [ 568.956052][T15902] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f09298b7ef0 [ 568.964006][T15902] R10: 000055555739b400 R11: 0000000000000202 R12: 0000000000000000 [ 568.971970][T15902] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffef9cec7b0 [ 569.005423][T15902] memory: usage 307200kB, limit 307200kB, failcnt 101111 [ 569.020997][T15902] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 569.028002][T15902] Memory cgroup stats for /syz5: [ 569.028078][T15902] anon 314490880 [ 569.028078][T15902] file 73728 [ 569.028078][T15902] kernel_stack 0 [ 569.028078][T15902] slab 0 [ 569.028078][T15902] sock 0 [ 569.028078][T15902] shmem 0 [ 569.028078][T15902] file_mapped 0 [ 569.028078][T15902] file_dirty 0 [ 569.028078][T15902] file_writeback 0 [ 569.028078][T15902] anon_thp 0 [ 569.028078][T15902] inactive_anon 0 [ 569.028078][T15902] active_anon 314535936 [ 569.028078][T15902] inactive_file 0 [ 569.028078][T15902] active_file 0 [ 569.028078][T15902] unevictable 0 [ 569.028078][T15902] slab_reclaimable 0 [ 569.028078][T15902] slab_unreclaimable 0 [ 569.028078][T15902] pgfault 370623 [ 569.028078][T15902] pgmajfault 0 [ 569.028078][T15902] workingset_refault 0 [ 569.028078][T15902] workingset_activate 0 19:28:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x4c000) [ 569.028078][T15902] workingset_nodereclaim 0 [ 569.028078][T15902] pgrefill 3144 [ 569.028078][T15902] pgscan 2772 [ 569.028078][T15902] pgsteal 82 [ 569.028078][T15902] pgactivate 2640 [ 569.131103][T15902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15902,uid=0 19:28:06 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r2], 0x7) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x6, 0xc3, 0x81}}, 0x30) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@fscache}], [{@fowner_eq}, {@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fowner_lt={'fowner<', r9}}]}}) [ 569.157259][T15902] Memory cgroup out of memory: Killed process 15902 (syz-executor.5) total-vm:48560kB, anon-rss:452kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 569.195974][ T24] oom_reaper: reaped process 15902 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB 19:28:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24a) 19:28:11 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x274010000000000, 0x0, 0x0) 19:28:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000480)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="2c0000000000007bc01618c90001e70000010000008124c485dcea2ff0934adb49eac4199fcc5c442945296bae575adcce0e7b4b9a0c0e50cd94bfbd88161692c65e3a9121fc9cb60e13a6ad7c64bd5f4b77cd54d388895f1687b905ccba3f427b456495e9948aad8390088cec9eb1367336690ba38a019ccfadbd0f89a59383275c180bbedf11ba7278cd7d", @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="d1c5ffffffffffffffff14", @ANYRES32, @ANYBLOB="000000001c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8, 0x890}}], 0x1, 0x20040000) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x60) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x7, 0x0, &(0x7f0000000380), 0x5000, 0x0, 0x0) statx(r3, 0x0, 0x400, 0x20, &(0x7f000000bb00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000480)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="2c0000000000007bc01618c90001e70000010000008124c485dcea2ff0934adb49eac4199fcc5c442945296bae575adcce0e7b4b9a0c0e50cd94bfbd88161692c65e3a9121fc9cb60e13a6ad7c64bd5f4b77cd54d388895f1687b905ccba3f427b456495e9948aad8390088cec9eb1367336690ba38a019ccfadbd0f89a59383275c180bbedf11ba7278cd7d", @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="d1c5ffffffffffffffff14", @ANYRES32, @ANYBLOB="000000001c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8, 0x890}}], 0x1, 0x20040000) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) (async) open(&(0x7f0000000540)='./file0\x00', 0x0, 0x60) (async) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x7, 0x0, &(0x7f0000000380), 0x5000, 0x0, 0x0) (async) statx(r3, 0x0, 0x400, 0x20, &(0x7f000000bb00)) (async) 19:28:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r4, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:11 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x1700000000000000, 0x0, 0x0) 19:28:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r2], 0x7) (async) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (rerun: 64) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x6, 0xc3, 0x81}}, 0x30) (async) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@fscache}], [{@fowner_eq}, {@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fowner_lt={'fowner<', r9}}]}}) [ 573.958716][T15938] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 573.969150][T15938] CPU: 1 PID: 15938 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 573.979376][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 573.989501][T15938] Call Trace: [ 573.992784][T15938] dump_stack+0x18e/0x1d5 [ 573.997102][T15938] dump_header+0xdb/0x700 [ 574.001415][T15938] oom_kill_process+0xf0/0x2d0 [ 574.006163][T15938] out_of_memory+0x55f/0x7f0 [ 574.010735][T15938] mem_cgroup_oom+0x638/0x760 [ 574.015394][T15938] try_charge+0xc41/0x1100 [ 574.019799][T15938] ? get_mem_cgroup_from_mm+0x251/0x280 [ 574.025335][T15938] mem_cgroup_try_charge+0xd5/0x2a0 [ 574.030534][T15938] wp_page_copy+0x33d/0x1830 [ 574.035117][T15938] ? _raw_spin_unlock+0x49/0x60 [ 574.039953][T15938] ? do_wp_page+0x535/0x8b0 [ 574.044443][T15938] handle_mm_fault+0xeab/0x3b90 [ 574.049293][T15938] do_user_addr_fault+0x4a4/0xb30 [ 574.054313][T15938] page_fault+0x2f/0x40 [ 574.058457][T15938] RIP: 0033:0x7f092976c546 [ 574.062854][T15938] Code: 49 8d 82 c0 02 00 00 48 89 05 ce ce 0a 01 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a ce 0a 01 <4c> 89 0d ab b9 14 00 31 d2 48 c7 05 9e ce 0a 01 00 00 00 00 4c 89 [ 574.082442][T15938] RSP: 002b:00007ffef9cec698 EFLAGS: 00010246 [ 574.088497][T15938] RAX: 000055555739b6c0 RBX: 0000000000000001 RCX: 00007f092a8193e0 [ 574.096453][T15938] RDX: 00007f092a8193e0 RSI: 00007f09298b7ef0 RDI: 0000000000000001 19:28:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r2], 0x7) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x6, 0xc3, 0x81}}, 0x30) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@fscache}], [{@fowner_eq}, {@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fowner_lt={'fowner<', r9}}]}}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r2], 0x7) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r5, r5, 0x0, 0x3) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r6) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x6, 0xc3, 0x81}}, 0x30) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@fscache}], [{@fowner_eq}, {@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fowner_lt={'fowner<', r9}}]}}) (async) [ 574.104411][T15938] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f09298b7ef0 [ 574.112812][T15938] R10: 000055555739b400 R11: 0000000000000202 R12: 0000000000000000 [ 574.120771][T15938] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffef9cec7b0 [ 574.133893][T15938] memory: usage 307200kB, limit 307200kB, failcnt 101124 [ 574.141144][T15938] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 574.148086][T15938] Memory cgroup stats for /syz5: [ 574.148155][T15938] anon 314490880 [ 574.148155][T15938] file 73728 [ 574.148155][T15938] kernel_stack 0 [ 574.148155][T15938] slab 0 [ 574.148155][T15938] sock 0 [ 574.148155][T15938] shmem 0 [ 574.148155][T15938] file_mapped 0 [ 574.148155][T15938] file_dirty 0 [ 574.148155][T15938] file_writeback 0 [ 574.148155][T15938] anon_thp 0 [ 574.148155][T15938] inactive_anon 0 [ 574.148155][T15938] active_anon 314535936 [ 574.148155][T15938] inactive_file 0 [ 574.148155][T15938] active_file 0 [ 574.148155][T15938] unevictable 0 [ 574.148155][T15938] slab_reclaimable 0 [ 574.148155][T15938] slab_unreclaimable 0 [ 574.148155][T15938] pgfault 370656 [ 574.148155][T15938] pgmajfault 0 [ 574.148155][T15938] workingset_refault 0 [ 574.148155][T15938] workingset_activate 0 [ 574.148155][T15938] workingset_nodereclaim 0 [ 574.148155][T15938] pgrefill 3144 [ 574.148155][T15938] pgscan 2772 [ 574.148155][T15938] pgsteal 82 [ 574.148155][T15938] pgactivate 2640 19:28:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000100", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000400050005000400000000000600010000000000"], 0x28}}, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 574.248566][T15938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15855,uid=0 [ 574.263846][T15938] Memory cgroup out of memory: Killed process 15855 (syz-executor.5) total-vm:48560kB, anon-rss:452kB, file-rss:15304kB, shmem-rss:60kB, UID:0 pgtables:84kB oom_score_adj:0 [ 574.281657][ T24] oom_reaper: reaped process 15855 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:60kB 19:28:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 64) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000100", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000400050005000400000000000600010000000000"], 0x28}}, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) (async) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 574.323367][T15938] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 574.338144][T15938] CPU: 1 PID: 15938 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 574.348383][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 574.358425][T15938] Call Trace: [ 574.361709][T15938] dump_stack+0x18e/0x1d5 [ 574.366029][T15938] dump_header+0xdb/0x700 19:28:11 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x275030000000000, 0x0, 0x0) [ 574.370351][T15938] oom_kill_process+0xf0/0x2d0 [ 574.375105][T15938] out_of_memory+0x55f/0x7f0 [ 574.379682][T15938] mem_cgroup_oom+0x638/0x760 [ 574.384346][T15938] try_charge+0xc41/0x1100 [ 574.388754][T15938] ? get_mem_cgroup_from_mm+0x251/0x280 [ 574.394286][T15938] mem_cgroup_try_charge+0xd5/0x2a0 [ 574.399478][T15938] handle_mm_fault+0x158a/0x3b90 [ 574.404415][T15938] do_user_addr_fault+0x4a4/0xb30 [ 574.409429][T15938] page_fault+0x2f/0x40 [ 574.413564][T15938] RIP: 0033:0x7f092975e0d9 19:28:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24c) [ 574.417963][T15938] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 574.437551][T15938] RSP: 002b:00007ffef9cec4d0 EFLAGS: 00010246 [ 574.443601][T15938] RAX: 0000000020000140 RBX: 0000000000000000 RCX: 0000000000000000 [ 574.451558][T15938] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 000055555739b2e8 [ 574.459514][T15938] RBP: 00007ffef9cec5c8 R08: 0000000000000000 R09: 0000000000000000 19:28:11 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x1f00000000000000, 0x0, 0x0) [ 574.467466][T15938] R10: 00000000000159d8 R11: 000000000000023e R12: 0000000000000001 [ 574.475421][T15938] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffef9cec7b0 [ 574.498340][T15938] memory: usage 307204kB, limit 307200kB, failcnt 101804 [ 574.505444][T15938] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 574.512354][T15938] Memory cgroup stats for /syz5: [ 574.512426][T15938] anon 314490880 [ 574.512426][T15938] file 73728 [ 574.512426][T15938] kernel_stack 0 [ 574.512426][T15938] slab 0 [ 574.512426][T15938] sock 0 [ 574.512426][T15938] shmem 0 [ 574.512426][T15938] file_mapped 0 [ 574.512426][T15938] file_dirty 0 [ 574.512426][T15938] file_writeback 0 [ 574.512426][T15938] anon_thp 0 [ 574.512426][T15938] inactive_anon 0 [ 574.512426][T15938] active_anon 314535936 [ 574.512426][T15938] inactive_file 0 [ 574.512426][T15938] active_file 0 [ 574.512426][T15938] unevictable 0 [ 574.512426][T15938] slab_reclaimable 0 [ 574.512426][T15938] slab_unreclaimable 0 19:28:12 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000100", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000400050005000400000000000600010000000000"], 0x28}}, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 574.512426][T15938] pgfault 370656 [ 574.512426][T15938] pgmajfault 0 [ 574.512426][T15938] workingset_refault 0 [ 574.512426][T15938] workingset_activate 0 [ 574.512426][T15938] workingset_nodereclaim 0 [ 574.512426][T15938] pgrefill 3210 [ 574.512426][T15938] pgscan 2805 [ 574.512426][T15938] pgsteal 82 [ 574.512426][T15938] pgactivate 2673 19:28:12 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000300)) sendfile(r3, r3, 0x0, 0x3) [ 574.713520][T15938] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=15938,uid=0 [ 574.745008][T15938] Memory cgroup out of memory: Killed process 15938 (syz-executor.5) total-vm:52400kB, anon-rss:452kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 574.780088][ T24] oom_reaper: reaped process 15938 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB [ 575.701085][T15995] device bridge_slave_1 left promiscuous mode [ 575.707199][T15995] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.714726][T15995] device bridge_slave_0 left promiscuous mode [ 575.720899][T15995] bridge0: port 1(bridge_slave_0) entered disabled state 19:28:16 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x276020000000000, 0x0, 0x0) 19:28:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000480)=@file={0x0, './file0/file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="2c0000000000007bc01618c90001e70000010000008124c485dcea2ff0934adb49eac4199fcc5c442945296bae575adcce0e7b4b9a0c0e50cd94bfbd88161692c65e3a9121fc9cb60e13a6ad7c64bd5f4b77cd54d388895f1687b905ccba3f427b456495e9948aad8390088cec9eb1367336690ba38a019ccfadbd0f89a59383275c180bbedf11ba7278cd7d", @ANYRES64=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="d1c5ffffffffffffffff14", @ANYRES32, @ANYBLOB="000000001c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xa8, 0x890}}], 0x1, 0x20040000) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x60) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x7, 0x0, &(0x7f0000000380), 0x5000, 0x0, 0x0) (async) statx(r3, 0x0, 0x400, 0x20, &(0x7f000000bb00)) 19:28:16 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000300)) (async) sendfile(r3, r3, 0x0, 0x3) 19:28:16 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2f2f627500000000, 0x0, 0x0) 19:28:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x8800000) 19:28:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r4, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r4, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:28:16 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) (rerun: 64) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000300)) (async, rerun: 64) sendfile(r3, r3, 0x0, 0x3) (rerun: 64) 19:28:16 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x406, r6) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x2}) sendfile(r4, r4, 0x0, 0x3) 19:28:16 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x406, r6) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x2}) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) fcntl$dupfd(r5, 0x406, r6) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x2}) (async) sendfile(r4, r4, 0x0, 0x3) (async) 19:28:16 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x406, r6) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x2}) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) fcntl$dupfd(r5, 0x406, r6) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x2}) (async) sendfile(r4, r4, 0x0, 0x3) (async) 19:28:16 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x820001, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:16 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x820001, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x820001, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:28:16 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x277010000000000, 0x0, 0x0) [ 580.800269][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.807336][T16059] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.815091][T16059] device bridge_slave_0 entered promiscuous mode [ 580.821937][T16059] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.828936][T16059] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.836431][T16059] device bridge_slave_1 entered promiscuous mode [ 580.874010][T16059] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.881052][T16059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.888265][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.895414][T16059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.914797][ T702] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.922044][ T702] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.929271][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 580.937065][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 580.946324][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 580.954473][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.961491][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.982102][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 580.990335][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 580.999065][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.006268][ T698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.013563][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 581.021516][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 581.032585][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 581.051474][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 581.059791][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.068376][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.088206][T16063] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 581.098645][T16063] CPU: 1 PID: 16063 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 581.108852][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 581.118883][T16063] Call Trace: [ 581.122145][T16063] dump_stack+0x18e/0x1d5 [ 581.126450][T16063] dump_header+0xdb/0x700 [ 581.130750][T16063] oom_kill_process+0xf0/0x2d0 [ 581.135483][T16063] out_of_memory+0x55f/0x7f0 [ 581.140047][T16063] mem_cgroup_oom+0x638/0x760 [ 581.144691][T16063] try_charge+0xc41/0x1100 [ 581.149078][T16063] ? get_mem_cgroup_from_mm+0x251/0x280 [ 581.154592][T16063] mem_cgroup_try_charge+0xd5/0x2a0 [ 581.159757][T16063] handle_mm_fault+0x158a/0x3b90 [ 581.164671][T16063] do_user_addr_fault+0x4a4/0xb30 [ 581.169671][T16063] page_fault+0x2f/0x40 [ 581.173795][T16063] RIP: 0033:0x7fc2c7dd5ccf [ 581.178179][T16063] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 581.197927][T16063] RSP: 002b:00007ffd5451ade0 EFLAGS: 00010246 [ 581.203958][T16063] RAX: 00007fc2c6f7b000 RBX: 0000000000021000 RCX: 00007fc2c7e266b7 [ 581.211894][T16063] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fc2c6f7c000 [ 581.219834][T16063] RBP: 00007ffd5451aeb0 R08: 00000000ffffffff R09: 00007fc2c6f9b700 [ 581.227801][T16063] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffd5451afd0 [ 581.235746][T16063] R13: 00007fc2c6f9b700 R14: 0000000000000000 R15: 0000000000022000 [ 581.244594][T16063] memory: usage 307200kB, limit 307200kB, failcnt 101827 [ 581.251627][T16063] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 581.258448][T16063] Memory cgroup stats for /syz5: [ 581.258497][T16063] anon 314490880 [ 581.258497][T16063] file 73728 [ 581.258497][T16063] kernel_stack 0 [ 581.258497][T16063] slab 0 [ 581.258497][T16063] sock 0 [ 581.258497][T16063] shmem 0 [ 581.258497][T16063] file_mapped 0 [ 581.258497][T16063] file_dirty 0 [ 581.258497][T16063] file_writeback 0 [ 581.258497][T16063] anon_thp 0 [ 581.258497][T16063] inactive_anon 0 [ 581.258497][T16063] active_anon 314535936 [ 581.258497][T16063] inactive_file 0 [ 581.258497][T16063] active_file 0 [ 581.258497][T16063] unevictable 0 [ 581.258497][T16063] slab_reclaimable 0 [ 581.258497][T16063] slab_unreclaimable 0 [ 581.258497][T16063] pgfault 370722 [ 581.258497][T16063] pgmajfault 0 [ 581.258497][T16063] workingset_refault 33 [ 581.258497][T16063] workingset_activate 0 [ 581.258497][T16063] workingset_nodereclaim 0 [ 581.258497][T16063] pgrefill 3210 [ 581.258497][T16063] pgscan 2805 [ 581.258497][T16063] pgsteal 82 [ 581.258497][T16063] pgactivate 2673 [ 581.352091][T16063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16063,uid=0 [ 581.367327][T16063] Memory cgroup out of memory: Killed process 16063 (syz-executor.5) total-vm:48692kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 581.385593][ T24] oom_reaper: reaped process 16063 (syz-executor.5), now anon-rss:0kB, file-rss:13624kB, shmem-rss:0kB 19:28:21 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x4000000000000000, 0x0, 0x0) 19:28:21 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='fusectl\x00', 0x820001, 0x0) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x2208e2cb) 19:28:21 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x278030000000000, 0x0, 0x0) 19:28:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) close(r3) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r4, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:21 executing program 1: connect$unix(0xffffffffffffffff, 0x0, 0x0) getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() setresgid(r2, 0x0, 0xee01) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0x0, r0, {0x2, 0x3, 0x5e2, 0x10001, 0x7, 0x400, {0x5, 0x6, 0x80, 0x9, 0x7, 0xd3f, 0x2ce6, 0x3ff, 0x2322, 0x1000, 0x1, r1, r2, 0x10000, 0x3}}}, 0x90) r3 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040)=0x7f, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x0, 0xe0}, 0x10, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="080008fcbf98b86af0e764d91650c2f9eb23d4ed7c9d22a93688acbd2019ce9138c5d48f410a21d71b170e95caa2b8c3f244da2c732c69e2c1c16812ac8e423e16fc3a04ff815ef676c165a81558f03ecf3a68b88ae90cb00720470b2e81d103bb301a83cab06eaa581fea751e884415", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002300)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x0, 0x1d0, 0xd0, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f00000022c0), {[{{@ipv6={@empty, @private1, [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xffff00, 0xffffff00], 'ip6_vti0\x00', 'vlan0\x00', {}, {}, 0xa, 0xfd, 0x6, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @remote, [0xff000000, 0x0, 0xffffffff, 0xff], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth0\x00', 'ip_vti0\x00', {}, {}, 0x32, 0xf0, 0x4, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x0, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'bridge0\x00', 'syzkaller0\x00', {}, {0xff}, 0x62, 0xac, 0x4, 0x1}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x40], 0xffffff81, 0x30, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @remote], 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000002840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x4c) syz_clone(0x8004000, 0x0, 0x3d, 0x0, 0x0, &(0x7f0000000100)="cadf1fd85328800076d1c9ca67dca737c7b37a4f") [ 584.332500][T16067] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 584.353710][T16067] CPU: 0 PID: 16067 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 584.363956][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 584.373995][T16067] Call Trace: [ 584.377278][T16067] dump_stack+0x18e/0x1d5 19:28:21 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x100, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) unlink(&(0x7f0000000200)='./file0/file0\x00') r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) chdir(&(0x7f0000000240)='./file0/file0/file0\x00') sendfile(r4, r4, 0x0, 0x3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = getuid() r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) mount$binder(0x0, &(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000500), 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB='stats=global,uid=', @ANYRESDEC=r6, @ANYBLOB="2c7375626a5f747970653d6d656d6f7279e50abc3dae625f747970652d24ba00a77c95150c16d00ebfc8e12c657569643d", @ANYRESDEC=r7, @ANYBLOB=',smackfshat=cgroup2\x00,fowner<', @ANYRESDEC=r9, @ANYBLOB="2c66736d616769633d30783030b9c0b808302730303030303040372c7375626a5f757365723d706369002c00"]) pread64(r2, &(0x7f0000000440)=""/166, 0xa6, 0x100000001) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x140, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x3f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}, {0xfffffffffffffea9, 0x13, 0x40}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0xfffffffffffffedc}}, {0x8, 0xb, 0xc2f}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x10001}, {0x5, 0x14, 0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008805}, 0x1) [ 584.381602][T16067] dump_header+0xdb/0x700 [ 584.385926][T16067] oom_kill_process+0xf0/0x2d0 [ 584.390686][T16067] out_of_memory+0x55f/0x7f0 [ 584.395267][T16067] mem_cgroup_oom+0x638/0x760 [ 584.399938][T16067] try_charge+0xc41/0x1100 [ 584.404351][T16067] ? get_mem_cgroup_from_mm+0x251/0x280 [ 584.411708][T16067] mem_cgroup_try_charge+0xd5/0x2a0 [ 584.418374][T16067] wp_page_copy+0x33d/0x1830 [ 584.422957][T16067] ? _raw_spin_unlock+0x49/0x60 [ 584.427924][T16067] ? do_wp_page+0x535/0x8b0 [ 584.432422][T16067] handle_mm_fault+0xeab/0x3b90 [ 584.437269][T16067] do_user_addr_fault+0x4a4/0xb30 [ 584.442288][T16067] page_fault+0x2f/0x40 [ 584.446426][T16067] RIP: 0033:0x7fc2c7dd4546 [ 584.450827][T16067] Code: 49 8d 82 c0 02 00 00 48 89 05 ce ce 0a 01 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a ce 0a 01 <4c> 89 0d ab b9 14 00 31 d2 48 c7 05 9e ce 0a 01 00 00 00 00 4c 89 [ 584.470416][T16067] RSP: 002b:00007ffd5451b048 EFLAGS: 00010246 19:28:21 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x100, 0x0) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) unlink(&(0x7f0000000200)='./file0/file0\x00') (async) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) chdir(&(0x7f0000000240)='./file0/file0/file0\x00') (async) sendfile(r4, r4, 0x0, 0x3) (async, rerun: 32) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) (async) r7 = getuid() (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) (async) mount$binder(0x0, &(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000500), 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB='stats=global,uid=', @ANYRESDEC=r6, @ANYBLOB="2c7375626a5f747970653d6d656d6f7279e50abc3dae625f747970652d24ba00a77c95150c16d00ebfc8e12c657569643d", @ANYRESDEC=r7, @ANYBLOB=',smackfshat=cgroup2\x00,fowner<', @ANYRESDEC=r9, @ANYBLOB="2c66736d616769633d30783030b9c0b808302730303030303040372c7375626a5f757365723d706369002c00"]) (async) pread64(r2, &(0x7f0000000440)=""/166, 0xa6, 0x100000001) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x140, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x3f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}, {0xfffffffffffffea9, 0x13, 0x40}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0xfffffffffffffedc}}, {0x8, 0xb, 0xc2f}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x10001}, {0x5, 0x14, 0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008805}, 0x1) [ 584.476468][T16067] RAX: 00005555560e86c0 RBX: 0000000000000001 RCX: 00007fc2c8e813e0 [ 584.484427][T16067] RDX: 00007fc2c8e813e0 RSI: 00007fc2c7f1fef0 RDI: 0000000000000001 [ 584.492391][T16067] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fc2c7f1fef0 [ 584.500606][T16067] R10: 00005555560e8400 R11: 0000000000000202 R12: 0000000000000000 [ 584.508560][T16067] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffd5451b160 [ 584.517268][T16067] memory: usage 307200kB, limit 307200kB, failcnt 101843 [ 584.528866][T16067] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 584.550187][T16067] Memory cgroup stats for /syz5: [ 584.550262][T16067] anon 314626048 [ 584.550262][T16067] file 73728 [ 584.550262][T16067] kernel_stack 0 [ 584.550262][T16067] slab 0 [ 584.550262][T16067] sock 0 [ 584.550262][T16067] shmem 0 [ 584.550262][T16067] file_mapped 0 [ 584.550262][T16067] file_dirty 0 [ 584.550262][T16067] file_writeback 0 [ 584.550262][T16067] anon_thp 0 [ 584.550262][T16067] inactive_anon 0 [ 584.550262][T16067] active_anon 314535936 [ 584.550262][T16067] inactive_file 0 [ 584.550262][T16067] active_file 0 [ 584.550262][T16067] unevictable 0 [ 584.550262][T16067] slab_reclaimable 0 [ 584.550262][T16067] slab_unreclaimable 0 [ 584.550262][T16067] pgfault 370722 [ 584.550262][T16067] pgmajfault 0 [ 584.550262][T16067] workingset_refault 33 [ 584.550262][T16067] workingset_activate 0 [ 584.550262][T16067] workingset_nodereclaim 0 19:28:22 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x2) [ 584.550262][T16067] pgrefill 3210 [ 584.550262][T16067] pgscan 2805 [ 584.550262][T16067] pgsteal 82 [ 584.550262][T16067] pgactivate 2673 [ 584.654173][T16067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16067,uid=0 19:28:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c070000000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350012010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:22 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x100, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r2 = fcntl$dupfd(r1, 0x0, r1) unlink(&(0x7f0000000200)='./file0/file0\x00') (async) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) chdir(&(0x7f0000000240)='./file0/file0/file0\x00') (async) sendfile(r4, r4, 0x0, 0x3) (async, rerun: 32) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) (async) r7 = getuid() (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) mount$binder(0x0, &(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000500), 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB='stats=global,uid=', @ANYRESDEC=r6, @ANYBLOB="2c7375626a5f747970653d6d656d6f7279e50abc3dae625f747970652d24ba00a77c95150c16d00ebfc8e12c657569643d", @ANYRESDEC=r7, @ANYBLOB=',smackfshat=cgroup2\x00,fowner<', @ANYRESDEC=r9, @ANYBLOB="2c66736d616769633d30783030b9c0b808302730303030303040372c7375626a5f757365723d706369002c00"]) pread64(r2, &(0x7f0000000440)=""/166, 0xa6, 0x100000001) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x140, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x3f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}, {0xfffffffffffffea9, 0x13, 0x40}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0xfffffffffffffedc}}, {0x8, 0xb, 0xc2f}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x10001}, {0x5, 0x14, 0x1}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008805}, 0x1) (rerun: 64) [ 584.669729][T16067] Memory cgroup out of memory: Killed process 16067 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 584.701306][ T24] oom_reaper: reaped process 16067 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 584.731935][T16094] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 584.758072][T16094] CPU: 1 PID: 16094 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 584.768436][T16094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 584.778482][T16094] Call Trace: [ 584.781779][T16094] dump_stack+0x18e/0x1d5 [ 584.786126][T16094] dump_header+0xdb/0x700 [ 584.790476][T16094] oom_kill_process+0xf0/0x2d0 [ 584.795234][T16094] out_of_memory+0x55f/0x7f0 [ 584.799812][T16094] mem_cgroup_oom+0x638/0x760 [ 584.804479][T16094] try_charge+0xc41/0x1100 [ 584.808891][T16094] ? get_mem_cgroup_from_mm+0x251/0x280 [ 584.814422][T16094] mem_cgroup_try_charge+0xd5/0x2a0 [ 584.819607][T16094] wp_page_copy+0x33d/0x1830 [ 584.824187][T16094] ? _raw_spin_unlock+0x49/0x60 [ 584.829022][T16094] ? do_wp_page+0x535/0x8b0 [ 584.833511][T16094] handle_mm_fault+0xeab/0x3b90 [ 584.838354][T16094] do_user_addr_fault+0x4a4/0xb30 [ 584.843373][T16094] page_fault+0x2f/0x40 [ 584.847507][T16094] RIP: 0033:0x7fc2c7dd4546 [ 584.851904][T16094] Code: 49 8d 82 c0 02 00 00 48 89 05 ce ce 0a 01 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a ce 0a 01 <4c> 89 0d ab b9 14 00 31 d2 48 c7 05 9e ce 0a 01 00 00 00 00 4c 89 [ 584.871501][T16094] RSP: 002b:00007ffd5451b048 EFLAGS: 00010246 19:28:22 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x4) 19:28:22 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x279020000000000, 0x0, 0x0) 19:28:22 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}], 0xa, "2ddb5b9d42eeb4a0ad298eae97541b3808516d15a80e29a1969797912db1fe91912026ba5f2fe67710a550347b7d991b69910d32e37c5bccf2ac7cc1bdc298f78d4d177ca618caf043ddd3e03f4b8751b1b8e466200e55da5fb0a194394ec6a9afc652f546d6ec7320cf875ff3b5adbe8dcd1ecdcb71e98e7ba5b97aa363d8452f696cbd39df99aa7546aefcb7f70cf16345ac7a3ab915a4c4ddc64cd915eca1795812634d2ef3cd8aff0ea7407da40ce8c3f5007075626de1fb5bff49f09732120327"}, 0xd5) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) renameat2(r5, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x5) r6 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r7 = fsmount(r0, 0x0, 0xc) sendfile(r7, r6, 0x0, 0x3) [ 584.877555][T16094] RAX: 00005555560e86c0 RBX: 0000000000000001 RCX: 00007fc2c8e813e0 [ 584.885512][T16094] RDX: 00007fc2c8e813e0 RSI: 00007fc2c7f1fef0 RDI: 0000000000000001 [ 584.893471][T16094] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fc2c7f1fef0 [ 584.901431][T16094] R10: 00005555560e8400 R11: 0000000000000202 R12: 0000000000000000 [ 584.909392][T16094] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffd5451b160 [ 584.923542][T16094] memory: usage 307200kB, limit 307200kB, failcnt 101857 19:28:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x7ffff000) [ 584.930735][T16094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 584.944869][T16094] Memory cgroup stats for /syz5: [ 584.944939][T16094] anon 314626048 [ 584.944939][T16094] file 73728 [ 584.944939][T16094] kernel_stack 0 [ 584.944939][T16094] slab 0 [ 584.944939][T16094] sock 0 [ 584.944939][T16094] shmem 0 [ 584.944939][T16094] file_mapped 0 [ 584.944939][T16094] file_dirty 0 [ 584.944939][T16094] file_writeback 0 [ 584.944939][T16094] anon_thp 0 [ 584.944939][T16094] inactive_anon 0 [ 584.944939][T16094] active_anon 314535936 [ 584.944939][T16094] inactive_file 0 [ 584.944939][T16094] active_file 0 [ 584.944939][T16094] unevictable 0 [ 584.944939][T16094] slab_reclaimable 0 [ 584.944939][T16094] slab_unreclaimable 0 [ 584.944939][T16094] pgfault 370755 [ 584.944939][T16094] pgmajfault 0 [ 584.944939][T16094] workingset_refault 33 [ 584.944939][T16094] workingset_activate 0 [ 584.944939][T16094] workingset_nodereclaim 0 [ 584.944939][T16094] pgrefill 3210 [ 584.944939][T16094] pgscan 2805 [ 584.944939][T16094] pgsteal 82 19:28:22 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}], 0xa, "2ddb5b9d42eeb4a0ad298eae97541b3808516d15a80e29a1969797912db1fe91912026ba5f2fe67710a550347b7d991b69910d32e37c5bccf2ac7cc1bdc298f78d4d177ca618caf043ddd3e03f4b8751b1b8e466200e55da5fb0a194394ec6a9afc652f546d6ec7320cf875ff3b5adbe8dcd1ecdcb71e98e7ba5b97aa363d8452f696cbd39df99aa7546aefcb7f70cf16345ac7a3ab915a4c4ddc64cd915eca1795812634d2ef3cd8aff0ea7407da40ce8c3f5007075626de1fb5bff49f09732120327"}, 0xd5) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) renameat2(r5, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x5) r6 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r7 = fsmount(r0, 0x0, 0xc) sendfile(r7, r6, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}], 0xa, "2ddb5b9d42eeb4a0ad298eae97541b3808516d15a80e29a1969797912db1fe91912026ba5f2fe67710a550347b7d991b69910d32e37c5bccf2ac7cc1bdc298f78d4d177ca618caf043ddd3e03f4b8751b1b8e466200e55da5fb0a194394ec6a9afc652f546d6ec7320cf875ff3b5adbe8dcd1ecdcb71e98e7ba5b97aa363d8452f696cbd39df99aa7546aefcb7f70cf16345ac7a3ab915a4c4ddc64cd915eca1795812634d2ef3cd8aff0ea7407da40ce8c3f5007075626de1fb5bff49f09732120327"}, 0xd5) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r4) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) renameat2(r5, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x5) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) fsmount(r0, 0x0, 0xc) (async) sendfile(r7, r6, 0x0, 0x3) (async) 19:28:22 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}], 0xa, "2ddb5b9d42eeb4a0ad298eae97541b3808516d15a80e29a1969797912db1fe91912026ba5f2fe67710a550347b7d991b69910d32e37c5bccf2ac7cc1bdc298f78d4d177ca618caf043ddd3e03f4b8751b1b8e466200e55da5fb0a194394ec6a9afc652f546d6ec7320cf875ff3b5adbe8dcd1ecdcb71e98e7ba5b97aa363d8452f696cbd39df99aa7546aefcb7f70cf16345ac7a3ab915a4c4ddc64cd915eca1795812634d2ef3cd8aff0ea7407da40ce8c3f5007075626de1fb5bff49f09732120327"}, 0xd5) (async, rerun: 64) r2 = fcntl$dupfd(r1, 0x0, r1) (rerun: 64) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) renameat2(r5, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x5) (async, rerun: 64) r6 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (rerun: 64) r7 = fsmount(r0, 0x0, 0xc) sendfile(r7, r6, 0x0, 0x3) [ 584.944939][T16094] pgactivate 2673 [ 585.045948][T16094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16094,uid=0 [ 585.074321][T16094] Memory cgroup out of memory: Killed process 16094 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 19:28:25 executing program 1: connect$unix(0xffffffffffffffff, 0x0, 0x0) getuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = getegid() setresgid(r2, 0x0, 0xee01) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0x0, r0, {0x2, 0x3, 0x5e2, 0x10001, 0x7, 0x400, {0x5, 0x6, 0x80, 0x9, 0x7, 0xd3f, 0x2ce6, 0x3ff, 0x2322, 0x1000, 0x1, r1, r2, 0x10000, 0x3}}}, 0x90) r3 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x0, 0xe0}, 0x10, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="080008fcbf98b86af0e764d91650c2f9eb23d4ed7c9d22a93688acbd2019ce9138c5d48f410a21d71b170e95caa2b8c3f244da2c732c69e2c1c16812ac8e423e16fc3a04ff815ef676c165a81558f03ecf3a68b88ae90cb00720470b2e81d103bb301a83cab06eaa581fea751e884415", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002300)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x0, 0x1d0, 0xd0, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f00000022c0), {[{{@ipv6={@empty, @private1, [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xffff00, 0xffffff00], 'ip6_vti0\x00', 'vlan0\x00', {}, {}, 0xa, 0xfd, 0x6, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @remote, [0xff000000, 0x0, 0xffffffff, 0xff], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth0\x00', 'ip_vti0\x00', {}, {}, 0x32, 0xf0, 0x4, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x0, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'bridge0\x00', 'syzkaller0\x00', {}, {0xff}, 0x62, 0xac, 0x4, 0x1}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x40], 0xffffff81, 0x30, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @remote], 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) (async) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000002840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x4c) (async) syz_clone(0x8004000, 0x0, 0x3d, 0x0, 0x0, &(0x7f0000000100)="cadf1fd85328800076d1c9ca67dca737c7b37a4f") 19:28:25 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x8) 19:28:25 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) write$cgroup_int(r5, &(0x7f0000000040)=0xea, 0x12) sendfile(r3, r3, 0x0, 0x3) 19:28:25 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x27a010000000000, 0x0, 0x0) 19:28:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0xffffffff000) 19:28:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c070000000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350012010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c070000000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350012010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:28:25 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 64) r5 = dup(r4) (rerun: 64) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (rerun: 64) write$cgroup_int(r5, &(0x7f0000000040)=0xea, 0x12) (async, rerun: 64) sendfile(r3, r3, 0x0, 0x3) (rerun: 64) [ 588.477807][T16146] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 588.492777][T16146] CPU: 1 PID: 16146 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 588.503024][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 588.513066][T16146] Call Trace: [ 588.516348][T16146] dump_stack+0x18e/0x1d5 [ 588.520669][T16146] dump_header+0xdb/0x700 [ 588.524984][T16146] oom_kill_process+0xf0/0x2d0 [ 588.529742][T16146] out_of_memory+0x55f/0x7f0 [ 588.534338][T16146] mem_cgroup_oom+0x638/0x760 [ 588.539004][T16146] try_charge+0xc41/0x1100 [ 588.543407][T16146] ? get_mem_cgroup_from_mm+0x251/0x280 [ 588.549552][T16146] mem_cgroup_try_charge+0xd5/0x2a0 [ 588.554743][T16146] wp_page_copy+0x33d/0x1830 [ 588.559409][T16146] ? _raw_spin_unlock+0x49/0x60 [ 588.564244][T16146] ? do_wp_page+0x535/0x8b0 [ 588.568730][T16146] handle_mm_fault+0xeab/0x3b90 [ 588.573576][T16146] do_user_addr_fault+0x4a4/0xb30 [ 588.578586][T16146] page_fault+0x2f/0x40 [ 588.582724][T16146] RIP: 0033:0x7fc2c7dd4546 [ 588.587122][T16146] Code: 49 8d 82 c0 02 00 00 48 89 05 ce ce 0a 01 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a ce 0a 01 <4c> 89 0d ab b9 14 00 31 d2 48 c7 05 9e ce 0a 01 00 00 00 00 4c 89 [ 588.606709][T16146] RSP: 002b:00007ffd5451b048 EFLAGS: 00010246 [ 588.612761][T16146] RAX: 00005555560e86c0 RBX: 0000000000000001 RCX: 00007fc2c8e813e0 [ 588.620807][T16146] RDX: 00007fc2c8e813e0 RSI: 00007fc2c7f1fef0 RDI: 0000000000000001 [ 588.628766][T16146] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fc2c7f1fef0 [ 588.637249][T16146] R10: 00005555560e8400 R11: 0000000000000202 R12: 0000000000000000 [ 588.645217][T16146] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffd5451b160 19:28:26 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) write$cgroup_int(r5, &(0x7f0000000040)=0xea, 0x12) sendfile(r3, r3, 0x0, 0x3) 19:28:26 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendfile(r5, r4, 0x0, 0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001700), 0x10000, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) io_submit(0x0, 0x6, &(0x7f00000019c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000300)="66b01fbcf0f0cee369a53c6cac280c9a67bd9c4d061c018abb10ca4e98207eb3cd2c886db4246745158bd76e7d9e311589a255961bece02d36c6d58afe5a638e6903e1321b526ccda5b4862c9145f247471383ab084509f7a452b586eebf49940131856e9f89b44df6151e956cca560a05005a3c5254b52818e03d65570129b8f49e354956f89bd26e720a9622160165eb90a7b8674953cfd6666e02e187a5", 0x9f, 0x5, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000480)="7d32a219f88d582819a2464ed5157e9475cd4b63cafb2c71f0dec03ab90f4cb4ebe03bd0714dc9b59111390586759d45205b6e47508e83502041d428fe4ff88de6039d802ed8bbc4b6e86ab63f25e3eda1e65076e53df472da7038afe98372464b6ea452ca8233fb95f9", 0x6a, 0xa80000000000}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000005c0)="6a0a27e16711eee5212d22af7e2b6d16d28bf41e7f29f775f65e457036741376333ae3b7da2db8d6cdce8c2ac8441689509332aee4f8f321c1a36590241f048b7034d9c986d3905d5283a200c1db747d92482fcbc190850899cca5e34f564659a482ec171c1a22935f34bb6bcda0eb86e736d1e783f61ac08a77767dbad8d57ff94192f523", 0x85, 0x2, 0x0, 0x3}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x7, 0x90d6, 0xffffffffffffffff, &(0x7f00000006c0)="4b6755b421160f32484c017734d92b9c0934d4f41abd7cc675cb750d15299d6ab3e3795812666901799592641393a4f7ad7a550c7b8fc3c2def9232896c48b48b9d46380ea87cb318b0f720a3674e11b067120dfeba7e46837b51392d89d9d63644fd5538c21d801abc3cdd4dc4fd6502f05f2fb19d41ddd95c7fc58a278bf552fff9a07dcbe0909ffe1e9264448c694750d4950eb777ac87885466482ae81cb869a1d50aed580ed6fff91da84f6694923f343a54310c9fc459b9a6ca5af0468ffb36f9f3deccc9a3aee964e55963b165c767557c885ec7c31c8f94636083f8ee21277f14c785cdcf870b1a1caccd9d5cee4899ab8d765bdc9415df11e0ada4f40bec5b7e2a611dddc9677d28b650ec42c4e98222ec777ed398ee8cff75f9fc065051b12b0ba4f25b8f3e2789847bf438c7b12289742e7313174d4807487b509ac87fd8f824031bf20feb0f18d0f834a360e40fa96c8ecdad97afeef64d13a38128a706761ac950e74e53f22e5e5699560c968d0386d01c7d2970896f4a7ef7bac1eb19d6b032c550eb13017d0e7a02220b34f45c423e7fb0111627747eedd3eb05a83f90cbb13c2e8af62b63aef2ae39869362523d4c2034b41fc07e00fdcfb7c19fa9a99438626307ef89f43055377ae4e3027f3d8b7621d5fceee7e78eee5a4080020e91ff9581c57f3d413993f6d7e619e0f24adb3e0c1fe29f017eceeecd826d2265710b79b78ba09c1ce6f027af58aee1a580862b41952cca3ad56610519f262df16e04178f1c5772fe2f6f3aa1a98c78a377c590cc81f70be5f5d67ef4c4a654b06b4f028540dc7358719541db207cc36e3e0ef5f63a10da0842c44ceb28cc26110a6fb3426dbf132c98f6d436ce77e8b25dd720bdae9f3554c82501d79da217a36a16f7a5c64fb1c29989e9cf5022a2c2d2ec60a4e31d9c7db5b305af7833339cc9055720b741c98eb280ae4afd1396fa0f0234b78fc423b54d8538f326dbdc247fbd66dc71916d957b7600c006e15146fb7211bee2cd79a17035b837749550de5fde2b74406861336450d64f3ee59eb9764e772de62bc76839465c5089bb24ce4a59a23df53d9ade6803512e01bcb1637200dfc371226af71d2d7022e642a2c0724a39da3b0a0223ae86dbe7c8f492b65025c7241eb0bad382285d6bc918913039359527c79c13a8b383235d3d5e51d226b71ba69b2ffe63f616995dc78bfafdcf4bdccf6da73990592f1711d4aaef129889434c20faae991684fd34988fa2e4575032bffbc618c9c0bc6dd988c02b9bc1ed3a0ee31e470a3dea24b24f391ad6d5eeee709ff2367d75ea66668377dca02b86a2eed0964806925611d6e20399b1b36fe9731b81f2721bd6db3599a3df52f48c3a804cfaf0b8146320d2bb10c80189b0c2fcc1e44a782b7257b36c78f1930cdf8e4c8a67dcd011383bdbe77e765a7ab26d0224119f765ae77fd2e3ec1d521a6a9e664dc5ab9bdc37cb22cdab6655abd473d7b2fb16ab4c54a86505e8b1e04bf87c0fd719e1f9a28ce11c77daf334a5f5b78ca35c01e47779004375aa1aec0b7741a51a669d8277a250a5ca6fc3c2eda07e9747374cd5542db5e1fca9317b73fa9d61ec37e20ef67980a647f2ac5d16b0186f9393f8ddf84126a6b101331aa9f82cb4b707bc1e903fa1228fed7086ead4628aeb6666b8af7fc5553f029748d5dbe5288179fa7931b2d58f32a998e71fded9009de3b2d0fd669ce04ecab5e798e41d980240d6ca972dae68d7a1474979ec3200c00ecd8a320e3280f55de39afdfa65b61a6e61f03b2111cff6a015caa853f0458e53e68f60cf7328ef8e68855caf69ecc647c6ecfb83da96aec0008d1f71471ff7bb6b1701ecf7c2141ef251c7cd9356a53cac96d1048c2d0a66b711be777cbc68385d464a88cc1002069479831d13adb87ab43b2ac3d98a0e9a785545bda546d2a5450595d8c052527bd335c3cd63ffc9b22e5a02d4409c349f79a3c5bdc4d87bee5b8095c25159aadab90c72ede427104e777b0655acffcf52416c503f2fe450cab07fa1c39cee70d1bfa74e067afdaad9ca6ccf38dd9cd12a006694b29b42cfcb0a53a848c4ba3a11cc3160532b0a0b4c7cd965faab257ff1bf1d47cb94195e2b0aa776f4f73739034d1926a3fb251f1718fb7466b071ba0034b989ec6af5a850dbd7eaa197a547c35031514b32c0dbc65a88e58296652c79402be54612856ec8b9e2b3d6c9644a7e13051959f1941af8637f8a32bfb2e2dc208c128aba654aefa4c80938c7f895fc09b3e14cb4072435186e8e7654b38e78510f2be01f47bf57e10f129a96cd761bfc92cfe413e30c8e41213d60fb8e0dc8d18f1a479516fae06d7abebb495684f68fb59c31bd9bf25de80e1d76eec924ae1f6f023a7a87731232eef416992299da3e5cd391e43a5afe4d2811f269675e3494ad47ccadc224e7af2e8a852aca4602a584513224777ab1da00cd38ff0cace66ed2e178b2be9df41a751a9c915c36a30c690564804b111a49aae728177714a99a27fd993ed68b85cfb87b49bbef8451491a856f04fc6f92ca1d9ac030ca4ee0ba60102a5bd0b48ea747ff7272e52fe260e91002ee24d645835100624f911591b78ce14b6ac192d882957dbcb3a510d6772e767830d4c3acefefe92af8be98abb6a217e182425b0ac4893e01af4431f6fdbdae85dce58f8634ec92fd31358d76a91c0416f41bae67a5530e35230facf01a994cadae4a4397774e7f3ad853bd3c083e2d08fe15d44fa42286d996e0cfb917927c15d82302375d5db2cda097cd123f840a78d8c6efaff3e300e244cbe3217a686aabcc67845341a202cb216f69bfb66b32160a9065d6426fd32e8299e765e2e1c0c5afc30d156f20cac78c50ae780f6ca83558d105c189eb6e74169858d440d82e6896d9a045f29ef148d69d1984c7edcd10b1d4b779e672666f7a6aec1b121ab33b24572d31680d329aa7e2d6eeffa8b4a41c4c5fd0ed0a55f7a9789452aaee30ec6089d8abd4070c2e2e7db5458ff10ae16de925af84da9180d03081e8dd07ed5aa25e08a593aa1bc476dbcd7222d303c11b4bbe3968f8b35c618bb3907bc27605ab0f1401e72f95bde815ebcd7c2d240702e939f85f807737236e4fb6fff97ae110125aecbe32a8eb9d256920b833829b5d978af3366ff8498b16b3b9a4ff682e6be54530c12143fc605284b4b084b00fc2b747e1cdf06d4c11a655e96552acefb1fcee4dd45fe6c1e7a74806c4e51c3b5d22e53ff4633763fa163aecc4e30e8c6fa3cf52f99bddd7eb64dcfd8188a4cc3acbc14f747d242c131cafbf09191ff1883c96817ab3ab656c27514afe038375e9c25b37a67299d3f6de85e348051d34ff3d56998bc4227d7ece122e7a98777fb2fc1fa8645f40c81da2cf0e5015501fdddd7bffbd1faac24b1f213c48ed32492b66ecbffd832c8ea9a6be2e6b32e5f1f5e181319a696af2ed771d7b2d6d0dd0d74dd796a754dc4962f8fc52ebf29564dbd69629e848ab6ff5cc0a065907db0d236b2d2f75ec34582fcf2c56ee66c96f80ed1dcfdfd96d398f188d6cd5b9065c4a0a5cfa83cf56770c0d42af4dfd325e5a164ebf204d3b359fdee26e27926bab05863c92706b398db2b7505fa9410af46e5f5a329db720d80bb7386a60df5be7535f53c345fa7e2293ce964765ec346123bf1f12f17748458b8ccc561a3b3f1a81ee02d8f14dd22e0f538d343cbec93348f6d7ba68714a16349556954fe03a661604fed074ea484905c7a26306a9010e596332024765a81755272786ec2d2611e485476262237f153d373a33570c2856a0489844bd301dc4717085bdd71fe7023e45b26e4be061046b81d9c8696e497e5abff9bb9da382fab7184e7c43f6d4034e01761b0479c97ba087b4e71e46628d6b3c00b0c981a0bb23ed414f39f237d4ab3f2676b89325ceb542a9092f4bceb15b5e1c341a298d4e9ce7dacedc71f44547841eae4f97846ea3ef85e257a2837bcd6072fac52946c6a31be818832bec688be95290a295f0bbeebf70ed69c8fdc7cc988014e499f6ee75287346dc15fbf7187b90dd035eb369fbd16631a8c72ae117703be738e80fc9c5476a522958ea26562e36dc1d9fe5443c6f822b785e7caa19e557e87c52b223ade2b523fbbb654bca1ab2b68f6b81bb33f4e630affc1ebe4e8b16b2260d88eb3c8e822836ea721228fb804ec7570404a2f763cdc2e444e63f84ef4e227e5ddfc28db05460e0ddfc6a6a585e0aee6b90ad8616ae91a406a1d0c9f1333aaf4c149ac1b40dd4408f8de457ec0e43f6105a51e21bac821fe43db62c70b0e013861335c2bdd6663d1c95ff32f4b398f662e037893ac6b171d6d02bddadf6e6eb077a2abde5defa22afa6d6ea8fe8d709717695cf62d68f4c8b6d5599a9326a0fcf7fc47c2c4696702547d2298313e44b10f2fbc7d7c1441e74461d673ac11a4e945348de3f8dd4046230775402ac427265b27125970393344d4875a060c4834e77e10b74d9e2fad435cff96da8ade2fa7555e2443a2b10201c98fae93da42dd7a10d47f05b007bdf16a0ac5154180ff83b884ec9c2bed7001dbb08f0a5f8b0117d48a9f99ca3bdfd4a5aeb3e5564287ab7639764e0b6fd71ff276fac7cafb3a2f5c0c7d51d02cbc7b5fb37182c6366a9b4795bd5050b09fca72fd67cac993e51ca81dad79fe2bc79121283789abc914117f1950f8b2744afbb7745e8ee92671bf12a0886058ebd957524d1a1f8b270b066b7f1ef9504255cb01ad2e7ab596a87b4a553e71eacd8c721369c7c1061c58fce74b27d754b8255218095ee6dad3d7189adeac696a4433853bbca2c057a58aead3842cec0973057802fa0ea4ec7c5894918de694e1a2f7facc921d841035a840a56a07c5233bbf89bf26889828d37d9d8fa7e659b16310c2735149bb63102e1419ceeae3203c7a6c02e10d8389d001fb200cfa92bfc07b12663d93fdcc388a565b9a82c1504f22aa754404326d1b6da9e55465c88dc6262bdb9421252fc0b356e29c5be05bd0eea7604764dda4260ef94f107ddfd3be57c0ec01b66cb73f042666d893ea552d7015f51a762b6cd2aff10ea8f5563ec0812ac15e1ae36f970d2bc9ea02f249722b43745eec2d52351ccd50189b5ed7944a4ea9462bee5ef4f8ad206877f83a0bcbcf4d7531d2cf0755ba304477053eb88aefb10b38aa1f693a051c137258d58162a087f897822fc656018d7e638adbab9dffe571a20c325d1470fded8313fdd66baecf262db0aab132a03ded2ccc2e8b3e1307e1bfbad66d858ccc4b24626df24a542449c4f5cd08fa7448a7b2e3c061829e7377223848b1f65d2332666accf3045099c144a046011f086612e821f1fd927faa0c1e8f109cc2c3080a98077990c8efba8a27fb670d3bc42a62a20be719c159b2255da65ea4aac77d3cada8cd44c032717c0c15f8b856d8b105715d25350216c4a800cc6ef37d252b84f600c515df74a0bc25e4dfa9c76937463cd21f05ee8af7e6e1b364bdd064620e68ec0e765ebd4c1110f5814410a1cacee17624019dedf785ffdd9ce319d4d3813c297988b34264109a22d090284ca6a574ca44aed8b4eea11722aa3acdc181ab78b3cc30769ead14eb57a3dad85ec53b5f6de089487e1896e833cc03ae19ec64c4818554dd561d66c7998dad86206b79b48fa6a0788511c6091c9a58f2cdf87493bb56c6d98498811c0fb5a14588ea09c7470dc3edd1e3b74554d6ee41c5736ed70b5db08752a532a447628d39516aee63", 0x1000, 0x400, 0x0, 0x3, r7}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x101, r8, &(0x7f00000017c0)="4d84c7eb41bb08c1e155a593ffaa06922798a30ead4ed15bc486da72b62074dfed3cab66374bbf037dc735866b77795db837a3941792086db06baf4bd4277cc8d77be9fab374a07ff409b9ddbbf137a897bd3d6ff24d13dbcf6957c6081ed91c094f47177e20e5d9024a4c9b87f9c73d349979ac5896f44968b73b21bdde5d636a033910448f625510e703c7b3a333ddd2", 0x91, 0x9, 0x0, 0x1, r2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x7f, r9, &(0x7f00000018c0)="87477272277aa415f81b98e2e110017d11c3929dcde8609d01b7daf9745ec3d9a0494c94ec10e9ee704fc61d6160166ee5abac9983b15699c09f5a28357a652496e74c74ef03a3d5d84843b92018c7cfcd8cf6d824cd2af00d2591918c1099e68d618fc5ed12a3fba7596c128010ddef240f4e0c91a427a2b0c2c356d5c5a4ee27b021a9bcb206c6063196435ed280a439c3", 0x92, 0x7, 0x0, 0x1, r7}]) openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) 19:28:26 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x7) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001700), 0x10000, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) io_submit(0x0, 0x6, &(0x7f00000019c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000300)="66b01fbcf0f0cee369a53c6cac280c9a67bd9c4d061c018abb10ca4e98207eb3cd2c886db4246745158bd76e7d9e311589a255961bece02d36c6d58afe5a638e6903e1321b526ccda5b4862c9145f247471383ab084509f7a452b586eebf49940131856e9f89b44df6151e956cca560a05005a3c5254b52818e03d65570129b8f49e354956f89bd26e720a9622160165eb90a7b8674953cfd6666e02e187a5", 0x9f, 0x5, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000480)="7d32a219f88d582819a2464ed5157e9475cd4b63cafb2c71f0dec03ab90f4cb4ebe03bd0714dc9b59111390586759d45205b6e47508e83502041d428fe4ff88de6039d802ed8bbc4b6e86ab63f25e3eda1e65076e53df472da7038afe98372464b6ea452ca8233fb95f9", 0x6a, 0xa80000000000}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000005c0)="6a0a27e16711eee5212d22af7e2b6d16d28bf41e7f29f775f65e457036741376333ae3b7da2db8d6cdce8c2ac8441689509332aee4f8f321c1a36590241f048b7034d9c986d3905d5283a200c1db747d92482fcbc190850899cca5e34f564659a482ec171c1a22935f34bb6bcda0eb86e736d1e783f61ac08a77767dbad8d57ff94192f523", 0x85, 0x2, 0x0, 0x3}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x7, 0x90d6, 0xffffffffffffffff, &(0x7f00000006c0)="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", 0x1000, 0x400, 0x0, 0x3, r7}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x101, r8, &(0x7f00000017c0)="4d84c7eb41bb08c1e155a593ffaa06922798a30ead4ed15bc486da72b62074dfed3cab66374bbf037dc735866b77795db837a3941792086db06baf4bd4277cc8d77be9fab374a07ff409b9ddbbf137a897bd3d6ff24d13dbcf6957c6081ed91c094f47177e20e5d9024a4c9b87f9c73d349979ac5896f44968b73b21bdde5d636a033910448f625510e703c7b3a333ddd2", 0x91, 0x9, 0x0, 0x1, r2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x7f, r9, &(0x7f00000018c0)="87477272277aa415f81b98e2e110017d11c3929dcde8609d01b7daf9745ec3d9a0494c94ec10e9ee704fc61d6160166ee5abac9983b15699c09f5a28357a652496e74c74ef03a3d5d84843b92018c7cfcd8cf6d824cd2af00d2591918c1099e68d618fc5ed12a3fba7596c128010ddef240f4e0c91a427a2b0c2c356d5c5a4ee27b021a9bcb206c6063196435ed280a439c3", 0x92, 0x7, 0x0, 0x1, r7}]) openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) 19:28:26 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:28:26 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x10) [ 588.807261][T16146] memory: usage 307200kB, limit 307200kB, failcnt 101871 [ 588.817699][T16146] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 588.829790][T16146] Memory cgroup stats for /syz5: [ 588.829869][T16146] anon 314626048 [ 588.829869][T16146] file 73728 [ 588.829869][T16146] kernel_stack 0 [ 588.829869][T16146] slab 0 [ 588.829869][T16146] sock 0 [ 588.829869][T16146] shmem 0 [ 588.829869][T16146] file_mapped 0 [ 588.829869][T16146] file_dirty 0 [ 588.829869][T16146] file_writeback 0 [ 588.829869][T16146] anon_thp 0 [ 588.829869][T16146] inactive_anon 0 [ 588.829869][T16146] active_anon 314535936 [ 588.829869][T16146] inactive_file 0 [ 588.829869][T16146] active_file 0 [ 588.829869][T16146] unevictable 0 [ 588.829869][T16146] slab_reclaimable 0 [ 588.829869][T16146] slab_unreclaimable 0 [ 588.829869][T16146] pgfault 370755 [ 588.829869][T16146] pgmajfault 0 [ 588.829869][T16146] workingset_refault 33 [ 588.829869][T16146] workingset_activate 0 [ 588.829869][T16146] workingset_nodereclaim 0 [ 588.829869][T16146] pgrefill 3210 [ 588.829869][T16146] pgscan 2805 [ 588.829869][T16146] pgsteal 82 [ 588.829869][T16146] pgactivate 2673 [ 588.935157][T16146] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16059,uid=0 [ 588.953944][T16146] Memory cgroup out of memory: Killed process 16059 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:15240kB, shmem-rss:60kB, UID:0 pgtables:80kB oom_score_adj:0 [ 589.901075][T16157] device bridge_slave_1 left promiscuous mode [ 589.907185][T16157] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.914755][T16157] device bridge_slave_0 left promiscuous mode [ 589.920889][T16157] bridge0: port 1(bridge_slave_0) entered disabled state 19:28:30 executing program 1: connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) getuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) (async) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = getegid() setresgid(r2, 0x0, 0xee01) (async) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002200)={0x90, 0x0, r0, {0x2, 0x3, 0x5e2, 0x10001, 0x7, 0x400, {0x5, 0x6, 0x80, 0x9, 0x7, 0xd3f, 0x2ce6, 0x3ff, 0x2322, 0x1000, 0x1, r1, r2, 0x10000, 0x3}}}, 0x90) r3 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) (async) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x0, 0xe0}, 0x10, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="080008fcbf98b86af0e764d91650c2f9eb23d4ed7c9d22a93688acbd2019ce9138c5d48f410a21d71b170e95caa2b8c3f244da2c732c69e2c1c16812ac8e423e16fc3a04ff815ef676c165a81558f03ecf3a68b88ae90cb00720470b2e81d103bb301a83cab06eaa581fea751e884415", @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001100000000000800150000000000000001006e657464657673696d000000000002006e657464657673696d300000080003000000000008000b0000000000060011000000000008001500000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000000000006001100000000000800150000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b0000000000060011000000000011001500000000002474f9b0d3ab4e0261ef504a81bc0efd597511f8c28729667a3011f23a8273ec410fa73511993e349e62eec46d74b621a40ab87354f29c2a3beb88ed7f4fccf2555a04de40566d7fa87606846c4121a26994957b4d13fd44661ba6ac48714f729c7acb9db98b7cd2b3a683164262da7ef05ce8a1e4c094f03b652e6b58fb2ea70c9c4d273eba8994fe4f36994034a5709e05e1f9c70ad01b7a54dcf51cae67f22fda9517d650a78553ec78b771cef7c2faeda60f94f8349c1eb39ce190f47848d1a3607c27c6441a44ea78b1"], 0x108}}, 0x0) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002300)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x0, 0x1d0, 0xd0, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f00000022c0), {[{{@ipv6={@empty, @private1, [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xffff00, 0xffffff00], 'ip6_vti0\x00', 'vlan0\x00', {}, {}, 0xa, 0xfd, 0x6, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @remote, [0xff000000, 0x0, 0xffffffff, 0xff], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth0\x00', 'ip_vti0\x00', {}, {}, 0x32, 0xf0, 0x4, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x0, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'bridge0\x00', 'syzkaller0\x00', {}, {0xff}, 0x62, 0xac, 0x4, 0x1}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x40], 0xffffff81, 0x30, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @remote], 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) (async) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000002840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x4c) (async) syz_clone(0x8004000, 0x0, 0x3d, 0x0, 0x0, &(0x7f0000000100)="cadf1fd85328800076d1c9ca67dca737c7b37a4f") 19:28:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendfile(r5, r4, 0x0, 0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001700), 0x10000, 0x0) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) io_submit(0x0, 0x6, &(0x7f00000019c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000300)="66b01fbcf0f0cee369a53c6cac280c9a67bd9c4d061c018abb10ca4e98207eb3cd2c886db4246745158bd76e7d9e311589a255961bece02d36c6d58afe5a638e6903e1321b526ccda5b4862c9145f247471383ab084509f7a452b586eebf49940131856e9f89b44df6151e956cca560a05005a3c5254b52818e03d65570129b8f49e354956f89bd26e720a9622160165eb90a7b8674953cfd6666e02e187a5", 0x9f, 0x5, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000480)="7d32a219f88d582819a2464ed5157e9475cd4b63cafb2c71f0dec03ab90f4cb4ebe03bd0714dc9b59111390586759d45205b6e47508e83502041d428fe4ff88de6039d802ed8bbc4b6e86ab63f25e3eda1e65076e53df472da7038afe98372464b6ea452ca8233fb95f9", 0x6a, 0xa80000000000}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000005c0)="6a0a27e16711eee5212d22af7e2b6d16d28bf41e7f29f775f65e457036741376333ae3b7da2db8d6cdce8c2ac8441689509332aee4f8f321c1a36590241f048b7034d9c986d3905d5283a200c1db747d92482fcbc190850899cca5e34f564659a482ec171c1a22935f34bb6bcda0eb86e736d1e783f61ac08a77767dbad8d57ff94192f523", 0x85, 0x2, 0x0, 0x3}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x7, 0x90d6, 0xffffffffffffffff, &(0x7f00000006c0)="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", 0x1000, 0x400, 0x0, 0x3, r7}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x101, r8, &(0x7f00000017c0)="4d84c7eb41bb08c1e155a593ffaa06922798a30ead4ed15bc486da72b62074dfed3cab66374bbf037dc735866b77795db837a3941792086db06baf4bd4277cc8d77be9fab374a07ff409b9ddbbf137a897bd3d6ff24d13dbcf6957c6081ed91c094f47177e20e5d9024a4c9b87f9c73d349979ac5896f44968b73b21bdde5d636a033910448f625510e703c7b3a333ddd2", 0x91, 0x9, 0x0, 0x1, r2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x7f, r9, &(0x7f00000018c0)="87477272277aa415f81b98e2e110017d11c3929dcde8609d01b7daf9745ec3d9a0494c94ec10e9ee704fc61d6160166ee5abac9983b15699c09f5a28357a652496e74c74ef03a3d5d84843b92018c7cfcd8cf6d824cd2af00d2591918c1099e68d618fc5ed12a3fba7596c128010ddef240f4e0c91a427a2b0c2c356d5c5a4ee27b021a9bcb206c6063196435ed280a439c3", 0x92, 0x7, 0x0, 0x1, r7}]) openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) sendfile(r5, r4, 0x0, 0x7) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r6) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001700), 0x10000, 0x0) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) io_submit(0x0, 0x6, &(0x7f00000019c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000300)="66b01fbcf0f0cee369a53c6cac280c9a67bd9c4d061c018abb10ca4e98207eb3cd2c886db4246745158bd76e7d9e311589a255961bece02d36c6d58afe5a638e6903e1321b526ccda5b4862c9145f247471383ab084509f7a452b586eebf49940131856e9f89b44df6151e956cca560a05005a3c5254b52818e03d65570129b8f49e354956f89bd26e720a9622160165eb90a7b8674953cfd6666e02e187a5", 0x9f, 0x5, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000480)="7d32a219f88d582819a2464ed5157e9475cd4b63cafb2c71f0dec03ab90f4cb4ebe03bd0714dc9b59111390586759d45205b6e47508e83502041d428fe4ff88de6039d802ed8bbc4b6e86ab63f25e3eda1e65076e53df472da7038afe98372464b6ea452ca8233fb95f9", 0x6a, 0xa80000000000}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000005c0)="6a0a27e16711eee5212d22af7e2b6d16d28bf41e7f29f775f65e457036741376333ae3b7da2db8d6cdce8c2ac8441689509332aee4f8f321c1a36590241f048b7034d9c986d3905d5283a200c1db747d92482fcbc190850899cca5e34f564659a482ec171c1a22935f34bb6bcda0eb86e736d1e783f61ac08a77767dbad8d57ff94192f523", 0x85, 0x2, 0x0, 0x3}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x7, 0x90d6, 0xffffffffffffffff, &(0x7f00000006c0)="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", 0x1000, 0x400, 0x0, 0x3, r7}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x7, 0x101, r8, &(0x7f00000017c0)="4d84c7eb41bb08c1e155a593ffaa06922798a30ead4ed15bc486da72b62074dfed3cab66374bbf037dc735866b77795db837a3941792086db06baf4bd4277cc8d77be9fab374a07ff409b9ddbbf137a897bd3d6ff24d13dbcf6957c6081ed91c094f47177e20e5d9024a4c9b87f9c73d349979ac5896f44968b73b21bdde5d636a033910448f625510e703c7b3a333ddd2", 0x91, 0x9, 0x0, 0x1, r2}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x7f, r9, &(0x7f00000018c0)="87477272277aa415f81b98e2e110017d11c3929dcde8609d01b7daf9745ec3d9a0494c94ec10e9ee704fc61d6160166ee5abac9983b15699c09f5a28357a652496e74c74ef03a3d5d84843b92018c7cfcd8cf6d824cd2af00d2591918c1099e68d618fc5ed12a3fba7596c128010ddef240f4e0c91a427a2b0c2c356d5c5a4ee27b021a9bcb206c6063196435ed280a439c3", 0x92, 0x7, 0x0, 0x1, r7}]) (async) openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) (async) 19:28:30 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x27b030000000000, 0x0, 0x0) 19:28:30 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:28:30 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x4000) 19:28:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c070000000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350012010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c070000000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350012010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:28:30 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:28:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x3100090, &(0x7f0000000200)=ANY=[@ANYBLOB='upperdir=./file0,index=off,smackfshat=syz1\x00,fowner<', @ANYRESDEC=0xee01, @ANYBLOB="2c66737575812b5780394362343442a42d623637622d2d3400"/34]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x3100090, &(0x7f0000000200)=ANY=[@ANYBLOB='upperdir=./file0,index=off,smackfshat=syz1\x00,fowner<', @ANYRESDEC=0xee01, @ANYBLOB="2c66737575812b5780394362343442a42d623637622d2d3400"/34]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x3100090, &(0x7f0000000200)=ANY=[@ANYBLOB='upperdir=./file0,index=off,smackfshat=syz1\x00,fowner<', @ANYRESDEC=0xee01, @ANYBLOB="2c66737575812b5780394362343442a42d623637622d2d3400"/34]) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x1600a, &(0x7f0000000680)=ANY=[@ANYBLOB='lowerdir=./file0,index=off,nfs_export=off,nfs_export=on,lowerdir=./file0,index=on,xino=auto,redirect_dir=./file0/file0,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner>', @ANYRESDEC=0xee01, @ANYBLOB="ddd35b852c104373d3d671510c0a66e3a6d047c2955d0cd8bfd19db6170b8a5e2f5ea1dbc61f0aee2172a861bf14aa956b56d2711166e8045005be8ec918749f9b491d3c38fd0a0b1ef78bf1e7124bfba56ded3c17bca75354214926f6a8352c43f3aeca3cd6f260ce3932e06d1f91af31b9036242bf27e23fffec4576d945423e44e3169b9ec2caa0ab94d87f54a0943f6584f00758b214b3a6b3a7cd67ab6e1595a9324e27271985e692d9b136d0083ae4471848"]) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x200400, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4000000680000042bbd7000ffdbdf250000000008000000040004000800010000000000060003000100000024000c80080003000002000008000300eacf164dda344e020010000008000200000000002c000c80080002007f000000060001000400000008000300010001000600010006000000060001000800000004000b001c00020001000000160000000100000007000000000000001d00000004000b0004000b00"], 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x6040098) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f00000003c0)=0x2, 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3) openat$cgroup(r3, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) write$P9_RREADDIR(r8, &(0x7f0000000440)={0x93, 0x29, 0x1, {0x1, [{{0x8, 0x3, 0x4}, 0x2, 0xf7, 0xd, './file0/file0'}, {{0x40, 0x3}, 0x4, 0xfc, 0x7, './file0'}, {{0x1, 0x0, 0x10000002}, 0x100, 0x3, 0xd, './file0/file0'}, {{0x1, 0x1, 0x6}, 0x1, 0x80, 0x7, './file0'}]}}, 0x93) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) 19:28:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x1600a, &(0x7f0000000680)=ANY=[@ANYBLOB='lowerdir=./file0,index=off,nfs_export=off,nfs_export=on,lowerdir=./file0,index=on,xino=auto,redirect_dir=./file0/file0,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner>', @ANYRESDEC=0xee01, @ANYBLOB="ddd35b852c104373d3d671510c0a66e3a6d047c2955d0cd8bfd19db6170b8a5e2f5ea1dbc61f0aee2172a861bf14aa956b56d2711166e8045005be8ec918749f9b491d3c38fd0a0b1ef78bf1e7124bfba56ded3c17bca75354214926f6a8352c43f3aeca3cd6f260ce3932e06d1f91af31b9036242bf27e23fffec4576d945423e44e3169b9ec2caa0ab94d87f54a0943f6584f00758b214b3a6b3a7cd67ab6e1595a9324e27271985e692d9b136d0083ae4471848"]) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x200400, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4000000680000042bbd7000ffdbdf250000000008000000040004000800010000000000060003000100000024000c80080003000002000008000300eacf164dda344e020010000008000200000000002c000c80080002007f000000060001000400000008000300010001000600010006000000060001000800000004000b001c00020001000000160000000100000007000000000000001d00000004000b0004000b00"], 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x6040098) (async) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f00000003c0)=0x2, 0x4) (async) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3) openat$cgroup(r3, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) (async) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) write$P9_RREADDIR(r8, &(0x7f0000000440)={0x93, 0x29, 0x1, {0x1, [{{0x8, 0x3, 0x4}, 0x2, 0xf7, 0xd, './file0/file0'}, {{0x40, 0x3}, 0x4, 0xfc, 0x7, './file0'}, {{0x1, 0x0, 0x10000002}, 0x100, 0x3, 0xd, './file0/file0'}, {{0x1, 0x1, 0x6}, 0x1, 0x80, 0x7, './file0'}]}}, 0x93) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x0) (async) openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) [ 594.306773][T16226] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.313932][T16226] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.321597][T16226] device bridge_slave_0 entered promiscuous mode [ 594.328540][T16226] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.335880][T16226] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.343310][T16226] device bridge_slave_1 entered promiscuous mode [ 594.381701][T16226] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.388718][T16226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.395991][T16226] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.403008][T16226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.422651][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.430211][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.438001][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 594.445807][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 594.461531][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 594.469617][ T698] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.476993][ T698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.484549][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 594.492794][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.499795][ T698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.507636][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.515531][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.530290][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.551874][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.560172][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.568836][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.577664][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.596800][T16230] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 594.607148][T16230] CPU: 0 PID: 16230 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 594.617368][T16230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 594.627408][T16230] Call Trace: [ 594.630671][T16230] dump_stack+0x18e/0x1d5 [ 594.634993][T16230] dump_header+0xdb/0x700 [ 594.639293][T16230] oom_kill_process+0xf0/0x2d0 [ 594.644026][T16230] out_of_memory+0x55f/0x7f0 [ 594.648585][T16230] mem_cgroup_oom+0x638/0x760 [ 594.653233][T16230] try_charge+0xc41/0x1100 [ 594.657623][T16230] ? get_mem_cgroup_from_mm+0x251/0x280 [ 594.663139][T16230] mem_cgroup_try_charge+0xd5/0x2a0 [ 594.668304][T16230] wp_page_copy+0x33d/0x1830 [ 594.672871][T16230] ? _raw_spin_unlock+0x49/0x60 [ 594.677698][T16230] ? do_wp_page+0x535/0x8b0 [ 594.682171][T16230] handle_mm_fault+0xeab/0x3b90 [ 594.686990][T16230] ? psi_memstall_leave+0xa8/0xd0 [ 594.691999][T16230] do_user_addr_fault+0x4a4/0xb30 [ 594.696995][T16230] page_fault+0x2f/0x40 [ 594.701148][T16230] RIP: 0033:0x7fdb97171d12 [ 594.705537][T16230] Code: 49 89 85 98 06 00 00 48 8b 85 70 ff ff ff 49 89 85 a0 06 00 00 49 8d 85 10 03 00 00 49 89 85 10 05 00 00 48 8b 05 36 b7 0a 01 00 01 00 00 00 41 c7 85 1c 06 00 00 ff ff ff ff c7 05 33 f7 0a [ 594.725111][T16230] RSP: 002b:00007fff25280bf0 EFLAGS: 00010246 [ 594.731147][T16230] RAX: 00007fdb982224e8 RBX: 0000000000021000 RCX: 00007fdb971c26b7 [ 594.739098][T16230] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fdb96337700 [ 594.747046][T16230] RBP: 00007fff25280cc0 R08: 00000000ffffffff R09: 00007fdb96337700 [ 594.754995][T16230] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff25280de0 [ 594.762942][T16230] R13: 00007fdb96337700 R14: 0000000000000000 R15: 0000000000022000 [ 594.772295][T16230] memory: usage 307200kB, limit 307200kB, failcnt 101901 [ 594.779342][T16230] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 594.787116][T16230] Memory cgroup stats for /syz5: [ 594.787185][T16230] anon 314626048 [ 594.787185][T16230] file 73728 [ 594.787185][T16230] kernel_stack 0 [ 594.787185][T16230] slab 0 [ 594.787185][T16230] sock 0 [ 594.787185][T16230] shmem 0 [ 594.787185][T16230] file_mapped 0 [ 594.787185][T16230] file_dirty 0 [ 594.787185][T16230] file_writeback 0 [ 594.787185][T16230] anon_thp 0 [ 594.787185][T16230] inactive_anon 0 [ 594.787185][T16230] active_anon 314535936 [ 594.787185][T16230] inactive_file 0 [ 594.787185][T16230] active_file 0 [ 594.787185][T16230] unevictable 0 [ 594.787185][T16230] slab_reclaimable 0 [ 594.787185][T16230] slab_unreclaimable 0 [ 594.787185][T16230] pgfault 370821 [ 594.787185][T16230] pgmajfault 0 [ 594.787185][T16230] workingset_refault 33 [ 594.787185][T16230] workingset_activate 0 [ 594.787185][T16230] workingset_nodereclaim 0 [ 594.787185][T16230] pgrefill 3210 [ 594.787185][T16230] pgscan 2805 [ 594.787185][T16230] pgsteal 82 [ 594.787185][T16230] pgactivate 2673 [ 594.880688][T16230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16230,uid=0 [ 594.895942][T16230] Memory cgroup out of memory: Killed process 16230 (syz-executor.5) total-vm:48692kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 594.913930][ T24] oom_reaper: reaped process 16230 (syz-executor.5), now anon-rss:0kB, file-rss:13672kB, shmem-rss:0kB 19:28:34 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x27c020000000000, 0x0, 0x0) 19:28:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x1600a, &(0x7f0000000680)=ANY=[@ANYBLOB='lowerdir=./file0,index=off,nfs_export=off,nfs_export=on,lowerdir=./file0,index=on,xino=auto,redirect_dir=./file0/file0,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fowner>', @ANYRESDEC=0xee01, @ANYBLOB="ddd35b852c104373d3d671510c0a66e3a6d047c2955d0cd8bfd19db6170b8a5e2f5ea1dbc61f0aee2172a861bf14aa956b56d2711166e8045005be8ec918749f9b491d3c38fd0a0b1ef78bf1e7124bfba56ded3c17bca75354214926f6a8352c43f3aeca3cd6f260ce3932e06d1f91af31b9036242bf27e23fffec4576d945423e44e3169b9ec2caa0ab94d87f54a0943f6584f00758b214b3a6b3a7cd67ab6e1595a9324e27271985e692d9b136d0083ae4471848"]) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x200400, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4000000680000042bbd7000ffdbdf250000000008000000040004000800010000000000060003000100000024000c80080003000002000008000300eacf164dda344e020010000008000200000000002c000c80080002007f000000060001000400000008000300010001000600010006000000060001000800000004000b001c00020001000000160000000100000007000000000000001d00000004000b0004000b00"], 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x6040098) (async) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f00000003c0)=0x2, 0x4) (async) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3) openat$cgroup(r3, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) (async) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) write$P9_RREADDIR(r8, &(0x7f0000000440)={0x93, 0x29, 0x1, {0x1, [{{0x8, 0x3, 0x4}, 0x2, 0xf7, 0xd, './file0/file0'}, {{0x40, 0x3}, 0x4, 0xfc, 0x7, './file0'}, {{0x1, 0x0, 0x10000002}, 0x100, 0x3, 0xd, './file0/file0'}, {{0x1, 0x1, 0x6}, 0x1, 0x80, 0x7, './file0'}]}}, 0x93) (async) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x0) (async) openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) 19:28:34 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x40000) 19:28:34 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5fd, 0x20400) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005340)=0xffffffffffffffff, 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000053c0)={&(0x7f0000005380)='./file0\x00', 0x0, 0x89a6fdb630f6d651}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000005400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000005440)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000140)="0553bead27355c0714a002db9f33df000ea52b8502baa335dad4e1b65863d2d18f6803022e1d9a0a90c39cf123870586cd9ec548d5fecdb3fc9c0cf419a6980b5209fbf344acbe68bec6516a2d9a8777a4d40aee61fe9875ea2e71982fd292cc0bcd64895f85a89a35aa4727c42a2dbc7f4d136448496fa66dbe1cbd270097bf2bccc1551066316c26ea55bcbc25255bee8a34ce6b182eaca9ef1d116a0d0b72d5fdd346ddef5adf3d49e223facdd28dabd429aec5", 0xb5}, {&(0x7f0000000040)="8f846a4dcf884413b6d69dfcb3a971f85e25d3fe73e437700e2a7ea3a12a350b5a69eda234a36de32f0d5bb1c50e13fe0f7ddcda", 0x34}, {&(0x7f0000000200)="46e19975084c219b1787096106a18592f52ee16135896e60eaae57d9b04e4fafc386026854695a48c70182d62f043efd70bdb2250e", 0x35}, {&(0x7f0000000240)="24d842cd4942cdfc1d71f5a114b698ee7e7bd40031f676b05f91a50cf6cb531a8e0f55a490f5a6a3f206c66413a9e2bf03cdbeb28eb29c9dae8da46328d6aa17903c209c6945e5926401f6526e22f7e07e312fef197bee1ec9dac85536ba35cb29d93fe51bf49bb4958bdda9200ff7b1440a478c1c397fd0ae4dfe794c6ba0832bff62a867610a92ee59cc05d96ea6f366df8f167c044b87e4d7c7dd9ac48eb275bacddc60cf4b8354e9ad57518180bc6fc22d2cf71e1947a4474fc26b79fbf5918bc82bcf30fb7f3ac73d81a4434f8113c2e89625ef", 0xd6}, {&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000440)="54389a835f949d2ebe5da50b91f3c1dbd4d1877b4d42fb4ab24ee2c3d2f9cd765008dcf50126d4da685f3e5755715381bc066dc58555edd878f8ace9bfcffecf9b2f27acc7084ac1324b911b96b68e418192534497e3cc0af73d000e699a079c66624b21d7e18ca4954839dce5", 0x6d}, {&(0x7f00000004c0)="e1abae18dde691cdeb5679ff9f90bf02595e78c8cdfab99eb934336719c1c93628176e19af1a793c7d4642fe178952e007917596db7f4e15f71d697629a5657fadcd039a7bcf8cd02c2ebcea6456556f8419e580c4856294528ef6da40bccd58d7950e2c785b3f957358004031cac4fbe1ce8721e65aaf5d0e5e19f27f9f16fc968dcbcb115e68f6f72ae6332367ecf2c134a7c789cf08d3a60028103a9f6f2ac7213d73f20688040d4e73210fdc7aa6b39bae223fdbf57004802b43931e7d2160fd5f2d7681", 0xc6}, {&(0x7f00000005c0)="958c35766eb8f7c80cc8d93f804a7f6441237c1abb4e3996d8b1ccef17895e831ae1b70ae5de8b9f4e1a7b33ad0696826d407096cc3338da5fb0c884b9ebc60fee2ac6f8f64d12b60490d9d1aa04208c32e1a5908bfce1ce546073ff8f1d8754fad444c01462c2136362304ba28aadda860e5773bec2d3c9f4dfe8c195663f7424b3b8fe2c010fc571418fe381b95f74fcc80eadf5f300c33e434b64", 0x9c}], 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="68b0d7cdb60aef093d665fed", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000028000000050000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="67b475275b0797cae264883a24aee0748830bc850dff03e10a66aab01947398f328a89c3164818dfed6b864eea50c17973006a09518c74beef1fd5506de6d42806634aeb6b8b1f3e3de7888598872304cf42d4a0e54730234631ba791f66c6717de0004c5bbc3c75ace7b631a25ae65a6b93cb418f09", 0x76}, {&(0x7f0000000980)="d5b0f3636aabd5438f3ceec097e0c11bf78fd249a08fed313b70ac5c04dd964d5dec032a935db82e3c7bda42fcf6371a734cafb8a0189e171fc9b0fd74b987370200e6cde8f54dc822a6bf374e1b4fb8f594e2357d21805844591e227ee352a5766fdebe7741845597924510319241833fed5afb2895d73da38d76da6826f41fa3d2b4b365a5f6f1c44310497010a16a8a6d8020a5942d975d4db141005391b78f28016310cb4f8f7c75b1aba6d6f157ae1f28a8d2a853dda3e0e91c764614fc319f9f07f1483697928988dd98b5e1678af446e42ef3b4b660e4c4d2ca", 0xdd}, {&(0x7f0000000a80)="ea27fd338b2a5c6eb8e87435612589cde317accf354db073fa2b81358a0448c08c2988d54ebe6b370f2b7a310f59bcc8d267b3c2f2f649dcbb30f3519587312973f794c76adbf0a2be", 0x49}], 0x3, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x170, 0x28000000}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000f40)="f6eda76e753c9e9bebae2af854a6d0e4b44675b289c5a5c1b896a67676646b9ec811d5d4855531fecca4a03a1507e3232a54d71defab6a956eef89cd47108765f76ceca2303f6f03e296bd6c7977d6059d9af772a9d573c5727e3db2ce5fb80b816f556a559f3b7ad0f4880afb3ea4c7b483aa5d4f079a855659cefb8785366dfab5778e3f4a9bbd08f55df222e9b7aafd17046258d384aab3a8681868e098775a28c843d92064bc0a51e254ce54f2e6810d1a530eca1e88b0091d158bf252fe844b55ece501d12ec89a8263b5b13e8d49e6b490f5a1e5aebfd582576972f398d4b76a547934064599741dbb566531ffc13b1114251fb0de", 0xf8}, {&(0x7f0000001040)="32dab18fe66bda48e0571da323ac435ee3e201d475bdfe978eac3520d7c7ca67c2a2c0b49f03aed317c43092b6927e2bc20fa3fd1876277d268bd7c96490a4e9e568e7b9f42bbc293f14bd92f53b3aa544f555dc2a6e32c852b4e95ec9f280f0485ee8f2fa7427003a30b56df8956e4b45f18b550d3e", 0x76}, {&(0x7f00000010c0)="218ef9b846fbbb85f64783297331ac8d088b0e7dcf658f91f99d366435cc3b0eca573b159bf2be33018071a7c60d9df7910de3187c4f5118fdd98f0dd6f0a778f521ecd984d91b373febf19b10ed010a7dbcf1ce33987145d64c6fab584043fde94a7944eceac37a1516433261fcf439f090a6f66f22245da1159ed4485b04fedbc8191b4d53dd733ecd454742f35beae05e444c97121a4596e615ccae364a40bf6ba8c0355126a7b6867378df13d76da5a374d51abb38559bcaee178a5a70fb8a0478a4884cf0023b71d90de8952b1794904c2f0c74309f8e0cafc04e7b4e0ccb8fbc991838c0b6a0d74ed21715a13e8f528449781c7844", 0xf8}, {&(0x7f00000011c0)="a640eada8900d577268e3ce4c1aa5c291e1f1492024d538dc55ce636d08dda6bae7d4a4f9c3872207c6c5932d7a281022dd1216f6c4e395b1dab595f38abd7860e41be7f46cd05d25596b9022077b5e5117c2b5bfc18309bbccd0ce41675e4b2a51fba4b5112174147280293f8ca0cba6a61d0cf8347850882394adce664ccc14149655e4d0d753a599ed73a8d3d398df8fd119ede1e4084236d30a8acc830b4c7555d466ab5ffe6f555b527a637e8e5991704232f429199705bb8b4db59f413bc5f94a3cc0f8b5233aa9c13a2", 0xcd}, {&(0x7f00000012c0)="c2cff4aeea30914a1119a50846676d709a48faa95037456fcf9c83a70b511ef21b9a965ca5296fb369dd771ba3b8744c0bd1afa44d73af294c14dfde1b05a4ced05514019eba938c09a4bafef465a775a0459c3a1ed916b71d6a46cc9eb846ce966a", 0x62}, {&(0x7f0000001340)="5aca675bb7129d272c7eac71609a742455ac034d9e9ca2be219dd1fa3641f9affc3bfd68c4e1fff4abcdc324d0f9247d8b11e9e1b88892db5ef80d26d7cb4753dc219511adb8948d960171f0369cde99da839aa475f87ddd66d573884ee75df05af18d", 0x63}], 0x6, &(0x7f0000001500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x68, 0x800}}, {{&(0x7f0000001580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001600)="fa3f44ac77b697653c2a81d522259f223237219886a9003ea482b5235bc258c6aa7372d4a697e6cb066d1790ed05557db373f1744b35e20c555e305ac83f1f64771229228879bf6340f463ce94967f24ef302af708bb93f6cf7e57b7f8902b27c1b45ac5f683f104aa266b29192ce0c802a97d20b72c851f9015dcca00f45cd09c5f30775656356f88acfb00438faa2348aba2b34f602277799daf7a0f4773049679a26969975675557701d4bc8c33a8b642cd19940b59f0d308850c072e20609ecaaf1e6ad61ed8d55dc6c66f328500af79de5c5d25515fd24d02b72bf735bc15d13730195582ec30cfe93fc425fde8ffef53f7", 0xf4}, {&(0x7f0000001700)}, {&(0x7f0000001740)="e997e5f276bd79aed9702a386060e6c026e0d05cc6bb1b6a942a7ede6ea7a0eb4e5162cfc4df17f18cc369dd633f9dbfe4af875ff8f5dac788fb6b9525dff06c3ab97ee01636c20cea272d55cc37ad272aba79b0c1304234701a3079aa0839daca17af64c6", 0x65}, {&(0x7f00000017c0)="e5019508c3108d4aa167ecf0e82e04c21464f141bfdae0b276447e590f411b707666701e440fd495d05015b81d54b33e38", 0x31}, {&(0x7f0000001800)="1edc8532529529f9ff1a91e816a3a8ad15816e4c23d7260aaa868b3a6648f45dd1f99fafe95e22a75c20149f52adac4d165b42d6c045d74315af09e5f2aae9b5a14b040d79d946a2a1920ed64c55c25ff994afa9e07a76ba9b34b74893e6f82ade2b85f57b14763142722f6e3ba78491fa4de1f77a98ae4572020b68b436a1333644eb9a47082f3cd838ef31da836b3e161351fc6be38d4558ff1e0e2316ca518a20b966955a169d8deed3d8193d598672af3449ebb861e0a55fa77742cd59c435a7caa2069316c5a5bb7086e1e8d0c8dee632baafec3d4f86f87c90ca6bab96466892436dfc2944b793a27797bb", 0xee}, {&(0x7f0000001900)="c548f743644ad3d6c3b40ce5c1", 0xd}, {&(0x7f0000001940)="996e05f09890351d9467dd60c1386b525fd0e901e62ba91dee4bbbdf1f5e3ca4e4ffc6041b6852316b3be5", 0x2b}, {&(0x7f0000001980)="e5627b200ad8038a03705fc992bf09da316da7701fa0c1393313b10f395d49011e242af7000dbd69f0c5e93db1899bb5e5d773315f23efc2eabe31ad5ab1fd7d4ea033a287ca37a0a9daf8b5fc88cfb3de81cd55670482c7cfa610cdba871f0dc00b0ca1b161b73ab53c88b2cd8d37a9bc9ee86154b397dbc3026ed1563f3c6b4d3ebbefa3a55a7f13858ddd27d01e3936f86f141ee1d0aad79e1e0d81e76d06ba241c67f182d7f0dc80c02604b05fc63e6f7fd1800b11bc022e9ee9095433490ed6e42776f2f45c213991", 0xcb}, {&(0x7f0000001a80)="035120b7fe3283b0c144600a99cf9e341217698ad8c098bf694851655fc9d8f7913ae2748b399a00b14af1ef8d2030bc7428224c322ea02df00b5080352e504af29e8bbf422e974f575c9a448bcf3ff830281e40423c4070b5795688c7f048f9093720faaa5c4a9537b6680a56d154553149ca", 0x73}], 0x9, &(0x7f0000001d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x400c5}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001e40)="472a98a7c0a97b9cddcf937435869db16b99072b2b5288c652e9a1331c27e8ad7d0f70a6a50ca49e25f118e2b618adf3f8d4efb3fbec2689cb07e76af8d2745e1b473b174fb7ad66ed166287b86732ca562820bed50eb0c3aa5f0fb6faae1fa1f9b43588cf08cbe161e4fb9d4ca62555440c1395aa30673dcfe0a2288dfb34d6827c3806ad2ac0272cde52bfbaf44b42f2f0", 0x92}, {&(0x7f0000001f00)="77f07d178e916632e87bf6d45244a34dc05c3e34fb20bb099b273175a6de99b451c1119c36b832715f226c15c201505f0529a335c21af7eea8ea82860c37f85b7f6093bcf597d4187fa11e78db53fe7243812de3c34713b3d5476d0e3c778cb78fde7ddd14323871f82687fd854b06220d1b5063d515edd445406a7c09a2e9bb5f312a62d5756891fd7733c8f418", 0x8e}, {&(0x7f0000001fc0)="ee2003652c3032c71a68e5c3b045d797fdd846a085a4fd5a", 0x18}, {&(0x7f0000002000)="335bdd36a9d33172073f86edee2d50dce7e9a59c53ab443626394ed80fb2dd07ee7629bc5bba1bf4c38cf8958b395f322586497fdd5359d0827116bb6ab7af868427052b9c26f12305e56f074738b7f34c6fb973e9fdcd47d03fbfdf86412aa57fc74f15037045fa0b5f7181a78a7c464f2902972fb4cf0613685fb35c27a791a662e6586597d767759a9201d2f5edc6d0952c73e188094f10f36d953b8a8e5721", 0xa1}, {&(0x7f00000020c0)="7b06912edf32c1e9a4d8565ecf5216803358edc27d9f9323108fa4bfd6696c6ecadb33e2084bd27eaeef83056e57b7010b43614376d7c0ba7362a2dcd4ba6bfd73255f39b1f4a1f365d5f0a942eeac53d1282fb0dd90747e23d9fb3b2220e0da566e40f63f8d8ce4a40cc3aebfc5b7a815de087a44e8bb3fd280747a758faa4e17ef8814ca9b6ed575c11e770e1aa27c45220d0595f6a9207e38b66ea2cb2c55247c784be865272f685eb083763823f25125f2f80a70dd427ba654fe2f63bf712050eae3a958f82712519853c63d9c5ec5c71aa50ac25920a04884317bd7f80a631016b401b0b406d8b26bb4a43c0d16bfa366b7099e288d35a87869ffd743", 0xff}, {&(0x7f00000021c0)="b4e8a2cfad61e17d", 0x8}, {&(0x7f0000002200)="630c0eeff81d1fc04564aa649baca9a373a0d7dc718de9e239a92e4a42044b9e6f1ebe2fdb78699a3abc32a11b054606beb7bd2baf78235d6ec569a4f6e9ae14cd15ea5d06e255d0860d2095834dcbfc4061efd5ff0cf2f7f0434ac690e838b3aed76fb8d44b552977ff850a2c0948f9c5e7c5c46641dd9032bd007f3dfd7e1d5f4a097f42525d89332c6b4ca989128feaadba6b652672", 0x97}], 0x7, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8, 0x4000000}}, {{&(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0x20, 0x80}}, {{&(0x7f0000002b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c00)="09fe3d63eca8c96b0d50a1d2f27b6746057671c89a7ae31a1a733313ef8ec2a84298f5b507eac8dc1aa9b09303ddfac3b786c07fc206a3a3e986aeb5dec6014c35554e0c77b03e3d100f56ab46c8c683c6", 0x51}, {&(0x7f0000002c80)="1e979c6ebbe3cb88d7acece4ce79b13c95360f630b18f6639bcb3dabb437", 0x1e}], 0x2, &(0x7f0000004e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}], 0xd8, 0x4040000}}, {{&(0x7f0000004f40)=@file={0x4428fdc583d28dda, './file0\x00'}, 0x6e, &(0x7f0000005240)=[{&(0x7f0000004fc0)="4fc37fe54fff419d974a72df9ebf618e5759048869ea52c85137679c10ce53076d02fcca28372e6ec018153dc79585dfdaa9de", 0x33}, {&(0x7f0000005000)="88409a2fab0323054a314640b332e3c99984afdcbbba9f924999c6aa9a2e5df9bccb11b99d9263b57312e69ca5a94c59033cfa4e0bb91cc0495635a4dc5725901ad33a0225faaae58e9ef9c31da0371d65d8037ad2fe2fd1691995e1ff8976cf1750cb8f114d053ffb02d9376d2b280f1fa4717a6bf6ec2fc3a2fdc212c4345a045720d88ec1", 0x86}, {&(0x7f00000050c0)="9472cca7a05435b0ed83edb9be3d76cbcbf668c56fe1e93304bc19a4ef837c08eccd52d4cb8f6c9a8a59defec182d1f12e4746ebb7e8d913c1ea9f4e1d8adc91d63a12e86be246a80a747f2e3679a9325bb386f26af8b01ab0829649b29ffb1b17a12ddfabf5d59adb2979f73de9dc11ae5049dc6018b494c1886b9c341a5a0001d886de87a833aad1aa903eefbbf88c0cc55115616b64e306c45141ded82f0ffa4932eb24493d9a", 0xa8}, {&(0x7f0000005180)="b20e421a9b63210cda29288ec00a77d4044b49ea7d2b6946976f7b84e02d94995e3b1aa3ed0518e38261f662ea2db6fad10ccdd37686460563ca9cc25ca7f0091a0d387bdb8888183adef4d78415b61f07b643e6c913674983058231b63e10aa45423a5fcaa7ae2b78d6c9b764c33ea295b0d04e0faee19449174a036d30365cbf729cd3c62f9ac5a0e08984a3cb6a661b82e919b3adf6e3c7f39c0838691e63279fdf69eb019358aac20a6aac067336e8", 0xb1}], 0x4, &(0x7f0000005480)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0]}}, @rights={{0x38, 0x1, 0x1, [r4, r0, r5, r1, r6, r7, r8, r9, r10, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}], 0xd0, 0x4008844}}], 0x8, 0x51) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:28:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200000000000000000000000000000000000000000000000400"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:34 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0)="15", 0x0}, 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f00000003c0)="48eac2d8ba7eb454a10fe1108523b781019406e05a7f77308da7c8dfd2ff6091ab5c40b21d64b9a4911874f7f9b7c5305f9059ce73b3bef81b72d502fc51833d57d1b96b448e9d27d48966532e3af25c0a2deab7e1b0e75e84263befacb39a2942878fc2237ba792a1e8434606991347c8f296b3ca7d2109c5a0da0f1965843ade66780f71dffbbc7943cd6e24a85a0c145841d7a6ab17e8117aae76dedb29cd1e4440875e614b43da29be1a820e18b4a5a6bf724c1cdcb6ec1a27065eac6fd82c33d66e3aa6bc3b079918b68e7618c0c1190a4b81a3b3595a9821", &(0x7f00000005c0)=""/208, 0x4}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x103240, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xf81, 0xa, &(0x7f0000000200)=""/10, 0x41100, 0x18, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r7, r0, r8]}, 0x80) 19:28:34 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5fd, 0x20400) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0xa) (rerun: 64) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005340)=0xffffffffffffffff, 0x4) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000053c0)={&(0x7f0000005380)='./file0\x00', 0x0, 0x89a6fdb630f6d651}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async, rerun: 32) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000005400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 32) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000005440)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000140)="0553bead27355c0714a002db9f33df000ea52b8502baa335dad4e1b65863d2d18f6803022e1d9a0a90c39cf123870586cd9ec548d5fecdb3fc9c0cf419a6980b5209fbf344acbe68bec6516a2d9a8777a4d40aee61fe9875ea2e71982fd292cc0bcd64895f85a89a35aa4727c42a2dbc7f4d136448496fa66dbe1cbd270097bf2bccc1551066316c26ea55bcbc25255bee8a34ce6b182eaca9ef1d116a0d0b72d5fdd346ddef5adf3d49e223facdd28dabd429aec5", 0xb5}, {&(0x7f0000000040)="8f846a4dcf884413b6d69dfcb3a971f85e25d3fe73e437700e2a7ea3a12a350b5a69eda234a36de32f0d5bb1c50e13fe0f7ddcda", 0x34}, {&(0x7f0000000200)="46e19975084c219b1787096106a18592f52ee16135896e60eaae57d9b04e4fafc386026854695a48c70182d62f043efd70bdb2250e", 0x35}, {&(0x7f0000000240)="24d842cd4942cdfc1d71f5a114b698ee7e7bd40031f676b05f91a50cf6cb531a8e0f55a490f5a6a3f206c66413a9e2bf03cdbeb28eb29c9dae8da46328d6aa17903c209c6945e5926401f6526e22f7e07e312fef197bee1ec9dac85536ba35cb29d93fe51bf49bb4958bdda9200ff7b1440a478c1c397fd0ae4dfe794c6ba0832bff62a867610a92ee59cc05d96ea6f366df8f167c044b87e4d7c7dd9ac48eb275bacddc60cf4b8354e9ad57518180bc6fc22d2cf71e1947a4474fc26b79fbf5918bc82bcf30fb7f3ac73d81a4434f8113c2e89625ef", 0xd6}, {&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000440)="54389a835f949d2ebe5da50b91f3c1dbd4d1877b4d42fb4ab24ee2c3d2f9cd765008dcf50126d4da685f3e5755715381bc066dc58555edd878f8ace9bfcffecf9b2f27acc7084ac1324b911b96b68e418192534497e3cc0af73d000e699a079c66624b21d7e18ca4954839dce5", 0x6d}, {&(0x7f00000004c0)="e1abae18dde691cdeb5679ff9f90bf02595e78c8cdfab99eb934336719c1c93628176e19af1a793c7d4642fe178952e007917596db7f4e15f71d697629a5657fadcd039a7bcf8cd02c2ebcea6456556f8419e580c4856294528ef6da40bccd58d7950e2c785b3f957358004031cac4fbe1ce8721e65aaf5d0e5e19f27f9f16fc968dcbcb115e68f6f72ae6332367ecf2c134a7c789cf08d3a60028103a9f6f2ac7213d73f20688040d4e73210fdc7aa6b39bae223fdbf57004802b43931e7d2160fd5f2d7681", 0xc6}, {&(0x7f00000005c0)="958c35766eb8f7c80cc8d93f804a7f6441237c1abb4e3996d8b1ccef17895e831ae1b70ae5de8b9f4e1a7b33ad0696826d407096cc3338da5fb0c884b9ebc60fee2ac6f8f64d12b60490d9d1aa04208c32e1a5908bfce1ce546073ff8f1d8754fad444c01462c2136362304ba28aadda860e5773bec2d3c9f4dfe8c195663f7424b3b8fe2c010fc571418fe381b95f74fcc80eadf5f300c33e434b64", 0x9c}], 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="68b0d7cdb60aef093d665fed", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000028000000050000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="67b475275b0797cae264883a24aee0748830bc850dff03e10a66aab01947398f328a89c3164818dfed6b864eea50c17973006a09518c74beef1fd5506de6d42806634aeb6b8b1f3e3de7888598872304cf42d4a0e54730234631ba791f66c6717de0004c5bbc3c75ace7b631a25ae65a6b93cb418f09", 0x76}, {&(0x7f0000000980)="d5b0f3636aabd5438f3ceec097e0c11bf78fd249a08fed313b70ac5c04dd964d5dec032a935db82e3c7bda42fcf6371a734cafb8a0189e171fc9b0fd74b987370200e6cde8f54dc822a6bf374e1b4fb8f594e2357d21805844591e227ee352a5766fdebe7741845597924510319241833fed5afb2895d73da38d76da6826f41fa3d2b4b365a5f6f1c44310497010a16a8a6d8020a5942d975d4db141005391b78f28016310cb4f8f7c75b1aba6d6f157ae1f28a8d2a853dda3e0e91c764614fc319f9f07f1483697928988dd98b5e1678af446e42ef3b4b660e4c4d2ca", 0xdd}, {&(0x7f0000000a80)="ea27fd338b2a5c6eb8e87435612589cde317accf354db073fa2b81358a0448c08c2988d54ebe6b370f2b7a310f59bcc8d267b3c2f2f649dcbb30f3519587312973f794c76adbf0a2be", 0x49}], 0x3, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x170, 0x28000000}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000f40)="f6eda76e753c9e9bebae2af854a6d0e4b44675b289c5a5c1b896a67676646b9ec811d5d4855531fecca4a03a1507e3232a54d71defab6a956eef89cd47108765f76ceca2303f6f03e296bd6c7977d6059d9af772a9d573c5727e3db2ce5fb80b816f556a559f3b7ad0f4880afb3ea4c7b483aa5d4f079a855659cefb8785366dfab5778e3f4a9bbd08f55df222e9b7aafd17046258d384aab3a8681868e098775a28c843d92064bc0a51e254ce54f2e6810d1a530eca1e88b0091d158bf252fe844b55ece501d12ec89a8263b5b13e8d49e6b490f5a1e5aebfd582576972f398d4b76a547934064599741dbb566531ffc13b1114251fb0de", 0xf8}, {&(0x7f0000001040)="32dab18fe66bda48e0571da323ac435ee3e201d475bdfe978eac3520d7c7ca67c2a2c0b49f03aed317c43092b6927e2bc20fa3fd1876277d268bd7c96490a4e9e568e7b9f42bbc293f14bd92f53b3aa544f555dc2a6e32c852b4e95ec9f280f0485ee8f2fa7427003a30b56df8956e4b45f18b550d3e", 0x76}, {&(0x7f00000010c0)="218ef9b846fbbb85f64783297331ac8d088b0e7dcf658f91f99d366435cc3b0eca573b159bf2be33018071a7c60d9df7910de3187c4f5118fdd98f0dd6f0a778f521ecd984d91b373febf19b10ed010a7dbcf1ce33987145d64c6fab584043fde94a7944eceac37a1516433261fcf439f090a6f66f22245da1159ed4485b04fedbc8191b4d53dd733ecd454742f35beae05e444c97121a4596e615ccae364a40bf6ba8c0355126a7b6867378df13d76da5a374d51abb38559bcaee178a5a70fb8a0478a4884cf0023b71d90de8952b1794904c2f0c74309f8e0cafc04e7b4e0ccb8fbc991838c0b6a0d74ed21715a13e8f528449781c7844", 0xf8}, {&(0x7f00000011c0)="a640eada8900d577268e3ce4c1aa5c291e1f1492024d538dc55ce636d08dda6bae7d4a4f9c3872207c6c5932d7a281022dd1216f6c4e395b1dab595f38abd7860e41be7f46cd05d25596b9022077b5e5117c2b5bfc18309bbccd0ce41675e4b2a51fba4b5112174147280293f8ca0cba6a61d0cf8347850882394adce664ccc14149655e4d0d753a599ed73a8d3d398df8fd119ede1e4084236d30a8acc830b4c7555d466ab5ffe6f555b527a637e8e5991704232f429199705bb8b4db59f413bc5f94a3cc0f8b5233aa9c13a2", 0xcd}, {&(0x7f00000012c0)="c2cff4aeea30914a1119a50846676d709a48faa95037456fcf9c83a70b511ef21b9a965ca5296fb369dd771ba3b8744c0bd1afa44d73af294c14dfde1b05a4ced05514019eba938c09a4bafef465a775a0459c3a1ed916b71d6a46cc9eb846ce966a", 0x62}, {&(0x7f0000001340)="5aca675bb7129d272c7eac71609a742455ac034d9e9ca2be219dd1fa3641f9affc3bfd68c4e1fff4abcdc324d0f9247d8b11e9e1b88892db5ef80d26d7cb4753dc219511adb8948d960171f0369cde99da839aa475f87ddd66d573884ee75df05af18d", 0x63}], 0x6, &(0x7f0000001500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x68, 0x800}}, {{&(0x7f0000001580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001600)="fa3f44ac77b697653c2a81d522259f223237219886a9003ea482b5235bc258c6aa7372d4a697e6cb066d1790ed05557db373f1744b35e20c555e305ac83f1f64771229228879bf6340f463ce94967f24ef302af708bb93f6cf7e57b7f8902b27c1b45ac5f683f104aa266b29192ce0c802a97d20b72c851f9015dcca00f45cd09c5f30775656356f88acfb00438faa2348aba2b34f602277799daf7a0f4773049679a26969975675557701d4bc8c33a8b642cd19940b59f0d308850c072e20609ecaaf1e6ad61ed8d55dc6c66f328500af79de5c5d25515fd24d02b72bf735bc15d13730195582ec30cfe93fc425fde8ffef53f7", 0xf4}, {&(0x7f0000001700)}, {&(0x7f0000001740)="e997e5f276bd79aed9702a386060e6c026e0d05cc6bb1b6a942a7ede6ea7a0eb4e5162cfc4df17f18cc369dd633f9dbfe4af875ff8f5dac788fb6b9525dff06c3ab97ee01636c20cea272d55cc37ad272aba79b0c1304234701a3079aa0839daca17af64c6", 0x65}, {&(0x7f00000017c0)="e5019508c3108d4aa167ecf0e82e04c21464f141bfdae0b276447e590f411b707666701e440fd495d05015b81d54b33e38", 0x31}, {&(0x7f0000001800)="1edc8532529529f9ff1a91e816a3a8ad15816e4c23d7260aaa868b3a6648f45dd1f99fafe95e22a75c20149f52adac4d165b42d6c045d74315af09e5f2aae9b5a14b040d79d946a2a1920ed64c55c25ff994afa9e07a76ba9b34b74893e6f82ade2b85f57b14763142722f6e3ba78491fa4de1f77a98ae4572020b68b436a1333644eb9a47082f3cd838ef31da836b3e161351fc6be38d4558ff1e0e2316ca518a20b966955a169d8deed3d8193d598672af3449ebb861e0a55fa77742cd59c435a7caa2069316c5a5bb7086e1e8d0c8dee632baafec3d4f86f87c90ca6bab96466892436dfc2944b793a27797bb", 0xee}, {&(0x7f0000001900)="c548f743644ad3d6c3b40ce5c1", 0xd}, {&(0x7f0000001940)="996e05f09890351d9467dd60c1386b525fd0e901e62ba91dee4bbbdf1f5e3ca4e4ffc6041b6852316b3be5", 0x2b}, {&(0x7f0000001980)="e5627b200ad8038a03705fc992bf09da316da7701fa0c1393313b10f395d49011e242af7000dbd69f0c5e93db1899bb5e5d773315f23efc2eabe31ad5ab1fd7d4ea033a287ca37a0a9daf8b5fc88cfb3de81cd55670482c7cfa610cdba871f0dc00b0ca1b161b73ab53c88b2cd8d37a9bc9ee86154b397dbc3026ed1563f3c6b4d3ebbefa3a55a7f13858ddd27d01e3936f86f141ee1d0aad79e1e0d81e76d06ba241c67f182d7f0dc80c02604b05fc63e6f7fd1800b11bc022e9ee9095433490ed6e42776f2f45c213991", 0xcb}, {&(0x7f0000001a80)="035120b7fe3283b0c144600a99cf9e341217698ad8c098bf694851655fc9d8f7913ae2748b399a00b14af1ef8d2030bc7428224c322ea02df00b5080352e504af29e8bbf422e974f575c9a448bcf3ff830281e40423c4070b5795688c7f048f9093720faaa5c4a9537b6680a56d154553149ca", 0x73}], 0x9, &(0x7f0000001d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x400c5}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001e40)="472a98a7c0a97b9cddcf937435869db16b99072b2b5288c652e9a1331c27e8ad7d0f70a6a50ca49e25f118e2b618adf3f8d4efb3fbec2689cb07e76af8d2745e1b473b174fb7ad66ed166287b86732ca562820bed50eb0c3aa5f0fb6faae1fa1f9b43588cf08cbe161e4fb9d4ca62555440c1395aa30673dcfe0a2288dfb34d6827c3806ad2ac0272cde52bfbaf44b42f2f0", 0x92}, {&(0x7f0000001f00)="77f07d178e916632e87bf6d45244a34dc05c3e34fb20bb099b273175a6de99b451c1119c36b832715f226c15c201505f0529a335c21af7eea8ea82860c37f85b7f6093bcf597d4187fa11e78db53fe7243812de3c34713b3d5476d0e3c778cb78fde7ddd14323871f82687fd854b06220d1b5063d515edd445406a7c09a2e9bb5f312a62d5756891fd7733c8f418", 0x8e}, {&(0x7f0000001fc0)="ee2003652c3032c71a68e5c3b045d797fdd846a085a4fd5a", 0x18}, {&(0x7f0000002000)="335bdd36a9d33172073f86edee2d50dce7e9a59c53ab443626394ed80fb2dd07ee7629bc5bba1bf4c38cf8958b395f322586497fdd5359d0827116bb6ab7af868427052b9c26f12305e56f074738b7f34c6fb973e9fdcd47d03fbfdf86412aa57fc74f15037045fa0b5f7181a78a7c464f2902972fb4cf0613685fb35c27a791a662e6586597d767759a9201d2f5edc6d0952c73e188094f10f36d953b8a8e5721", 0xa1}, {&(0x7f00000020c0)="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", 0xff}, {&(0x7f00000021c0)="b4e8a2cfad61e17d", 0x8}, {&(0x7f0000002200)="630c0eeff81d1fc04564aa649baca9a373a0d7dc718de9e239a92e4a42044b9e6f1ebe2fdb78699a3abc32a11b054606beb7bd2baf78235d6ec569a4f6e9ae14cd15ea5d06e255d0860d2095834dcbfc4061efd5ff0cf2f7f0434ac690e838b3aed76fb8d44b552977ff850a2c0948f9c5e7c5c46641dd9032bd007f3dfd7e1d5f4a097f42525d89332c6b4ca989128feaadba6b652672", 0x97}], 0x7, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8, 0x4000000}}, {{&(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0x20, 0x80}}, {{&(0x7f0000002b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c00)="09fe3d63eca8c96b0d50a1d2f27b6746057671c89a7ae31a1a733313ef8ec2a84298f5b507eac8dc1aa9b09303ddfac3b786c07fc206a3a3e986aeb5dec6014c35554e0c77b03e3d100f56ab46c8c683c6", 0x51}, {&(0x7f0000002c80)="1e979c6ebbe3cb88d7acece4ce79b13c95360f630b18f6639bcb3dabb437", 0x1e}], 0x2, &(0x7f0000004e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}], 0xd8, 0x4040000}}, {{&(0x7f0000004f40)=@file={0x4428fdc583d28dda, './file0\x00'}, 0x6e, &(0x7f0000005240)=[{&(0x7f0000004fc0)="4fc37fe54fff419d974a72df9ebf618e5759048869ea52c85137679c10ce53076d02fcca28372e6ec018153dc79585dfdaa9de", 0x33}, {&(0x7f0000005000)="88409a2fab0323054a314640b332e3c99984afdcbbba9f924999c6aa9a2e5df9bccb11b99d9263b57312e69ca5a94c59033cfa4e0bb91cc0495635a4dc5725901ad33a0225faaae58e9ef9c31da0371d65d8037ad2fe2fd1691995e1ff8976cf1750cb8f114d053ffb02d9376d2b280f1fa4717a6bf6ec2fc3a2fdc212c4345a045720d88ec1", 0x86}, {&(0x7f00000050c0)="9472cca7a05435b0ed83edb9be3d76cbcbf668c56fe1e93304bc19a4ef837c08eccd52d4cb8f6c9a8a59defec182d1f12e4746ebb7e8d913c1ea9f4e1d8adc91d63a12e86be246a80a747f2e3679a9325bb386f26af8b01ab0829649b29ffb1b17a12ddfabf5d59adb2979f73de9dc11ae5049dc6018b494c1886b9c341a5a0001d886de87a833aad1aa903eefbbf88c0cc55115616b64e306c45141ded82f0ffa4932eb24493d9a", 0xa8}, {&(0x7f0000005180)="b20e421a9b63210cda29288ec00a77d4044b49ea7d2b6946976f7b84e02d94995e3b1aa3ed0518e38261f662ea2db6fad10ccdd37686460563ca9cc25ca7f0091a0d387bdb8888183adef4d78415b61f07b643e6c913674983058231b63e10aa45423a5fcaa7ae2b78d6c9b764c33ea295b0d04e0faee19449174a036d30365cbf729cd3c62f9ac5a0e08984a3cb6a661b82e919b3adf6e3c7f39c0838691e63279fdf69eb019358aac20a6aac067336e8", 0xb1}], 0x4, &(0x7f0000005480)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0]}}, @rights={{0x38, 0x1, 0x1, [r4, r0, r5, r1, r6, r7, r8, r9, r10, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}], 0xd0, 0x4008844}}], 0x8, 0x51) (async) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 596.810488][T16241] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 596.820744][T16241] CPU: 1 PID: 16241 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 596.830962][T16241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 596.841087][T16241] Call Trace: [ 596.844382][T16241] dump_stack+0x18e/0x1d5 [ 596.848715][T16241] dump_header+0xdb/0x700 [ 596.853038][T16241] oom_kill_process+0xf0/0x2d0 [ 596.857789][T16241] out_of_memory+0x55f/0x7f0 [ 596.862362][T16241] mem_cgroup_oom+0x638/0x760 [ 596.867026][T16241] try_charge+0xc41/0x1100 [ 596.871529][T16241] ? get_mem_cgroup_from_mm+0x251/0x280 [ 596.877061][T16241] mem_cgroup_try_charge+0xd5/0x2a0 [ 596.882285][T16241] handle_mm_fault+0x158a/0x3b90 [ 596.887226][T16241] do_user_addr_fault+0x4a4/0xb30 [ 596.892243][T16241] page_fault+0x2f/0x40 [ 596.896385][T16241] RIP: 0033:0x7fdb971620d9 [ 596.900783][T16241] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 596.920369][T16241] RSP: 002b:00007fff25280c90 EFLAGS: 00010246 [ 596.926421][T16241] RAX: 0000000020000140 RBX: 0000000000000000 RCX: 0000000000000000 [ 596.934379][T16241] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00005555558cc2e8 [ 596.942340][T16241] RBP: 00007fff25280d88 R08: 0000000000000000 R09: 0000000000000000 [ 596.950297][T16241] R10: 0000000000016658 R11: 0000000000000254 R12: 0000000000000001 19:28:34 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5fd, 0x20400) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005340)=0xffffffffffffffff, 0x4) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000053c0)={&(0x7f0000005380)='./file0\x00', 0x0, 0x89a6fdb630f6d651}, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000005400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000005440)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000140)="0553bead27355c0714a002db9f33df000ea52b8502baa335dad4e1b65863d2d18f6803022e1d9a0a90c39cf123870586cd9ec548d5fecdb3fc9c0cf419a6980b5209fbf344acbe68bec6516a2d9a8777a4d40aee61fe9875ea2e71982fd292cc0bcd64895f85a89a35aa4727c42a2dbc7f4d136448496fa66dbe1cbd270097bf2bccc1551066316c26ea55bcbc25255bee8a34ce6b182eaca9ef1d116a0d0b72d5fdd346ddef5adf3d49e223facdd28dabd429aec5", 0xb5}, {&(0x7f0000000040)="8f846a4dcf884413b6d69dfcb3a971f85e25d3fe73e437700e2a7ea3a12a350b5a69eda234a36de32f0d5bb1c50e13fe0f7ddcda", 0x34}, {&(0x7f0000000200)="46e19975084c219b1787096106a18592f52ee16135896e60eaae57d9b04e4fafc386026854695a48c70182d62f043efd70bdb2250e", 0x35}, {&(0x7f0000000240)="24d842cd4942cdfc1d71f5a114b698ee7e7bd40031f676b05f91a50cf6cb531a8e0f55a490f5a6a3f206c66413a9e2bf03cdbeb28eb29c9dae8da46328d6aa17903c209c6945e5926401f6526e22f7e07e312fef197bee1ec9dac85536ba35cb29d93fe51bf49bb4958bdda9200ff7b1440a478c1c397fd0ae4dfe794c6ba0832bff62a867610a92ee59cc05d96ea6f366df8f167c044b87e4d7c7dd9ac48eb275bacddc60cf4b8354e9ad57518180bc6fc22d2cf71e1947a4474fc26b79fbf5918bc82bcf30fb7f3ac73d81a4434f8113c2e89625ef", 0xd6}, {&(0x7f0000000340)="5dcc8728ee1523c978760370886299313ef94d7d62e209396b59e28d1b11aedbef22e42bb8cc1d8ebf478b2b91ec6c22ccfa02fa37c222ceb5409f1059fba0f8dd3b4ac131f270349e08c81474a63881e9ec4d732bb9e7f05f2c964f87035ba945c4748b4806e9d3a3d09a51c2919cab53b92a65e379e0f1651ed6f4cd18b622cd04f9818bbd027142cd2112a18075ec689f102b3487e8c8c5e633ffc28ca6079f87d1edcccd5f6f0a5cb1bab7c1f7748257edda4a03166e5970fbd73af3d69ebbbe55645e1741281126b6dba631070631ea2c25e434341f33d68b0361660baf21ab0267b7b2ede25a17e9e81c4474352e7b1d2e84a8a79e80a8d995", 0xfc}, {&(0x7f0000000440)="54389a835f949d2ebe5da50b91f3c1dbd4d1877b4d42fb4ab24ee2c3d2f9cd765008dcf50126d4da685f3e5755715381bc066dc58555edd878f8ace9bfcffecf9b2f27acc7084ac1324b911b96b68e418192534497e3cc0af73d000e699a079c66624b21d7e18ca4954839dce5", 0x6d}, {&(0x7f00000004c0)="e1abae18dde691cdeb5679ff9f90bf02595e78c8cdfab99eb934336719c1c93628176e19af1a793c7d4642fe178952e007917596db7f4e15f71d697629a5657fadcd039a7bcf8cd02c2ebcea6456556f8419e580c4856294528ef6da40bccd58d7950e2c785b3f957358004031cac4fbe1ce8721e65aaf5d0e5e19f27f9f16fc968dcbcb115e68f6f72ae6332367ecf2c134a7c789cf08d3a60028103a9f6f2ac7213d73f20688040d4e73210fdc7aa6b39bae223fdbf57004802b43931e7d2160fd5f2d7681", 0xc6}, {&(0x7f00000005c0)="958c35766eb8f7c80cc8d93f804a7f6441237c1abb4e3996d8b1ccef17895e831ae1b70ae5de8b9f4e1a7b33ad0696826d407096cc3338da5fb0c884b9ebc60fee2ac6f8f64d12b60490d9d1aa04208c32e1a5908bfce1ce546073ff8f1d8754fad444c01462c2136362304ba28aadda860e5773bec2d3c9f4dfe8c195663f7424b3b8fe2c010fc571418fe381b95f74fcc80eadf5f300c33e434b64", 0x9c}], 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="68b0d7cdb60aef093d665fed", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000028000000050000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="67b475275b0797cae264883a24aee0748830bc850dff03e10a66aab01947398f328a89c3164818dfed6b864eea50c17973006a09518c74beef1fd5506de6d42806634aeb6b8b1f3e3de7888598872304cf42d4a0e54730234631ba791f66c6717de0004c5bbc3c75ace7b631a25ae65a6b93cb418f09", 0x76}, {&(0x7f0000000980)="d5b0f3636aabd5438f3ceec097e0c11bf78fd249a08fed313b70ac5c04dd964d5dec032a935db82e3c7bda42fcf6371a734cafb8a0189e171fc9b0fd74b987370200e6cde8f54dc822a6bf374e1b4fb8f594e2357d21805844591e227ee352a5766fdebe7741845597924510319241833fed5afb2895d73da38d76da6826f41fa3d2b4b365a5f6f1c44310497010a16a8a6d8020a5942d975d4db141005391b78f28016310cb4f8f7c75b1aba6d6f157ae1f28a8d2a853dda3e0e91c764614fc319f9f07f1483697928988dd98b5e1678af446e42ef3b4b660e4c4d2ca", 0xdd}, {&(0x7f0000000a80)="ea27fd338b2a5c6eb8e87435612589cde317accf354db073fa2b81358a0448c08c2988d54ebe6b370f2b7a310f59bcc8d267b3c2f2f649dcbb30f3519587312973f794c76adbf0a2be", 0x49}], 0x3, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x170, 0x28000000}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000f40)="f6eda76e753c9e9bebae2af854a6d0e4b44675b289c5a5c1b896a67676646b9ec811d5d4855531fecca4a03a1507e3232a54d71defab6a956eef89cd47108765f76ceca2303f6f03e296bd6c7977d6059d9af772a9d573c5727e3db2ce5fb80b816f556a559f3b7ad0f4880afb3ea4c7b483aa5d4f079a855659cefb8785366dfab5778e3f4a9bbd08f55df222e9b7aafd17046258d384aab3a8681868e098775a28c843d92064bc0a51e254ce54f2e6810d1a530eca1e88b0091d158bf252fe844b55ece501d12ec89a8263b5b13e8d49e6b490f5a1e5aebfd582576972f398d4b76a547934064599741dbb566531ffc13b1114251fb0de", 0xf8}, {&(0x7f0000001040)="32dab18fe66bda48e0571da323ac435ee3e201d475bdfe978eac3520d7c7ca67c2a2c0b49f03aed317c43092b6927e2bc20fa3fd1876277d268bd7c96490a4e9e568e7b9f42bbc293f14bd92f53b3aa544f555dc2a6e32c852b4e95ec9f280f0485ee8f2fa7427003a30b56df8956e4b45f18b550d3e", 0x76}, {&(0x7f00000010c0)="218ef9b846fbbb85f64783297331ac8d088b0e7dcf658f91f99d366435cc3b0eca573b159bf2be33018071a7c60d9df7910de3187c4f5118fdd98f0dd6f0a778f521ecd984d91b373febf19b10ed010a7dbcf1ce33987145d64c6fab584043fde94a7944eceac37a1516433261fcf439f090a6f66f22245da1159ed4485b04fedbc8191b4d53dd733ecd454742f35beae05e444c97121a4596e615ccae364a40bf6ba8c0355126a7b6867378df13d76da5a374d51abb38559bcaee178a5a70fb8a0478a4884cf0023b71d90de8952b1794904c2f0c74309f8e0cafc04e7b4e0ccb8fbc991838c0b6a0d74ed21715a13e8f528449781c7844", 0xf8}, {&(0x7f00000011c0)="a640eada8900d577268e3ce4c1aa5c291e1f1492024d538dc55ce636d08dda6bae7d4a4f9c3872207c6c5932d7a281022dd1216f6c4e395b1dab595f38abd7860e41be7f46cd05d25596b9022077b5e5117c2b5bfc18309bbccd0ce41675e4b2a51fba4b5112174147280293f8ca0cba6a61d0cf8347850882394adce664ccc14149655e4d0d753a599ed73a8d3d398df8fd119ede1e4084236d30a8acc830b4c7555d466ab5ffe6f555b527a637e8e5991704232f429199705bb8b4db59f413bc5f94a3cc0f8b5233aa9c13a2", 0xcd}, {&(0x7f00000012c0)="c2cff4aeea30914a1119a50846676d709a48faa95037456fcf9c83a70b511ef21b9a965ca5296fb369dd771ba3b8744c0bd1afa44d73af294c14dfde1b05a4ced05514019eba938c09a4bafef465a775a0459c3a1ed916b71d6a46cc9eb846ce966a", 0x62}, {&(0x7f0000001340)="5aca675bb7129d272c7eac71609a742455ac034d9e9ca2be219dd1fa3641f9affc3bfd68c4e1fff4abcdc324d0f9247d8b11e9e1b88892db5ef80d26d7cb4753dc219511adb8948d960171f0369cde99da839aa475f87ddd66d573884ee75df05af18d", 0x63}], 0x6, &(0x7f0000001500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x68, 0x800}}, {{&(0x7f0000001580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001600)="fa3f44ac77b697653c2a81d522259f223237219886a9003ea482b5235bc258c6aa7372d4a697e6cb066d1790ed05557db373f1744b35e20c555e305ac83f1f64771229228879bf6340f463ce94967f24ef302af708bb93f6cf7e57b7f8902b27c1b45ac5f683f104aa266b29192ce0c802a97d20b72c851f9015dcca00f45cd09c5f30775656356f88acfb00438faa2348aba2b34f602277799daf7a0f4773049679a26969975675557701d4bc8c33a8b642cd19940b59f0d308850c072e20609ecaaf1e6ad61ed8d55dc6c66f328500af79de5c5d25515fd24d02b72bf735bc15d13730195582ec30cfe93fc425fde8ffef53f7", 0xf4}, {&(0x7f0000001700)}, {&(0x7f0000001740)="e997e5f276bd79aed9702a386060e6c026e0d05cc6bb1b6a942a7ede6ea7a0eb4e5162cfc4df17f18cc369dd633f9dbfe4af875ff8f5dac788fb6b9525dff06c3ab97ee01636c20cea272d55cc37ad272aba79b0c1304234701a3079aa0839daca17af64c6", 0x65}, {&(0x7f00000017c0)="e5019508c3108d4aa167ecf0e82e04c21464f141bfdae0b276447e590f411b707666701e440fd495d05015b81d54b33e38", 0x31}, {&(0x7f0000001800)="1edc8532529529f9ff1a91e816a3a8ad15816e4c23d7260aaa868b3a6648f45dd1f99fafe95e22a75c20149f52adac4d165b42d6c045d74315af09e5f2aae9b5a14b040d79d946a2a1920ed64c55c25ff994afa9e07a76ba9b34b74893e6f82ade2b85f57b14763142722f6e3ba78491fa4de1f77a98ae4572020b68b436a1333644eb9a47082f3cd838ef31da836b3e161351fc6be38d4558ff1e0e2316ca518a20b966955a169d8deed3d8193d598672af3449ebb861e0a55fa77742cd59c435a7caa2069316c5a5bb7086e1e8d0c8dee632baafec3d4f86f87c90ca6bab96466892436dfc2944b793a27797bb", 0xee}, {&(0x7f0000001900)="c548f743644ad3d6c3b40ce5c1", 0xd}, {&(0x7f0000001940)="996e05f09890351d9467dd60c1386b525fd0e901e62ba91dee4bbbdf1f5e3ca4e4ffc6041b6852316b3be5", 0x2b}, {&(0x7f0000001980)="e5627b200ad8038a03705fc992bf09da316da7701fa0c1393313b10f395d49011e242af7000dbd69f0c5e93db1899bb5e5d773315f23efc2eabe31ad5ab1fd7d4ea033a287ca37a0a9daf8b5fc88cfb3de81cd55670482c7cfa610cdba871f0dc00b0ca1b161b73ab53c88b2cd8d37a9bc9ee86154b397dbc3026ed1563f3c6b4d3ebbefa3a55a7f13858ddd27d01e3936f86f141ee1d0aad79e1e0d81e76d06ba241c67f182d7f0dc80c02604b05fc63e6f7fd1800b11bc022e9ee9095433490ed6e42776f2f45c213991", 0xcb}, {&(0x7f0000001a80)="035120b7fe3283b0c144600a99cf9e341217698ad8c098bf694851655fc9d8f7913ae2748b399a00b14af1ef8d2030bc7428224c322ea02df00b5080352e504af29e8bbf422e974f575c9a448bcf3ff830281e40423c4070b5795688c7f048f9093720faaa5c4a9537b6680a56d154553149ca", 0x73}], 0x9, &(0x7f0000001d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x400c5}}, {{&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001e40)="472a98a7c0a97b9cddcf937435869db16b99072b2b5288c652e9a1331c27e8ad7d0f70a6a50ca49e25f118e2b618adf3f8d4efb3fbec2689cb07e76af8d2745e1b473b174fb7ad66ed166287b86732ca562820bed50eb0c3aa5f0fb6faae1fa1f9b43588cf08cbe161e4fb9d4ca62555440c1395aa30673dcfe0a2288dfb34d6827c3806ad2ac0272cde52bfbaf44b42f2f0", 0x92}, {&(0x7f0000001f00)="77f07d178e916632e87bf6d45244a34dc05c3e34fb20bb099b273175a6de99b451c1119c36b832715f226c15c201505f0529a335c21af7eea8ea82860c37f85b7f6093bcf597d4187fa11e78db53fe7243812de3c34713b3d5476d0e3c778cb78fde7ddd14323871f82687fd854b06220d1b5063d515edd445406a7c09a2e9bb5f312a62d5756891fd7733c8f418", 0x8e}, {&(0x7f0000001fc0)="ee2003652c3032c71a68e5c3b045d797fdd846a085a4fd5a", 0x18}, {&(0x7f0000002000)="335bdd36a9d33172073f86edee2d50dce7e9a59c53ab443626394ed80fb2dd07ee7629bc5bba1bf4c38cf8958b395f322586497fdd5359d0827116bb6ab7af868427052b9c26f12305e56f074738b7f34c6fb973e9fdcd47d03fbfdf86412aa57fc74f15037045fa0b5f7181a78a7c464f2902972fb4cf0613685fb35c27a791a662e6586597d767759a9201d2f5edc6d0952c73e188094f10f36d953b8a8e5721", 0xa1}, {&(0x7f00000020c0)="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", 0xff}, {&(0x7f00000021c0)="b4e8a2cfad61e17d", 0x8}, {&(0x7f0000002200)="630c0eeff81d1fc04564aa649baca9a373a0d7dc718de9e239a92e4a42044b9e6f1ebe2fdb78699a3abc32a11b054606beb7bd2baf78235d6ec569a4f6e9ae14cd15ea5d06e255d0860d2095834dcbfc4061efd5ff0cf2f7f0434ac690e838b3aed76fb8d44b552977ff850a2c0948f9c5e7c5c46641dd9032bd007f3dfd7e1d5f4a097f42525d89332c6b4ca989128feaadba6b652672", 0x97}], 0x7, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8, 0x4000000}}, {{&(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b00), 0x0, &(0x7f0000002b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0x20, 0x80}}, {{&(0x7f0000002b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002c00)="09fe3d63eca8c96b0d50a1d2f27b6746057671c89a7ae31a1a733313ef8ec2a84298f5b507eac8dc1aa9b09303ddfac3b786c07fc206a3a3e986aeb5dec6014c35554e0c77b03e3d100f56ab46c8c683c6", 0x51}, {&(0x7f0000002c80)="1e979c6ebbe3cb88d7acece4ce79b13c95360f630b18f6639bcb3dabb437", 0x1e}], 0x2, &(0x7f0000004e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}], 0xd8, 0x4040000}}, {{&(0x7f0000004f40)=@file={0x4428fdc583d28dda, './file0\x00'}, 0x6e, &(0x7f0000005240)=[{&(0x7f0000004fc0)="4fc37fe54fff419d974a72df9ebf618e5759048869ea52c85137679c10ce53076d02fcca28372e6ec018153dc79585dfdaa9de", 0x33}, {&(0x7f0000005000)="88409a2fab0323054a314640b332e3c99984afdcbbba9f924999c6aa9a2e5df9bccb11b99d9263b57312e69ca5a94c59033cfa4e0bb91cc0495635a4dc5725901ad33a0225faaae58e9ef9c31da0371d65d8037ad2fe2fd1691995e1ff8976cf1750cb8f114d053ffb02d9376d2b280f1fa4717a6bf6ec2fc3a2fdc212c4345a045720d88ec1", 0x86}, {&(0x7f00000050c0)="9472cca7a05435b0ed83edb9be3d76cbcbf668c56fe1e93304bc19a4ef837c08eccd52d4cb8f6c9a8a59defec182d1f12e4746ebb7e8d913c1ea9f4e1d8adc91d63a12e86be246a80a747f2e3679a9325bb386f26af8b01ab0829649b29ffb1b17a12ddfabf5d59adb2979f73de9dc11ae5049dc6018b494c1886b9c341a5a0001d886de87a833aad1aa903eefbbf88c0cc55115616b64e306c45141ded82f0ffa4932eb24493d9a", 0xa8}, {&(0x7f0000005180)="b20e421a9b63210cda29288ec00a77d4044b49ea7d2b6946976f7b84e02d94995e3b1aa3ed0518e38261f662ea2db6fad10ccdd37686460563ca9cc25ca7f0091a0d387bdb8888183adef4d78415b61f07b643e6c913674983058231b63e10aa45423a5fcaa7ae2b78d6c9b764c33ea295b0d04e0faee19449174a036d30365cbf729cd3c62f9ac5a0e08984a3cb6a661b82e919b3adf6e3c7f39c0838691e63279fdf69eb019358aac20a6aac067336e8", 0xb1}], 0x4, &(0x7f0000005480)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r3, r0]}}, @rights={{0x38, 0x1, 0x1, [r4, r0, r5, r1, r6, r7, r8, r9, r10, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}], 0xd0, 0x4008844}}], 0x8, 0x51) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:28:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x1) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "14be19fa738931c080814c5026dd900c2b0808038d7a236ccc6f49581a87b31bf5596fca97cee3f9fb56e73f44c5721aa493f637dbc72d061fc198ad322090114f2ca9b4f52f1552d77d3ddf5e51c4a689164f668c04049b8d54ced850668df7bdcd11ab89b0c83e4a7e2930b3e51c142de1afccc6f92691d89eb5a5b9f9bb67b84229248b28c8bfe23904becca58527ca382adc66e621bcbbee22d5d21ce607d85922e0e13abc2c7d5fe14b8c7ad119e2cdbf8ff811d738770589e96c656c2985a9f7f0b2402da74b34"}, 0xce) 19:28:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x180, 0xdb) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = getegid() setresgid(r4, 0x0, 0xee01) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18002, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other}, {@blksize}], [{@pcr={'pcr', 0x3d, 0x1}}]}}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = openat$cgroup(r6, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3) [ 596.958253][T16241] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff25280f70 [ 596.970523][T16241] memory: usage 307200kB, limit 307200kB, failcnt 101917 [ 596.980560][T16241] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 596.989051][T16241] Memory cgroup stats for /syz5: [ 596.989118][T16241] anon 314626048 [ 596.989118][T16241] file 73728 [ 596.989118][T16241] kernel_stack 0 [ 596.989118][T16241] slab 0 [ 596.989118][T16241] sock 0 [ 596.989118][T16241] shmem 0 [ 596.989118][T16241] file_mapped 0 [ 596.989118][T16241] file_dirty 0 [ 596.989118][T16241] file_writeback 0 [ 596.989118][T16241] anon_thp 0 [ 596.989118][T16241] inactive_anon 0 [ 596.989118][T16241] active_anon 314535936 [ 596.989118][T16241] inactive_file 0 [ 596.989118][T16241] active_file 0 [ 596.989118][T16241] unevictable 0 [ 596.989118][T16241] slab_reclaimable 0 [ 596.989118][T16241] slab_unreclaimable 0 [ 596.989118][T16241] pgfault 370854 [ 596.989118][T16241] pgmajfault 0 [ 596.989118][T16241] workingset_refault 33 [ 596.989118][T16241] workingset_activate 0 [ 596.989118][T16241] workingset_nodereclaim 0 [ 596.989118][T16241] pgrefill 3210 [ 596.989118][T16241] pgscan 2805 [ 596.989118][T16241] pgsteal 82 [ 596.989118][T16241] pgactivate 2673 [ 597.084608][T16241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16241,uid=0 19:28:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200000000000000000000000000000000000000000000000400"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200000000000000000000000000000000000000000000000400"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:28:34 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x27d010000000000, 0x0, 0x0) 19:28:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x180, 0xdb) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = getegid() setresgid(r4, 0x0, 0xee01) (async) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18002, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other}, {@blksize}], [{@pcr={'pcr', 0x3d, 0x1}}]}}) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = openat$cgroup(r6, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3) [ 597.100415][T16241] Memory cgroup out of memory: Killed process 16241 (syz-executor.5) total-vm:52400kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 597.146954][T16266] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 597.161747][T16271] fuse: Bad value for 'fd' [ 597.173757][T16266] CPU: 1 PID: 16266 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 597.183994][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 597.194030][T16266] Call Trace: [ 597.197315][T16266] dump_stack+0x18e/0x1d5 [ 597.201637][T16266] dump_header+0xdb/0x700 [ 597.205954][T16266] oom_kill_process+0xf0/0x2d0 19:28:34 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x400000) [ 597.210709][T16266] out_of_memory+0x55f/0x7f0 [ 597.215286][T16266] mem_cgroup_oom+0x638/0x760 [ 597.219948][T16266] try_charge+0xc41/0x1100 [ 597.224357][T16266] ? get_mem_cgroup_from_mm+0x251/0x280 [ 597.229896][T16266] mem_cgroup_try_charge+0xd5/0x2a0 [ 597.235079][T16266] handle_mm_fault+0x158a/0x3b90 [ 597.240009][T16266] do_user_addr_fault+0x4a4/0xb30 [ 597.245033][T16266] page_fault+0x2f/0x40 [ 597.249177][T16266] RIP: 0033:0x7fdb971620d9 [ 597.253576][T16266] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 597.273173][T16266] RSP: 002b:00007fff25280c90 EFLAGS: 00010246 [ 597.279227][T16266] RAX: 0000000020000140 RBX: 0000000000000000 RCX: 0000000000000000 [ 597.287189][T16266] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00005555558cc2e8 [ 597.295144][T16266] RBP: 00007fff25280d88 R08: 0000000000000000 R09: 0000000000000000 [ 597.303103][T16266] R10: 000000000001669c R11: 0000000000000255 R12: 0000000000000001 19:28:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (rerun: 32) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x180, 0xdb) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) (async, rerun: 32) r4 = getegid() (rerun: 32) setresgid(r4, 0x0, 0xee01) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18002, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other}, {@blksize}], [{@pcr={'pcr', 0x3d, 0x1}}]}}) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = openat$cgroup(r6, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3) [ 597.311055][T16266] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fff25280f70 [ 597.330272][T16266] memory: usage 307200kB, limit 307200kB, failcnt 101932 [ 597.345155][T16266] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 597.355315][T16266] Memory cgroup stats for /syz5: [ 597.355817][T16281] fuse: Bad value for 'fd' [ 597.355931][T16266] anon 314626048 [ 597.355931][T16266] file 73728 [ 597.355931][T16266] kernel_stack 0 [ 597.355931][T16266] slab 0 [ 597.355931][T16266] sock 0 [ 597.355931][T16266] shmem 0 [ 597.355931][T16266] file_mapped 0 [ 597.355931][T16266] file_dirty 0 [ 597.355931][T16266] file_writeback 0 [ 597.355931][T16266] anon_thp 0 [ 597.355931][T16266] inactive_anon 0 [ 597.355931][T16266] active_anon 314535936 [ 597.355931][T16266] inactive_file 0 [ 597.355931][T16266] active_file 0 [ 597.355931][T16266] unevictable 0 [ 597.355931][T16266] slab_reclaimable 0 [ 597.355931][T16266] slab_unreclaimable 0 [ 597.355931][T16266] pgfault 370887 [ 597.355931][T16266] pgmajfault 0 [ 597.355931][T16266] workingset_refault 33 [ 597.355931][T16266] workingset_activate 0 [ 597.355931][T16266] workingset_nodereclaim 0 [ 597.355931][T16266] pgrefill 3210 [ 597.355931][T16266] pgscan 2805 [ 597.355931][T16266] pgsteal 82 [ 597.355931][T16266] pgactivate 2673 19:28:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='cgroup2\x00', 0xc04048, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:34 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x27e030000000000, 0x0, 0x0) [ 597.472885][T16266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16266,uid=0 [ 597.509465][T16266] Memory cgroup out of memory: Killed process 16266 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 19:28:38 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0)="15", 0x0}, 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f00000003c0)="48eac2d8ba7eb454a10fe1108523b781019406e05a7f77308da7c8dfd2ff6091ab5c40b21d64b9a4911874f7f9b7c5305f9059ce73b3bef81b72d502fc51833d57d1b96b448e9d27d48966532e3af25c0a2deab7e1b0e75e84263befacb39a2942878fc2237ba792a1e8434606991347c8f296b3ca7d2109c5a0da0f1965843ade66780f71dffbbc7943cd6e24a85a0c145841d7a6ab17e8117aae76dedb29cd1e4440875e614b43da29be1a820e18b4a5a6bf724c1cdcb6ec1a27065eac6fd82c33d66e3aa6bc3b079918b68e7618c0c1190a4b81a3b3595a9821", &(0x7f00000005c0)=""/208, 0x4}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x103240, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xf81, 0xa, &(0x7f0000000200)=""/10, 0x41100, 0x18, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r7, r0, r8]}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0)="15", 0x0}, 0x20) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f00000003c0)="48eac2d8ba7eb454a10fe1108523b781019406e05a7f77308da7c8dfd2ff6091ab5c40b21d64b9a4911874f7f9b7c5305f9059ce73b3bef81b72d502fc51833d57d1b96b448e9d27d48966532e3af25c0a2deab7e1b0e75e84263befacb39a2942878fc2237ba792a1e8434606991347c8f296b3ca7d2109c5a0da0f1965843ade66780f71dffbbc7943cd6e24a85a0c145841d7a6ab17e8117aae76dedb29cd1e4440875e614b43da29be1a820e18b4a5a6bf724c1cdcb6ec1a27065eac6fd82c33d66e3aa6bc3b079918b68e7618c0c1190a4b81a3b3595a9821", &(0x7f00000005c0)=""/208, 0x4}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r6) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x103240, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xf81, 0xa, &(0x7f0000000200)=""/10, 0x41100, 0x18, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r7, r0, r8]}, 0x80) (async) 19:28:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='cgroup2\x00', 0xc04048, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='cgroup2\x00', 0xc04048, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:28:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200000000000000000000000000000000000000000000000400"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x1) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "14be19fa738931c080814c5026dd900c2b0808038d7a236ccc6f49581a87b31bf5596fca97cee3f9fb56e73f44c5721aa493f637dbc72d061fc198ad322090114f2ca9b4f52f1552d77d3ddf5e51c4a689164f668c04049b8d54ced850668df7bdcd11ab89b0c83e4a7e2930b3e51c142de1afccc6f92691d89eb5a5b9f9bb67b84229248b28c8bfe23904becca58527ca382adc66e621bcbbee22d5d21ce607d85922e0e13abc2c7d5fe14b8c7ad119e2cdbf8ff811d738770589e96c656c2985a9f7f0b2402da74b34"}, 0xce) 19:28:38 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x800000) 19:28:38 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x27f020000000000, 0x0, 0x0) [ 600.943423][T16293] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 600.973925][T16295] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 600.991348][T16295] CPU: 0 PID: 16295 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 601.001592][T16295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 601.011643][T16295] Call Trace: [ 601.014926][T16295] dump_stack+0x18e/0x1d5 [ 601.019249][T16295] dump_header+0xdb/0x700 [ 601.023567][T16295] oom_kill_process+0xf0/0x2d0 [ 601.028321][T16295] out_of_memory+0x55f/0x7f0 [ 601.032911][T16295] mem_cgroup_oom+0x638/0x760 [ 601.037604][T16295] try_charge+0xc41/0x1100 [ 601.042016][T16295] ? get_mem_cgroup_from_mm+0x251/0x280 [ 601.047561][T16295] mem_cgroup_try_charge+0xd5/0x2a0 [ 601.052797][T16295] wp_page_copy+0x33d/0x1830 [ 601.057389][T16295] ? _raw_spin_unlock+0x49/0x60 [ 601.062249][T16295] ? do_wp_page+0x535/0x8b0 [ 601.066747][T16295] handle_mm_fault+0xeab/0x3b90 [ 601.071692][T16295] ? psi_memstall_leave+0xa8/0xd0 [ 601.076715][T16295] do_user_addr_fault+0x4a4/0xb30 [ 601.081751][T16295] page_fault+0x2f/0x40 [ 601.085896][T16295] RIP: 0033:0x7fdb971705ba [ 601.090298][T16295] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 601.109890][T16295] RSP: 002b:00007fff25280e58 EFLAGS: 00010202 [ 601.115947][T16295] RAX: 00005555558cc6c0 RBX: 0000000000000001 RCX: 00007fdb9821d3e0 [ 601.123906][T16295] RDX: 0000000000000001 RSI: 00007fdb972bbef0 RDI: 0000000000000001 [ 601.131864][T16295] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fdb972bbef0 19:28:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='cgroup2\x00', 0xc04048, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='cgroup2\x00', 0xc04048, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) [ 601.139822][T16295] R10: 00005555558cc400 R11: 0000000000000202 R12: 0000000000000000 [ 601.147779][T16295] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fff25280f70 [ 601.156900][T16295] memory: usage 307200kB, limit 307200kB, failcnt 101947 [ 601.168355][T16295] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 601.179329][T16295] Memory cgroup stats for /syz5: [ 601.179411][T16295] anon 314626048 [ 601.179411][T16295] file 73728 [ 601.179411][T16295] kernel_stack 0 [ 601.179411][T16295] slab 0 [ 601.179411][T16295] sock 0 [ 601.179411][T16295] shmem 0 [ 601.179411][T16295] file_mapped 0 [ 601.179411][T16295] file_dirty 0 [ 601.179411][T16295] file_writeback 0 [ 601.179411][T16295] anon_thp 0 [ 601.179411][T16295] inactive_anon 0 [ 601.179411][T16295] active_anon 314535936 [ 601.179411][T16295] inactive_file 0 [ 601.179411][T16295] active_file 0 [ 601.179411][T16295] unevictable 0 [ 601.179411][T16295] slab_reclaimable 0 [ 601.179411][T16295] slab_unreclaimable 0 [ 601.179411][T16295] pgfault 370920 [ 601.179411][T16295] pgmajfault 0 [ 601.179411][T16295] workingset_refault 33 [ 601.179411][T16295] workingset_activate 0 [ 601.179411][T16295] workingset_nodereclaim 0 [ 601.179411][T16295] pgrefill 3210 [ 601.179411][T16295] pgscan 2838 [ 601.179411][T16295] pgsteal 82 [ 601.179411][T16295] pgactivate 2673 [ 601.275579][T16295] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16226,uid=0 19:28:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) unlink(&(0x7f0000000040)='.\x00') 19:28:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) unlink(&(0x7f0000000040)='.\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) unlink(&(0x7f0000000040)='.\x00') (async) [ 601.291062][T16295] Memory cgroup out of memory: Killed process 16226 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:15208kB, shmem-rss:60kB, UID:0 pgtables:80kB oom_score_adj:0 19:28:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="4500470104000079d62e7a77edebd43a706edcd634bc400e86815395bb5895647c168d82eba9a3339af1bec911deca9eaddbac2c2c245ad2ef5f9ac1f6b02c4e4d53666c1b78eb115642e03b265f99c9b0da5a3d975124ead55943b8a4e9fa0092de6d", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:38 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xfeffff) 19:28:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) (async) unlink(&(0x7f0000000040)='.\x00') [ 602.101050][T16313] device bridge_slave_1 left promiscuous mode [ 602.107178][T16313] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.114723][T16313] device bridge_slave_0 left promiscuous mode [ 602.120868][T16313] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.102720][T16342] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 19:28:43 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0)="15", 0x0}, 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f00000003c0)="48eac2d8ba7eb454a10fe1108523b781019406e05a7f77308da7c8dfd2ff6091ab5c40b21d64b9a4911874f7f9b7c5305f9059ce73b3bef81b72d502fc51833d57d1b96b448e9d27d48966532e3af25c0a2deab7e1b0e75e84263befacb39a2942878fc2237ba792a1e8434606991347c8f296b3ca7d2109c5a0da0f1965843ade66780f71dffbbc7943cd6e24a85a0c145841d7a6ab17e8117aae76dedb29cd1e4440875e614b43da29be1a820e18b4a5a6bf724c1cdcb6ec1a27065eac6fd82c33d66e3aa6bc3b079918b68e7618c0c1190a4b81a3b3595a9821", &(0x7f00000005c0)=""/208, 0x4}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x103240, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xf81, 0xa, &(0x7f0000000200)=""/10, 0x41100, 0x18, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r7, r0, r8]}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0xf, 0x8, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000001c0)="15", 0x0}, 0x20) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f00000003c0)="48eac2d8ba7eb454a10fe1108523b781019406e05a7f77308da7c8dfd2ff6091ab5c40b21d64b9a4911874f7f9b7c5305f9059ce73b3bef81b72d502fc51833d57d1b96b448e9d27d48966532e3af25c0a2deab7e1b0e75e84263befacb39a2942878fc2237ba792a1e8434606991347c8f296b3ca7d2109c5a0da0f1965843ade66780f71dffbbc7943cd6e24a85a0c145841d7a6ab17e8117aae76dedb29cd1e4440875e614b43da29be1a820e18b4a5a6bf724c1cdcb6ec1a27065eac6fd82c33d66e3aa6bc3b079918b68e7618c0c1190a4b81a3b3595a9821", &(0x7f00000005c0)=""/208, 0x4}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r6) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x103240, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0xf81, 0xa, &(0x7f0000000200)=""/10, 0x41100, 0x18, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r7, r0, r8]}, 0x80) (async) 19:28:43 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x280010000000000, 0x0, 0x0) 19:28:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="4500470104000079d62e7a77edebd43a706edcd634bc400e86815395bb5895647c168d82eba9a3339af1bec911deca9eaddbac2c2c245ad2ef5f9ac1f6b02c4e4d53666c1b78eb115642e03b265f99c9b0da5a3d975124ead55943b8a4e9fa0092de6d", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="4500470104000079d62e7a77edebd43a706edcd634bc400e86815395bb5895647c168d82eba9a3339af1bec911deca9eaddbac2c2c245ad2ef5f9ac1f6b02c4e4d53666c1b78eb115642e03b265f99c9b0da5a3d975124ead55943b8a4e9fa0092de6d", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:28:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x1) (async) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "14be19fa738931c080814c5026dd900c2b0808038d7a236ccc6f49581a87b31bf5596fca97cee3f9fb56e73f44c5721aa493f637dbc72d061fc198ad322090114f2ca9b4f52f1552d77d3ddf5e51c4a689164f668c04049b8d54ced850668df7bdcd11ab89b0c83e4a7e2930b3e51c142de1afccc6f92691d89eb5a5b9f9bb67b84229248b28c8bfe23904becca58527ca382adc66e621bcbbee22d5d21ce607d85922e0e13abc2c7d5fe14b8c7ad119e2cdbf8ff811d738770589e96c656c2985a9f7f0b2402da74b34"}, 0xce) 19:28:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:43 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x1000000) 19:28:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (rerun: 32) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:28:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x101) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x101) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x101) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:43 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465962f7362"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='securityfs\x00', 0x3ea03ba8879b02d9, &(0x7f0000000240)='#\x00') ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 607.822681][T16386] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.829861][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.837608][T16386] device bridge_slave_0 entered promiscuous mode [ 607.844507][T16386] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.851702][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.859036][T16386] device bridge_slave_1 entered promiscuous mode [ 607.896690][T16386] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.903724][T16386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.910993][T16386] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.918009][T16386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.937619][ T700] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.944922][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.952815][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 607.960315][ T700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 607.969771][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 607.977918][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.984937][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.001463][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 608.009574][ T698] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.016600][ T698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.023947][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 608.031887][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.043958][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.061580][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 608.070121][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.079500][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 608.090962][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 608.109664][T16390] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 608.119934][T16390] CPU: 1 PID: 16390 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 608.130140][T16390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 608.140164][T16390] Call Trace: [ 608.143451][T16390] dump_stack+0x18e/0x1d5 [ 608.147752][T16390] dump_header+0xdb/0x700 [ 608.152055][T16390] oom_kill_process+0xf0/0x2d0 [ 608.156795][T16390] out_of_memory+0x55f/0x7f0 [ 608.161361][T16390] mem_cgroup_oom+0x638/0x760 [ 608.166010][T16390] try_charge+0xc41/0x1100 [ 608.170397][T16390] ? get_mem_cgroup_from_mm+0x251/0x280 [ 608.175909][T16390] mem_cgroup_try_charge+0xd5/0x2a0 [ 608.181079][T16390] handle_mm_fault+0x158a/0x3b90 [ 608.185990][T16390] do_user_addr_fault+0x4a4/0xb30 [ 608.190990][T16390] page_fault+0x2f/0x40 [ 608.195118][T16390] RIP: 0033:0x7f2c8e16bccf [ 608.199501][T16390] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 608.219089][T16390] RSP: 002b:00007ffdf239bb10 EFLAGS: 00010246 [ 608.225140][T16390] RAX: 00007f2c8d311000 RBX: 0000000000021000 RCX: 00007f2c8e1bc6b7 [ 608.233137][T16390] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f2c8d312000 [ 608.241192][T16390] RBP: 00007ffdf239bbe0 R08: 00000000ffffffff R09: 00007f2c8d331700 [ 608.249149][T16390] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffdf239bd00 [ 608.257095][T16390] R13: 00007f2c8d331700 R14: 0000000000000000 R15: 0000000000022000 [ 608.266215][T16390] memory: usage 307200kB, limit 307200kB, failcnt 101969 [ 608.273737][T16390] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 608.280558][T16390] Memory cgroup stats for /syz5: [ 608.280609][T16390] anon 314626048 [ 608.280609][T16390] file 73728 [ 608.280609][T16390] kernel_stack 0 [ 608.280609][T16390] slab 0 [ 608.280609][T16390] sock 0 [ 608.280609][T16390] shmem 0 [ 608.280609][T16390] file_mapped 0 [ 608.280609][T16390] file_dirty 0 [ 608.280609][T16390] file_writeback 0 [ 608.280609][T16390] anon_thp 0 [ 608.280609][T16390] inactive_anon 0 [ 608.280609][T16390] active_anon 314535936 [ 608.280609][T16390] inactive_file 0 [ 608.280609][T16390] active_file 0 [ 608.280609][T16390] unevictable 0 [ 608.280609][T16390] slab_reclaimable 0 [ 608.280609][T16390] slab_unreclaimable 0 [ 608.280609][T16390] pgfault 370953 [ 608.280609][T16390] pgmajfault 0 [ 608.280609][T16390] workingset_refault 33 [ 608.280609][T16390] workingset_activate 0 [ 608.280609][T16390] workingset_nodereclaim 0 [ 608.280609][T16390] pgrefill 3210 [ 608.280609][T16390] pgscan 2838 [ 608.280609][T16390] pgsteal 82 [ 608.280609][T16390] pgactivate 2673 [ 608.374655][T16390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16390,uid=0 [ 608.390167][T16390] Memory cgroup out of memory: Killed process 16390 (syz-executor.5) total-vm:48692kB, anon-rss:440kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 608.408080][ T24] oom_reaper: reaped process 16390 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB 19:28:47 executing program 1: unshare(0x40000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) splice(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000005000)='./file0\x00', &(0x7f0000005040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=fd,'}}]}}) 19:28:47 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465962f7362"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='securityfs\x00', 0x3ea03ba8879b02d9, &(0x7f0000000240)='#\x00') ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465962f7362"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='securityfs\x00', 0x3ea03ba8879b02d9, &(0x7f0000000240)='#\x00') (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) sendfile(r4, r4, 0x0, 0x3) (async) 19:28:47 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x2000000) 19:28:47 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x281030000000000, 0x0, 0x0) 19:28:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) socket$xdp(0x2c, 0x3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x10000, 0x9, 0x80000001, 0x6, 0x4, "75df12a6fb883278bbe3637cb8684a674423a9", 0x0, 0x5}) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:28:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="4500470104000079d62e7a77edebd43a706edcd634bc400e86815395bb5895647c168d82eba9a3339af1bec911deca9eaddbac2c2c245ad2ef5f9ac1f6b02c4e4d53666c1b78eb115642e03b265f99c9b0da5a3d975124ead55943b8a4e9fa0092de6d", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) [ 610.303997][T16391] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 610.333806][T16403] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 19:28:47 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465962f7362"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='securityfs\x00', 0x3ea03ba8879b02d9, &(0x7f0000000240)='#\x00') ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465962f7362"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='securityfs\x00', 0x3ea03ba8879b02d9, &(0x7f0000000240)='#\x00') (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) sendfile(r4, r4, 0x0, 0x3) (async) [ 610.347236][T16403] CPU: 0 PID: 16403 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 610.357576][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 610.367610][T16403] Call Trace: [ 610.370891][T16403] dump_stack+0x18e/0x1d5 [ 610.375212][T16403] dump_header+0xdb/0x700 [ 610.379534][T16403] oom_kill_process+0xf0/0x2d0 [ 610.384281][T16403] out_of_memory+0x55f/0x7f0 [ 610.388857][T16403] mem_cgroup_oom+0x638/0x760 [ 610.393520][T16403] try_charge+0xc41/0x1100 [ 610.397924][T16403] ? get_mem_cgroup_from_mm+0x251/0x280 [ 610.403461][T16403] mem_cgroup_try_charge+0xd5/0x2a0 [ 610.408641][T16403] wp_page_copy+0x33d/0x1830 [ 610.413216][T16403] ? _raw_spin_unlock+0x49/0x60 [ 610.418248][T16403] ? do_wp_page+0x535/0x8b0 [ 610.422742][T16403] handle_mm_fault+0xeab/0x3b90 [ 610.427582][T16403] ? psi_memstall_leave+0xa8/0xd0 [ 610.432600][T16403] do_user_addr_fault+0x4a4/0xb30 [ 610.437619][T16403] page_fault+0x2f/0x40 [ 610.441762][T16403] RIP: 0033:0x7f2c8e16a5ba [ 610.446169][T16403] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 610.465771][T16403] RSP: 002b:00007ffdf239bd78 EFLAGS: 00010202 [ 610.471828][T16403] RAX: 00005555558a26c0 RBX: 0000000000000001 RCX: 00007f2c8f2173e0 [ 610.479960][T16403] RDX: 0000000000000001 RSI: 00007f2c8e2b5ef0 RDI: 0000000000000001 [ 610.487915][T16403] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2c8e2b5ef0 [ 610.495868][T16403] R10: 00005555558a2400 R11: 0000000000000202 R12: 0000000000000000 [ 610.503823][T16403] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdf239be90 [ 610.515905][T16403] memory: usage 307200kB, limit 307200kB, failcnt 101985 [ 610.525009][T16403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 610.531914][T16403] Memory cgroup stats for /syz5: [ 610.532037][T16403] anon 314626048 [ 610.532037][T16403] file 73728 [ 610.532037][T16403] kernel_stack 0 [ 610.532037][T16403] slab 0 [ 610.532037][T16403] sock 0 [ 610.532037][T16403] shmem 0 [ 610.532037][T16403] file_mapped 0 [ 610.532037][T16403] file_dirty 0 [ 610.532037][T16403] file_writeback 0 [ 610.532037][T16403] anon_thp 0 [ 610.532037][T16403] inactive_anon 0 [ 610.532037][T16403] active_anon 314535936 [ 610.532037][T16403] inactive_file 0 [ 610.532037][T16403] active_file 0 [ 610.532037][T16403] unevictable 0 [ 610.532037][T16403] slab_reclaimable 0 [ 610.532037][T16403] slab_unreclaimable 0 [ 610.532037][T16403] pgfault 370986 [ 610.532037][T16403] pgmajfault 0 [ 610.532037][T16403] workingset_refault 33 [ 610.532037][T16403] workingset_activate 0 [ 610.532037][T16403] workingset_nodereclaim 0 [ 610.532037][T16403] pgrefill 3243 [ 610.532037][T16403] pgscan 2838 [ 610.532037][T16403] pgsteal 82 [ 610.532037][T16403] pgactivate 2706 [ 610.625940][T16403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16403,uid=0 19:28:48 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x4000000) 19:28:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x20, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="190000000000000013e8000a7b53c7efcf5f0bf39113c8eb7622f9377362b0bc875d3d7044fc589df3bd6d631d69459fdd01be909c8806a3eef7d2e4ee5492fa0ab9961bb5b3f289cf87cfd910505741d39f7f969d001ad51efae4a5a6ac300fda7dbfd7803492daac9be6c2759ba0236d2488973bc6bf9702007b2c9f3a589448cb63de1d61fa68da32e69b35a5c716a28b44c0d7f721a251a57366c1a841ca39df0db72f0a9be143b5d7636d663e0f572d2fbe36640b83b9a6e203e3ce8fe2a0d2670ec4f03d5c", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1b4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 610.641324][T16403] Memory cgroup out of memory: Killed process 16403 (syz-executor.5) total-vm:48560kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 610.667943][T16441] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 610.679266][T16441] CPU: 0 PID: 16441 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 610.689583][T16441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 610.699627][T16441] Call Trace: 19:28:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1b4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1b4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:28:48 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1b4) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 610.702911][T16441] dump_stack+0x18e/0x1d5 [ 610.707235][T16441] dump_header+0xdb/0x700 [ 610.711563][T16441] oom_kill_process+0xf0/0x2d0 [ 610.716317][T16441] out_of_memory+0x55f/0x7f0 [ 610.720896][T16441] mem_cgroup_oom+0x638/0x760 [ 610.725558][T16441] try_charge+0xc41/0x1100 [ 610.730093][T16441] ? get_mem_cgroup_from_mm+0x251/0x280 [ 610.735637][T16441] mem_cgroup_try_charge+0xd5/0x2a0 [ 610.740911][T16441] wp_page_copy+0x33d/0x1830 [ 610.745496][T16441] ? _raw_spin_unlock+0x49/0x60 [ 610.750334][T16441] ? do_wp_page+0x535/0x8b0 [ 610.754822][T16441] handle_mm_fault+0xeab/0x3b90 [ 610.759744][T16441] ? psi_memstall_leave+0xa8/0xd0 [ 610.764756][T16441] do_user_addr_fault+0x4a4/0xb30 [ 610.769771][T16441] page_fault+0x2f/0x40 [ 610.773911][T16441] RIP: 0033:0x7f2c8e16a5ba [ 610.778309][T16441] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 610.797983][T16441] RSP: 002b:00007ffdf239bd78 EFLAGS: 00010202 [ 610.804036][T16441] RAX: 00005555558a26c0 RBX: 0000000000000001 RCX: 00007f2c8f2173e0 [ 610.811997][T16441] RDX: 0000000000000001 RSI: 00007f2c8e2b5ef0 RDI: 0000000000000001 [ 610.819964][T16441] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2c8e2b5ef0 [ 610.827923][T16441] R10: 00005555558a2400 R11: 0000000000000202 R12: 0000000000000000 [ 610.835878][T16441] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdf239be90 [ 610.850875][T16441] memory: usage 307200kB, limit 307200kB, failcnt 101999 [ 610.865489][T16441] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 610.878911][T16441] Memory cgroup stats for /syz5: [ 610.878962][T16441] anon 314626048 [ 610.878962][T16441] file 73728 [ 610.878962][T16441] kernel_stack 0 [ 610.878962][T16441] slab 0 [ 610.878962][T16441] sock 0 [ 610.878962][T16441] shmem 0 [ 610.878962][T16441] file_mapped 0 [ 610.878962][T16441] file_dirty 0 [ 610.878962][T16441] file_writeback 0 [ 610.878962][T16441] anon_thp 0 [ 610.878962][T16441] inactive_anon 0 [ 610.878962][T16441] active_anon 314535936 [ 610.878962][T16441] inactive_file 0 [ 610.878962][T16441] active_file 0 [ 610.878962][T16441] unevictable 0 [ 610.878962][T16441] slab_reclaimable 0 [ 610.878962][T16441] slab_unreclaimable 0 [ 610.878962][T16441] pgfault 370986 [ 610.878962][T16441] pgmajfault 0 [ 610.878962][T16441] workingset_refault 33 [ 610.878962][T16441] workingset_activate 0 [ 610.878962][T16441] workingset_nodereclaim 0 [ 610.878962][T16441] pgrefill 3243 [ 610.878962][T16441] pgscan 2838 [ 610.878962][T16441] pgsteal 82 [ 610.878962][T16441] pgactivate 2706 [ 610.972264][T16441] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16441,uid=0 [ 610.987948][T16441] Memory cgroup out of memory: Killed process 16441 (syz-executor.5) total-vm:48560kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 611.005434][ T24] oom_reaper: reaped process 16441 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 614.527363][T16458] 9pnet: Insufficient options for proto=fd 19:28:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x10000, 0x9, 0x80000001, 0x6, 0x4, "75df12a6fb883278bbe3637cb8684a674423a9", 0x0, 0x5}) (async) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:28:52 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r4 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r2}, {0x8, 0x0, r3}, {0x8, 0x1, r4}, {0x8, 0x0, 0xee01}, {0x8, 0x1, 0xee01}], {0x10, 0x6}, {0x20, 0x3}}, 0x54, 0x2) r5 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) 19:28:52 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x8000000) 19:28:52 executing program 1: unshare(0x40000400) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) splice(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000005000)='./file0\x00', &(0x7f0000005040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=fd,'}}]}}) 19:28:52 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x282020000000000, 0x0, 0x0) 19:28:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x20, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="190000000000000013e8000a7b53c7efcf5f0bf39113c8eb7622f9377362b0bc875d3d7044fc589df3bd6d631d69459fdd01be909c8806a3eef7d2e4ee5492fa0ab9961bb5b3f289cf87cfd910505741d39f7f969d001ad51efae4a5a6ac300fda7dbfd7803492daac9be6c2759ba0236d2488973bc6bf9702007b2c9f3a589448cb63de1d61fa68da32e69b35a5c716a28b44c0d7f721a251a57366c1a841ca39df0db72f0a9be143b5d7636d663e0f572d2fbe36640b83b9a6e203e3ce8fe2a0d2670ec4f03d5c", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x20, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="190000000000000013e8000a7b53c7efcf5f0bf39113c8eb7622f9377362b0bc875d3d7044fc589df3bd6d631d69459fdd01be909c8806a3eef7d2e4ee5492fa0ab9961bb5b3f289cf87cfd910505741d39f7f969d001ad51efae4a5a6ac300fda7dbfd7803492daac9be6c2759ba0236d2488973bc6bf9702007b2c9f3a589448cb63de1d61fa68da32e69b35a5c716a28b44c0d7f721a251a57366c1a841ca39df0db72f0a9be143b5d7636d663e0f572d2fbe36640b83b9a6e203e3ce8fe2a0d2670ec4f03d5c", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) [ 615.310073][T16464] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 615.322585][T16464] CPU: 1 PID: 16464 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 615.332815][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 615.342942][T16464] Call Trace: [ 615.346211][T16464] dump_stack+0x18e/0x1d5 [ 615.350513][T16464] dump_header+0xdb/0x700 [ 615.354814][T16464] oom_kill_process+0xf0/0x2d0 [ 615.359548][T16464] out_of_memory+0x55f/0x7f0 [ 615.364119][T16464] mem_cgroup_oom+0x638/0x760 [ 615.368787][T16464] try_charge+0xc41/0x1100 [ 615.373196][T16464] ? get_mem_cgroup_from_mm+0x251/0x280 [ 615.378739][T16464] mem_cgroup_try_charge+0xd5/0x2a0 [ 615.383922][T16464] wp_page_copy+0x33d/0x1830 [ 615.388501][T16464] ? _raw_spin_unlock+0x49/0x60 [ 615.393339][T16464] ? do_wp_page+0x535/0x8b0 [ 615.397835][T16464] handle_mm_fault+0xeab/0x3b90 [ 615.402677][T16464] ? psi_memstall_leave+0xa8/0xd0 [ 615.407690][T16464] do_user_addr_fault+0x4a4/0xb30 [ 615.412701][T16464] page_fault+0x2f/0x40 [ 615.416841][T16464] RIP: 0033:0x7f2c8e16a5ba [ 615.421243][T16464] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 615.440834][T16464] RSP: 002b:00007ffdf239bd78 EFLAGS: 00010202 [ 615.446904][T16464] RAX: 00005555558a26c0 RBX: 0000000000000001 RCX: 00007f2c8f2173e0 19:28:52 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r4 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r2}, {0x8, 0x0, r3}, {0x8, 0x1, r4}, {0x8, 0x0, 0xee01}, {0x8, 0x1, 0xee01}], {0x10, 0x6}, {0x20, 0x3}}, 0x54, 0x2) r5 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) getgid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x1000) (async) getegid() (async) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r2}, {0x8, 0x0, r3}, {0x8, 0x1, r4}, {0x8, 0x0, 0xee01}, {0x8, 0x1, 0xee01}], {0x10, 0x6}, {0x20, 0x3}}, 0x54, 0x2) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r6, r6, 0x0, 0x3) (async) 19:28:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) socket$xdp(0x2c, 0x3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x10000, 0x9, 0x80000001, 0x6, 0x4, "75df12a6fb883278bbe3637cb8684a674423a9", 0x0, 0x5}) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x10000, 0x9, 0x80000001, 0x6, 0x4, "75df12a6fb883278bbe3637cb8684a674423a9", 0x0, 0x5}) (async) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) [ 615.454979][T16464] RDX: 0000000000000001 RSI: 00007f2c8e2b5ef0 RDI: 0000000000000001 [ 615.462937][T16464] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2c8e2b5ef0 [ 615.470899][T16464] R10: 00005555558a2400 R11: 0000000000000202 R12: 0000000000000000 [ 615.478857][T16464] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdf239be90 [ 615.490270][T16464] memory: usage 307200kB, limit 307200kB, failcnt 102013 [ 615.502748][T16464] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 615.518056][T16464] Memory cgroup stats for /syz5: [ 615.518129][T16464] anon 314626048 [ 615.518129][T16464] file 73728 [ 615.518129][T16464] kernel_stack 0 [ 615.518129][T16464] slab 0 [ 615.518129][T16464] sock 0 [ 615.518129][T16464] shmem 0 [ 615.518129][T16464] file_mapped 0 [ 615.518129][T16464] file_dirty 0 [ 615.518129][T16464] file_writeback 0 [ 615.518129][T16464] anon_thp 0 [ 615.518129][T16464] inactive_anon 0 [ 615.518129][T16464] active_anon 314535936 [ 615.518129][T16464] inactive_file 0 [ 615.518129][T16464] active_file 0 19:28:53 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x10000000) [ 615.518129][T16464] unevictable 0 [ 615.518129][T16464] slab_reclaimable 0 [ 615.518129][T16464] slab_unreclaimable 0 [ 615.518129][T16464] pgfault 370986 [ 615.518129][T16464] pgmajfault 0 [ 615.518129][T16464] workingset_refault 33 [ 615.518129][T16464] workingset_activate 0 [ 615.518129][T16464] workingset_nodereclaim 0 [ 615.518129][T16464] pgrefill 3243 [ 615.518129][T16464] pgscan 2838 [ 615.518129][T16464] pgsteal 82 [ 615.518129][T16464] pgactivate 2739 19:28:53 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x283010000000000, 0x0, 0x0) 19:28:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r4 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r2}, {0x8, 0x0, r3}, {0x8, 0x1, r4}, {0x8, 0x0, 0xee01}, {0x8, 0x1, 0xee01}], {0x10, 0x6}, {0x20, 0x3}}, 0x54, 0x2) r5 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) getgid() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x1000) (async) getegid() (async) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r2}, {0x8, 0x0, r3}, {0x8, 0x1, r4}, {0x8, 0x0, 0xee01}, {0x8, 0x1, 0xee01}], {0x10, 0x6}, {0x20, 0x3}}, 0x54, 0x2) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r6, r6, 0x0, 0x3) (async) 19:28:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x20, 0x5e}, 0x48) (async, rerun: 32) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="190000000000000013e8000a7b53c7efcf5f0bf39113c8eb7622f9377362b0bc875d3d7044fc589df3bd6d631d69459fdd01be909c8806a3eef7d2e4ee5492fa0ab9961bb5b3f289cf87cfd910505741d39f7f969d001ad51efae4a5a6ac300fda7dbfd7803492daac9be6c2759ba0236d2488973bc6bf9702007b2c9f3a589448cb63de1d61fa68da32e69b35a5c716a28b44c0d7f721a251a57366c1a841ca39df0db72f0a9be143b5d7636d663e0f572d2fbe36640b83b9a6e203e3ce8fe2a0d2670ec4f03d5c", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) [ 615.613143][T16464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16464,uid=0 [ 615.646129][T16464] Memory cgroup out of memory: Killed process 16464 (syz-executor.5) total-vm:48560kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 19:28:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8302, 0x86) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 615.688636][T16507] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 615.712599][T16507] CPU: 0 PID: 16507 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 615.722840][T16507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 615.732881][T16507] Call Trace: [ 615.736161][T16507] dump_stack+0x18e/0x1d5 [ 615.740491][T16507] dump_header+0xdb/0x700 [ 615.744814][T16507] oom_kill_process+0xf0/0x2d0 [ 615.749564][T16507] out_of_memory+0x55f/0x7f0 [ 615.754141][T16507] mem_cgroup_oom+0x638/0x760 [ 615.758805][T16507] try_charge+0xc41/0x1100 [ 615.763213][T16507] ? get_mem_cgroup_from_mm+0x251/0x280 [ 615.768772][T16507] mem_cgroup_try_charge+0xd5/0x2a0 [ 615.773958][T16507] wp_page_copy+0x33d/0x1830 [ 615.778562][T16507] ? _raw_spin_unlock+0x49/0x60 [ 615.783399][T16507] ? do_wp_page+0x535/0x8b0 [ 615.787906][T16507] handle_mm_fault+0xeab/0x3b90 [ 615.792933][T16507] ? psi_memstall_leave+0xa8/0xd0 [ 615.797947][T16507] do_user_addr_fault+0x4a4/0xb30 [ 615.802962][T16507] page_fault+0x2f/0x40 [ 615.807213][T16507] RIP: 0033:0x7f2c8e16a5ba [ 615.811614][T16507] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 615.831243][T16507] RSP: 002b:00007ffdf239bd78 EFLAGS: 00010202 [ 615.837296][T16507] RAX: 00005555558a26c0 RBX: 0000000000000001 RCX: 00007f2c8f2173e0 [ 615.845259][T16507] RDX: 0000000000000001 RSI: 00007f2c8e2b5ef0 RDI: 0000000000000001 [ 615.853358][T16507] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2c8e2b5ef0 [ 615.861321][T16507] R10: 00005555558a2400 R11: 0000000000000202 R12: 0000000000000000 [ 615.869558][T16507] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdf239be90 19:28:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8302, 0x86) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x8302, 0x86) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) [ 615.897096][T16507] memory: usage 307200kB, limit 307200kB, failcnt 102027 [ 615.904659][T16507] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 615.919185][T16507] Memory cgroup stats for /syz5: [ 615.919258][T16507] anon 314626048 [ 615.919258][T16507] file 73728 [ 615.919258][T16507] kernel_stack 0 [ 615.919258][T16507] slab 0 [ 615.919258][T16507] sock 0 [ 615.919258][T16507] shmem 0 [ 615.919258][T16507] file_mapped 0 [ 615.919258][T16507] file_dirty 0 [ 615.919258][T16507] file_writeback 0 [ 615.919258][T16507] anon_thp 0 [ 615.919258][T16507] inactive_anon 0 [ 615.919258][T16507] active_anon 314535936 [ 615.919258][T16507] inactive_file 0 [ 615.919258][T16507] active_file 0 [ 615.919258][T16507] unevictable 0 [ 615.919258][T16507] slab_reclaimable 0 [ 615.919258][T16507] slab_unreclaimable 0 [ 615.919258][T16507] pgfault 370986 [ 615.919258][T16507] pgmajfault 0 [ 615.919258][T16507] workingset_refault 33 [ 615.919258][T16507] workingset_activate 0 19:28:53 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x2f2f6275) [ 615.919258][T16507] workingset_nodereclaim 0 [ 615.919258][T16507] pgrefill 3243 [ 615.919258][T16507] pgscan 2838 [ 615.919258][T16507] pgsteal 82 [ 615.919258][T16507] pgactivate 2739 [ 616.017930][T16507] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16386,uid=0 [ 616.042470][T16507] Memory cgroup out of memory: Killed process 16386 (syz-executor.5) total-vm:48560kB, anon-rss:444kB, file-rss:15192kB, shmem-rss:60kB, UID:0 pgtables:84kB oom_score_adj:0 [ 617.301075][T16378] device bridge_slave_1 left promiscuous mode [ 617.307312][T16378] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.314884][T16378] device bridge_slave_0 left promiscuous mode [ 617.321010][T16378] bridge0: port 1(bridge_slave_0) entered disabled state 19:28:56 executing program 1: unshare(0x40000400) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) splice(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000005000)='./file0\x00', &(0x7f0000005040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=fd,'}}]}}) 19:28:56 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8302, 0x86) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:56 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x285020000000000, 0x0, 0x0) 19:28:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:28:56 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x40000000) 19:28:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r0, 0xcda73000) 19:28:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r0, 0xcda73000) 19:28:56 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) rmdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 619.440940][T16531] 9pnet: Insufficient options for proto=fd 19:28:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r0, 0xcda73000) 19:28:56 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) rmdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) rmdir(&(0x7f0000000040)='./file0\x00') (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:28:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) rmdir(&(0x7f0000000040)='./file0\x00') r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) rmdir(&(0x7f0000000040)='./file0\x00') (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:28:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) rt_sigqueueinfo(0x0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) r1 = gettid() rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) r2 = gettid() rt_sigqueueinfo(r2, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES8], 0x208e24b) [ 621.143865][T16581] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.150945][T16581] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.158286][T16581] device bridge_slave_0 entered promiscuous mode [ 621.165268][T16581] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.172396][T16581] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.179718][T16581] device bridge_slave_1 entered promiscuous mode [ 621.220296][T16581] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.227348][T16581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.234631][T16581] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.241640][T16581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.262601][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.269749][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.277736][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 621.285428][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 621.294807][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 621.303031][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.310052][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.319470][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 621.327739][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.334757][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.351285][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 621.359158][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 621.371545][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 621.384071][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 621.401680][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.410114][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.418851][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.438698][T16585] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 621.448884][T16585] CPU: 1 PID: 16585 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 621.459087][T16585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 621.469112][T16585] Call Trace: [ 621.472375][T16585] dump_stack+0x18e/0x1d5 [ 621.476680][T16585] dump_header+0xdb/0x700 [ 621.481075][T16585] oom_kill_process+0xf0/0x2d0 [ 621.485813][T16585] out_of_memory+0x55f/0x7f0 [ 621.490378][T16585] mem_cgroup_oom+0x638/0x760 [ 621.495022][T16585] try_charge+0xc41/0x1100 [ 621.499406][T16585] ? get_mem_cgroup_from_mm+0x251/0x280 [ 621.505014][T16585] mem_cgroup_try_charge+0xd5/0x2a0 [ 621.510184][T16585] handle_mm_fault+0x158a/0x3b90 [ 621.515091][T16585] do_user_addr_fault+0x4a4/0xb30 [ 621.520090][T16585] page_fault+0x2f/0x40 [ 621.524211][T16585] RIP: 0033:0x7ffb26b61ccf [ 621.528595][T16585] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 621.548165][T16585] RSP: 002b:00007ffe0ad267c0 EFLAGS: 00010246 [ 621.554197][T16585] RAX: 00007ffb25d07000 RBX: 0000000000021000 RCX: 00007ffb26bb26b7 [ 621.562138][T16585] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007ffb25d08000 [ 621.570085][T16585] RBP: 00007ffe0ad26890 R08: 00000000ffffffff R09: 00007ffb25d27700 [ 621.578024][T16585] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe0ad269b0 [ 621.585976][T16585] R13: 00007ffb25d27700 R14: 0000000000000000 R15: 0000000000022000 [ 621.595130][T16585] memory: usage 307200kB, limit 307200kB, failcnt 102049 [ 621.602190][T16585] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 621.609025][T16585] Memory cgroup stats for /syz5: [ 621.609091][T16585] anon 314626048 [ 621.609091][T16585] file 73728 [ 621.609091][T16585] kernel_stack 0 [ 621.609091][T16585] slab 0 [ 621.609091][T16585] sock 0 [ 621.609091][T16585] shmem 0 [ 621.609091][T16585] file_mapped 0 [ 621.609091][T16585] file_dirty 0 [ 621.609091][T16585] file_writeback 0 [ 621.609091][T16585] anon_thp 0 [ 621.609091][T16585] inactive_anon 0 [ 621.609091][T16585] active_anon 314535936 [ 621.609091][T16585] inactive_file 0 [ 621.609091][T16585] active_file 0 [ 621.609091][T16585] unevictable 0 [ 621.609091][T16585] slab_reclaimable 0 [ 621.609091][T16585] slab_unreclaimable 0 [ 621.609091][T16585] pgfault 371052 [ 621.609091][T16585] pgmajfault 0 [ 621.609091][T16585] workingset_refault 33 [ 621.609091][T16585] workingset_activate 0 [ 621.609091][T16585] workingset_nodereclaim 0 [ 621.609091][T16585] pgrefill 3243 [ 621.609091][T16585] pgscan 2838 [ 621.609091][T16585] pgsteal 82 [ 621.609091][T16585] pgactivate 2739 [ 621.702605][T16585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16585,uid=0 [ 621.718092][T16585] Memory cgroup out of memory: Killed process 16585 (syz-executor.5) total-vm:52532kB, anon-rss:440kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 621.736008][ T24] oom_reaper: reaped process 16585 (syz-executor.5), now anon-rss:0kB, file-rss:13672kB, shmem-rss:0kB 19:28:59 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x286010000000000, 0x0, 0x0) 19:28:59 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1014b0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}], [{@dont_hash}]}}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:28:59 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x75622f2f) 19:28:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) rt_sigqueueinfo(0x0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) r1 = gettid() rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) r2 = gettid() rt_sigqueueinfo(r2, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES8], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) rt_sigqueueinfo(0x0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) (async) gettid() (async) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) (async) gettid() (async) rt_sigqueueinfo(r2, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) (async) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES8], 0x208e24b) (async) 19:28:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:28:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xd, 0x8, &(0x7f0000000540)=@raw=[@ldst={0x1, 0x2, 0x6, 0x9, 0x3, 0x10, 0x4}, @generic={0x69, 0x4, 0x0, 0x0, 0x1943}, @alu={0x7, 0x1, 0x5, 0x6, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000001}, @exit], &(0x7f00000019c0)='GPL\x00', 0x1, 0x8, &(0x7f0000001a00)=""/8, 0x41000, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x4, 0xf, 0x7f, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000001ac0)=[0x1, 0x1]}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x4}]}}}]}, 0x4c}}, 0x0) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x48000) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001e40)="c3e1f913546a7be4da6965534ba8f9287df52e012f40041435865ee30c566358f87c9c5bb5e93640ceed5eaf2db877710912536ff9ffffffffffffffb243b34eb609eec8b3f349f2997485bb1c9364da91686b3da24109419b4a2b33bbd08ef7254ecf5fecf1fdfa78a911529d3f34ac07c5392fa505fdcab94d1e997fcf66544fcad88fd07b507ff693ed6254010ba8fcd19b076b038f19da7a37bec309da4cee839f359c74b63def0f5b1287b3749f31dfced3531f426f9506fd6c49c5bd879de7455664027d5bc437b7cb0e8ffc77c56c213cc74a607b485209f21f1e0cd5465c3665066ebb7251ce9bbde7b28f705783f225ae", 0xf5}, {&(0x7f0000000400)="c22d88f453850e269f5549cd776f914406fc153f7df6e779db052506ef9d543ebd95e81aa7edb8da390219e68331d40bf58f05d51399fd2c38ca7bfded614577f3ec521754bfd1ec6802ca199f834863d0e9b5eafaceb68851b35a72050ac4025ddd0222e2f11ccb2ec0a25d9aac6ff3f87dfa129240f6c9", 0x78}, {&(0x7f0000000040)="6989", 0x2}, {&(0x7f0000000340)="bd9c24b8e53f2777f20e5e4c766ef8947e83ca41a3456f4063682f5dc9afe2c98e6773e91fce44d9162179f513805cd1f180264ea6d58389c3cc5ec803bab9f7c44d71a75562dd32bab3eee787f8c502e2e122d92236dfe48dfc94b52f913653cafede74061528152e53e33afd88636ac6caf6bc4b7ab72d564925946266d77c3dc51580c82b563d679bd42f", 0x8c}, {&(0x7f0000000400)}, {&(0x7f0000000600)="03f6cb018c54a3c669af5ac8d05e46d9ff29dea7ed960751e8fc20373ab28e383121c0a0872f7e0548950975343f25851bb914a36d99218ab222274c174bf9d7298fb0624c3179f90601f5d0ee0d66d824c06820c47a694bc7afdd80ee9f6cc3314ecadb1a9ac05dc1d29e9fc1a47a57600768f599ee46832db852bf6f477a1b4c52715db0318a467e820480706e96a9847d845694264a5230e25012a17b3d1323907c84a8d541825e1b371dc1f71c1cb3e21e34cca9d8922c4bba00b532a0d6a00ee6890ee4f8f3e394ed84c37f4f017ba2a8898a2eaf668b653080102ce7b861337512be24e6c95b4e3e8da23ee5fd89bac526c7a5b1f67fc90819a3c68c99d79c343ccb881d366e274ecd1e145e7b804dbb8889293be91dceb2d7249496fea40db9db1fb303298eb04781b28204982b513fcc75ce8bb56a4f04c4e7850ec143036ca414c41c13b060fcccc5da7981cc7d15bf89ec87c3c67e708714f40a7c17a1b74f9a9f7f8f52b74c32beac3554ddd83b82b6539cd943450472abb6337f2c74a06621d1b9c1801b1998376233cc32a01142491834545f1e054de441584c947f4b3bdfe6daa5c436ed1515ff5840350581994fd796e4e0f9c7a610ba75172f462315fdb37bdafcb679338d73cec58f854d0d0101f357405902e51941021a421ee818caee96dec4551512499e945ba18101baebd54560bf6ece9a5e93be0c4c2f8f49af8b7110be8384c2106814fd402dfe116f863c0c1df62013d000f68054a3839b6c1726d09e4d5fe82bee927572aa23e1f04d07e6638b39abeb784dfb5576ccf6facc18b849cdb5dc40254a23410c2fc3e27b60f1433b0f7b2442ee7c78977fa1132cb3f072214640e55bcd09a5f549a5e6a2f1688c72ee86e44de466759e78c3b23558e56f4cba38b2d03c4f3941170d00425c6be4a76730e4303a5d5be3035e74c3123b5655eef35a4b197c0dfc9f0fb54831a154a2b6dbb581c2898e00e19c330f3458b77e98884b8a11d61e983bbc034436a9924f76e87b078e1a1701e2fe3f8c4771d944da7254afeb8797c7757c3e1440c7c11468b68d86b1b7eb1e05a9902d57a47bf68b90927aaf72ee6b635bf2881e9e5b79833af4b03fb50b26b70df668791fa00b7ae3931f027123fd2d0ec91c7eb235cecd6f1512a7f4a8e8bde106d7176235a218dbe9d176d6b51b9d939cacc2978152e659a2cdbe22c07548fa4bffb2ce1991092e9082bd6fc9341f08cb4f16d1be25f86bd47c5971175fd16858e9cb7f19d4f3a109e8e610b8b56bee913eeac3347411a1bdc0928052a6e52cd21d560ccce1742c0a5db206db71a38c4afb86d9b9c7dc03e764c7301ec44b39af34d88358a1d47587ead5a062ca8398f0d0e9789dbbf0433f7e0a3e4abefe5d8dbd06b7c4ace8ad4bafd3c1bb29432c1673e1a78fde91beb3acfc7f06e302546318b905feae2a7db6e6c7e7bd6db854812611389d439c9c4b0791dfb81280610e6d631a54d5ac10adc376ce3b5934b80ee9bfba78a2f09424953944900b16f7fc60fb42074ae0170ea96e4975a9a2a9b74c37d6d0043c766fa8ddc30644644c1e0ebc801b0515f7c2b7caff50bf87b880870bd0c439a5d92e860312134dcf8c20f21fb41e1e0d235967f1cc1c3b40c1b55fcf2f0a527fdf1a57e33b8684ac65baa9f63491ea5051c708e3d48c8269c7a8320e9947dc5d996ff9da2a9d5a12b6b9fdebf9fa0008c25eb56e6d26676932dba09c64f64728b8c36c514b3edb8d35cd49b659c557f4a3147bce447f62ccffa0ea29ea5e2bdcccdd850c2fa5bf87b7ef29ae37fd7dd2ec09cd29097ba6f2b79d94ba0ea7b58adfff797055e79e0aeb64b67ec9b735cbe7275cddaf77f4ce84a54516f56acabe27183cdd8ed01e577344565b99fe531545430f1dd10c0588550b3d28bc576f016e9ec06059677b5332d60ff0b2cc5c94cff11e1bcb2e69a057d53dac17fa9e3f09a8016cd62607cc7d20faa6abdb3f1c38f930f82610405c99a89fa45582eb8e2236005c9ab4da1d4699ccc204d1222e69b0912e9956231848117c4177877843f31f862ba349d57cb5c75a01272b500bed1b2d68a45fbd63de05cfcfaa1ef26bdc3eb72685ccf8d0c21ba71fb538eae932a1a97c0900a9ca1f73b80deacdd6f9b163a6fc21eb648e9f1cf7f6f6cbd358e72a908ce8a0484bd1b3760267ffd980ba50d0fe48cec7dfa2ec751813b07c2a12c9d51ad31f6a36fabc4e2e1b85a7790a66329a286e76525c42abfcdba2527709d6ebfe99b7144a6ee626fdea789012c9f2408f24b40e59eb6ec543266b82edb85565a71ec71fcfd459e8478ef569f9dfd682fed3ddafcbafc5385701eda6afeccc1ed0a82f5ac0da66e0b41f4eccd441ce32758832263759f9a3e1aba063039ccca44ad1435683d492d0a393080e999d118e5434ddbb703756cefd5c7d9c6f06abe9857b62d08dfd3cd32bc660d02939741f3f7cf22f4983d02583edc82c16c544308343c00cb98622ebd72a08b8c9038985e4038eac0f84c96aec9ed51e28c1ba477a88a3542c37d22a913dd2296cc7e105ba2a42b3ff05cf9e6ffc67079cdf6fbe3d25b037f9bb4289da0f5bd934ed7f1b2059aeada0034372a7f373794b8d863577198b3b75f2466b965b067e1f558fe31ba3583ecc3a97955dfa684a7c1b961c490acaa7c6f68028d4ebdbf561ec31c5ba8fbcd10b348bd8b1fec4c151213cb43275c8ac3371f4dc2ec2cbabcdc729aaaca0c687ce0531c27ab37263121751ec04818ebb7b43962160391ba1d2a15d2dfeb14d978959e383836fef9ddd8abc2c5a829e7e13467403e6f7fbbda5170717bfab832f4eaef8e37f07067d09226a6c454fbc4ec8f122747a06d9564f4dc6a0cb371ddd535253e4f0a94d37227a95b81e3b27a6f521010ae2731718124747e6eac45e200af491d352bc8edd1688f449a91ae7a59205d49e488eefd3e3db969644091d80fa1463623f13f9440bd697fc24210379cd14bc505d75ca6c2bae348356627e1ada91e93c61622e5e6649e51bcbbbeca4107fb19afc5cd4e904cdec956417d2aa49b26c993c846705082bc24b98daf9f3ccc882b9f336a63dccb853d7dda0eb1a09751df0b7d01443b4a4b3274464b510f5b52b2eacf244852c0458e010b990e7a6e908da47cbbb08592706054bc6d11c6ce3412b1178d9e97db40dba003832692dd87ecc04d39eabaa7236d8bfef064309b58fad03cdd4dabfd755e0f47875f3a7c19504201a6adcf31bf210720f8ea0b2e623f677f9b8e6d53308e9ecfcf798dd4befff675f0f861ebd30cd614d95ec1e46c7bd9ab28cb7178aa734c69b493029622a588c11ba0698280b1ad90416d7061c003a8c47cbc348955b7c00b3ce12fe967ea8ef3294f22de5f6af0cf9b6ab51acbc7a7a348b9b26474ea0450e6feca9df1d2096646371c8738c2aba144fcb658c3c46a8975e9bf38746e2a447889af70f3a29ad66b0f1cb53edcaf169db610c4fe1b34bbe4f33994487cecb9ca2814b8d4a8829153cc1a0c320a1ebda6056de2712ddc523c01df58bedc1940898dd50f7bbf329d53a2a0aba693f30c8e465db21b5ad8ed07e6b73d31ce3798676d5483b7709617630e7f211c35a628233f1373ee3f53e3bbc3d7d5049f1c1bfa618fa9569a665679695719160626c8a7a0adf514ed6f7631db59e26d5f079e57ce39a162a46c5a03096da82f7ed8482e911224cd7a55f656709545ec9d752f7e2692a5901f0e4da7eee3edd4d7ab72859c334ffa1601c064ba63975cce1736a1ac09fe3800e360812a2231b91f8ba2db301f17e7e66ae8637474c5e09d034d89449e0c9ef7b5aa1dc69718a836b04a7c155aeb35f989f77d3dba0ffd6432c6f84b5f2f68c42167a1cb67d7f60538ab741b200fc2747e5fefe418e8d5885b9bd84aa094bc04e622c28c849b7d7859c8efb64a5d2b1af2ad01306e25d9147df1ce3eddbf8126c7da313331026fa60472e966b8a736923fba5fb5deb4af1d313f26adada3f182bc0fa441664845694b793dc13fc3bc07b1f3e50144a7e4c619a9ef4a7e35d1e53a9950ec727d4ff95df7f2886982ac42d14997af06d3063ec66fa7691d3b751f7c0c9425b25466e3be6e098944f4d4f79e99cc0542147c63a76afc0370f24ff09c02c8c69646a422e2e0956380766a11ac1c3c02a2ccb505793045ddd641cd60a77698cd0705879e3d54aaf9b66e0047cc2266424ffcd06841ed2babfec2c5b4fca336a01c197afe23de31ad562ae700776a11643fecb1fa561faa3ea921e1dbdab496fc7b41ab713990889ea37459168e5c0c71c50909a7bcd2428f274e0fc5e16dac2de5acf2882b0bb7def3dbcac5e2accd6ad7897f5c5fde9afe2f9d4fc933938669b200cecddae73494902ec1ddd4e811739a15145ea9c50702d0ab72eea5159695bcfb4bd7d2a7f04cfc9990aac232801819a44b7781b555471c10f3325a344806d01318ac56f99ebadcfb7ad8f337d07c0ac6e3830fb8cf9922ab9f3b5e0803231e682a933c4f1ba9f895efaf66cdde12b90395bbb13abedf14f31ac66baf15a9bad24b8d4da7d157f293bc23570df72e12e392fcbdab8b4d9f468d0e8564114a3014d47beac7896eebe8e8d785515daa4768d78234c57a4b9b9e2bca70f89433a5f8fc4dad315fb95691084cc44e391bc26beebebeb2d5269b326c0eb0ac12a39a7d4fb9e238e7ad6a6d4789cd6e9b663de301254f234706fe6caffc2d84782542cd8ea807d3f9bb0df201be1923779f5297992a59b331e5394c23a7f09774a61f178d7e27998b41500bb6659bb64604bb860fb9d990d6ddfc7db05884f375c11a895a5fea7b2c1dfe42b332fcb9ea26cb7f3059db8d974c5ede7e26d8977946b440203f0c4d79ff5ceeb3413f431957cb033e444d1b9999efda7b1a48b7ba509ff8fcf3a3b3c31851b135fc10035e2c7cb10101ece500ee8377a3383ffb33b98289d7515ac724c042744e1ba84179535eac887be6e6dafa512bd974da4e17f3e0fb9bca62ca38fab205bfc7e6bd0b37005afe757de30f260b13f1bfc35d0b301149fa1c0369ac8b94ab8a383116fe62907ae581a71dd4d6703022343d041ea78fa8d1350370d0ad31e57d17664ef8b801f4c7e4c7a212a2ecefcdec72b01fe2e0fe08c2bae241d5599262b203fd1949af18cf4a507a28b28f5fc1a7c337d43ba1ae1e3ac5816fdab9c743a305426e4d5a89d5ba3e85695bab3e1bf6c68323ac379a3d1b411022376b20ac431efa1b135bd8aed9f403405aaadfcd5856c5d8c64306db00ec4d68863370854d5cc8cfc404eb708ea9090adf3954f39020681a2e3f956d67fb8b9fddda0e40a67000673e70660ce70a2a50577bd1bf9c13ab6497bb894fc4cb0280c39040cb3042b850d10786a74cf511994deddcdc1b76fc56b6094be83c2d5f4b01c9c73758cdca8b2e23a436a7c78ea74bd211ba0f9c52612e7774f6d049307cc0cf5907a7858aae5610672b060a7dcc7c4b5dbfee1ffa729ea10e427516176b6933f53c922aabcbd25ecfbcb7759018ed17c5a1235e2690b3b6fed2a1733817831fd6e99f166eae121ea2d35d6e0c986e3759b361378d77a11ad931ed9e2840674dacfc351a4e227633c0b496ce72f55b739ed89cea83902a3ae946c6638f54a0566135691eacca945c42b0a491b31b5503f3d90a40c299da5d5f3b5af9d516f921ec97f04a1a8ee59d6fef48f592d7feac5825294df9472b8ea09509248429bd362f22eeef3cf32f9ae9cd8ce0549", 0x1000}, {&(0x7f0000001740)="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", 0x265}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f0000001600)="4f8a23fc55278a109dbdd30800272b320bcbe75559103fbf9fd3f8260049d273237800a10bb70e86dc03b8749c762c8503d3326b130967131b2f6efd29e4b949e75bd52592b5c98d693ba7fb1cd35b28b7a34e26b7325f055b4ee5ee1d4c1d0a378bfc02d51d263811", 0x69}], 0x9) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r9, 0xd19, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x5}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000001700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x48100c0}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000801}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000001e00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x1a8, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) fcntl$getflags(r3, 0x401) [ 622.469833][T16587] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 622.491942][T16587] CPU: 0 PID: 16587 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 622.502178][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 622.512218][T16587] Call Trace: [ 622.515499][T16587] dump_stack+0x18e/0x1d5 [ 622.519818][T16587] dump_header+0xdb/0x700 [ 622.524138][T16587] oom_kill_process+0xf0/0x2d0 [ 622.528898][T16587] out_of_memory+0x55f/0x7f0 [ 622.533471][T16587] mem_cgroup_oom+0x638/0x760 [ 622.538134][T16587] try_charge+0xc41/0x1100 [ 622.542535][T16587] ? get_mem_cgroup_from_mm+0x251/0x280 [ 622.548066][T16587] mem_cgroup_try_charge+0xd5/0x2a0 [ 622.553254][T16587] wp_page_copy+0x33d/0x1830 [ 622.557830][T16587] ? _raw_spin_unlock+0x49/0x60 [ 622.562668][T16587] ? do_wp_page+0x535/0x8b0 [ 622.567166][T16587] handle_mm_fault+0xeab/0x3b90 [ 622.572012][T16587] do_user_addr_fault+0x4a4/0xb30 [ 622.577025][T16587] page_fault+0x2f/0x40 [ 622.581509][T16587] RIP: 0033:0x7ffb26b7073d [ 622.585907][T16587] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 622.605843][T16587] RSP: 002b:00007ffe0ad25e90 EFLAGS: 00010206 [ 622.612417][T16587] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 19:29:00 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1014b0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}], [{@dont_hash}]}}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1014b0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}], [{@dont_hash}]}}) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:29:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) rt_sigqueueinfo(0x0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) r1 = gettid() rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) r2 = gettid() rt_sigqueueinfo(r2, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES8], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) rt_sigqueueinfo(0x0, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) (async) gettid() (async) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) (async) gettid() (async) rt_sigqueueinfo(r2, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x80}) (async) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES8], 0x208e24b) (async) [ 622.620375][T16587] RDX: 00007ffe0ad26588 RSI: 00007ffb26c0d603 RDI: 00007ffe0ad26400 [ 622.628504][T16587] RBP: 00007ffe0ad263e0 R08: 0000000000000000 R09: 00007ffe0ad264f0 [ 622.636464][T16587] R10: 00007ffb26c0d603 R11: 0000000000000206 R12: 00007ffe0ad26400 [ 622.644683][T16587] R13: 00007ffb26c0d603 R14: 00007ffe0ad26588 R15: 00007ffe0ad26588 [ 622.658157][T16587] memory: usage 307200kB, limit 307200kB, failcnt 102065 [ 622.668815][T16587] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 622.675736][T16587] Memory cgroup stats for /syz5: [ 622.675810][T16587] anon 314626048 [ 622.675810][T16587] file 73728 [ 622.675810][T16587] kernel_stack 0 [ 622.675810][T16587] slab 0 [ 622.675810][T16587] sock 0 [ 622.675810][T16587] shmem 0 [ 622.675810][T16587] file_mapped 0 [ 622.675810][T16587] file_dirty 0 [ 622.675810][T16587] file_writeback 0 [ 622.675810][T16587] anon_thp 0 [ 622.675810][T16587] inactive_anon 0 [ 622.675810][T16587] active_anon 314535936 [ 622.675810][T16587] inactive_file 0 [ 622.675810][T16587] active_file 0 [ 622.675810][T16587] unevictable 0 [ 622.675810][T16587] slab_reclaimable 0 [ 622.675810][T16587] slab_unreclaimable 0 [ 622.675810][T16587] pgfault 371085 [ 622.675810][T16587] pgmajfault 0 [ 622.675810][T16587] workingset_refault 33 [ 622.675810][T16587] workingset_activate 0 [ 622.675810][T16587] workingset_nodereclaim 0 [ 622.675810][T16587] pgrefill 3243 [ 622.675810][T16587] pgscan 2838 [ 622.675810][T16587] pgsteal 82 [ 622.675810][T16587] pgactivate 2739 19:29:00 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1014b0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}], [{@dont_hash}]}}) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:29:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1800080, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@appraise}, {@subj_type}, {@obj_user={'obj_user', 0x3d, '#! '}}, {@uid_lt={'uid<', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '${}'}}]}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c6530202f0a43f0876e6c28b90372555e932c742793e6eb1dca5a1f000000b34bf877c4474552ebbe86d78edfbc171a1c2ad395fdcff952c47180c61f689df94c39887084e071a1c93ddc5a1f803539181c79c5586e487e8591a892171f98551d1b1094dba7f493390df62b35cc4032beef4dc333c02d430f322d680931b6978dcc33fcc06f4a2e25b3874c31b6723cc3ee80c8ce9ad6a5ca6bfe24d81ba55036efb860494277d46c23"], 0xb1) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:29:00 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 19:29:00 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x288020000000000, 0x0, 0x0) [ 622.775363][T16587] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16581,uid=0 [ 622.800468][T16587] Memory cgroup out of memory: Killed process 16581 (syz-executor.5) total-vm:48560kB, anon-rss:436kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 19:29:00 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 19:29:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:29:00 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xeffdffff) 19:29:00 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) (async) 19:29:00 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x13043, 0x20) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000080)=0x1) [ 623.340994][T16631] device bridge_slave_1 left promiscuous mode [ 623.350878][T16631] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.371088][T16631] device bridge_slave_0 left promiscuous mode [ 623.377233][T16631] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.573498][T16661] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.580520][T16661] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.588333][T16661] device bridge_slave_0 entered promiscuous mode [ 624.595161][T16661] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.602184][T16661] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.609496][T16661] device bridge_slave_1 entered promiscuous mode [ 624.649854][T16661] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.656879][T16661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.664141][T16661] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.671153][T16661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.691931][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.699389][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.707281][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.716840][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.724980][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.731993][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.741115][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.749208][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.756231][ T699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.768644][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.791450][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.799753][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.807865][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 624.816557][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 624.829111][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 624.841484][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 624.860549][T16666] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 624.872206][T16666] CPU: 1 PID: 16666 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 624.882428][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 624.892462][T16666] Call Trace: [ 624.896019][T16666] dump_stack+0x18e/0x1d5 [ 624.900327][T16666] dump_header+0xdb/0x700 [ 624.904636][T16666] oom_kill_process+0xf0/0x2d0 [ 624.909373][T16666] out_of_memory+0x55f/0x7f0 [ 624.913934][T16666] mem_cgroup_oom+0x638/0x760 [ 624.918578][T16666] try_charge+0xc41/0x1100 [ 624.922965][T16666] ? get_mem_cgroup_from_mm+0x251/0x280 [ 624.928476][T16666] mem_cgroup_try_charge+0xd5/0x2a0 [ 624.933649][T16666] handle_mm_fault+0x158a/0x3b90 [ 624.938622][T16666] do_user_addr_fault+0x4a4/0xb30 [ 624.943616][T16666] page_fault+0x2f/0x40 [ 624.947738][T16666] RIP: 0033:0x7f1b45004ccf [ 624.952120][T16666] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 624.971698][T16666] RSP: 002b:00007ffe533cb560 EFLAGS: 00010246 [ 624.977735][T16666] RAX: 00007f1b441aa000 RBX: 0000000000021000 RCX: 00007f1b450556b7 [ 624.985692][T16666] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f1b441ab000 [ 624.993633][T16666] RBP: 00007ffe533cb630 R08: 00000000ffffffff R09: 00007f1b441ca700 [ 625.001575][T16666] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe533cb750 [ 625.009523][T16666] R13: 00007f1b441ca700 R14: 0000000000000000 R15: 0000000000022000 [ 625.018030][T16666] memory: usage 307200kB, limit 307200kB, failcnt 102087 [ 625.025288][T16666] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 625.032127][T16666] Memory cgroup stats for /syz5: [ 625.032196][T16666] anon 314626048 [ 625.032196][T16666] file 73728 [ 625.032196][T16666] kernel_stack 0 [ 625.032196][T16666] slab 0 [ 625.032196][T16666] sock 0 [ 625.032196][T16666] shmem 0 [ 625.032196][T16666] file_mapped 0 [ 625.032196][T16666] file_dirty 0 [ 625.032196][T16666] file_writeback 0 [ 625.032196][T16666] anon_thp 0 [ 625.032196][T16666] inactive_anon 0 [ 625.032196][T16666] active_anon 314535936 [ 625.032196][T16666] inactive_file 0 [ 625.032196][T16666] active_file 0 [ 625.032196][T16666] unevictable 0 [ 625.032196][T16666] slab_reclaimable 0 [ 625.032196][T16666] slab_unreclaimable 0 [ 625.032196][T16666] pgfault 371118 [ 625.032196][T16666] pgmajfault 0 [ 625.032196][T16666] workingset_refault 33 [ 625.032196][T16666] workingset_activate 0 [ 625.032196][T16666] workingset_nodereclaim 0 [ 625.032196][T16666] pgrefill 3243 [ 625.032196][T16666] pgscan 2838 [ 625.032196][T16666] pgsteal 82 [ 625.032196][T16666] pgactivate 2739 [ 625.126094][T16666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16666,uid=0 [ 625.141336][T16666] Memory cgroup out of memory: Killed process 16666 (syz-executor.5) total-vm:48692kB, anon-rss:440kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 625.159152][ T24] oom_reaper: reaped process 16666 (syz-executor.5), now anon-rss:0kB, file-rss:13556kB, shmem-rss:0kB 19:29:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1800080, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@appraise}, {@subj_type}, {@obj_user={'obj_user', 0x3d, '#! '}}, {@uid_lt={'uid<', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '${}'}}]}}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c6530202f0a43f0876e6c28b90372555e932c742793e6eb1dca5a1f000000b34bf877c4474552ebbe86d78edfbc171a1c2ad395fdcff952c47180c61f689df94c39887084e071a1c93ddc5a1f803539181c79c5586e487e8591a892171f98551d1b1094dba7f493390df62b35cc4032beef4dc333c02d430f322d680931b6978dcc33fcc06f4a2e25b3874c31b6723cc3ee80c8ce9ad6a5ca6bfe24d81ba55036efb860494277d46c23"], 0xb1) (async) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:29:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) open(&(0x7f00000001c0)='./file0\x00', 0x13043, 0x20) (rerun: 32) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 32) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000080)=0x1) 19:29:04 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x289010000000000, 0x0, 0x0) 19:29:04 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xf5ffffff) 19:29:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (rerun: 32) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xd, 0x8, &(0x7f0000000540)=@raw=[@ldst={0x1, 0x2, 0x6, 0x9, 0x3, 0x10, 0x4}, @generic={0x69, 0x4, 0x0, 0x0, 0x1943}, @alu={0x7, 0x1, 0x5, 0x6, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000001}, @exit], &(0x7f00000019c0)='GPL\x00', 0x1, 0x8, &(0x7f0000001a00)=""/8, 0x41000, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x4, 0xf, 0x7f, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000001ac0)=[0x1, 0x1]}, 0x80) (async, rerun: 32) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x4}]}}}]}, 0x4c}}, 0x0) (async) r5 = dup(r4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x48000) (async) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001e40)="c3e1f913546a7be4da6965534ba8f9287df52e012f40041435865ee30c566358f87c9c5bb5e93640ceed5eaf2db877710912536ff9ffffffffffffffb243b34eb609eec8b3f349f2997485bb1c9364da91686b3da24109419b4a2b33bbd08ef7254ecf5fecf1fdfa78a911529d3f34ac07c5392fa505fdcab94d1e997fcf66544fcad88fd07b507ff693ed6254010ba8fcd19b076b038f19da7a37bec309da4cee839f359c74b63def0f5b1287b3749f31dfced3531f426f9506fd6c49c5bd879de7455664027d5bc437b7cb0e8ffc77c56c213cc74a607b485209f21f1e0cd5465c3665066ebb7251ce9bbde7b28f705783f225ae", 0xf5}, {&(0x7f0000000400)="c22d88f453850e269f5549cd776f914406fc153f7df6e779db052506ef9d543ebd95e81aa7edb8da390219e68331d40bf58f05d51399fd2c38ca7bfded614577f3ec521754bfd1ec6802ca199f834863d0e9b5eafaceb68851b35a72050ac4025ddd0222e2f11ccb2ec0a25d9aac6ff3f87dfa129240f6c9", 0x78}, {&(0x7f0000000040)="6989", 0x2}, {&(0x7f0000000340)="bd9c24b8e53f2777f20e5e4c766ef8947e83ca41a3456f4063682f5dc9afe2c98e6773e91fce44d9162179f513805cd1f180264ea6d58389c3cc5ec803bab9f7c44d71a75562dd32bab3eee787f8c502e2e122d92236dfe48dfc94b52f913653cafede74061528152e53e33afd88636ac6caf6bc4b7ab72d564925946266d77c3dc51580c82b563d679bd42f", 0x8c}, {&(0x7f0000000400)}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001740)="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", 0x265}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f0000001600)="4f8a23fc55278a109dbdd30800272b320bcbe75559103fbf9fd3f8260049d273237800a10bb70e86dc03b8749c762c8503d3326b130967131b2f6efd29e4b949e75bd52592b5c98d693ba7fb1cd35b28b7a34e26b7325f055b4ee5ee1d4c1d0a378bfc02d51d263811", 0x69}], 0x9) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0xa) (rerun: 32) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r9, 0xd19, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x5}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000001700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x48100c0}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000801}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000001e00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x1a8, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async, rerun: 32) fcntl$getflags(r3, 0x401) 19:29:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350000010000000000000000000000186a00000a000000000000000000006b94493848ae7fbba9"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) [ 626.631861][T16668] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 626.655410][T16668] CPU: 0 PID: 16668 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 626.665749][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 626.675788][T16668] Call Trace: [ 626.679072][T16668] dump_stack+0x18e/0x1d5 [ 626.683390][T16668] dump_header+0xdb/0x700 [ 626.687713][T16668] oom_kill_process+0xf0/0x2d0 [ 626.692467][T16668] out_of_memory+0x55f/0x7f0 [ 626.697050][T16668] mem_cgroup_oom+0x638/0x760 [ 626.701726][T16668] try_charge+0xc41/0x1100 [ 626.706135][T16668] ? get_mem_cgroup_from_mm+0x251/0x280 [ 626.711669][T16668] mem_cgroup_try_charge+0xd5/0x2a0 [ 626.716886][T16668] wp_page_copy+0x33d/0x1830 [ 626.721466][T16668] ? _raw_spin_unlock+0x49/0x60 [ 626.726306][T16668] ? do_wp_page+0x535/0x8b0 [ 626.730800][T16668] handle_mm_fault+0xeab/0x3b90 [ 626.735760][T16668] ? psi_memstall_leave+0xa8/0xd0 [ 626.740776][T16668] do_user_addr_fault+0x4a4/0xb30 [ 626.745793][T16668] page_fault+0x2f/0x40 [ 626.749934][T16668] RIP: 0033:0x7f1b450035ba [ 626.754338][T16668] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 626.774033][T16668] RSP: 002b:00007ffe533cb7c8 EFLAGS: 00010202 [ 626.780098][T16668] RAX: 00005555559a96c0 RBX: 0000000000000001 RCX: 00007f1b460b03e0 [ 626.788063][T16668] RDX: 0000000000000001 RSI: 00007f1b4514eef0 RDI: 0000000000000001 [ 626.796031][T16668] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1b4514eef0 [ 626.803992][T16668] R10: 00005555559a9400 R11: 0000000000000202 R12: 0000000000000000 [ 626.811952][T16668] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe533cb8e0 [ 626.825784][T16668] memory: usage 307200kB, limit 307200kB, failcnt 102104 [ 626.834124][T16668] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 626.841438][T16668] Memory cgroup stats for /syz5: [ 626.841509][T16668] anon 314626048 [ 626.841509][T16668] file 73728 [ 626.841509][T16668] kernel_stack 0 [ 626.841509][T16668] slab 0 [ 626.841509][T16668] sock 0 [ 626.841509][T16668] shmem 0 [ 626.841509][T16668] file_mapped 0 [ 626.841509][T16668] file_dirty 0 [ 626.841509][T16668] file_writeback 0 [ 626.841509][T16668] anon_thp 0 [ 626.841509][T16668] inactive_anon 0 19:29:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x13043, 0x20) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000080)=0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) open(&(0x7f00000001c0)='./file0\x00', 0x13043, 0x20) (async) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r4) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000080)=0x1) (async) 19:29:04 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x28b020000000000, 0x0, 0x0) [ 626.841509][T16668] active_anon 314535936 [ 626.841509][T16668] inactive_file 0 [ 626.841509][T16668] active_file 0 [ 626.841509][T16668] unevictable 0 [ 626.841509][T16668] slab_reclaimable 0 [ 626.841509][T16668] slab_unreclaimable 0 [ 626.841509][T16668] pgfault 371151 [ 626.841509][T16668] pgmajfault 0 [ 626.841509][T16668] workingset_refault 33 [ 626.841509][T16668] workingset_activate 0 [ 626.841509][T16668] workingset_nodereclaim 0 [ 626.841509][T16668] pgrefill 3243 [ 626.841509][T16668] pgscan 2838 [ 626.841509][T16668] pgsteal 82 [ 626.841509][T16668] pgactivate 2739 19:29:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1800080, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@appraise}, {@subj_type}, {@obj_user={'obj_user', 0x3d, '#! '}}, {@uid_lt={'uid<', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '${}'}}]}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c6530202f0a43f0876e6c28b90372555e932c742793e6eb1dca5a1f000000b34bf877c4474552ebbe86d78edfbc171a1c2ad395fdcff952c47180c61f689df94c39887084e071a1c93ddc5a1f803539181c79c5586e487e8591a892171f98551d1b1094dba7f493390df62b35cc4032beef4dc333c02d430f322d680931b6978dcc33fcc06f4a2e25b3874c31b6723cc3ee80c8ce9ad6a5ca6bfe24d81ba55036efb860494277d46c23"], 0xb1) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1800080, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@appraise}, {@subj_type}, {@obj_user={'obj_user', 0x3d, '#! '}}, {@uid_lt={'uid<', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '${}'}}]}}) (async) pipe(&(0x7f0000000000)) (async) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c6530202f0a43f0876e6c28b90372555e932c742793e6eb1dca5a1f000000b34bf877c4474552ebbe86d78edfbc171a1c2ad395fdcff952c47180c61f689df94c39887084e071a1c93ddc5a1f803539181c79c5586e487e8591a892171f98551d1b1094dba7f493390df62b35cc4032beef4dc333c02d430f322d680931b6978dcc33fcc06f4a2e25b3874c31b6723cc3ee80c8ce9ad6a5ca6bfe24d81ba55036efb860494277d46c23"], 0xb1) (async) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) 19:29:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350000010000000000000000000000186a00000a000000000000000000006b94493848ae7fbba9"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x0, 0x452, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) sendfile(r4, r4, 0x0, 0x3) [ 626.955591][T16668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16668,uid=0 [ 626.971309][T16668] Memory cgroup out of memory: Killed process 16668 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 627.003002][T16698] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 627.013101][T16698] CPU: 0 PID: 16698 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 627.023325][T16698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 627.033367][T16698] Call Trace: [ 627.036651][T16698] dump_stack+0x18e/0x1d5 [ 627.040974][T16698] dump_header+0xdb/0x700 [ 627.045315][T16698] oom_kill_process+0xf0/0x2d0 [ 627.050076][T16698] out_of_memory+0x55f/0x7f0 [ 627.054657][T16698] mem_cgroup_oom+0x638/0x760 [ 627.059320][T16698] try_charge+0xc41/0x1100 [ 627.063721][T16698] ? get_mem_cgroup_from_mm+0x251/0x280 [ 627.069251][T16698] mem_cgroup_try_charge+0xd5/0x2a0 [ 627.074444][T16698] wp_page_copy+0x33d/0x1830 [ 627.079046][T16698] ? _raw_spin_unlock+0x49/0x60 [ 627.083888][T16698] ? do_wp_page+0x535/0x8b0 [ 627.088385][T16698] handle_mm_fault+0xeab/0x3b90 [ 627.093225][T16698] ? psi_memstall_leave+0xa8/0xd0 [ 627.098245][T16698] do_user_addr_fault+0x4a4/0xb30 [ 627.103338][T16698] page_fault+0x2f/0x40 [ 627.107477][T16698] RIP: 0033:0x7f1b450035ba [ 627.111877][T16698] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 627.131469][T16698] RSP: 002b:00007ffe533cb7c8 EFLAGS: 00010202 [ 627.137525][T16698] RAX: 00005555559a96c0 RBX: 0000000000000001 RCX: 00007f1b460b03e0 [ 627.145483][T16698] RDX: 0000000000000001 RSI: 00007f1b4514eef0 RDI: 0000000000000001 19:29:04 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xfffffdef) 19:29:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x0, 0x452, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x0, 0x452, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) (async) sendfile(r4, r4, 0x0, 0x3) (async) [ 627.153438][T16698] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1b4514eef0 [ 627.161396][T16698] R10: 00005555559a9400 R11: 0000000000000202 R12: 0000000000000000 [ 627.169348][T16698] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe533cb8e0 19:29:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x0, 0x452, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x0, 0x0, 0x452, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) (async) sendfile(r4, r4, 0x0, 0x3) (async) [ 627.216632][T16698] memory: usage 307200kB, limit 307200kB, failcnt 102118 [ 627.224276][T16698] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 627.232257][T16698] Memory cgroup stats for /syz5: [ 627.232330][T16698] anon 314626048 [ 627.232330][T16698] file 73728 [ 627.232330][T16698] kernel_stack 0 [ 627.232330][T16698] slab 0 [ 627.232330][T16698] sock 0 [ 627.232330][T16698] shmem 0 [ 627.232330][T16698] file_mapped 0 [ 627.232330][T16698] file_dirty 0 [ 627.232330][T16698] file_writeback 0 [ 627.232330][T16698] anon_thp 0 [ 627.232330][T16698] inactive_anon 0 [ 627.232330][T16698] active_anon 314535936 [ 627.232330][T16698] inactive_file 0 [ 627.232330][T16698] active_file 0 [ 627.232330][T16698] unevictable 0 [ 627.232330][T16698] slab_reclaimable 0 [ 627.232330][T16698] slab_unreclaimable 0 [ 627.232330][T16698] pgfault 371151 [ 627.232330][T16698] pgmajfault 0 [ 627.232330][T16698] workingset_refault 33 [ 627.232330][T16698] workingset_activate 0 [ 627.232330][T16698] workingset_nodereclaim 0 [ 627.232330][T16698] pgrefill 3243 19:29:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) openat$cgroup_int(r4, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x433c915d4647558c, 0x1) pwrite64(r5, &(0x7f0000000300)="0103be820ceee0c83393a7c13d231c930ea3239b658dd6c5e0e4ec6dfab6dd4ab88aeb39540fe05f364ee72e6193acf529fe3c11927fe8908251dd2f1bc34cbdcb395b540d1d52c85d2513ede1d9db5f105c45f15c17c000977057cf6bc180d54ad5a3631f0e1a92c5f14001989ac68a3cffba48117f166bffec956ed01af32bf8e359a4334137575ddf9f920f09c6659d50ff3e28e2", 0x96, 0x3) r6 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) [ 627.232330][T16698] pgscan 2838 [ 627.232330][T16698] pgsteal 82 [ 627.232330][T16698] pgactivate 2739 [ 627.334689][T16698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16698,uid=0 19:29:04 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 32) openat$cgroup_int(r4, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x433c915d4647558c, 0x1) pwrite64(r5, &(0x7f0000000300)="0103be820ceee0c83393a7c13d231c930ea3239b658dd6c5e0e4ec6dfab6dd4ab88aeb39540fe05f364ee72e6193acf529fe3c11927fe8908251dd2f1bc34cbdcb395b540d1d52c85d2513ede1d9db5f105c45f15c17c000977057cf6bc180d54ad5a3631f0e1a92c5f14001989ac68a3cffba48117f166bffec956ed01af32bf8e359a4334137575ddf9f920f09c6659d50ff3e28e2", 0x96, 0x3) (async, rerun: 64) r6 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (rerun: 64) sendfile(r6, r6, 0x0, 0x3) [ 627.370440][T16698] Memory cgroup out of memory: Killed process 16698 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 627.391601][ T24] oom_reaper: reaped process 16698 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB 19:29:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xd, 0x8, &(0x7f0000000540)=@raw=[@ldst={0x1, 0x2, 0x6, 0x9, 0x3, 0x10, 0x4}, @generic={0x69, 0x4, 0x0, 0x0, 0x1943}, @alu={0x7, 0x1, 0x5, 0x6, 0x5, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000001}, @exit], &(0x7f00000019c0)='GPL\x00', 0x1, 0x8, &(0x7f0000001a00)=""/8, 0x41000, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x4, 0xf, 0x7f, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000001ac0)=[0x1, 0x1]}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x4}]}}}]}, 0x4c}}, 0x0) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x48000) (async) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001e40)="c3e1f913546a7be4da6965534ba8f9287df52e012f40041435865ee30c566358f87c9c5bb5e93640ceed5eaf2db877710912536ff9ffffffffffffffb243b34eb609eec8b3f349f2997485bb1c9364da91686b3da24109419b4a2b33bbd08ef7254ecf5fecf1fdfa78a911529d3f34ac07c5392fa505fdcab94d1e997fcf66544fcad88fd07b507ff693ed6254010ba8fcd19b076b038f19da7a37bec309da4cee839f359c74b63def0f5b1287b3749f31dfced3531f426f9506fd6c49c5bd879de7455664027d5bc437b7cb0e8ffc77c56c213cc74a607b485209f21f1e0cd5465c3665066ebb7251ce9bbde7b28f705783f225ae", 0xf5}, {&(0x7f0000000400)="c22d88f453850e269f5549cd776f914406fc153f7df6e779db052506ef9d543ebd95e81aa7edb8da390219e68331d40bf58f05d51399fd2c38ca7bfded614577f3ec521754bfd1ec6802ca199f834863d0e9b5eafaceb68851b35a72050ac4025ddd0222e2f11ccb2ec0a25d9aac6ff3f87dfa129240f6c9", 0x78}, {&(0x7f0000000040)="6989", 0x2}, {&(0x7f0000000340)="bd9c24b8e53f2777f20e5e4c766ef8947e83ca41a3456f4063682f5dc9afe2c98e6773e91fce44d9162179f513805cd1f180264ea6d58389c3cc5ec803bab9f7c44d71a75562dd32bab3eee787f8c502e2e122d92236dfe48dfc94b52f913653cafede74061528152e53e33afd88636ac6caf6bc4b7ab72d564925946266d77c3dc51580c82b563d679bd42f", 0x8c}, {&(0x7f0000000400)}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001740)="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", 0x265}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f0000001600)="4f8a23fc55278a109dbdd30800272b320bcbe75559103fbf9fd3f8260049d273237800a10bb70e86dc03b8749c762c8503d3326b130967131b2f6efd29e4b949e75bd52592b5c98d693ba7fb1cd35b28b7a34e26b7325f055b4ee5ee1d4c1d0a378bfc02d51d263811", 0x69}], 0x9) (async) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r9, 0xd19, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x5}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000001700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x48100c0}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000801}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000001e00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x1a8, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) fcntl$getflags(r3, 0x401) 19:29:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350000010000000000000000000000186a00000a000000000000000000006b94493848ae7fbba9"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350000010000000000000000000000186a00000a000000000000000000006b94493848ae7fbba9"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:29:09 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) openat$cgroup_int(r4, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x433c915d4647558c, 0x1) pwrite64(r5, &(0x7f0000000300)="0103be820ceee0c83393a7c13d231c930ea3239b658dd6c5e0e4ec6dfab6dd4ab88aeb39540fe05f364ee72e6193acf529fe3c11927fe8908251dd2f1bc34cbdcb395b540d1d52c85d2513ede1d9db5f105c45f15c17c000977057cf6bc180d54ad5a3631f0e1a92c5f14001989ac68a3cffba48117f166bffec956ed01af32bf8e359a4334137575ddf9f920f09c6659d50ff3e28e2", 0x96, 0x3) (async) r6 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x3) 19:29:09 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x28c010000000000, 0x0, 0x0) 19:29:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8250000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000400050005000400000000000600010000000000"], 0x28}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/.^\\!'}, {0x20, '.'}, {0x20, '\x18.\'{\\{.&'}], 0xa, "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"}, 0x118) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x1d2050, r2, 0x7cb65000) 19:29:09 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xfffffe00) [ 631.629851][T16751] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 631.641027][T16751] CPU: 0 PID: 16751 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 631.651261][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 631.661304][T16751] Call Trace: [ 631.664582][T16751] dump_stack+0x18e/0x1d5 [ 631.668898][T16751] dump_header+0xdb/0x700 [ 631.673212][T16751] oom_kill_process+0xf0/0x2d0 [ 631.677965][T16751] out_of_memory+0x55f/0x7f0 [ 631.682540][T16751] mem_cgroup_oom+0x638/0x760 [ 631.687203][T16751] try_charge+0xc41/0x1100 [ 631.691699][T16751] ? get_mem_cgroup_from_mm+0x251/0x280 [ 631.697233][T16751] mem_cgroup_try_charge+0xd5/0x2a0 [ 631.702416][T16751] wp_page_copy+0x33d/0x1830 [ 631.706991][T16751] ? _raw_spin_unlock+0x49/0x60 [ 631.711827][T16751] ? do_wp_page+0x535/0x8b0 [ 631.716317][T16751] handle_mm_fault+0xeab/0x3b90 [ 631.721154][T16751] ? psi_memstall_leave+0xa8/0xd0 [ 631.726166][T16751] do_user_addr_fault+0x4a4/0xb30 [ 631.731178][T16751] page_fault+0x2f/0x40 [ 631.735313][T16751] RIP: 0033:0x7f1b450035ba [ 631.739710][T16751] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 631.759297][T16751] RSP: 002b:00007ffe533cb7c8 EFLAGS: 00010202 [ 631.765348][T16751] RAX: 00005555559a96c0 RBX: 0000000000000001 RCX: 00007f1b460b03e0 19:29:09 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "d973d659343b74e972899a1eee75a7729e3d68ac27f642d75744eb232383494061418a254fba732df4639d8a2ceb6753b3e84b1b483877cf12dcf55adc4ed12ce96844317f4d0450d6f0cf3404af5995d13c9a5e476b085a72afb8857a5b48226c7f74a3e126bb112158b4a752d115902e7d0298110495f29290f08fe9adfce392647e1f3cbf"}, 0x91) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = socket$unix(0x1, 0x5, 0x0) readahead(r7, 0x4, 0x1f) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x8f25, 0x100) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) sendfile(r8, r6, &(0x7f0000000300)=0x800, 0x7fffffff) openat$cgroup_int(r6, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:09 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "d973d659343b74e972899a1eee75a7729e3d68ac27f642d75744eb232383494061418a254fba732df4639d8a2ceb6753b3e84b1b483877cf12dcf55adc4ed12ce96844317f4d0450d6f0cf3404af5995d13c9a5e476b085a72afb8857a5b48226c7f74a3e126bb112158b4a752d115902e7d0298110495f29290f08fe9adfce392647e1f3cbf"}, 0x91) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = socket$unix(0x1, 0x5, 0x0) readahead(r7, 0x4, 0x1f) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x8f25, 0x100) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) sendfile(r8, r6, &(0x7f0000000300)=0x800, 0x7fffffff) openat$cgroup_int(r6, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "d973d659343b74e972899a1eee75a7729e3d68ac27f642d75744eb232383494061418a254fba732df4639d8a2ceb6753b3e84b1b483877cf12dcf55adc4ed12ce96844317f4d0450d6f0cf3404af5995d13c9a5e476b085a72afb8857a5b48226c7f74a3e126bb112158b4a752d115902e7d0298110495f29290f08fe9adfce392647e1f3cbf"}, 0x91) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) socket$unix(0x1, 0x5, 0x0) (async) readahead(r7, 0x4, 0x1f) (async) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) syz_open_dev$loop(&(0x7f0000000080), 0x8f25, 0x100) (async) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) (async) sendfile(r8, r6, &(0x7f0000000300)=0x800, 0x7fffffff) (async) openat$cgroup_int(r6, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) (async) sendfile(r4, r4, 0x0, 0x3) (async) [ 631.773310][T16751] RDX: 0000000000000001 RSI: 00007f1b4514eef0 RDI: 0000000000000001 [ 631.781271][T16751] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1b4514eef0 [ 631.789339][T16751] R10: 00005555559a9400 R11: 0000000000000202 R12: 0000000000000000 [ 631.797305][T16751] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffe533cb8e0 19:29:09 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "d973d659343b74e972899a1eee75a7729e3d68ac27f642d75744eb232383494061418a254fba732df4639d8a2ceb6753b3e84b1b483877cf12dcf55adc4ed12ce96844317f4d0450d6f0cf3404af5995d13c9a5e476b085a72afb8857a5b48226c7f74a3e126bb112158b4a752d115902e7d0298110495f29290f08fe9adfce392647e1f3cbf"}, 0x91) (async) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = socket$unix(0x1, 0x5, 0x0) readahead(r7, 0x4, 0x1f) (async, rerun: 64) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 64) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x8f25, 0x100) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) (async) sendfile(r8, r6, &(0x7f0000000300)=0x800, 0x7fffffff) openat$cgroup_int(r6, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) (async) sendfile(r4, r4, 0x0, 0x3) [ 631.866509][T16751] memory: usage 307200kB, limit 307200kB, failcnt 102132 [ 631.887724][T16751] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 631.911175][T16751] Memory cgroup stats for /syz5: [ 631.911242][T16751] anon 314626048 [ 631.911242][T16751] file 73728 [ 631.911242][T16751] kernel_stack 0 [ 631.911242][T16751] slab 0 [ 631.911242][T16751] sock 0 [ 631.911242][T16751] shmem 0 [ 631.911242][T16751] file_mapped 0 [ 631.911242][T16751] file_dirty 0 [ 631.911242][T16751] file_writeback 0 [ 631.911242][T16751] anon_thp 0 [ 631.911242][T16751] inactive_anon 0 [ 631.911242][T16751] active_anon 314535936 [ 631.911242][T16751] inactive_file 0 [ 631.911242][T16751] active_file 0 [ 631.911242][T16751] unevictable 0 19:29:09 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x28e020000000000, 0x0, 0x0) [ 631.911242][T16751] slab_reclaimable 0 [ 631.911242][T16751] slab_unreclaimable 0 [ 631.911242][T16751] pgfault 371184 [ 631.911242][T16751] pgmajfault 0 [ 631.911242][T16751] workingset_refault 33 [ 631.911242][T16751] workingset_activate 0 [ 631.911242][T16751] workingset_nodereclaim 0 [ 631.911242][T16751] pgrefill 3243 [ 631.911242][T16751] pgscan 2838 [ 631.911242][T16751] pgsteal 82 [ 631.911242][T16751] pgactivate 2739 19:29:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8250000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000400050005000400000000000600010000000000"], 0x28}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/.^\\!'}, {0x20, '.'}, {0x20, '\x18.\'{\\{.&'}], 0xa, "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"}, 0x118) (async) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async, rerun: 32) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) (rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x1d2050, r2, 0x7cb65000) 19:29:09 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 632.004914][T16751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16661,uid=0 [ 632.020558][T16751] Memory cgroup out of memory: Killed process 16661 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:15176kB, shmem-rss:60kB, UID:0 pgtables:84kB oom_score_adj:0 [ 632.941135][T16793] device bridge_slave_1 left promiscuous mode [ 632.947265][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.955105][T16793] device bridge_slave_0 left promiscuous mode [ 632.961301][T16793] bridge0: port 1(bridge_slave_0) entered disabled state 19:29:13 executing program 1: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x28e020000000000, 0x0, 0x0) 19:29:13 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) (async) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) chdir(&(0x7f0000000040)='./file0\x00') (async) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:29:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63cb31368000a6e", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:13 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xfffffff5) 19:29:13 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x28f010000000000, 0x0, 0x0) 19:29:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8250000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000400050005000400000000000600010000000000"], 0x28}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/.^\\!'}, {0x20, '.'}, {0x20, '\x18.\'{\\{.&'}], 0xa, "922c7fc18ac96bcc2bf5349bb409e54caf6601b0b7cc532b4b588f96f65d75e91bf9f18fecde5ed4b7908c9bfb47ff7874e01d6332415e3d41147169b430ecc4864a34731d042b2c49493cb3cf6c6d5e8c30e5c8066cf95f0b975f5151eb87ab0469265f600e3704a537ad6d9b5e5045192199044fa552b694971015a553c3b651a4f5dbe19cded9acb139a3690cf547b319ea02531e97c0f801ea5ca9619ef514647227bc4b9a78621e9472895d40ee241933c0e639de92b99f597a06cdd431a0c8cf3f7c06c4f4f30660420e84e57487eaca6fba0e8e0248f6d31fb7afd3356f80bff2f0f29b5eddc51c74e468a23996e8bef56640de1cf9ab5f88"}, 0x118) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0xa) (rerun: 64) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async, rerun: 32) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) (rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) (async, rerun: 64) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x1d2050, r2, 0x7cb65000) (rerun: 64) 19:29:13 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:29:13 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) openat$cgroup_int(r1, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:13 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) openat$cgroup_int(r1, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) (async, rerun: 32) r3 = dup(r2) (rerun: 32) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:13 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 32) openat$cgroup_int(r1, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) (rerun: 32) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 64) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:13 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000040)=0x7f, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x0, 0xe0}, 0x10, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="080008fcbf98b86af0e764d91650c2f9eb23d4ed7c9d22a93688acbd2019ce9138c5d48f410a21d71b170e95caa2b8c3f244da2c732c69e2c1c16812ac8e423e16fc3a04ff815ef676c165a81558f03ecf3a68b88ae90cb00720470b2e81d103bb301a83cab06eaa581fea751e884415", @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001100000000000800150000000000000001006e657464657673696d000000000002006e657464657673696d300000080003000000000008000b0000000000060011000000000008001500000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000000000006001100000000000800150000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b0000000000060011000000000011001500000000002474f9b0d3ab4e0261ef504a81bc0efd597511f8c28729667a3011f23a8273ec410fa73511993e349e62eec46d74b621a40ab87354f29c2a3beb88ed7f4fccf2555a04de40566d7fa87606846c4121a26994957b4d13fd44661ba6ac48714f729c7acb9db98b7cd2b3a683164262da7ef05ce8a1e4c094f03b652e6b58fb2ea70c9c4d273eba8994fe4f36994034a5709e05e1f9c70ad01b7a54dcf51cae67f22fda9517d650a78553ec78b771cef7c2faeda60f94f8349c1eb39ce190f47848d1a3607c27c6441a44ea78b1"], 0x108}}, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:13 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000040)=0x7f, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x0, 0xe0}, 0x10, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="080008fcbf98b86af0e764d91650c2f9eb23d4ed7c9d22a93688acbd2019ce9138c5d48f410a21d71b170e95caa2b8c3f244da2c732c69e2c1c16812ac8e423e16fc3a04ff815ef676c165a81558f03ecf3a68b88ae90cb00720470b2e81d103bb301a83cab06eaa581fea751e884415", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}}, 0x0) (async) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 637.535816][T16857] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.542857][T16857] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.550228][T16857] device bridge_slave_0 entered promiscuous mode [ 637.557276][T16857] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.564403][T16857] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.572056][T16857] device bridge_slave_1 entered promiscuous mode [ 637.609169][T16857] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.616207][T16857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.623477][T16857] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.630484][T16857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.649859][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.657179][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.665174][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.673323][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.682623][ T698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.691133][ T698] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.698132][ T698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.720868][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.729097][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.736127][ T699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.744195][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 637.752355][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.769055][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.777496][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.795527][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.804013][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.813203][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.832402][T16862] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 637.842573][T16862] CPU: 1 PID: 16862 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 637.852781][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 637.862830][T16862] Call Trace: [ 637.866102][T16862] dump_stack+0x18e/0x1d5 [ 637.870624][T16862] dump_header+0xdb/0x700 [ 637.874932][T16862] oom_kill_process+0xf0/0x2d0 [ 637.879676][T16862] out_of_memory+0x55f/0x7f0 [ 637.884240][T16862] mem_cgroup_oom+0x638/0x760 [ 637.888888][T16862] try_charge+0xc41/0x1100 [ 637.893280][T16862] ? get_mem_cgroup_from_mm+0x251/0x280 [ 637.898794][T16862] mem_cgroup_try_charge+0xd5/0x2a0 [ 637.903964][T16862] handle_mm_fault+0x158a/0x3b90 [ 637.908875][T16862] do_user_addr_fault+0x4a4/0xb30 [ 637.913882][T16862] page_fault+0x2f/0x40 [ 637.918008][T16862] RIP: 0033:0x7f2b70bd4ccf [ 637.922400][T16862] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 637.942067][T16862] RSP: 002b:00007fffd5fbb370 EFLAGS: 00010246 [ 637.948772][T16862] RAX: 00007f2b6fd7a000 RBX: 0000000000021000 RCX: 00007f2b70c256b7 [ 637.956711][T16862] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f2b6fd7b000 [ 637.964651][T16862] RBP: 00007fffd5fbb440 R08: 00000000ffffffff R09: 00007f2b6fd9a700 [ 637.972591][T16862] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fffd5fbb560 [ 637.980535][T16862] R13: 00007f2b6fd9a700 R14: 0000000000000000 R15: 0000000000022000 [ 637.989769][T16862] memory: usage 307200kB, limit 307200kB, failcnt 102154 [ 637.996849][T16862] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 638.003865][T16862] Memory cgroup stats for /syz5: [ 638.003913][T16862] anon 314626048 [ 638.003913][T16862] file 73728 [ 638.003913][T16862] kernel_stack 0 [ 638.003913][T16862] slab 0 [ 638.003913][T16862] sock 0 [ 638.003913][T16862] shmem 0 [ 638.003913][T16862] file_mapped 0 [ 638.003913][T16862] file_dirty 0 [ 638.003913][T16862] file_writeback 0 [ 638.003913][T16862] anon_thp 0 [ 638.003913][T16862] inactive_anon 0 [ 638.003913][T16862] active_anon 314535936 [ 638.003913][T16862] inactive_file 0 [ 638.003913][T16862] active_file 0 [ 638.003913][T16862] unevictable 0 [ 638.003913][T16862] slab_reclaimable 0 [ 638.003913][T16862] slab_unreclaimable 0 [ 638.003913][T16862] pgfault 371184 [ 638.003913][T16862] pgmajfault 0 [ 638.003913][T16862] workingset_refault 33 [ 638.003913][T16862] workingset_activate 0 [ 638.003913][T16862] workingset_nodereclaim 0 [ 638.003913][T16862] pgrefill 3243 [ 638.003913][T16862] pgscan 2838 [ 638.003913][T16862] pgsteal 82 [ 638.003913][T16862] pgactivate 2739 [ 638.097418][T16862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16862,uid=0 [ 638.112682][T16862] Memory cgroup out of memory: Killed process 16862 (syz-executor.5) total-vm:52532kB, anon-rss:440kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 638.130510][ T24] oom_reaper: reaped process 16862 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB 19:29:18 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x291020000000000, 0x0, 0x0) 19:29:18 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000040)=0x7f, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x0, 0xe0}, 0x10, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="080008fcbf98b86af0e764d91650c2f9eb23d4ed7c9d22a93688acbd2019ce9138c5d48f410a21d71b170e95caa2b8c3f244da2c732c69e2c1c16812ac8e423e16fc3a04ff815ef676c165a81558f03ecf3a68b88ae90cb00720470b2e81d103bb301a83cab06eaa581fea751e884415", @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001100000000000800150000000000000001006e657464657673696d000000000002006e657464657673696d300000080003000000000008000b0000000000060011000000000008001500000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000000000006001100000000000800150000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b0000000000060011000000000011001500000000002474f9b0d3ab4e0261ef504a81bc0efd597511f8c28729667a3011f23a8273ec410fa73511993e349e62eec46d74b621a40ab87354f29c2a3beb88ed7f4fccf2555a04de40566d7fa87606846c4121a26994957b4d13fd44661ba6ac48714f729c7acb9db98b7cd2b3a683164262da7ef05ce8a1e4c094f03b652e6b58fb2ea70c9c4d273eba8994fe4f36994034a5709e05e1f9c70ad01b7a54dcf51cae67f22fda9517d650a78553ec78b771cef7c2faeda60f94f8349c1eb39ce190f47848d1a3607c27c6441a44ea78b1"], 0x108}}, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket(0x2, 0x2, 0x1) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000001280)={&(0x7f0000000000)={0x2, 0x0, 0xe0}, 0x10, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="080008fcbf98b86af0e764d91650c2f9eb23d4ed7c9d22a93688acbd2019ce9138c5d48f410a21d71b170e95caa2b8c3f244da2c732c69e2c1c16812ac8e423e16fc3a04ff815ef676c165a81558f03ecf3a68b88ae90cb00720470b2e81d103bb301a83cab06eaa581fea751e884415", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}}, 0x0) (async) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r4, r4, 0x0, 0x3) (async) 19:29:18 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x4000000000000) 19:29:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x2000) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0xc0) 19:29:18 executing program 1: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={0x0}}, 0x4040010) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000600)='./file0\x00', 0x8100000, 0x2, &(0x7f0000000700)=[{&(0x7f00000003c0)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000c80)="03000000414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed5df1d1001cc2de850f6cbb9b0504562964f7e75effac2ac4c15e29fb3c18fafff82f38fdc047491ffa822a17b17f463ef34079c19c2ad2fbddc0777df2ec4f62826086704d0000000000000000a10b45c1a389fc59b7792156a611e75b8b9d023b0ca9df3ab165eafd759f1c17f4e6e354401c271063f6ba76a0a7e65c98ebceeaa0733897e4208a4a8b548f69b0c05973c826f513370026f509c6425d0d18a6b730585279b8f080c212a202a0613d32b6dc3f512a44e8320bd0fab5485801572995acd76a0f4fef95fc35be72e48f5d7b323e7cfcce8261db84d3b478eceb5447840cde8c376374f487ee481167d281ac61359cb6571d8579575db36b48737d2c096f9300965b8bab3031649325346c16988328c9494f01041a2054ced534c898efdd1995b1a9d776917c46cc", 0x149, 0x5fd}], 0x2018400, &(0x7f0000000a00)={[{@fat=@discard}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@rodir}, {@rodir}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}]}, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x23cc) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xffffffffffffff43, &(0x7f0000000800)={&(0x7f0000001380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="540000005a0000082dbd7000fedbdf2500080001000200000008000100010000000800010004000000080001000300000008000200", @ANYRES32=0x0, @ANYBLOB="080001000400000008000300", @ANYRES32, @ANYBLOB="0800d3e5eb255d41c9c2bad9dbd094ad3d020000", @ANYRES32=0x0, @ANYBLOB="00feff7f000000b2d47a2d41000000000000000008599c18e36927953f0018"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="3400000011000150507d1fc74e9bed42ec45b2bc", @ANYRES32=r2, @ANYRESOCT=0x0], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0x9, 0x2}, {0x3, 0xa}}, [{0x8, 0xb, 0xab2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) getsockname$packet(r1, &(0x7f0000000440), &(0x7f0000000780)=0x14) r5 = syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r5], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x144}}, 0x4000094) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x860024, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 19:29:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63cb31368000a6e", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) [ 640.910473][T16869] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 640.921179][T16869] CPU: 1 PID: 16869 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 640.931417][T16869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 640.941458][T16869] Call Trace: [ 640.944738][T16869] dump_stack+0x18e/0x1d5 [ 640.949058][T16869] dump_header+0xdb/0x700 [ 640.953459][T16869] oom_kill_process+0xf0/0x2d0 [ 640.958211][T16869] out_of_memory+0x55f/0x7f0 [ 640.962820][T16869] mem_cgroup_oom+0x638/0x760 [ 640.967485][T16869] try_charge+0xc41/0x1100 [ 640.971890][T16869] ? get_mem_cgroup_from_mm+0x251/0x280 [ 640.977420][T16869] mem_cgroup_try_charge+0xd5/0x2a0 [ 640.982607][T16869] wp_page_copy+0x33d/0x1830 [ 640.987185][T16869] ? _raw_spin_unlock+0x49/0x60 [ 640.992025][T16869] ? do_wp_page+0x535/0x8b0 [ 640.996511][T16869] handle_mm_fault+0xeab/0x3b90 [ 641.001364][T16869] ? psi_memstall_leave+0xa8/0xd0 [ 641.006380][T16869] do_user_addr_fault+0x4a4/0xb30 [ 641.011394][T16869] page_fault+0x2f/0x40 [ 641.015533][T16869] RIP: 0033:0x7f2b70bd35ba [ 641.019934][T16869] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 641.039525][T16869] RSP: 002b:00007fffd5fbb5d8 EFLAGS: 00010202 [ 641.045581][T16869] RAX: 0000555556a1a6c0 RBX: 0000000000000001 RCX: 00007f2b71c803e0 19:29:18 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 19:29:18 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 641.053540][T16869] RDX: 0000000000000001 RSI: 00007f2b70d1eef0 RDI: 0000000000000001 [ 641.061504][T16869] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2b70d1eef0 [ 641.069463][T16869] R10: 0000555556a1a400 R11: 0000000000000202 R12: 0000000000000000 [ 641.077420][T16869] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fffd5fbb6f0 19:29:18 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async) sendfile(r2, r2, 0x0, 0x3) (async) 19:29:18 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x110) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x110) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x2, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000280)={0xac5, 0x8000, 0x8, 0x0, 0x3}) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x84) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x7, 0x2, 0x1ff, 0x2f67, 0x4}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=@gettaction={0x130, 0x32, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7dc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x130}, 0x1, 0x0, 0x0, 0x24008044}, 0x8) r5 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000480)={{0x4, 0x8}, 0x100, './file1\x00'}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FICLONE(r6, 0x40049409, r7) 19:29:18 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x110) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x110) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x2, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000280)={0xac5, 0x8000, 0x8, 0x0, 0x3}) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x84) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x7, 0x2, 0x1ff, 0x2f67, 0x4}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=@gettaction={0x130, 0x32, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7dc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x130}, 0x1, 0x0, 0x0, 0x24008044}, 0x8) r5 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) (async) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000480)={{0x4, 0x8}, 0x100, './file1\x00'}) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FICLONE(r6, 0x40049409, r7) 19:29:18 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x110) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x110) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x2, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000280)={0xac5, 0x8000, 0x8, 0x0, 0x3}) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x84) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x7, 0x2, 0x1ff, 0x2f67, 0x4}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=@gettaction={0x130, 0x32, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7dc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x130}, 0x1, 0x0, 0x0, 0x24008044}, 0x8) r5 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000480)={{0x4, 0x8}, 0x100, './file1\x00'}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FICLONE(r6, 0x40049409, r7) mkdir(&(0x7f0000000080)='./file0\x00', 0x110) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x110) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x2, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000280)={0xac5, 0x8000, 0x8, 0x0, 0x3}) (async) creat(&(0x7f0000000200)='./file1\x00', 0x84) (async) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x7, 0x2, 0x1ff, 0x2f67, 0x4}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=@gettaction={0x130, 0x32, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7dc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x130}, 0x1, 0x0, 0x0, 0x24008044}, 0x8) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r5, r5, 0x0, 0x3) (async) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000480)={{0x4, 0x8}, 0x100, './file1\x00'}) (async) pipe(&(0x7f0000000300)) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$FICLONE(r6, 0x40049409, r7) (async) 19:29:18 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x292010000000000, 0x0, 0x0) 19:29:18 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x100) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:29:18 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x40000000000000) 19:29:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x2000) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0xc0) [ 641.390117][T16869] memory: usage 307200kB, limit 307200kB, failcnt 102171 [ 641.403376][T16869] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 641.410403][T16869] Memory cgroup stats for /syz5: [ 641.410477][T16869] anon 314626048 [ 641.410477][T16869] file 73728 [ 641.410477][T16869] kernel_stack 0 [ 641.410477][T16869] slab 0 [ 641.410477][T16869] sock 0 [ 641.410477][T16869] shmem 0 [ 641.410477][T16869] file_mapped 0 [ 641.410477][T16869] file_dirty 0 [ 641.410477][T16869] file_writeback 0 [ 641.410477][T16869] anon_thp 0 [ 641.410477][T16869] inactive_anon 0 [ 641.410477][T16869] active_anon 313319424 [ 641.410477][T16869] inactive_file 0 [ 641.410477][T16869] active_file 0 [ 641.410477][T16869] unevictable 0 [ 641.410477][T16869] slab_reclaimable 0 [ 641.410477][T16869] slab_unreclaimable 0 [ 641.410477][T16869] pgfault 371217 [ 641.410477][T16869] pgmajfault 0 [ 641.410477][T16869] workingset_refault 33 [ 641.410477][T16869] workingset_activate 0 [ 641.410477][T16869] workingset_nodereclaim 0 [ 641.410477][T16869] pgrefill 3243 [ 641.410477][T16869] pgscan 2838 [ 641.410477][T16869] pgsteal 82 [ 641.410477][T16869] pgactivate 2739 [ 641.634280][T16869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16869,uid=0 [ 641.690800][T16869] Memory cgroup out of memory: Killed process 16869 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 641.721261][ T24] oom_reaper: reaped process 16869 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB [ 645.081346][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:29:24 executing program 1: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={0x0}}, 0x4040010) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000600)='./file0\x00', 0x8100000, 0x2, &(0x7f0000000700)=[{&(0x7f00000003c0)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000c80)="03000000414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed5df1d1001cc2de850f6cbb9b0504562964f7e75effac2ac4c15e29fb3c18fafff82f38fdc047491ffa822a17b17f463ef34079c19c2ad2fbddc0777df2ec4f62826086704d0000000000000000a10b45c1a389fc59b7792156a611e75b8b9d023b0ca9df3ab165eafd759f1c17f4e6e354401c271063f6ba76a0a7e65c98ebceeaa0733897e4208a4a8b548f69b0c05973c826f513370026f509c6425d0d18a6b730585279b8f080c212a202a0613d32b6dc3f512a44e8320bd0fab5485801572995acd76a0f4fef95fc35be72e48f5d7b323e7cfcce8261db84d3b478eceb5447840cde8c376374f487ee481167d281ac61359cb6571d8579575db36b48737d2c096f9300965b8bab3031649325346c16988328c9494f01041a2054ced534c898efdd1995b1a9d776917c46cc", 0x149, 0x5fd}], 0x2018400, &(0x7f0000000a00)={[{@fat=@discard}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@rodir}, {@rodir}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}]}, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x23cc) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xffffffffffffff43, &(0x7f0000000800)={&(0x7f0000001380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="540000005a0000082dbd7000fedbdf2500080001000200000008000100010000000800010004000000080001000300000008000200", @ANYRES32=0x0, @ANYBLOB="080001000400000008000300", @ANYRES32, @ANYBLOB="0800d3e5eb255d41c9c2bad9dbd094ad3d020000", @ANYRES32=0x0, @ANYBLOB="00feff7f000000b2d47a2d41000000000000000008599c18e36927953f0018"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x840) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="3400000011000150507d1fc74e9bed42ec45b2bc", @ANYRES32=r2, @ANYRESOCT=0x0], 0x34}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0x9, 0x2}, {0x3, 0xa}}, [{0x8, 0xb, 0xab2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000440), &(0x7f0000000780)=0x14) (async, rerun: 32) r5 = syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r5], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x144}}, 0x4000094) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x860024, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 19:29:24 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x100) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:29:24 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x294020000000000, 0x0, 0x0) 19:29:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async, rerun: 32) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63cb31368000a6e", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async, rerun: 32) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:24 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x80000000000000) 19:29:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x2000) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0xc0) [ 647.264736][ T23] audit: type=1400 audit(1664652564.698:2047): avc: denied { remount } for pid=16948 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 647.296878][T16957] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 647.307539][T16957] CPU: 0 PID: 16957 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 647.317771][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 647.327814][T16957] Call Trace: [ 647.331097][T16957] dump_stack+0x18e/0x1d5 [ 647.335414][T16957] dump_header+0xdb/0x700 [ 647.339731][T16957] oom_kill_process+0xf0/0x2d0 [ 647.344481][T16957] out_of_memory+0x55f/0x7f0 [ 647.349057][T16957] mem_cgroup_oom+0x638/0x760 [ 647.353719][T16957] try_charge+0xc41/0x1100 [ 647.358132][T16957] ? get_mem_cgroup_from_mm+0x251/0x280 [ 647.363667][T16957] mem_cgroup_try_charge+0xd5/0x2a0 [ 647.368853][T16957] wp_page_copy+0x33d/0x1830 [ 647.373431][T16957] ? _raw_spin_unlock+0x49/0x60 [ 647.378269][T16957] ? do_wp_page+0x535/0x8b0 [ 647.382765][T16957] handle_mm_fault+0xeab/0x3b90 [ 647.387611][T16957] ? psi_memstall_leave+0xa8/0xd0 [ 647.392638][T16957] do_user_addr_fault+0x4a4/0xb30 [ 647.397655][T16957] page_fault+0x2f/0x40 [ 647.401797][T16957] RIP: 0033:0x7f2b70bd35ba [ 647.406197][T16957] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 647.425803][T16957] RSP: 002b:00007fffd5fbb5d8 EFLAGS: 00010202 [ 647.431859][T16957] RAX: 0000555556a1a6c0 RBX: 0000000000000001 RCX: 00007f2b71c803e0 [ 647.439819][T16957] RDX: 0000000000000001 RSI: 00007f2b70d1eef0 RDI: 0000000000000001 [ 647.447779][T16957] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2b70d1eef0 [ 647.455736][T16957] R10: 0000555556a1a400 R11: 0000000000000202 R12: 0000000000000000 19:29:24 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x100) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 647.463792][T16957] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fffd5fbb6f0 [ 647.473567][T16957] memory: usage 307200kB, limit 307200kB, failcnt 102186 [ 647.480662][T16957] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 647.491609][T16957] Memory cgroup stats for /syz5: [ 647.491677][T16957] anon 314626048 [ 647.491677][T16957] file 73728 [ 647.491677][T16957] kernel_stack 0 [ 647.491677][T16957] slab 0 [ 647.491677][T16957] sock 0 [ 647.491677][T16957] shmem 0 [ 647.491677][T16957] file_mapped 0 [ 647.491677][T16957] file_dirty 0 [ 647.491677][T16957] file_writeback 0 [ 647.491677][T16957] anon_thp 0 [ 647.491677][T16957] inactive_anon 0 [ 647.491677][T16957] active_anon 314535936 [ 647.491677][T16957] inactive_file 0 [ 647.491677][T16957] active_file 0 [ 647.491677][T16957] unevictable 0 [ 647.491677][T16957] slab_reclaimable 0 [ 647.491677][T16957] slab_unreclaimable 0 [ 647.491677][T16957] pgfault 371250 [ 647.491677][T16957] pgmajfault 0 [ 647.491677][T16957] workingset_refault 33 19:29:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) fgetxattr(r0, &(0x7f0000000080)=@random={'security.', '^/{}${,$\\{@-@\x00'}, &(0x7f0000000300)=""/4096, 0x1000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/ieee80211', 0x40000, 0xc) openat$cgroup_int(r3, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) [ 647.491677][T16957] workingset_activate 0 [ 647.491677][T16957] workingset_nodereclaim 0 [ 647.491677][T16957] pgrefill 3243 [ 647.491677][T16957] pgscan 2838 [ 647.491677][T16957] pgsteal 82 [ 647.491677][T16957] pgactivate 2739 19:29:25 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x295010000000000, 0x0, 0x0) 19:29:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) fgetxattr(r0, &(0x7f0000000080)=@random={'security.', '^/{}${,$\\{@-@\x00'}, &(0x7f0000000300)=""/4096, 0x1000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/ieee80211', 0x40000, 0xc) openat$cgroup_int(r3, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) r4 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) [ 647.635842][ T23] audit: type=1400 audit(1664652565.068:2048): avc: denied { append } for pid=16976 comm="syz-executor.2" name="ashmem" dev="devtmpfs" ino=9272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 19:29:25 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xfeffff00000000) 19:29:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) fgetxattr(r0, &(0x7f0000000080)=@random={'security.', '^/{}${,$\\{@-@\x00'}, &(0x7f0000000300)=""/4096, 0x1000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/ieee80211', 0x40000, 0xc) openat$cgroup_int(r3, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) (async) fgetxattr(r0, &(0x7f0000000080)=@random={'security.', '^/{}${,$\\{@-@\x00'}, &(0x7f0000000300)=""/4096, 0x1000) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/ieee80211', 0x40000, 0xc) (async) openat$cgroup_int(r3, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r5, r5, 0x0, 0x3) (async) [ 647.684411][T16957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16957,uid=0 [ 647.712151][T16957] Memory cgroup out of memory: Killed process 16957 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 651.473400][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.482779][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.492164][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.501662][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.511019][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.520332][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.530616][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.539991][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.549455][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 651.561042][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 19:29:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:29 executing program 1: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={0x0}}, 0x4040010) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000600)='./file0\x00', 0x8100000, 0x2, &(0x7f0000000700)=[{&(0x7f00000003c0)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000c80)="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", 0x149, 0x5fd}], 0x2018400, &(0x7f0000000a00)={[{@fat=@discard}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@rodir}, {@rodir}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '855'}}]}, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x23cc) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xffffffffffffff43, &(0x7f0000000800)={&(0x7f0000001380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="540000005a0000082dbd7000fedbdf2500080001000200000008000100010000000800010004000000080001000300000008000200", @ANYRES32=0x0, @ANYBLOB="080001000400000008000300", @ANYRES32, @ANYBLOB="0800d3e5eb255d41c9c2bad9dbd094ad3d020000", @ANYRES32=0x0, @ANYBLOB="00feff7f000000b2d47a2d41000000000000000008599c18e36927953f0018"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x840) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="3400000011000150507d1fc74e9bed42ec45b2bc", @ANYRES32=r2, @ANYRESOCT=0x0], 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@gettfilter={0x3c, 0x2e, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0x9, 0x2}, {0x3, 0xa}}, [{0x8, 0xb, 0xab2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000440), &(0x7f0000000780)=0x14) (async, rerun: 32) r5 = syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r5], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20010) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x144}}, 0x4000094) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x860024, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 19:29:29 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x297020000000000, 0x0, 0x0) 19:29:29 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x100000000000000) 19:29:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="dfd648e5", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf255e00000008000300", @ANYRES32=r2, @ANYBLOB="0800270001000000080026006c090000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20010054) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:29:29 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)) r4 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:29 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)) (async) r4 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 652.264599][T17011] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 652.282034][T17011] CPU: 0 PID: 17011 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 652.292271][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 652.302310][T17011] Call Trace: [ 652.305590][T17011] dump_stack+0x18e/0x1d5 [ 652.309907][T17011] dump_header+0xdb/0x700 [ 652.314221][T17011] oom_kill_process+0xf0/0x2d0 [ 652.318969][T17011] out_of_memory+0x55f/0x7f0 [ 652.323546][T17011] mem_cgroup_oom+0x638/0x760 [ 652.328216][T17011] try_charge+0xc41/0x1100 [ 652.332626][T17011] ? get_mem_cgroup_from_mm+0x251/0x280 [ 652.338157][T17011] mem_cgroup_try_charge+0xd5/0x2a0 [ 652.343345][T17011] wp_page_copy+0x33d/0x1830 [ 652.347920][T17011] ? _raw_spin_unlock+0x49/0x60 [ 652.352756][T17011] ? do_wp_page+0x535/0x8b0 [ 652.357257][T17011] handle_mm_fault+0xeab/0x3b90 [ 652.362093][T17011] ? psi_memstall_leave+0xa8/0xd0 [ 652.367103][T17011] do_user_addr_fault+0x4a4/0xb30 [ 652.372109][T17011] page_fault+0x2f/0x40 [ 652.376248][T17011] RIP: 0033:0x7f2b70bd35ba [ 652.380650][T17011] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 652.400323][T17011] RSP: 002b:00007fffd5fbb5d8 EFLAGS: 00010202 [ 652.406379][T17011] RAX: 0000555556a1a6c0 RBX: 0000000000000001 RCX: 00007f2b71c803e0 19:29:29 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)) r4 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 652.414340][T17011] RDX: 0000000000000001 RSI: 00007f2b70d1eef0 RDI: 0000000000000001 [ 652.422556][T17011] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f2b70d1eef0 [ 652.430509][T17011] R10: 0000555556a1a400 R11: 0000000000000202 R12: 0000000000000000 [ 652.438462][T17011] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fffd5fbb6f0 19:29:29 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2800, &(0x7f0000000200)={[{@index_on}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x66, 0x38, 0x32, 0x36, 0x37, 0x63, 0x34], 0x2d, [0x63, 0x37, 0x34, 0x65], 0x2d, [0x61, 0x30, 0x37, 0x66], 0x2d, [0x30, 0x36, 0x39, 0x66], 0x2d, [0x33, 0x37, 0x38, 0xc7, 0x44c48c3eb97bc337, 0x63, 0x36, 0x37]}}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:29:29 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2800, &(0x7f0000000200)={[{@index_on}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x66, 0x38, 0x32, 0x36, 0x37, 0x63, 0x34], 0x2d, [0x63, 0x37, 0x34, 0x65], 0x2d, [0x61, 0x30, 0x37, 0x66], 0x2d, [0x30, 0x36, 0x39, 0x66], 0x2d, [0x33, 0x37, 0x38, 0xc7, 0x44c48c3eb97bc337, 0x63, 0x36, 0x37]}}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x100) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2800, &(0x7f0000000200)={[{@index_on}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x66, 0x38, 0x32, 0x36, 0x37, 0x63, 0x34], 0x2d, [0x63, 0x37, 0x34, 0x65], 0x2d, [0x61, 0x30, 0x37, 0x66], 0x2d, [0x30, 0x36, 0x39, 0x66], 0x2d, [0x33, 0x37, 0x38, 0xc7, 0x44c48c3eb97bc337, 0x63, 0x36, 0x37]}}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) (async) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0x3) (async) 19:29:30 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2800, &(0x7f0000000200)={[{@index_on}, {@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x66, 0x38, 0x32, 0x36, 0x37, 0x63, 0x34], 0x2d, [0x63, 0x37, 0x34, 0x65], 0x2d, [0x61, 0x30, 0x37, 0x66], 0x2d, [0x30, 0x36, 0x39, 0x66], 0x2d, [0x33, 0x37, 0x38, 0xc7, 0x44c48c3eb97bc337, 0x63, 0x36, 0x37]}}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) (async) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) [ 652.596511][T17011] memory: usage 307200kB, limit 307200kB, failcnt 102201 [ 652.604858][T17011] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 652.620639][T17011] Memory cgroup stats for /syz5: [ 652.620714][T17011] anon 314626048 [ 652.620714][T17011] file 73728 [ 652.620714][T17011] kernel_stack 0 [ 652.620714][T17011] slab 0 [ 652.620714][T17011] sock 0 [ 652.620714][T17011] shmem 0 19:29:30 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x298010000000000, 0x0, 0x0) [ 652.620714][T17011] file_mapped 0 [ 652.620714][T17011] file_dirty 0 [ 652.620714][T17011] file_writeback 0 [ 652.620714][T17011] anon_thp 0 [ 652.620714][T17011] inactive_anon 0 [ 652.620714][T17011] active_anon 314535936 [ 652.620714][T17011] inactive_file 0 [ 652.620714][T17011] active_file 0 [ 652.620714][T17011] unevictable 0 [ 652.620714][T17011] slab_reclaimable 0 [ 652.620714][T17011] slab_unreclaimable 0 [ 652.620714][T17011] pgfault 371283 [ 652.620714][T17011] pgmajfault 0 [ 652.620714][T17011] workingset_refault 33 [ 652.620714][T17011] workingset_activate 0 [ 652.620714][T17011] workingset_nodereclaim 0 [ 652.620714][T17011] pgrefill 3243 [ 652.620714][T17011] pgscan 2838 [ 652.620714][T17011] pgsteal 82 [ 652.620714][T17011] pgactivate 2739 [ 652.715376][T17011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16857,uid=0 [ 652.734032][T17011] Memory cgroup out of memory: Killed process 16857 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:15176kB, shmem-rss:60kB, UID:0 pgtables:84kB oom_score_adj:0 19:29:30 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x200000000000000) [ 653.621026][T17001] device bridge_slave_1 left promiscuous mode [ 653.627148][T17001] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.634655][T17001] device bridge_slave_0 left promiscuous mode [ 653.641020][T17001] bridge0: port 1(bridge_slave_0) entered disabled state 19:29:34 executing program 1: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x40000000000000) 19:29:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:29:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mkdir(&(0x7f0000000040)='./file0\x00', 0xd2) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:29:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="dfd648e5", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf255e00000008000300", @ANYRES32=r2, @ANYBLOB="0800270001000000080026006c090000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20010054) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:29:34 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x29a020000000000, 0x0, 0x0) 19:29:34 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x400000000000000) 19:29:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mkdir(&(0x7f0000000040)='./file0\x00', 0xd2) (async) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:29:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mkdir(&(0x7f0000000040)='./file0\x00', 0xd2) (async) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) 19:29:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3e18}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) 19:29:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3e18}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3e18}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x10) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r2, 0x0, r2) (async) openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r5, r5, 0x0, 0x3) (async) 19:29:34 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3e18}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x10) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) 19:29:34 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x800000000000000) [ 658.988034][T17105] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.995095][T17105] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.002750][T17105] device bridge_slave_0 entered promiscuous mode [ 659.009499][T17105] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.016561][T17105] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.024058][T17105] device bridge_slave_1 entered promiscuous mode [ 659.061815][T17105] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.068832][T17105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.076110][T17105] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.083121][T17105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.103095][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.110379][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.117809][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.125478][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.141772][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.149858][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.156882][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.165327][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.173628][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.180624][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.188106][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.196156][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.209519][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 659.220922][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 659.240283][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 659.248902][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 659.257518][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 659.276862][T17109] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 659.287862][T17109] CPU: 1 PID: 17109 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 659.298071][T17109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 659.308141][T17109] Call Trace: [ 659.311406][T17109] dump_stack+0x18e/0x1d5 [ 659.315715][T17109] dump_header+0xdb/0x700 [ 659.320012][T17109] oom_kill_process+0xf0/0x2d0 [ 659.324745][T17109] out_of_memory+0x55f/0x7f0 [ 659.329303][T17109] mem_cgroup_oom+0x638/0x760 [ 659.333949][T17109] try_charge+0xc41/0x1100 [ 659.338331][T17109] ? get_mem_cgroup_from_mm+0x251/0x280 [ 659.343843][T17109] mem_cgroup_try_charge+0xd5/0x2a0 [ 659.349009][T17109] wp_page_copy+0x33d/0x1830 [ 659.353567][T17109] ? _raw_spin_unlock+0x49/0x60 [ 659.358388][T17109] ? do_wp_page+0x535/0x8b0 [ 659.362857][T17109] handle_mm_fault+0xeab/0x3b90 [ 659.367675][T17109] ? psi_memstall_leave+0xa8/0xd0 [ 659.372668][T17109] do_user_addr_fault+0x4a4/0xb30 [ 659.377672][T17109] page_fault+0x2f/0x40 [ 659.382108][T17109] RIP: 0033:0x7f402cd2c150 [ 659.386491][T17109] Code: ff ff 0f 1f 84 00 00 00 00 00 0f c8 49 89 f5 89 c0 e9 f1 fd ff ff 0f 1f 40 00 66 c1 c0 08 49 89 f5 0f b7 c0 e9 de fd ff ff 90 43 f8 01 44 89 6b f4 c6 43 14 00 c7 03 00 00 00 00 31 c0 b9 40 [ 659.406062][T17109] RSP: 002b:00007ffc67580f50 EFLAGS: 00010246 [ 659.412447][T17109] RAX: 0000000000000000 RBX: 00007f402cea2f8c RCX: 0000000000000000 [ 659.420382][T17109] RDX: 00007ffc675810c0 RSI: ffff80bfd315d074 RDI: 00007ffc675810e8 [ 659.428321][T17109] RBP: 00007ffc675810c0 R08: 0000000000000000 R09: 0000000000000000 [ 659.436261][T17109] R10: 0000000000018a20 R11: 0000000000000293 R12: 00007f402cea2f8c [ 659.444205][T17109] R13: 0000000000000000 R14: 00007f402cea2f80 R15: 00007ffc675811f0 [ 659.453766][T17109] memory: usage 307200kB, limit 307200kB, failcnt 102223 [ 659.461046][T17109] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 659.467889][T17109] Memory cgroup stats for /syz5: [ 659.467938][T17109] anon 314490880 [ 659.467938][T17109] file 73728 [ 659.467938][T17109] kernel_stack 0 [ 659.467938][T17109] slab 0 [ 659.467938][T17109] sock 0 [ 659.467938][T17109] shmem 0 [ 659.467938][T17109] file_mapped 0 [ 659.467938][T17109] file_dirty 0 [ 659.467938][T17109] file_writeback 0 [ 659.467938][T17109] anon_thp 0 [ 659.467938][T17109] inactive_anon 0 [ 659.467938][T17109] active_anon 314400768 [ 659.467938][T17109] inactive_file 0 [ 659.467938][T17109] active_file 0 [ 659.467938][T17109] unevictable 0 [ 659.467938][T17109] slab_reclaimable 0 [ 659.467938][T17109] slab_unreclaimable 0 [ 659.467938][T17109] pgfault 371316 [ 659.467938][T17109] pgmajfault 0 [ 659.467938][T17109] workingset_refault 33 [ 659.467938][T17109] workingset_activate 0 [ 659.467938][T17109] workingset_nodereclaim 0 [ 659.467938][T17109] pgrefill 3243 [ 659.467938][T17109] pgscan 2838 [ 659.467938][T17109] pgsteal 82 [ 659.467938][T17109] pgactivate 2739 [ 659.562414][T17109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17109,uid=0 [ 659.577893][T17109] Memory cgroup out of memory: Killed process 17109 (syz-executor.5) total-vm:48560kB, anon-rss:440kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 659.595841][ T24] oom_reaper: reaped process 17109 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB 19:29:39 executing program 1: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x40000000000000) 19:29:39 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x63, &(0x7f0000000040)="a5c213e9bacec14b242a670491fa9413d28017dcfb29dc6a4233b65bcc44b7243ea3015eab1aa5f876809a8529067a6d122e46d3fb0ca9f8b07445eb9cb32c53103be276f67d6a9c6e451eb699ea09c1d1a7ae0a5e6bc3e10c8af8679b137281379166", 0x1000, 0x0, &(0x7f0000000300)="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"}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:39 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x29b010000000000, 0x0, 0x0) 19:29:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="dfd648e5", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf255e00000008000300", @ANYRES32=r2, @ANYBLOB="0800270001000000080026006c090000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20010054) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="dfd648e5", @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf255e00000008000300", @ANYRES32=r2, @ANYBLOB="0800270001000000080026006c090000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20010054) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) 19:29:39 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x1000000000000000) 19:29:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async, rerun: 64) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async, rerun: 32) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:39 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x63, &(0x7f0000000040)="a5c213e9bacec14b242a670491fa9413d28017dcfb29dc6a4233b65bcc44b7243ea3015eab1aa5f876809a8529067a6d122e46d3fb0ca9f8b07445eb9cb32c53103be276f67d6a9c6e451eb699ea09c1d1a7ae0a5e6bc3e10c8af8679b137281379166", 0x1000, 0x0, &(0x7f0000000300)="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"}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x63, &(0x7f0000000040)="a5c213e9bacec14b242a670491fa9413d28017dcfb29dc6a4233b65bcc44b7243ea3015eab1aa5f876809a8529067a6d122e46d3fb0ca9f8b07445eb9cb32c53103be276f67d6a9c6e451eb699ea09c1d1a7ae0a5e6bc3e10c8af8679b137281379166", 0x1000, 0x0, &(0x7f0000000300)="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"}) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r4, r4, 0x0, 0x3) (async) [ 662.191660][T17118] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 662.202073][T17118] CPU: 0 PID: 17118 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 662.212478][T17118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 662.222522][T17118] Call Trace: [ 662.225804][T17118] dump_stack+0x18e/0x1d5 [ 662.230119][T17118] dump_header+0xdb/0x700 [ 662.234443][T17118] oom_kill_process+0xf0/0x2d0 [ 662.239192][T17118] out_of_memory+0x55f/0x7f0 [ 662.243777][T17118] mem_cgroup_oom+0x638/0x760 [ 662.248439][T17118] try_charge+0xc41/0x1100 [ 662.252843][T17118] ? get_mem_cgroup_from_mm+0x251/0x280 [ 662.258381][T17118] mem_cgroup_try_charge+0xd5/0x2a0 [ 662.263572][T17118] wp_page_copy+0x33d/0x1830 [ 662.268158][T17118] ? _raw_spin_unlock+0x49/0x60 [ 662.272996][T17118] ? do_wp_page+0x535/0x8b0 [ 662.277490][T17118] handle_mm_fault+0xeab/0x3b90 [ 662.282334][T17118] do_user_addr_fault+0x4a4/0xb30 [ 662.287348][T17118] page_fault+0x2f/0x40 [ 662.291489][T17118] RIP: 0033:0x7f402cd2f546 [ 662.295888][T17118] Code: 49 8d 82 c0 02 00 00 48 89 05 ce ce 0a 01 49 8b 8a c0 02 00 00 49 8b 92 c8 02 00 00 48 89 51 08 48 89 0a 48 8d 0d 9a ce 0a 01 <4c> 89 0d ab b9 14 00 31 d2 48 c7 05 9e ce 0a 01 00 00 00 00 4c 89 [ 662.315480][T17118] RSP: 002b:00007ffc675810d8 EFLAGS: 00010246 [ 662.321549][T17118] RAX: 00005555568486c0 RBX: 0000000000000001 RCX: 00007f402dddc3e0 [ 662.329631][T17118] RDX: 00007f402dddc3e0 RSI: 00007f402ce7aef0 RDI: 0000000000000001 [ 662.337590][T17118] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f402ce7aef0 [ 662.345546][T17118] R10: 0000555556848400 R11: 0000000000000202 R12: 0000000000000000 [ 662.353602][T17118] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc675811f0 19:29:39 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x63, &(0x7f0000000040)="a5c213e9bacec14b242a670491fa9413d28017dcfb29dc6a4233b65bcc44b7243ea3015eab1aa5f876809a8529067a6d122e46d3fb0ca9f8b07445eb9cb32c53103be276f67d6a9c6e451eb699ea09c1d1a7ae0a5e6bc3e10c8af8679b137281379166", 0x1000, 0x0, &(0x7f0000000300)="b6cdc45c4cd457b78f9e12b8e78ddaaaea141c72d286d4146998e7c53cc3d007103d250e0eef24b16bf5e0547b8c5a46c0ab77d1b7e3b358e751d4552a93a782e1cd6cb19945ae7381ba71bb77c23a5dcbc32b7b5ba2bda58dd774044ccb96a3fcaa7961c417dabc60fbe861ff64a46d7191c8d8b44bc9c381ff027eee6989db47fec38d5d5b748eee8e2020c7f356dc087e50043060cef97b8525f06bfe350010dcf8543d55022a07d9c8135f48bac9dd122b75d3978c94180149e845c89b28e10751e0a12e8044bf332b77f34dc942ec49f9784b8b9d07f8008572987b8a84875f248be3a0bcb10259afab9e4730ae1be16c4db1d98db1d5caee72e834f9dbdd047fdef5190e1777e69ba4c22dc976f1f5f847d673382c0d0913291671fa855a0dfd9310e64dabe62863fe405e0a3ff784f9883b58bf0651a3aa0bae856d2e54a2327d65a245b6e0b380bf92de32dc245f63cc2740154d3896ca3c40ba76ce6722a47bb046a20c257cde8d4e49803f2696ccaf7e528384dd0028eddb23189f174f0aa01c89a8732be25398421e8070a66499ebf3aa9cf71e6208a4db4adbba53159225e6b114b8cd701442b27bf80163554df79e6b405ce627eb4d199263f14a1cd59f4008656ca8b0511f538fb8bea80609c7532a874175f11ee08004c3460e6502a3ea841dcca2880a191bbd2ca1ee5e7401e45fbc7f15a71cc3955816f1fa3f0bd35243d421c4a84b054fe45dd6451f383639c25dc53cb68a9d026e476e6f687693cc007ab39a1f375afc117da47d0a82437fad997afef763457537dc74dc65ca183ed442c8c8224a59150cf03110602d2be500b6b8371745e72b31c2e8aae9bcafa17ef8a4ec4b4fb2c91b6460e384957702845b0ca40c421a501e50907d4ba5db9fa204ef79be55a379366ad84a8e21c284cfe18fc500377d2beaa0623e12153331a11e1db2901e806615a7a77d7f90edc7a356a18f4275600d491ff5acddb6120f7927a057ce89ebb2beffd58312f58aea09cbe66caa2f4088dd6b00bd6c946722c8b975cf9512e6d4d7e0cbc45e6a3204b87e9851c779751851bd3c7de6b2b157e68ac358ddba7b0b4f22f30425b5df6aded8ec230e9190ceea0c3ede9600d964b9071df8682d7debcbb133b868e0c11e6a0872b41f92d0d686960404a29666e43b5f9bd4ada2018da5e6f85648b37cf1cb861893b695328e0fe7ce368f3e2244f3182d9ed3bb0714f4a8b4dea3309223daab05ad00746523c4a0bf6ee017a55d4f2f4134070a83795b5e471576d3e0335fa9559224ca0329e664be7b7c0b8664c985c24345bfc95c5dc6c5c2a1df3d7446ee57b47dcc5f3adde30fc922fa40336aaf7b1e6ecfc3a98d88458c798d356592fd05a180bb650eca5d16248db31113937cf7c8bf42715e094d116557588711bfc0d7d8d83aed30af9233e0568350e418704c0865092bf111522191cbde511c974370eb442bd40e6f416c10dac4f5e7d04b809d742de42087a9b545e75e5304ebfb7c0f1748ae81ae12bf99ba0ccb463c36aafbbe38ad8d0228846278a37ac5a0bb7443f071385aa397e038621b06bfc5ec4ac0dfbce416ebe52ded6ec678e5a2b954e42971be765b63171d5436fc929d8d4525e55a7177a1681ec9f1239753f6ca2d38974d80ba55cf3aaddf8e12b576287277dd7edf0f1918751ea8a8f1871a82bdda882deafa1f4670ae7e5180bc6ceadba2032f967a9f3dc6935e99fcc48f765388618920e1fa1e069131542dd8698276c4f623359b79a3a7a5454f37e1f52241f7ff3d6e5bff6b8c247a8a89292fdc7267f658a002d8570fb271434bf33ab9008e7dc617751007fffe48deedca44389b3f752fdd920e44c47f0565affeb2b7b72accb4b6c18b876621d94e811cbd61cb1121fd1c85627ad61e03ed1083c4d48871743451fe4b3ea66b1529fb6150641352fd6c7d887c979b05ed4186e597b21059516f8ace232ac3c4ee482a31ecbfb2bd11a65c8a278e1b7ffe1655679b104164b8b530f70ea66cc05f5707d2b2929edbdb99da25a04e2682605b80dd3b8ebb290c100ceef7e74e045dcbede4a0482191969041dfa2d42413de10745b677297db1769525a1a5eaba7ab04f64cf4d0ab5a93e4027c3f41337c6512888c82be149b8ef94d1c00381f24b1ccb40067b86687b6c99acb22c42d2d03b7ffcf188691ef3456927de5e72032adb177b6a3b6d86e5e4070a5fe5693788b7d4380c849da1bfbda3ea8ef246952321778427aa980776d3e13bf0f9decbd79616040dc9539a44b0e2ecc17955b2da254d128f410dcee7ba02562516cd0724a664693a5c050587dd17aeccae9a776cae2285730174f848736901177d870ab23424c162d68cfc906c0280a9ce727d68cca5c919d450b009d654332209208e464da1da88d27d58f4d13f47dbc8186889e661b46ca864f9ae6f027f8d424d5bccbd5b08f9ef52c4a0254079d42baf27949dba312e8ad987d3589e1f3c238289ccb4258ed17220843a8139f584b7aee120b77c7feb4f435f2196d0966347557c8cda254ce832492efb4a1c4b9129273ab7f84736cbaf329951ecbd032bbac7a7fcbaa76062df63e39f77f226ac304e7c5cdb955ad023e0dd03f3076b84c96caafa169f86e65bba07fb5db99132a9bc16748028a8f1d4efd30fcec1006232748cc71ed480ce2f59e5ab49215366a516b185137308acb4000c5885a6488308f68addb7ae0da0ee8421b393df81c99def949faa45e0a77f87af0c723468b8572052bc49c4e216525b77f35ef648e71c6fe1e0e5f3c6d0da179d3fbca9c7014588773ca254bb2f8dadfa10a70bf4a2398e9c305f5079d4f50b23ef15ede2e2b5e3af0909e423e232a1250326681ef992ef988f4d3140a80b5fee3dd823940a672fc4f6e8c55038d701d4203255c004e827ab493ba87f417a4b6287ff680678d37a551bcf4dfdbdf52ce41fe7126ea9166532584c2f76ad7d951d21dfafb62acf6814dd85645d76b17d99cc98c4c76f06bbb7b7b55695f27cc4356494fa7bbd758c9c41f48d2a216ae3e32868f6af6ed4459f57ee9a4ebc2ba63fd9b2538138cfdc9f69594b8f8d4a55cfba0c60353ad99e19ac454bc5a838e5fb0594dfd08b9869b73aa5ae53a9fb19cc6fff5f05e20e0a0a77f95c54231421332205b52b6fa4139488454f2e12e5efaf6a576b6665abcce5255f27c7cca485f66d89b82372393430c06510c35051e19b8ff1a697a165335c6bbec2fe0842e2ab0b67599a181a2135d62127ba23256444bf7d100f5c12cfa9bb689d21f89dd0a03332a1d3124243f458a444925e944eeb97d8793c3217fb1ef2c6006c78977cf04cadf65e923b9031e67dcb00e8ddf1cf9e5bc5247dc9b098dc49f55facca10af209d2f380ec4733881ed024ed84b9bbf7f80d08ba4e4a03484993b48d953f445dfd56c125a368c3259ff4f0d2e201f35b7cbd90fb1874c397b0eb41ba37e2769b2c167e4fea78488303bdc22216240e148bf36028a47bede47534ea02899de199b310fb138568ad1195c7a2a737d09cc8c53591bc0765598a80b5dfbe222e24825109fee6f5c269a9cc36cd8a650d6499a3d1b71c151cdc3eb1645c842e800fe0dc45a5efed1b7ff963090d95063bae609f1b040a6880c121bc9f7f8944ab2a3f159342144e48a0c4c0013ccbfa687e1574f27540c90ee8443b92e299759c82e0175cb6bf225b70418e6f9f29f29bc8026a4bcfff171d41f8f17ce630c38bc3f97c1efcf9b9d8ea781919a3e26ae9e30d1866d2410366fcc742a5c43b913be23bed797495f1f49cc03c286f93df638143cf2441528cf68d47e8975fc7ab33d31156771f3cf299c19bedf5c3add2117e3f28798d6fbaa6f3c4d96d1de9ee5a7b576333af38806d3f0d2c48d700b1c8cf68291d06e957df5e2bfb39b264629bcd38eefd491db9d05cef1f38aeb3647e2ac449545dac80d65d2efd89915118c4bdbee6a1da71a3b08f8798969ffc35cb460ed5cca3c5cf8ec2fe8f284b3fd7196dcebbf1d1ff4ca1c84576ae80aee73ea2cfb6cbfa9cd01c9af6b73c7e07145ace57b0f72998d30d1aee9647c7e7b88e5481fa81d6cc1358222b2dbe4f23581d4c7f7803ed50a22b7aa40a6d1f188708d6bbca7c14be26b474a002ec392cbf75ed16373697f76542ac860c8ccaae7f80f45fc2813d9615a2e3c92043f0f80baf684b23340d650c9015f52399a5eca7c82db9cea9befcd7fc26853b42ef8f4edc0488121bf979b6ee2e1194fd5aa2a3a95173656cedfd8384b688a0e0d56c40f625cdbfea43a9511b05fe1feb0c946656f749f67ef961927d670cdb61f2e595da1a56dbc7a44825c95960ecc0aba87527d949b247c97eec909405bb839928991764f91ed1e0292e7ca057c531cf830f74e233044caed865a52b48fb556da3dc0bc1f4d9b4b2ef5f3ac5672c84c7e31478f3722867143fb5b04bcb52f2ccf568c76f31c79f70c4e7925185353b53565e077dec9a7c0e55d1634c37438af763c4b148eb4f0d916206c67934a23eb734943e8a6209ad7761064d86e818ee263f4a02600cbb78405ff186e37239bf6de294d4b1d297f23325824e8906720aca69776bc1aad8cba277d5c175409fde245a7931e91ceee55dfde0b2b571b75939ecdd85e43fecd902def21f44f3b10f74b5d0c239f4f1003dd0a0df63ee957fb2b8c83a674dc115baebfa531854029e0ec5f7141a42cf69365eee188d33ce0aa99a02f07e3d7c617f4aec2c9ec04e92844bf069808d1724ba37098ca89b917896321eddacd0304d6a68a8c1954a80a909d12107d00a49376133c6bc69c3f0bed5dfa8d237da1402d8b7ef4437e462f2ee01c0afd545fd6a654053aa90e1ad807a2b6fccd638de6b7b5af699a9c2e6c438dea26681feb749a9627fa1bd30702046cc8e63953b5a33454b6f203c1d2fdfd6dece9f845a8e924454b714b2113089e2c6ffe05329d68443d650fcf29374912351714e268c26ec89c82b4961772cd80ae4cf6748215386ddc33f8d39c1fd8108b96cd2e5a7c12a701781d5e96437a1077f65380e5c29fe664a60b5d487873a6b5a80f6f336f67f1291e821d95497f22e5ca1fb9c2d5ec9e3ed4d1c2a223028ac4d445364e4a96a5f03cfa2b53ea124ffc44116363f785ace0c530e8ac7869e0dfc881627a24e29aefce510ce70ab738f9fab3c5eabd1ed7f86fc201c55839c664b07821be921dd80c448844af368fc1b881925a9f316dd9393bdf30156127d038aa05200da858c43e00021e2a418536814ea635b5ab36a39089c4409eab537045b4581d5bea26e72fafbbbec8f0ffcd53ea53ed04bf9fe572ce60999e74c84df41cd7dcceda5e5da14399d34361d6bf5e702b939769ab74f908fa57d04b6e30d9f225aca51cecae8e311c67551b024c152bcccdea11f0189629e64482224a4839c53160ba54e5c23e898eabc479151a3e3c542a0cb0199f6e7535d617832bc4da88e8a188b12bcc7c3a0028de27c6a158ad3289351beac4851231396664d15dad0867b0b283fb62b6febb6fc20473956d536f063e8b80815a950fe65d10fba3986b3c67f2d14084c6d9f8953eb5f2d37683c86c0984ba1286df1e6459986ec470cf299b2c018d1159c20658e93cfa9af22674d233028eff4eca2956c634d2224891cba6da492159d00c40608f9a88b17ad2d7c5ce9c07b25623f33a04f81fefd95ed7b83ceb65f3faad677ea4767c7af4e0ea4b5aa592140d0ade2601afb554a974e83b8f1bf4319ce314cd5"}) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:39 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x70, 0x14, 0x20, 0x70bd2d, 0x25dfdbfd, {0xa, 0x3f, 0x42, 0xff, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0xffffa867, 0x1000, 0x1, 0x6}}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendfile(r1, r2, &(0x7f0000000080)=0x5, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3) 19:29:39 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x70, 0x14, 0x20, 0x70bd2d, 0x25dfdbfd, {0xa, 0x3f, 0x42, 0xff, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0xffffa867, 0x1000, 0x1, 0x6}}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) sendfile(r1, r2, &(0x7f0000000080)=0x5, 0x2) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3) 19:29:39 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x29d020000000000, 0x0, 0x0) [ 662.496020][ T23] audit: type=1400 audit(1664652579.928:2049): avc: denied { read } for pid=17149 comm="syz-executor.2" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 19:29:40 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0xa) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x70, 0x14, 0x20, 0x70bd2d, 0x25dfdbfd, {0xa, 0x3f, 0x42, 0xff, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0xffffa867, 0x1000, 0x1, 0x6}}, @IFA_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendfile(r1, r2, &(0x7f0000000080)=0x5, 0x2) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3) [ 662.559728][ T23] audit: type=1400 audit(1664652579.948:2050): avc: denied { open } for pid=17149 comm="syz-executor.2" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 662.632967][T17118] memory: usage 307192kB, limit 307200kB, failcnt 102239 [ 662.640053][T17118] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 662.652681][T17118] Memory cgroup stats for /syz5: [ 662.652753][T17118] anon 314490880 [ 662.652753][T17118] file 73728 [ 662.652753][T17118] kernel_stack 0 [ 662.652753][T17118] slab 0 [ 662.652753][T17118] sock 0 [ 662.652753][T17118] shmem 0 [ 662.652753][T17118] file_mapped 0 [ 662.652753][T17118] file_dirty 0 [ 662.652753][T17118] file_writeback 0 [ 662.652753][T17118] anon_thp 0 [ 662.652753][T17118] inactive_anon 0 [ 662.652753][T17118] active_anon 311156736 [ 662.652753][T17118] inactive_file 0 [ 662.652753][T17118] active_file 0 [ 662.652753][T17118] unevictable 0 [ 662.652753][T17118] slab_reclaimable 0 [ 662.652753][T17118] slab_unreclaimable 0 [ 662.652753][T17118] pgfault 371349 [ 662.652753][T17118] pgmajfault 0 [ 662.652753][T17118] workingset_refault 33 [ 662.652753][T17118] workingset_activate 0 [ 662.652753][T17118] workingset_nodereclaim 0 [ 662.652753][T17118] pgrefill 3276 [ 662.652753][T17118] pgscan 2904 [ 662.652753][T17118] pgsteal 82 [ 662.652753][T17118] pgactivate 2739 [ 662.746113][T17118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17118,uid=0 [ 662.761452][T17118] Memory cgroup out of memory: Killed process 17118 (syz-executor.5) total-vm:48560kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 662.778924][ T24] oom_reaper: reaped process 17118 (syz-executor.5), now anon-rss:0kB, file-rss:14080kB, shmem-rss:0kB 19:29:43 executing program 1: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x40000000000000) 19:29:43 executing program 2: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000040)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) open$dir(&(0x7f0000000100)='./file0\x00', 0x319040, 0x100) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x2000400) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:43 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x2f2f627500000000) 19:29:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0xfffffffc}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000001640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000001440)={0x0, 0xfffffffe, 0x20, 0x0, 0xfffffffc, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ff02000086100000f9ffffff85100000ffffffff18352100010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0xb0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:43 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x29e010000000000, 0x0, 0x0) 19:29:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x4800, 0x2000}}, 0x20}, 0x1, 0x0, 0x0, 0x2008005}, 0x2004c840) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001580)={0x0, r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000540)="10c30863b34995d8be8554ef0a419208c0b235f0a7e1", 0x16}], 0x1, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, r8, r0, r4, r4, r8]}}], 0x148, 0x808}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="b947fb89bf72f75e1bffc3ec7f52ab22cb2e91396593a79e374130889c09a97456374493a252f31a4c32f8f96a482e7a7d357035ff4f6d636fcec4fffc6b60503c7e47c8f7ce101cd9c8894930d1cf98f47eaed5caedbfd23397aba86521d4cdb0ac6744122c83d6d71a97cf79a6003b858089bbe49d92dabd13b37011771b056a3a043cd751ac8570e185f252a4265ee3ea814c76b5a1562cf607d432971fe08ba73d3c860811f72865ac061c144f5ec275c8719a27b8c6bfaa4f87d1aa9dbc764219cd06136119bc2195", 0xcb}, {&(0x7f0000000c80)="844127942d87e0b3c69723b08c57de690208b1f40adf69563f5befd40a5f7885a37c536da2f3f81a650c", 0x2a}, {&(0x7f0000000cc0)="8f44cd3dae8472b5cb36d32f1d11fbd9047b60c26df1ecb9e563d3ecf89632e9160ca5c08a244c63310311a7e88c1117cc53eb09c699c09e3f21fee107a7cc6e1bf1850fda1102b00b6e04eb379801ea32c37c986a37595bdc4e97d54695d4f28c8342b309bb4dadcec70a2cd483f5dfa619c3c1f884b82e8bcfffc0", 0x7c}, {&(0x7f0000000d40)="bb33e565adaca434add2310ba22e017aefeb6dd06684731c7458f160c60532db79bdf38f43b647cd926b5bae1b3add3f073b107325a40a829fdc8b144ca43ba1973d300b11dc48fcae144172257b8b78abe65850064d1d071503f38c9935646a781b2fd95005ae81164cac536128a5fc352d9100cabf11e34a32fea4cdd67ffad320f62e7d949ee784111c75ceff217a2abc531f532b613f6901523c58a1c651ffceeee3158adcc541f9fa85cf779f82a7dffe5df51681d65e98e53a670b0e3a983627bf107c40b01b67faaa50c5a92d9dac772d9cc175b5af7943b6838b729f68833ca34852b233e21b4e46f5f14559c172df2e657e384c86", 0xf9}, {&(0x7f0000000e40)="a86316b37d7bb0c238172fc94cd1dec3190d3df8f2267c14e02be21469ad229e6e12fcc579eb57cd21a203bae46c27027ca0cdbb25aa8ec3283735f6a35d591a804ed189e76d5ce541d65171c6b2080eea24bfd27011e43047975cd1b892b1d44ce28f3ee9bd5d745670872244ec55", 0x6f}], 0x5, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f80)="ecafc30337a2da4e72c83705c606cfbec072421a07baaffa21ea0355812ca5b1eecf6ad73564f5ea6b5c1ecd6dfd9f33e172f9a44be623c23fd0a7890ad511d0b702a1b481575748b450255c5f1dfbd0a15cbd6a91967600bd29e989", 0x5c}, {&(0x7f0000001000)="07ac7ba5d4b1c7bff87bb2260ed4d79c1fc9f94c17e23bb8c0fb87b9f6169922cb81352fcae75d8dfbb8b3bcb136c2aa9e9b3b83805d76091bdbf1ba011d15389a8b77087de70821f1fb450c2c9f5e63d0bd974da72dd1861106e8a7626d143007343248727e2fb7308908fb89823b051f716bae6d0e4cdd419e772e19c7fcf5c385ac0ada1cf9f46ec310b024140b09c76ffa19bb2f3146fb1d1ddcad0f428d0680c1fc5e1bf98d96f5c57ea886e27c6c1380186afd0c739c0a6bbb98c9a6cac4049de973300665aed34bec25a71f6b9a87570444075c3a1b04508ac6f05b9de3501062fc7dd65f651f89d0d2", 0xed}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r8, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, r8, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r9, r10, r8, r8]}}], 0x120, 0x24040041}}], 0x3, 0x200008d0) r11 = socket$netlink(0x10, 0x3, 0xa) r12 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b30000004c37af45cd280ed39b00000003000000040005000500040000e9d4001c000100000006f7f24c9b4416d7a48e957db3033db56dff5a95118d2bc69810c3238d5741dc567df8e066f171212b3405e2a2e48298e5f9ff56772bdb7e8ac250fe010000000000000011eda5ff5260f4815480b6184aed0000000000000000c8f80b6cbdba265ca26efac5c9a1"], 0x28}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r12, 0xc010f508, &(0x7f0000000100)={0x80000001, 0x401}) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x3, r11, 0x7, 0x80000}) 19:29:43 executing program 2: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000040)) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x319040, 0x100) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x2000400) umount2(&(0x7f0000000080)='./file0\x00', 0x4) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 666.477795][T17167] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 666.489378][T17167] CPU: 0 PID: 17167 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 666.500557][T17167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 666.510598][T17167] Call Trace: [ 666.513876][T17167] dump_stack+0x18e/0x1d5 [ 666.518194][T17167] dump_header+0xdb/0x700 [ 666.522510][T17167] oom_kill_process+0xf0/0x2d0 [ 666.527258][T17167] out_of_memory+0x55f/0x7f0 [ 666.531838][T17167] mem_cgroup_oom+0x638/0x760 [ 666.536628][T17167] try_charge+0xc41/0x1100 [ 666.541028][T17167] ? get_mem_cgroup_from_mm+0x251/0x280 [ 666.546561][T17167] mem_cgroup_try_charge+0xd5/0x2a0 [ 666.551750][T17167] wp_page_copy+0x33d/0x1830 [ 666.556331][T17167] ? _raw_spin_unlock+0x49/0x60 [ 666.561166][T17167] ? do_wp_page+0x535/0x8b0 [ 666.565658][T17167] handle_mm_fault+0xeab/0x3b90 [ 666.570504][T17167] do_user_addr_fault+0x4a4/0xb30 [ 666.575519][T17167] page_fault+0x2f/0x40 [ 666.580004][T17167] RIP: 0033:0x7f402cd4635d [ 666.584406][T17167] Code: 89 cf 41 56 49 89 d6 41 55 41 54 55 53 44 89 c3 48 81 ec 58 01 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 48 01 00 00 31 c0 <48> c7 84 24 98 00 00 00 00 00 00 00 48 85 f6 0f 84 9e 00 00 00 48 [ 666.604346][T17167] RSP: 002b:00007ffc67580ec0 EFLAGS: 00010246 [ 666.608447][T17181] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 666.610398][T17167] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ffc67581050 [ 666.610402][T17167] RDX: 00007f402cddc4a2 RSI: 0000000000000040 RDI: 00007ffc675811f0 [ 666.610407][T17167] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f402ce7aef0 [ 666.610411][T17167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.610415][T17167] R13: 0000000000000000 R14: 00007f402cddc4a2 R15: 00007ffc67581050 [ 666.611158][T17167] memory: usage 307200kB, limit 307200kB, failcnt 102254 [ 666.683788][T17167] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 666.691051][T17167] Memory cgroup stats for /syz5: [ 666.691124][T17167] anon 314490880 [ 666.691124][T17167] file 73728 [ 666.691124][T17167] kernel_stack 0 [ 666.691124][T17167] slab 0 [ 666.691124][T17167] sock 0 [ 666.691124][T17167] shmem 0 [ 666.691124][T17167] file_mapped 0 [ 666.691124][T17167] file_dirty 0 [ 666.691124][T17167] file_writeback 0 [ 666.691124][T17167] anon_thp 0 [ 666.691124][T17167] inactive_anon 0 [ 666.691124][T17167] active_anon 314535936 [ 666.691124][T17167] inactive_file 0 [ 666.691124][T17167] active_file 0 [ 666.691124][T17167] unevictable 0 [ 666.691124][T17167] slab_reclaimable 0 [ 666.691124][T17167] slab_unreclaimable 0 [ 666.691124][T17167] pgfault 371349 [ 666.691124][T17167] pgmajfault 0 [ 666.691124][T17167] workingset_refault 33 [ 666.691124][T17167] workingset_activate 0 [ 666.691124][T17167] workingset_nodereclaim 0 [ 666.691124][T17167] pgrefill 3276 [ 666.691124][T17167] pgscan 2904 [ 666.691124][T17167] pgsteal 82 19:29:44 executing program 2: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000040)) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x319040, 0x100) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x2000400) umount2(&(0x7f0000000080)='./file0\x00', 0x4) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 666.691124][T17167] pgactivate 2739 [ 666.789129][T17167] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17167,uid=0 [ 666.804714][T17167] Memory cgroup out of memory: Killed process 17167 (syz-executor.5) total-vm:48560kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 19:29:44 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x6, 0x6ec, 0x7}) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0xfffffffc}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000001640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000001440)={0x0, 0xfffffffe, 0x20, 0x0, 0xfffffffc, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ff02000086100000f9ffffff85100000ffffffff18352100010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0xb0) (async) socket$igmp(0x2, 0x3, 0x2) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) [ 666.828187][ T24] oom_reaper: reaped process 17167 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:0kB 19:29:44 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x6, 0x6ec, 0x7}) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) [ 666.866465][T17197] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 666.900507][T17197] CPU: 1 PID: 17197 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 666.910757][T17197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 666.920798][T17197] Call Trace: [ 666.924078][T17197] dump_stack+0x18e/0x1d5 [ 666.928395][T17197] dump_header+0xdb/0x700 [ 666.932715][T17197] oom_kill_process+0xf0/0x2d0 [ 666.937469][T17197] out_of_memory+0x55f/0x7f0 [ 666.942153][T17197] mem_cgroup_oom+0x638/0x760 [ 666.946824][T17197] try_charge+0xc41/0x1100 [ 666.951251][T17197] ? get_mem_cgroup_from_mm+0x251/0x280 [ 666.956789][T17197] mem_cgroup_try_charge+0xd5/0x2a0 [ 666.961976][T17197] wp_page_copy+0x33d/0x1830 19:29:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x4800, 0x2000}}, 0x20}, 0x1, 0x0, 0x0, 0x2008005}, 0x2004c840) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001580)={0x0, r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000540)="10c30863b34995d8be8554ef0a419208c0b235f0a7e1", 0x16}], 0x1, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, r8, r0, r4, r4, r8]}}], 0x148, 0x808}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="b947fb89bf72f75e1bffc3ec7f52ab22cb2e91396593a79e374130889c09a97456374493a252f31a4c32f8f96a482e7a7d357035ff4f6d636fcec4fffc6b60503c7e47c8f7ce101cd9c8894930d1cf98f47eaed5caedbfd23397aba86521d4cdb0ac6744122c83d6d71a97cf79a6003b858089bbe49d92dabd13b37011771b056a3a043cd751ac8570e185f252a4265ee3ea814c76b5a1562cf607d432971fe08ba73d3c860811f72865ac061c144f5ec275c8719a27b8c6bfaa4f87d1aa9dbc764219cd06136119bc2195", 0xcb}, {&(0x7f0000000c80)="844127942d87e0b3c69723b08c57de690208b1f40adf69563f5befd40a5f7885a37c536da2f3f81a650c", 0x2a}, {&(0x7f0000000cc0)="8f44cd3dae8472b5cb36d32f1d11fbd9047b60c26df1ecb9e563d3ecf89632e9160ca5c08a244c63310311a7e88c1117cc53eb09c699c09e3f21fee107a7cc6e1bf1850fda1102b00b6e04eb379801ea32c37c986a37595bdc4e97d54695d4f28c8342b309bb4dadcec70a2cd483f5dfa619c3c1f884b82e8bcfffc0", 0x7c}, {&(0x7f0000000d40)="bb33e565adaca434add2310ba22e017aefeb6dd06684731c7458f160c60532db79bdf38f43b647cd926b5bae1b3add3f073b107325a40a829fdc8b144ca43ba1973d300b11dc48fcae144172257b8b78abe65850064d1d071503f38c9935646a781b2fd95005ae81164cac536128a5fc352d9100cabf11e34a32fea4cdd67ffad320f62e7d949ee784111c75ceff217a2abc531f532b613f6901523c58a1c651ffceeee3158adcc541f9fa85cf779f82a7dffe5df51681d65e98e53a670b0e3a983627bf107c40b01b67faaa50c5a92d9dac772d9cc175b5af7943b6838b729f68833ca34852b233e21b4e46f5f14559c172df2e657e384c86", 0xf9}, {&(0x7f0000000e40)="a86316b37d7bb0c238172fc94cd1dec3190d3df8f2267c14e02be21469ad229e6e12fcc579eb57cd21a203bae46c27027ca0cdbb25aa8ec3283735f6a35d591a804ed189e76d5ce541d65171c6b2080eea24bfd27011e43047975cd1b892b1d44ce28f3ee9bd5d745670872244ec55", 0x6f}], 0x5, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f80)="ecafc30337a2da4e72c83705c606cfbec072421a07baaffa21ea0355812ca5b1eecf6ad73564f5ea6b5c1ecd6dfd9f33e172f9a44be623c23fd0a7890ad511d0b702a1b481575748b450255c5f1dfbd0a15cbd6a91967600bd29e989", 0x5c}, {&(0x7f0000001000)="07ac7ba5d4b1c7bff87bb2260ed4d79c1fc9f94c17e23bb8c0fb87b9f6169922cb81352fcae75d8dfbb8b3bcb136c2aa9e9b3b83805d76091bdbf1ba011d15389a8b77087de70821f1fb450c2c9f5e63d0bd974da72dd1861106e8a7626d143007343248727e2fb7308908fb89823b051f716bae6d0e4cdd419e772e19c7fcf5c385ac0ada1cf9f46ec310b024140b09c76ffa19bb2f3146fb1d1ddcad0f428d0680c1fc5e1bf98d96f5c57ea886e27c6c1380186afd0c739c0a6bbb98c9a6cac4049de973300665aed34bec25a71f6b9a87570444075c3a1b04508ac6f05b9de3501062fc7dd65f651f89d0d2", 0xed}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r8, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, r8, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r9, r10, r8, r8]}}], 0x120, 0x24040041}}], 0x3, 0x200008d0) (async) r11 = socket$netlink(0x10, 0x3, 0xa) (async, rerun: 32) r12 = socket$netlink(0x10, 0x3, 0xa) (rerun: 32) sendmsg$FOU_CMD_GET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b30000004c37af45cd280ed39b00000003000000040005000500040000e9d4001c000100000006f7f24c9b4416d7a48e957db3033db56dff5a95118d2bc69810c3238d5741dc567df8e066f171212b3405e2a2e48298e5f9ff56772bdb7e8ac250fe010000000000000011eda5ff5260f4815480b6184aed0000000000000000c8f80b6cbdba265ca26efac5c9a1"], 0x28}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r12, 0xc010f508, &(0x7f0000000100)={0x80000001, 0x401}) (async) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x3, r11, 0x7, 0x80000}) [ 666.966554][T17197] ? _raw_spin_unlock+0x49/0x60 [ 666.971393][T17197] ? do_wp_page+0x535/0x8b0 [ 666.975882][T17197] handle_mm_fault+0xeab/0x3b90 [ 666.980725][T17197] ? psi_memstall_leave+0xa8/0xd0 [ 666.985744][T17197] do_user_addr_fault+0x4a4/0xb30 [ 666.990760][T17197] page_fault+0x2f/0x40 [ 666.994894][T17197] RIP: 0033:0x7f402cd2f5ba [ 666.999277][T17197] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 667.018849][T17197] RSP: 002b:00007ffc675810d8 EFLAGS: 00010202 [ 667.024883][T17197] RAX: 00005555568486c0 RBX: 0000000000000001 RCX: 00007f402dddc3e0 [ 667.032822][T17197] RDX: 0000000000000001 RSI: 00007f402ce7aef0 RDI: 0000000000000001 [ 667.040769][T17197] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f402ce7aef0 [ 667.048719][T17197] R10: 0000555556848400 R11: 0000000000000202 R12: 0000000000000000 [ 667.056760][T17197] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffc675811f0 [ 667.068566][T17197] memory: usage 307200kB, limit 307200kB, failcnt 102269 [ 667.076085][T17197] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 667.083249][T17197] Memory cgroup stats for /syz5: [ 667.083329][T17197] anon 314490880 [ 667.083329][T17197] file 73728 [ 667.083329][T17197] kernel_stack 0 [ 667.083329][T17197] slab 0 [ 667.083329][T17197] sock 0 [ 667.083329][T17197] shmem 0 [ 667.083329][T17197] file_mapped 0 [ 667.083329][T17197] file_dirty 0 [ 667.083329][T17197] file_writeback 0 [ 667.083329][T17197] anon_thp 0 [ 667.083329][T17197] inactive_anon 0 [ 667.083329][T17197] active_anon 314535936 [ 667.083329][T17197] inactive_file 0 [ 667.083329][T17197] active_file 0 [ 667.083329][T17197] unevictable 0 [ 667.083329][T17197] slab_reclaimable 0 [ 667.083329][T17197] slab_unreclaimable 0 [ 667.083329][T17197] pgfault 371382 [ 667.083329][T17197] pgmajfault 0 [ 667.083329][T17197] workingset_refault 33 [ 667.083329][T17197] workingset_activate 0 [ 667.083329][T17197] workingset_nodereclaim 0 [ 667.083329][T17197] pgrefill 3276 [ 667.083329][T17197] pgscan 2904 [ 667.083329][T17197] pgsteal 82 [ 667.083329][T17197] pgactivate 2739 [ 667.184525][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.203044][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.217645][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.220809][T17197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17105,uid=0 [ 667.234100][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.259025][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.268036][T17197] Memory cgroup out of memory: Killed process 17105 (syz-executor.5) total-vm:48560kB, anon-rss:444kB, file-rss:15280kB, shmem-rss:60kB, UID:0 pgtables:84kB oom_score_adj:0 [ 667.271873][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.301707][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.314543][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.327406][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.340251][T17208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17208 comm=syz-executor.4 [ 667.871605][T17184] device bridge_slave_1 left promiscuous mode [ 667.877782][T17184] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.885440][T17184] device bridge_slave_0 left promiscuous mode [ 667.891619][T17184] bridge0: port 1(bridge_slave_0) entered disabled state 19:29:46 executing program 1: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) 19:29:46 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000080)={0x6, 0x6ec, 0x7}) (async) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3) 19:29:46 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x4000000000000000) 19:29:46 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2a0020000000000, 0x0, 0x0) 19:29:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x4800, 0x2000}}, 0x20}, 0x1, 0x0, 0x0, 0x2008005}, 0x2004c840) r9 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001580)={0x0, r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000540)="10c30863b34995d8be8554ef0a419208c0b235f0a7e1", 0x16}], 0x1, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, r8, r0, r4, r4, r8]}}], 0x148, 0x808}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="b947fb89bf72f75e1bffc3ec7f52ab22cb2e91396593a79e374130889c09a97456374493a252f31a4c32f8f96a482e7a7d357035ff4f6d636fcec4fffc6b60503c7e47c8f7ce101cd9c8894930d1cf98f47eaed5caedbfd23397aba86521d4cdb0ac6744122c83d6d71a97cf79a6003b858089bbe49d92dabd13b37011771b056a3a043cd751ac8570e185f252a4265ee3ea814c76b5a1562cf607d432971fe08ba73d3c860811f72865ac061c144f5ec275c8719a27b8c6bfaa4f87d1aa9dbc764219cd06136119bc2195", 0xcb}, {&(0x7f0000000c80)="844127942d87e0b3c69723b08c57de690208b1f40adf69563f5befd40a5f7885a37c536da2f3f81a650c", 0x2a}, {&(0x7f0000000cc0)="8f44cd3dae8472b5cb36d32f1d11fbd9047b60c26df1ecb9e563d3ecf89632e9160ca5c08a244c63310311a7e88c1117cc53eb09c699c09e3f21fee107a7cc6e1bf1850fda1102b00b6e04eb379801ea32c37c986a37595bdc4e97d54695d4f28c8342b309bb4dadcec70a2cd483f5dfa619c3c1f884b82e8bcfffc0", 0x7c}, {&(0x7f0000000d40)="bb33e565adaca434add2310ba22e017aefeb6dd06684731c7458f160c60532db79bdf38f43b647cd926b5bae1b3add3f073b107325a40a829fdc8b144ca43ba1973d300b11dc48fcae144172257b8b78abe65850064d1d071503f38c9935646a781b2fd95005ae81164cac536128a5fc352d9100cabf11e34a32fea4cdd67ffad320f62e7d949ee784111c75ceff217a2abc531f532b613f6901523c58a1c651ffceeee3158adcc541f9fa85cf779f82a7dffe5df51681d65e98e53a670b0e3a983627bf107c40b01b67faaa50c5a92d9dac772d9cc175b5af7943b6838b729f68833ca34852b233e21b4e46f5f14559c172df2e657e384c86", 0xf9}, {&(0x7f0000000e40)="a86316b37d7bb0c238172fc94cd1dec3190d3df8f2267c14e02be21469ad229e6e12fcc579eb57cd21a203bae46c27027ca0cdbb25aa8ec3283735f6a35d591a804ed189e76d5ce541d65171c6b2080eea24bfd27011e43047975cd1b892b1d44ce28f3ee9bd5d745670872244ec55", 0x6f}], 0x5, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f80)="ecafc30337a2da4e72c83705c606cfbec072421a07baaffa21ea0355812ca5b1eecf6ad73564f5ea6b5c1ecd6dfd9f33e172f9a44be623c23fd0a7890ad511d0b702a1b481575748b450255c5f1dfbd0a15cbd6a91967600bd29e989", 0x5c}, {&(0x7f0000001000)="07ac7ba5d4b1c7bff87bb2260ed4d79c1fc9f94c17e23bb8c0fb87b9f6169922cb81352fcae75d8dfbb8b3bcb136c2aa9e9b3b83805d76091bdbf1ba011d15389a8b77087de70821f1fb450c2c9f5e63d0bd974da72dd1861106e8a7626d143007343248727e2fb7308908fb89823b051f716bae6d0e4cdd419e772e19c7fcf5c385ac0ada1cf9f46ec310b024140b09c76ffa19bb2f3146fb1d1ddcad0f428d0680c1fc5e1bf98d96f5c57ea886e27c6c1380186afd0c739c0a6bbb98c9a6cac4049de973300665aed34bec25a71f6b9a87570444075c3a1b04508ac6f05b9de3501062fc7dd65f651f89d0d2", 0xed}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r8, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, r8, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r9, r10, r8, r8]}}], 0x120, 0x24040041}}], 0x3, 0x200008d0) r11 = socket$netlink(0x10, 0x3, 0xa) r12 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b30000004c37af45cd280ed39b00000003000000040005000500040000e9d4001c000100000006f7f24c9b4416d7a48e957db3033db56dff5a95118d2bc69810c3238d5741dc567df8e066f171212b3405e2a2e48298e5f9ff56772bdb7e8ac250fe010000000000000011eda5ff5260f4815480b6184aed0000000000000000c8f80b6cbdba265ca26efac5c9a1"], 0x28}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r12, 0xc010f508, &(0x7f0000000100)={0x80000001, 0x401}) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x3, r11, 0x7, 0x80000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)) (async) accept4(0xffffffffffffffff, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x4800, 0x2000}}, 0x20}, 0x1, 0x0, 0x0, 0x2008005}, 0x2004c840) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001580)={0x0, r1}, 0x10) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000540)="10c30863b34995d8be8554ef0a419208c0b235f0a7e1", 0x16}], 0x1, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r6]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r5, r8, r0, r4, r4, r8]}}], 0x148, 0x808}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="b947fb89bf72f75e1bffc3ec7f52ab22cb2e91396593a79e374130889c09a97456374493a252f31a4c32f8f96a482e7a7d357035ff4f6d636fcec4fffc6b60503c7e47c8f7ce101cd9c8894930d1cf98f47eaed5caedbfd23397aba86521d4cdb0ac6744122c83d6d71a97cf79a6003b858089bbe49d92dabd13b37011771b056a3a043cd751ac8570e185f252a4265ee3ea814c76b5a1562cf607d432971fe08ba73d3c860811f72865ac061c144f5ec275c8719a27b8c6bfaa4f87d1aa9dbc764219cd06136119bc2195", 0xcb}, {&(0x7f0000000c80)="844127942d87e0b3c69723b08c57de690208b1f40adf69563f5befd40a5f7885a37c536da2f3f81a650c", 0x2a}, {&(0x7f0000000cc0)="8f44cd3dae8472b5cb36d32f1d11fbd9047b60c26df1ecb9e563d3ecf89632e9160ca5c08a244c63310311a7e88c1117cc53eb09c699c09e3f21fee107a7cc6e1bf1850fda1102b00b6e04eb379801ea32c37c986a37595bdc4e97d54695d4f28c8342b309bb4dadcec70a2cd483f5dfa619c3c1f884b82e8bcfffc0", 0x7c}, {&(0x7f0000000d40)="bb33e565adaca434add2310ba22e017aefeb6dd06684731c7458f160c60532db79bdf38f43b647cd926b5bae1b3add3f073b107325a40a829fdc8b144ca43ba1973d300b11dc48fcae144172257b8b78abe65850064d1d071503f38c9935646a781b2fd95005ae81164cac536128a5fc352d9100cabf11e34a32fea4cdd67ffad320f62e7d949ee784111c75ceff217a2abc531f532b613f6901523c58a1c651ffceeee3158adcc541f9fa85cf779f82a7dffe5df51681d65e98e53a670b0e3a983627bf107c40b01b67faaa50c5a92d9dac772d9cc175b5af7943b6838b729f68833ca34852b233e21b4e46f5f14559c172df2e657e384c86", 0xf9}, {&(0x7f0000000e40)="a86316b37d7bb0c238172fc94cd1dec3190d3df8f2267c14e02be21469ad229e6e12fcc579eb57cd21a203bae46c27027ca0cdbb25aa8ec3283735f6a35d591a804ed189e76d5ce541d65171c6b2080eea24bfd27011e43047975cd1b892b1d44ce28f3ee9bd5d745670872244ec55", 0x6f}], 0x5, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f80)="ecafc30337a2da4e72c83705c606cfbec072421a07baaffa21ea0355812ca5b1eecf6ad73564f5ea6b5c1ecd6dfd9f33e172f9a44be623c23fd0a7890ad511d0b702a1b481575748b450255c5f1dfbd0a15cbd6a91967600bd29e989", 0x5c}, {&(0x7f0000001000)="07ac7ba5d4b1c7bff87bb2260ed4d79c1fc9f94c17e23bb8c0fb87b9f6169922cb81352fcae75d8dfbb8b3bcb136c2aa9e9b3b83805d76091bdbf1ba011d15389a8b77087de70821f1fb450c2c9f5e63d0bd974da72dd1861106e8a7626d143007343248727e2fb7308908fb89823b051f716bae6d0e4cdd419e772e19c7fcf5c385ac0ada1cf9f46ec310b024140b09c76ffa19bb2f3146fb1d1ddcad0f428d0680c1fc5e1bf98d96f5c57ea886e27c6c1380186afd0c739c0a6bbb98c9a6cac4049de973300665aed34bec25a71f6b9a87570444075c3a1b04508ac6f05b9de3501062fc7dd65f651f89d0d2", 0xed}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r8, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, r8, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r9, r10, r8, r8]}}], 0x120, 0x24040041}}], 0x3, 0x200008d0) (async) socket$netlink(0x10, 0x3, 0xa) (async) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$FOU_CMD_GET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b30000004c37af45cd280ed39b00000003000000040005000500040000e9d4001c000100000006f7f24c9b4416d7a48e957db3033db56dff5a95118d2bc69810c3238d5741dc567df8e066f171212b3405e2a2e48298e5f9ff56772bdb7e8ac250fe010000000000000011eda5ff5260f4815480b6184aed0000000000000000c8f80b6cbdba265ca26efac5c9a1"], 0x28}}, 0x0) (async) ioctl$F2FS_IOC_DEFRAGMENT(r12, 0xc010f508, &(0x7f0000000100)={0x80000001, 0x401}) (async) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x3, r11, 0x7, 0x80000}) (async) 19:29:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0xfffffffc}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000001640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000001440)={0x0, 0xfffffffe, 0x20, 0x0, 0xfffffffc, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ff02000086100000f9ffffff85100000ffffffff18352100010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0xb0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0xfffffffc}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000001640)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000001440)={0x0, 0xfffffffe, 0x20, 0x0, 0xfffffffc, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ff02000086100000f9ffffff85100000ffffffff18352100010000000000000000000000186a00000a00000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0xb0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:29:46 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7, 0x218200) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={0x0, 0xfb, 0xfa, 0x6, 0x8, "5196ee27f3af271e6c8d013c3f5857fb", "2bc4a1a6864c2c15ebba5e09bbdcba6eedc3d9a8453ceee4c72e33df6fbfd7e677022fc51fe237e1a3f3234a1da9e028689595748312f412254db43b7ffc5fcaf630897ac35d5c248f404c96969c5e37384a54f08da80725b06e6f80a9a9aff4b9618ac3c69b8b7e6f93b0c6eedc158478478c3818811f51c10af788a827726f8acfdf57f25a2dfc35cab6621a6d9429aba38cca75982f1cdeb949069fa07d66670fef36a920d223c2b4b959b8e29dc650a24a36cb2d4c1e3865989eaf0b5af1c4c943a20ab3cc3eb1fb44b5aa0f17688257c8191d6f92ace8104a995de5b68d70087f51e6"}, 0xfa, 0x0) r3 = accept4$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/21, 0x15}], 0x1, &(0x7f00000003c0)=""/169, 0xa9}, 0x40000162) r4 = fcntl$dupfd(r1, 0x406, r0) r5 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) fsetxattr$security_evm(r7, &(0x7f0000000080), &(0x7f0000000100)=@v2={0x5, 0x3, 0xb, 0x0, 0x1, "8f"}, 0xa, 0x3) sendfile(r6, r6, 0x0, 0x3) openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) [ 669.508731][ T23] audit: type=1400 audit(1664652586.938:2051): avc: denied { setattr } for pid=17226 comm="syz-executor.2" name="TIPC" dev="sockfs" ino=74499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 19:29:47 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7, 0x218200) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={0x0, 0xfb, 0xfa, 0x6, 0x8, "5196ee27f3af271e6c8d013c3f5857fb", "2bc4a1a6864c2c15ebba5e09bbdcba6eedc3d9a8453ceee4c72e33df6fbfd7e677022fc51fe237e1a3f3234a1da9e028689595748312f412254db43b7ffc5fcaf630897ac35d5c248f404c96969c5e37384a54f08da80725b06e6f80a9a9aff4b9618ac3c69b8b7e6f93b0c6eedc158478478c3818811f51c10af788a827726f8acfdf57f25a2dfc35cab6621a6d9429aba38cca75982f1cdeb949069fa07d66670fef36a920d223c2b4b959b8e29dc650a24a36cb2d4c1e3865989eaf0b5af1c4c943a20ab3cc3eb1fb44b5aa0f17688257c8191d6f92ace8104a995de5b68d70087f51e6"}, 0xfa, 0x0) (async) r3 = accept4$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/21, 0x15}], 0x1, &(0x7f00000003c0)=""/169, 0xa9}, 0x40000162) r4 = fcntl$dupfd(r1, 0x406, r0) r5 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) fsetxattr$security_evm(r7, &(0x7f0000000080), &(0x7f0000000100)=@v2={0x5, 0x3, 0xb, 0x0, 0x1, "8f"}, 0xa, 0x3) (async) sendfile(r6, r6, 0x0, 0x3) (async) openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) [ 669.552273][T17229] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 19:29:47 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7, 0x218200) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={0x0, 0xfb, 0xfa, 0x6, 0x8, "5196ee27f3af271e6c8d013c3f5857fb", "2bc4a1a6864c2c15ebba5e09bbdcba6eedc3d9a8453ceee4c72e33df6fbfd7e677022fc51fe237e1a3f3234a1da9e028689595748312f412254db43b7ffc5fcaf630897ac35d5c248f404c96969c5e37384a54f08da80725b06e6f80a9a9aff4b9618ac3c69b8b7e6f93b0c6eedc158478478c3818811f51c10af788a827726f8acfdf57f25a2dfc35cab6621a6d9429aba38cca75982f1cdeb949069fa07d66670fef36a920d223c2b4b959b8e29dc650a24a36cb2d4c1e3865989eaf0b5af1c4c943a20ab3cc3eb1fb44b5aa0f17688257c8191d6f92ace8104a995de5b68d70087f51e6"}, 0xfa, 0x0) r3 = accept4$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/21, 0x15}], 0x1, &(0x7f00000003c0)=""/169, 0xa9}, 0x40000162) r4 = fcntl$dupfd(r1, 0x406, r0) r5 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) fsetxattr$security_evm(r7, &(0x7f0000000080), &(0x7f0000000100)=@v2={0x5, 0x3, 0xb, 0x0, 0x1, "8f"}, 0xa, 0x3) sendfile(r6, r6, 0x0, 0x3) openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000200), 0x7, 0x218200) (async) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={0x0, 0xfb, 0xfa, 0x6, 0x8, "5196ee27f3af271e6c8d013c3f5857fb", "2bc4a1a6864c2c15ebba5e09bbdcba6eedc3d9a8453ceee4c72e33df6fbfd7e677022fc51fe237e1a3f3234a1da9e028689595748312f412254db43b7ffc5fcaf630897ac35d5c248f404c96969c5e37384a54f08da80725b06e6f80a9a9aff4b9618ac3c69b8b7e6f93b0c6eedc158478478c3818811f51c10af788a827726f8acfdf57f25a2dfc35cab6621a6d9429aba38cca75982f1cdeb949069fa07d66670fef36a920d223c2b4b959b8e29dc650a24a36cb2d4c1e3865989eaf0b5af1c4c943a20ab3cc3eb1fb44b5aa0f17688257c8191d6f92ace8104a995de5b68d70087f51e6"}, 0xfa, 0x0) (async) accept4$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) (async) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000300)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/21, 0x15}], 0x1, &(0x7f00000003c0)=""/169, 0xa9}, 0x40000162) (async) fcntl$dupfd(r1, 0x406, r0) (async) openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) fsetxattr$security_evm(r7, &(0x7f0000000080), &(0x7f0000000100)=@v2={0x5, 0x3, 0xb, 0x0, 0x1, "8f"}, 0xa, 0x3) (async) sendfile(r6, r6, 0x0, 0x3) (async) openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) 19:29:47 executing program 4: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000200)=""/182, &(0x7f00000002c0)=0xb6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x196) 19:29:47 executing program 4: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000200)=""/182, &(0x7f00000002c0)=0xb6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x196) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000200)=""/182, &(0x7f00000002c0)=0xb6) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x196) (async) 19:29:47 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 671.037147][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.044197][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.051852][T17279] device bridge_slave_0 entered promiscuous mode [ 671.058631][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.065953][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.073331][T17279] device bridge_slave_1 entered promiscuous mode [ 671.110608][T17279] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.117654][T17279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.124920][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.131987][T17279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.152131][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.159411][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.166989][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 671.174565][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 671.190412][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 671.198614][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.205630][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.213158][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.221406][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.228395][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.235712][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.243604][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.257901][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 671.271098][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 671.282349][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 671.297153][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 671.306227][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 671.325259][T17283] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 671.335424][T17283] CPU: 1 PID: 17283 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 671.345622][T17283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 671.355643][T17283] Call Trace: [ 671.358909][T17283] dump_stack+0x18e/0x1d5 [ 671.363211][T17283] dump_header+0xdb/0x700 [ 671.367510][T17283] oom_kill_process+0xf0/0x2d0 [ 671.372240][T17283] out_of_memory+0x55f/0x7f0 [ 671.376798][T17283] mem_cgroup_oom+0x638/0x760 [ 671.381445][T17283] try_charge+0xc41/0x1100 [ 671.385838][T17283] ? get_mem_cgroup_from_mm+0x251/0x280 [ 671.391349][T17283] mem_cgroup_try_charge+0xd5/0x2a0 [ 671.396520][T17283] handle_mm_fault+0x158a/0x3b90 [ 671.401435][T17283] do_user_addr_fault+0x4a4/0xb30 [ 671.406428][T17283] page_fault+0x2f/0x40 [ 671.410558][T17283] RIP: 0033:0x7f91a2d00ccf [ 671.414942][T17283] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 671.434529][T17283] RSP: 002b:00007ffd41ae81e0 EFLAGS: 00010246 [ 671.440561][T17283] RAX: 00007f91a1ea6000 RBX: 0000000000021000 RCX: 00007f91a2d516b7 [ 671.448499][T17283] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f91a1ea7000 [ 671.456439][T17283] RBP: 00007ffd41ae82b0 R08: 00000000ffffffff R09: 00007f91a1ec6700 [ 671.464381][T17283] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffd41ae83d0 [ 671.472324][T17283] R13: 00007f91a1ec6700 R14: 0000000000000000 R15: 0000000000022000 [ 671.481513][T17283] memory: usage 307200kB, limit 307200kB, failcnt 102291 [ 671.488540][T17283] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 671.495693][T17283] Memory cgroup stats for /syz5: [ 671.495738][T17283] anon 314490880 [ 671.495738][T17283] file 73728 [ 671.495738][T17283] kernel_stack 0 [ 671.495738][T17283] slab 0 [ 671.495738][T17283] sock 0 [ 671.495738][T17283] shmem 0 [ 671.495738][T17283] file_mapped 0 [ 671.495738][T17283] file_dirty 0 [ 671.495738][T17283] file_writeback 0 [ 671.495738][T17283] anon_thp 0 [ 671.495738][T17283] inactive_anon 0 [ 671.495738][T17283] active_anon 314535936 [ 671.495738][T17283] inactive_file 0 [ 671.495738][T17283] active_file 0 [ 671.495738][T17283] unevictable 0 [ 671.495738][T17283] slab_reclaimable 0 [ 671.495738][T17283] slab_unreclaimable 0 [ 671.495738][T17283] pgfault 371415 [ 671.495738][T17283] pgmajfault 0 [ 671.495738][T17283] workingset_refault 33 [ 671.495738][T17283] workingset_activate 0 [ 671.495738][T17283] workingset_nodereclaim 0 [ 671.495738][T17283] pgrefill 3276 [ 671.495738][T17283] pgscan 2904 [ 671.495738][T17283] pgsteal 82 [ 671.495738][T17283] pgactivate 2739 [ 671.589350][T17283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17283,uid=0 [ 671.604844][T17283] Memory cgroup out of memory: Killed process 17283 (syz-executor.5) total-vm:48692kB, anon-rss:440kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 671.622725][ T24] oom_reaper: reaped process 17283 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB 19:29:52 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r2, r2, 0x0, 0x3) (async) 19:29:52 executing program 4: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x1a, 0x4) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) (async) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000200)=""/182, &(0x7f00000002c0)=0xb6) (async, rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x196) (rerun: 64) 19:29:52 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xeffdffff00000000) 19:29:52 executing program 1: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) 19:29:52 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2a1010000000000, 0x0, 0x0) 19:29:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x4001, 0x5e, 0x380, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:52 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x10) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) [ 674.635455][T17290] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 674.645820][T17290] CPU: 1 PID: 17290 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 674.656046][T17290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 674.666095][T17290] Call Trace: [ 674.669378][T17290] dump_stack+0x18e/0x1d5 [ 674.673694][T17290] dump_header+0xdb/0x700 [ 674.677995][T17290] oom_kill_process+0xf0/0x2d0 [ 674.682742][T17290] out_of_memory+0x55f/0x7f0 [ 674.687330][T17290] mem_cgroup_oom+0x638/0x760 [ 674.692005][T17290] try_charge+0xc41/0x1100 [ 674.696410][T17290] ? get_mem_cgroup_from_mm+0x251/0x280 [ 674.701941][T17290] mem_cgroup_try_charge+0xd5/0x2a0 [ 674.707134][T17290] wp_page_copy+0x33d/0x1830 [ 674.711714][T17290] ? _raw_spin_unlock+0x49/0x60 [ 674.716552][T17290] ? do_wp_page+0x535/0x8b0 [ 674.721043][T17290] handle_mm_fault+0xeab/0x3b90 [ 674.725882][T17290] ? psi_memstall_leave+0xa8/0xd0 [ 674.730901][T17290] do_user_addr_fault+0x4a4/0xb30 [ 674.735916][T17290] page_fault+0x2f/0x40 [ 674.740056][T17290] RIP: 0033:0x7f91a2cff5ba [ 674.744457][T17290] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 674.764047][T17290] RSP: 002b:00007ffd41ae8448 EFLAGS: 00010202 [ 674.770095][T17290] RAX: 000055555599a6c0 RBX: 0000000000000001 RCX: 00007f91a3dac3e0 [ 674.778062][T17290] RDX: 0000000000000001 RSI: 00007f91a2e4aef0 RDI: 0000000000000001 19:29:52 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xf5ffffff00000000) 19:29:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000091) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xe000000000000, 0x8, 0xffffffffffffffff, 0x603ab80a}) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x20, {{0x2, 0x4e22, @local}}}, 0x88) [ 674.786023][T17290] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f91a2e4aef0 [ 674.794243][T17290] R10: 000055555599a400 R11: 0000000000000202 R12: 0000000000000000 [ 674.802201][T17290] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffd41ae8560 [ 674.815007][T17290] memory: usage 307200kB, limit 307200kB, failcnt 102308 [ 674.822481][T17290] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 674.829494][T17290] Memory cgroup stats for /syz5: [ 674.829554][T17290] anon 314490880 [ 674.829554][T17290] file 73728 [ 674.829554][T17290] kernel_stack 0 [ 674.829554][T17290] slab 0 [ 674.829554][T17290] sock 0 [ 674.829554][T17290] shmem 0 [ 674.829554][T17290] file_mapped 0 [ 674.829554][T17290] file_dirty 0 [ 674.829554][T17290] file_writeback 0 [ 674.829554][T17290] anon_thp 0 [ 674.829554][T17290] inactive_anon 0 [ 674.829554][T17290] active_anon 314535936 [ 674.829554][T17290] inactive_file 0 [ 674.829554][T17290] active_file 0 [ 674.829554][T17290] unevictable 0 [ 674.829554][T17290] slab_reclaimable 0 [ 674.829554][T17290] slab_unreclaimable 0 [ 674.829554][T17290] pgfault 371415 [ 674.829554][T17290] pgmajfault 0 [ 674.829554][T17290] workingset_refault 33 [ 674.829554][T17290] workingset_activate 0 [ 674.829554][T17290] workingset_nodereclaim 0 [ 674.829554][T17290] pgrefill 3276 [ 674.829554][T17290] pgscan 2904 [ 674.829554][T17290] pgsteal 82 [ 674.829554][T17290] pgactivate 2739 19:29:52 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = inotify_init() r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x7ff) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) 19:29:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x4001, 0x5e, 0x380, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x4001, 0x5e, 0x380, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:29:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) (async) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000091) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xe000000000000, 0x8, 0xffffffffffffffff, 0x603ab80a}) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x20, {{0x2, 0x4e22, @local}}}, 0x88) [ 674.926705][T17290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17290,uid=0 [ 674.942385][T17290] Memory cgroup out of memory: Killed process 17290 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 19:29:52 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = inotify_init() (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x7ff) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) 19:29:52 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0xffffffff00000000) [ 674.996821][T17317] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 675.009322][T17317] CPU: 1 PID: 17317 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 675.019555][T17317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 675.029595][T17317] Call Trace: [ 675.032880][T17317] dump_stack+0x18e/0x1d5 [ 675.037204][T17317] dump_header+0xdb/0x700 [ 675.041526][T17317] oom_kill_process+0xf0/0x2d0 19:29:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) (async) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000091) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0xe000000000000, 0x8, 0xffffffffffffffff, 0x603ab80a}) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x20, {{0x2, 0x4e22, @local}}}, 0x88) [ 675.046284][T17317] out_of_memory+0x55f/0x7f0 [ 675.050863][T17317] mem_cgroup_oom+0x638/0x760 [ 675.055528][T17317] try_charge+0xc41/0x1100 [ 675.059935][T17317] ? get_mem_cgroup_from_mm+0x251/0x280 [ 675.065471][T17317] mem_cgroup_try_charge+0xd5/0x2a0 [ 675.070672][T17317] wp_page_copy+0x33d/0x1830 [ 675.075261][T17317] ? _raw_spin_unlock+0x49/0x60 [ 675.080093][T17317] ? do_wp_page+0x535/0x8b0 [ 675.084582][T17317] handle_mm_fault+0xeab/0x3b90 [ 675.089404][T17317] ? psi_memstall_leave+0xa8/0xd0 [ 675.094421][T17317] do_user_addr_fault+0x4a4/0xb30 [ 675.099553][T17317] page_fault+0x2f/0x40 [ 675.103693][T17317] RIP: 0033:0x7f91a2cff5ba [ 675.108182][T17317] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 675.127766][T17317] RSP: 002b:00007ffd41ae8448 EFLAGS: 00010202 [ 675.133807][T17317] RAX: 000055555599a6c0 RBX: 0000000000000001 RCX: 00007f91a3dac3e0 [ 675.141760][T17317] RDX: 0000000000000001 RSI: 00007f91a2e4aef0 RDI: 0000000000000001 [ 675.149711][T17317] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f91a2e4aef0 [ 675.157656][T17317] R10: 000055555599a400 R11: 0000000000000202 R12: 0000000000000000 [ 675.165601][T17317] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffd41ae8560 [ 675.174109][T17317] memory: usage 307200kB, limit 307200kB, failcnt 102322 [ 675.181276][T17317] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 675.188104][T17317] Memory cgroup stats for /syz5: [ 675.188173][T17317] anon 314490880 [ 675.188173][T17317] file 73728 [ 675.188173][T17317] kernel_stack 0 [ 675.188173][T17317] slab 0 [ 675.188173][T17317] sock 0 [ 675.188173][T17317] shmem 0 [ 675.188173][T17317] file_mapped 0 [ 675.188173][T17317] file_dirty 0 [ 675.188173][T17317] file_writeback 0 [ 675.188173][T17317] anon_thp 0 [ 675.188173][T17317] inactive_anon 0 [ 675.188173][T17317] active_anon 314400768 [ 675.188173][T17317] inactive_file 0 [ 675.188173][T17317] active_file 0 [ 675.188173][T17317] unevictable 0 [ 675.188173][T17317] slab_reclaimable 0 [ 675.188173][T17317] slab_unreclaimable 0 [ 675.188173][T17317] pgfault 371481 [ 675.188173][T17317] pgmajfault 0 [ 675.188173][T17317] workingset_refault 33 [ 675.188173][T17317] workingset_activate 0 [ 675.188173][T17317] workingset_nodereclaim 0 [ 675.188173][T17317] pgrefill 3276 [ 675.188173][T17317] pgscan 2904 [ 675.188173][T17317] pgsteal 82 [ 675.188173][T17317] pgactivate 2739 [ 675.281620][T17317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17317,uid=0 [ 675.296922][T17317] Memory cgroup out of memory: Killed process 17317 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 675.314415][ T24] oom_reaper: reaped process 17317 (syz-executor.5), now anon-rss:0kB, file-rss:14080kB, shmem-rss:0kB 19:29:57 executing program 1: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 19:29:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = inotify_init() (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) sendfile(r1, r2, 0x0, 0x7ff) (async) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) 19:29:57 executing program 4: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x2001, &(0x7f0000000000)={0x0, 0x2ff9, 0x4, 0x2, 0x2b8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2529, &(0x7f0000000240)={0x0, 0x3d03, 0x10, 0x2, 0x1a7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x20, 0x101400) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5], 0x7}, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:29:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x4001, 0x5e, 0x380, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x2, 0x4001, 0x5e, 0x380, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xd, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) 19:29:57 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2a3020000000000, 0x0, 0x0) 19:29:57 executing program 0: r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0x8000000000000001, 0x3f, 0x0, 0x4, 0x800}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) [ 679.630810][T17350] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 679.644492][T17350] CPU: 1 PID: 17350 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 679.654736][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 679.664783][T17350] Call Trace: [ 679.668069][T17350] dump_stack+0x18e/0x1d5 [ 679.672400][T17350] dump_header+0xdb/0x700 [ 679.676759][T17350] oom_kill_process+0xf0/0x2d0 [ 679.681519][T17350] out_of_memory+0x55f/0x7f0 [ 679.686101][T17350] mem_cgroup_oom+0x638/0x760 [ 679.690862][T17350] try_charge+0xc41/0x1100 [ 679.695269][T17350] ? get_mem_cgroup_from_mm+0x251/0x280 [ 679.700802][T17350] mem_cgroup_try_charge+0xd5/0x2a0 [ 679.706172][T17350] wp_page_copy+0x33d/0x1830 [ 679.710748][T17350] ? _raw_spin_unlock+0x49/0x60 [ 679.715726][T17350] ? do_wp_page+0x535/0x8b0 [ 679.720220][T17350] handle_mm_fault+0xeab/0x3b90 [ 679.725059][T17350] ? psi_memstall_leave+0xa8/0xd0 [ 679.730070][T17350] do_user_addr_fault+0x4a4/0xb30 [ 679.735079][T17350] page_fault+0x2f/0x40 [ 679.739221][T17350] RIP: 0033:0x7f91a2cff5ba [ 679.743620][T17350] Code: 64 b9 14 00 48 89 05 55 b9 14 00 c7 05 3b b9 14 00 01 00 00 00 48 c7 05 48 ce 0a 01 00 00 00 00 c7 05 46 ce 0a 01 00 00 00 00 05 a4 0e 0b 01 00 00 00 00 c3 0f 1f 00 48 8d 7e 58 89 f1 48 8d [ 679.763231][T17350] RSP: 002b:00007ffd41ae8448 EFLAGS: 00010202 [ 679.769287][T17350] RAX: 000055555599a6c0 RBX: 0000000000000001 RCX: 00007f91a3dac3e0 [ 679.777253][T17350] RDX: 0000000000000001 RSI: 00007f91a2e4aef0 RDI: 0000000000000001 [ 679.785215][T17350] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f91a2e4aef0 [ 679.793872][T17350] R10: 000055555599a400 R11: 0000000000000202 R12: 0000000000000000 [ 679.801839][T17350] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffd41ae8560 [ 679.810588][T17350] memory: usage 307200kB, limit 307200kB, failcnt 102335 [ 679.825391][T17350] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 679.832294][T17350] Memory cgroup stats for /syz5: [ 679.832367][T17350] anon 314490880 [ 679.832367][T17350] file 73728 [ 679.832367][T17350] kernel_stack 0 [ 679.832367][T17350] slab 0 [ 679.832367][T17350] sock 0 [ 679.832367][T17350] shmem 0 [ 679.832367][T17350] file_mapped 0 [ 679.832367][T17350] file_dirty 0 [ 679.832367][T17350] file_writeback 0 [ 679.832367][T17350] anon_thp 0 [ 679.832367][T17350] inactive_anon 0 [ 679.832367][T17350] active_anon 314400768 [ 679.832367][T17350] inactive_file 0 [ 679.832367][T17350] active_file 0 [ 679.832367][T17350] unevictable 0 [ 679.832367][T17350] slab_reclaimable 0 [ 679.832367][T17350] slab_unreclaimable 0 [ 679.832367][T17350] pgfault 371481 [ 679.832367][T17350] pgmajfault 0 [ 679.832367][T17350] workingset_refault 33 [ 679.832367][T17350] workingset_activate 0 [ 679.832367][T17350] workingset_nodereclaim 0 [ 679.832367][T17350] pgrefill 3276 [ 679.832367][T17350] pgscan 2904 [ 679.832367][T17350] pgsteal 82 [ 679.832367][T17350] pgactivate 2739 19:29:57 executing program 0: r0 = getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0x8000000000000001, 0x3f, 0x0, 0x4, 0x800}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x1}, 0x80000000) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:57 executing program 4: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, 0xffffffffffffffff, 0x8000000) (async) syz_io_uring_setup(0x2001, &(0x7f0000000000)={0x0, 0x2ff9, 0x4, 0x2, 0x2b8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async, rerun: 64) syz_io_uring_setup(0x2529, &(0x7f0000000240)={0x0, 0x3d03, 0x10, 0x2, 0x1a7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x20, 0x101400) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (rerun: 32) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5], 0x7}, 0x9) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 679.931914][T17350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17279,uid=0 [ 679.950187][T17350] Memory cgroup out of memory: Killed process 17279 (syz-executor.5) total-vm:48560kB, anon-rss:448kB, file-rss:15280kB, shmem-rss:60kB, UID:0 pgtables:80kB oom_score_adj:0 19:29:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001440)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000000000000000000000000000000000000000000000000000feff00"/83], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350000010000000000004fefae2f1dc21657f4d22b34b578043b0000000000186a00000a0000007390cae98b13fdee7d5d090007b3d6054bcfa327613a33ba68cd06bcb86e8d60e189b2b9c0a8727eddbb87bea235632386fcad3503d387f72a4319189be044a0b357bdf4fb7644d6d3de4e0657ff915e310f8e08274f57f194b3cdb58c9b939320911ed86ed819e93ce42827919e67c381d684543a639067528e"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:29:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x10, 0x70bd2a, 0x4, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x5, 0x58, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x40, 0x7, 0x2}}) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000300)=@xdp={0x2c, 0x5, r5, 0xd}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="0f4b5aa267ac687304da6ef07b46ff113983ebf35667c48fcfb5b4f5c6ef0741a4", 0x21}], 0x1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = openat$cgroup(r7, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x3) 19:29:57 executing program 0: r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0x8000000000000001, 0x3f, 0x0, 0x4, 0x800}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0x8000000000000001, 0x3f, 0x0, 0x4, 0x800}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x1}, 0x80000000) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r2, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) (async) [ 680.044981][T17372] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. 19:29:57 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xa) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x7) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x10, 0x70bd2a, 0x4, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x5, 0x58, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x40, 0x7, 0x2}}) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000300)=@xdp={0x2c, 0x5, r5, 0xd}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="0f4b5aa267ac687304da6ef07b46ff113983ebf35667c48fcfb5b4f5c6ef0741a4", 0x21}], 0x1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = openat$cgroup(r7, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x3) [ 680.571059][T17321] device bridge_slave_1 left promiscuous mode [ 680.580858][T17321] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.598471][T17321] device bridge_slave_0 left promiscuous mode [ 680.608386][T17321] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.902180][T17393] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.909203][T17393] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.916905][T17393] device bridge_slave_0 entered promiscuous mode [ 681.923734][T17393] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.930762][T17393] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.938101][T17393] device bridge_slave_1 entered promiscuous mode [ 681.976642][T17393] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.983667][T17393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.990931][T17393] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.997933][T17393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.018922][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 682.026651][ T702] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.034252][ T702] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.043832][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 682.052111][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 682.060194][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.067214][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.076086][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 682.084539][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 682.092718][ T703] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.099724][ T703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.121086][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 682.130106][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.138337][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 682.146389][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.154428][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 682.162768][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.170985][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 682.178734][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.191109][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 682.199337][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.215026][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 682.223239][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 682.231699][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 682.239856][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.259456][T17397] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 682.269638][T17397] CPU: 1 PID: 17397 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 682.279844][T17397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 682.289958][T17397] Call Trace: [ 682.293221][T17397] dump_stack+0x18e/0x1d5 [ 682.297544][T17397] dump_header+0xdb/0x700 [ 682.301845][T17397] oom_kill_process+0xf0/0x2d0 [ 682.306601][T17397] out_of_memory+0x55f/0x7f0 [ 682.311160][T17397] mem_cgroup_oom+0x638/0x760 [ 682.315805][T17397] try_charge+0xc41/0x1100 [ 682.320190][T17397] ? get_mem_cgroup_from_mm+0x251/0x280 [ 682.325705][T17397] mem_cgroup_try_charge+0xd5/0x2a0 [ 682.330889][T17397] handle_mm_fault+0x158a/0x3b90 [ 682.335798][T17397] do_user_addr_fault+0x4a4/0xb30 [ 682.340800][T17397] page_fault+0x2f/0x40 [ 682.344965][T17397] RIP: 0033:0x7efd2282cccf [ 682.349352][T17397] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 682.368924][T17397] RSP: 002b:00007ffc3e1a7730 EFLAGS: 00010246 [ 682.374958][T17397] RAX: 00007efd219d2000 RBX: 0000000000021000 RCX: 00007efd2287d6b7 [ 682.382901][T17397] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007efd219d3000 [ 682.390849][T17397] RBP: 00007ffc3e1a7800 R08: 00000000ffffffff R09: 00007efd219f2700 [ 682.398793][T17397] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffc3e1a7920 [ 682.406733][T17397] R13: 00007efd219f2700 R14: 0000000000000000 R15: 0000000000022000 [ 682.415796][T17397] memory: usage 307200kB, limit 307200kB, failcnt 102357 [ 682.423050][T17397] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 682.429864][T17397] Memory cgroup stats for /syz5: [ 682.429938][T17397] anon 314490880 [ 682.429938][T17397] file 73728 [ 682.429938][T17397] kernel_stack 0 [ 682.429938][T17397] slab 0 [ 682.429938][T17397] sock 0 [ 682.429938][T17397] shmem 0 [ 682.429938][T17397] file_mapped 0 [ 682.429938][T17397] file_dirty 0 [ 682.429938][T17397] file_writeback 0 [ 682.429938][T17397] anon_thp 0 [ 682.429938][T17397] inactive_anon 0 [ 682.429938][T17397] active_anon 314400768 [ 682.429938][T17397] inactive_file 0 [ 682.429938][T17397] active_file 0 [ 682.429938][T17397] unevictable 0 [ 682.429938][T17397] slab_reclaimable 0 [ 682.429938][T17397] slab_unreclaimable 0 [ 682.429938][T17397] pgfault 371514 [ 682.429938][T17397] pgmajfault 0 [ 682.429938][T17397] workingset_refault 33 [ 682.429938][T17397] workingset_activate 0 [ 682.429938][T17397] workingset_nodereclaim 0 [ 682.429938][T17397] pgrefill 3276 [ 682.429938][T17397] pgscan 2904 [ 682.429938][T17397] pgsteal 82 [ 682.429938][T17397] pgactivate 2739 [ 682.523534][T17397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17397,uid=0 [ 682.538780][T17397] Memory cgroup out of memory: Killed process 17397 (syz-executor.5) total-vm:52532kB, anon-rss:440kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 682.556565][ T24] oom_reaper: reaped process 17397 (syz-executor.5), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB 19:30:02 executing program 1: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 19:30:02 executing program 0: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) 19:30:02 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x10, 0x70bd2a, 0x4, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x5, 0x58, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x40, 0x7, 0x2}}) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000300)=@xdp={0x2c, 0x5, r5, 0xd}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="0f4b5aa267ac687304da6ef07b46ff113983ebf35667c48fcfb5b4f5c6ef0741a4", 0x21}], 0x1}, 0x10) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = openat$cgroup(r7, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x3) 19:30:02 executing program 4: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, 0xffffffffffffffff, 0x8000000) (async) syz_io_uring_setup(0x2001, &(0x7f0000000000)={0x0, 0x2ff9, 0x4, 0x2, 0x2b8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2529, &(0x7f0000000240)={0x0, 0x3d03, 0x10, 0x2, 0x1a7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x20, 0x101400) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000180)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5], 0x7}, 0x9) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:30:02 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2a4010000000000, 0x0, 0x0) 19:30:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001440)={0x38}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000000000000000000000000000000000000000000000000000feff00"/83], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350000010000000000004fefae2f1dc21657f4d22b34b578043b0000000000186a00000a0000007390cae98b13fdee7d5d090007b3d6054bcfa327613a33ba68cd06bcb86e8d60e189b2b9c0a8727eddbb87bea235632386fcad3503d387f72a4319189be044a0b357bdf4fb7644d6d3de4e0657ff915e310f8e08274f57f194b3cdb58c9b939320911ed86ed819e93ce42827919e67c381d684543a639067528e"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) close(r3) (rerun: 64) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) [ 684.675287][T17401] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 684.685286][T17401] CPU: 0 PID: 17401 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 684.695506][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 684.705544][T17401] Call Trace: [ 684.708825][T17401] dump_stack+0x18e/0x1d5 [ 684.713143][T17401] dump_header+0xdb/0x700 [ 684.717458][T17401] oom_kill_process+0xf0/0x2d0 [ 684.722211][T17401] out_of_memory+0x55f/0x7f0 [ 684.726787][T17401] mem_cgroup_oom+0x638/0x760 [ 684.731457][T17401] try_charge+0xc41/0x1100 [ 684.735867][T17401] ? get_mem_cgroup_from_mm+0x251/0x280 [ 684.741401][T17401] mem_cgroup_try_charge+0xd5/0x2a0 [ 684.746597][T17401] wp_page_copy+0x33d/0x1830 [ 684.751178][T17401] ? _raw_spin_unlock+0x49/0x60 [ 684.756014][T17401] ? do_wp_page+0x535/0x8b0 [ 684.760509][T17401] handle_mm_fault+0xeab/0x3b90 [ 684.765355][T17401] do_user_addr_fault+0x4a4/0xb30 [ 684.770369][T17401] page_fault+0x2f/0x40 [ 684.774516][T17401] RIP: 0033:0x7efd2283b73d [ 684.779004][T17401] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 49 89 d6 41 55 49 89 f5 41 54 49 89 fc 53 48 81 ec 28 05 00 00 <89> 8d 38 fb ff ff 64 48 8b 04 25 28 00 00 00 48 89 45 c8 48 c7 c0 [ 684.799982][T17401] RSP: 002b:00007ffc3e1a6e00 EFLAGS: 00010206 [ 684.806034][T17401] RAX: 00000000fbad8001 RBX: 0000000000000000 RCX: 0000000000000000 [ 684.814083][T17401] RDX: 00007ffc3e1a74f8 RSI: 00007efd228d8603 RDI: 00007ffc3e1a7370 [ 684.822046][T17401] RBP: 00007ffc3e1a7350 R08: 0000000000000000 R09: 00007ffc3e1a7460 [ 684.830014][T17401] R10: 00007efd228d8603 R11: 0000000000000206 R12: 00007ffc3e1a7370 [ 684.837979][T17401] R13: 00007efd228d8603 R14: 00007ffc3e1a74f8 R15: 00007ffc3e1a74f8 [ 684.848920][T17401] memory: usage 307200kB, limit 307200kB, failcnt 102374 [ 684.870104][T17401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 684.871798][T17414] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 684.877075][T17401] Memory cgroup stats for /syz5: [ 684.877164][T17401] anon 314490880 [ 684.877164][T17401] file 73728 [ 684.877164][T17401] kernel_stack 0 [ 684.877164][T17401] slab 0 [ 684.877164][T17401] sock 0 [ 684.877164][T17401] shmem 0 [ 684.877164][T17401] file_mapped 0 [ 684.877164][T17401] file_dirty 0 [ 684.877164][T17401] file_writeback 0 [ 684.877164][T17401] anon_thp 0 [ 684.877164][T17401] inactive_anon 0 [ 684.877164][T17401] active_anon 311156736 [ 684.877164][T17401] inactive_file 0 [ 684.877164][T17401] active_file 0 [ 684.877164][T17401] unevictable 0 [ 684.877164][T17401] slab_reclaimable 0 [ 684.877164][T17401] slab_unreclaimable 0 [ 684.877164][T17401] pgfault 371547 [ 684.877164][T17401] pgmajfault 0 [ 684.877164][T17401] workingset_refault 33 [ 684.877164][T17401] workingset_activate 0 [ 684.877164][T17401] workingset_nodereclaim 0 [ 684.877164][T17401] pgrefill 3276 [ 684.877164][T17401] pgscan 2904 [ 684.877164][T17401] pgsteal 82 [ 684.877164][T17401] pgactivate 2739 [ 684.877174][T17401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17393,uid=0 [ 684.877217][T17401] Memory cgroup out of memory: Killed process 17393 (syz-executor.5) total-vm:48560kB, anon-rss:436kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 19:30:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) [ 684.880326][T17401] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 685.035527][T17401] CPU: 0 PID: 17401 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 685.045761][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 685.055799][T17401] Call Trace: [ 685.059079][T17401] dump_stack+0x18e/0x1d5 [ 685.063400][T17401] dump_header+0xdb/0x700 [ 685.067719][T17401] oom_kill_process+0xf0/0x2d0 [ 685.072474][T17401] out_of_memory+0x55f/0x7f0 19:30:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) 19:30:02 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) creat(&(0x7f0000000200)='./file0\x00', 0x60) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 19:30:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) [ 685.077056][T17401] mem_cgroup_oom+0x638/0x760 [ 685.081724][T17401] try_charge+0xc41/0x1100 [ 685.086135][T17401] ? get_mem_cgroup_from_mm+0x251/0x280 [ 685.091672][T17401] mem_cgroup_try_charge+0xd5/0x2a0 [ 685.096870][T17401] handle_mm_fault+0x158a/0x3b90 [ 685.101801][T17401] do_user_addr_fault+0x4a4/0xb30 [ 685.106820][T17401] page_fault+0x2f/0x40 [ 685.110963][T17401] RIP: 0033:0x7efd2281d0d9 19:30:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0x401, 0x4) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x7e}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x400}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xbe8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51ea0567}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_USERDATA={0x2b, 0xc, "935bb6c4c4a31010bc4536844160ae8e11217777b2c4282fdbe75783bf750de1d094617c92286f"}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x348}, 0x1, 0x0, 0x0, 0x41050}, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1ac, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14}}, 0x214}, 0x1, 0x0, 0x0, 0x50c2e3b1486de23}, 0x44000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x6c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xecfb}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) [ 685.115367][T17401] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 685.134957][T17401] RSP: 002b:00007ffc3e1a77d0 EFLAGS: 00010246 [ 685.141009][T17401] RAX: 0000000020000140 RBX: 0000000000000000 RCX: 0000000000000000 [ 685.148968][T17401] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000555555f6a2e8 [ 685.156937][T17401] RBP: 00007ffc3e1a78c8 R08: 0000000000000000 R09: 0000000000000000 [ 685.160167][T17426] selinux_nlmsg_perm: 55 callbacks suppressed [ 685.160177][T17426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=17426 comm=syz-executor.4 [ 685.164976][T17401] R10: 000000000001998a R11: 00000000000002ac R12: 0000000000000001 [ 685.164981][T17401] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc3e1a7ab0 [ 685.166204][T17401] memory: usage 307200kB, limit 307200kB, failcnt 102382 [ 685.182119][T17426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=17426 comm=syz-executor.4 [ 685.184645][T17401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 685.192603][T17426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=17426 comm=syz-executor.4 [ 685.200532][T17401] Memory cgroup stats for /syz5: [ 685.200599][T17401] anon 314490880 [ 685.200599][T17401] file 73728 [ 685.200599][T17401] kernel_stack 0 [ 685.200599][T17401] slab 0 [ 685.200599][T17401] sock 0 [ 685.200599][T17401] shmem 0 [ 685.200599][T17401] file_mapped 0 [ 685.200599][T17401] file_dirty 0 [ 685.200599][T17401] file_writeback 0 [ 685.200599][T17401] anon_thp 0 19:30:02 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 64) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') (rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) creat(&(0x7f0000000200)='./file0\x00', 0x60) (async) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) [ 685.200599][T17401] inactive_anon 0 [ 685.200599][T17401] active_anon 314535936 [ 685.200599][T17401] inactive_file 0 [ 685.200599][T17401] active_file 0 [ 685.200599][T17401] unevictable 0 [ 685.200599][T17401] slab_reclaimable 0 [ 685.200599][T17401] slab_unreclaimable 0 [ 685.200599][T17401] pgfault 371547 [ 685.200599][T17401] pgmajfault 0 [ 685.200599][T17401] workingset_refault 33 [ 685.200599][T17401] workingset_activate 0 [ 685.200599][T17401] workingset_nodereclaim 0 [ 685.200599][T17401] pgrefill 3276 [ 685.200599][T17401] pgscan 2904 [ 685.200599][T17401] pgsteal 82 [ 685.200599][T17401] pgactivate 2739 [ 685.334485][T17401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17401,uid=0 [ 685.353214][T17401] Memory cgroup out of memory: Killed process 17401 (syz-executor.5) total-vm:48560kB, anon-rss:444kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 685.371350][ T24] oom_reaper: reaped process 17401 (syz-executor.5), now anon-rss:0kB, file-rss:13680kB, shmem-rss:0kB [ 686.160983][T17316] device bridge_slave_1 left promiscuous mode [ 686.167104][T17316] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.174517][T17316] device bridge_slave_0 left promiscuous mode [ 686.180621][T17316] bridge0: port 1(bridge_slave_0) entered disabled state 19:30:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001440)={0x38}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4001, 0x5e}, 0x48) (rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d63c103dca6613b31368000a7b", @ANYRES16=0x0, @ANYBLOB="000328bd700000000000010000000000000008410000004c001800000000000000000000000000000000000000000000000000000000feff00"/83], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r5 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000001c0000000000000040000000d71b0001ffffffff85100000f9ffffff85100000ffffffff18350000010000000000004fefae2f1dc21657f4d22b34b578043b0000000000186a00000a0000007390cae98b13fdee7d5d090007b3d6054bcfa327613a33ba68cd06bcb86e8d60e189b2b9c0a8727eddbb87bea235632386fcad3503d387f72a4319189be044a0b357bdf4fb7644d6d3de4e0657ff915e310f8e08274f57f194b3cdb58c9b939320911ed86ed819e93ce42827919e67c381d684543a639067528e"], &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r1]}, 0x80) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r3) (async) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) (async) io_uring_enter(r5, 0x22ff, 0x8729, 0x100000000000000, 0x0, 0x0) 19:30:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async, rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (rerun: 64) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = fcntl$dupfd(r0, 0x0, r0) (async) creat(&(0x7f0000000200)='./file0\x00', 0x60) r2 = openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 19:30:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000140)=0x401, 0x4) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6}]}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x7e}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x400}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xbe8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51ea0567}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_USERDATA={0x2b, 0xc, "935bb6c4c4a31010bc4536844160ae8e11217777b2c4282fdbe75783bf750de1d094617c92286f"}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x348}, 0x1, 0x0, 0x0, 0x41050}, 0x5) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1ac, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14}}, 0x214}, 0x1, 0x0, 0x0, 0x50c2e3b1486de23}, 0x44000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x6c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xecfb}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[], 0x208e24b) 19:30:07 executing program 0: getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) 19:30:07 executing program 3: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r2 = syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x0, 0xb, 0x1, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x1000, &(0x7f00000003c0)=""/4096, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xb, 0x7, 0x3}, 0x10}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x22ff, 0x8729, 0x2a6020000000000, 0x0, 0x0) 19:30:07 executing program 1: getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x5e}, 0x48) syz_io_uring_setup(0x2de9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 19:30:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 19:30:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fcntl$dupfd(r0, 0x0, r0) (async) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) (async) sendfile(r2, r2, 0x0, 0x3) (async) [ 689.640631][T17453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=17453 comm=syz-executor.4 [ 689.656045][T17453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=17453 comm=syz-executor.4 [ 689.670440][T17453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=17453 comm=syz-executor.4 19:30:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup(r1, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3) 19:30:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0xc48c0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_io_uring_complete(0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x2602, 0x99) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000300)) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000280)={0x3, 0x0, 0xf, 0x12, 0x1e0, &(0x7f0000000700)}) mount$overlay(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x84002, &(0x7f0000000b80)={[{@xino_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@dont_hash}, {@fsname={'fsname', 0x3d, 'syz1\x00'}}]}) r7 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3) r9 = fcntl$dupfd(r0, 0x406, r3) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000c00)={0x0, @l2tp={0x2, 0x0, @empty, 0x3}, @vsock={0x28, 0x0, 0x2710, @local}, @generic={0x22, "acdb53f89d3f50d011d30c56ea70"}, 0x1ff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000bc0)='syzkaller0\x00', 0x2, 0x4, 0xe4}) 19:30:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0xc48c0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r2 = syz_io_uring_complete(0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r4 = fcntl$dupfd(r1, 0x0, r1) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x2602, 0x99) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000300)) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) (async) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000280)={0x3, 0x0, 0xf, 0x12, 0x1e0, &(0x7f0000000700)}) mount$overlay(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x84002, &(0x7f0000000b80)={[{@xino_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@dont_hash}, {@fsname={'fsname', 0x3d, 'syz1\x00'}}]}) (async) r7 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3) r9 = fcntl$dupfd(r0, 0x406, r3) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000c00)={0x0, @l2tp={0x2, 0x0, @empty, 0x3}, @vsock={0x28, 0x0, 0x2710, @local}, @generic={0x22, "acdb53f89d3f50d011d30c56ea70"}, 0x1ff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000bc0)='syzkaller0\x00', 0x2, 0x4, 0xe4}) [ 689.828736][ T23] audit: type=1400 audit(1664652607.258:2052): avc: denied { mounton } for pid=17467 comm="syz-executor.2" path="/root/syzkaller-testdir352588388/syzkaller.ec6qUl/1106/file0" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 19:30:07 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0xc48c0, 0x1b4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_io_uring_complete(0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x2602, 0x99) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000300)) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000280)={0x3, 0x0, 0xf, 0x12, 0x1e0, &(0x7f0000000700)}) mount$overlay(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x84002, &(0x7f0000000b80)={[{@xino_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@dont_hash}, {@fsname={'fsname', 0x3d, 'syz1\x00'}}]}) r7 = openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3) r9 = fcntl$dupfd(r0, 0x406, r3) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000c00)={0x0, @l2tp={0x2, 0x0, @empty, 0x3}, @vsock={0x28, 0x0, 0x2710, @local}, @generic={0x22, "acdb53f89d3f50d011d30c56ea70"}, 0x1ff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000bc0)='syzkaller0\x00', 0x2, 0x4, 0xe4}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0xc48c0, 0x1b4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_io_uring_complete(0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x2602, 0x99) (async) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x18}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000300)) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) (async) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000280)={0x3, 0x0, 0xf, 0x12, 0x1e0, &(0x7f0000000700)}) (async) mount$overlay(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x84002, &(0x7f0000000b80)={[{@xino_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@dont_hash}, {@fsname={'fsname', 0x3d, 'syz1\x00'}}]}) (async) openat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_int(r7, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) (async) sendfile(r8, r8, 0x0, 0x3) (async) fcntl$dupfd(r0, 0x406, r3) (async) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000c00)={0x0, @l2tp={0x2, 0x0, @empty, 0x3}, @vsock={0x28, 0x0, 0x2710, @local}, @generic={0x22, "acdb53f89d3f50d011d30c56ea70"}, 0x1ff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000bc0)='syzkaller0\x00', 0x2, 0x4, 0xe4}) (async) [ 689.896439][ T23] audit: type=1400 audit(1664652607.298:2053): avc: denied { unmount } for pid=309 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 691.277237][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.284282][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.291895][T17486] device bridge_slave_0 entered promiscuous mode [ 691.298632][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.306065][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.313587][T17486] device bridge_slave_1 entered promiscuous mode [ 691.351471][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.358605][T17486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.365859][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.372870][T17486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.392542][ T703] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.399975][ T703] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.408185][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 691.415772][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 691.432530][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 691.440626][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.447655][ T699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.455116][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 691.463370][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.470369][ T699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.477715][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 691.485696][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 691.502186][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 691.510431][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.528595][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.539277][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 691.548020][ T703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 691.567150][T17490] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 691.577909][T17490] CPU: 0 PID: 17490 Comm: syz-executor.5 Not tainted 5.4.210-syzkaller-00033-g3ee2a37108c8 #0 [ 691.588125][T17490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 691.598148][T17490] Call Trace: [ 691.601421][T17490] dump_stack+0x18e/0x1d5 [ 691.605721][T17490] dump_header+0xdb/0x700 [ 691.610019][T17490] oom_kill_process+0xf0/0x2d0 [ 691.614751][T17490] out_of_memory+0x55f/0x7f0 [ 691.619572][T17490] mem_cgroup_oom+0x638/0x760 [ 691.624216][T17490] try_charge+0xc41/0x1100 [ 691.628628][T17490] ? get_mem_cgroup_from_mm+0x251/0x280 [ 691.634147][T17490] mem_cgroup_try_charge+0xd5/0x2a0 [ 691.639315][T17490] handle_mm_fault+0x158a/0x3b90 [ 691.644224][T17490] do_user_addr_fault+0x4a4/0xb30 [ 691.649227][T17490] page_fault+0x2f/0x40 [ 691.653366][T17490] RIP: 0033:0x7fe028bf9ccf [ 691.657754][T17490] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 f0 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 691.677327][T17490] RSP: 002b:00007ffe103ac6a0 EFLAGS: 00010246 [ 691.683362][T17490] RAX: 00007fe027d9f000 RBX: 0000000000021000 RCX: 00007fe028c4a6b7 [ 691.691311][T17490] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe027da0000 [ 691.699250][T17490] RBP: 00007ffe103ac770 R08: 00000000ffffffff R09: 00007fe027dbf700 [ 691.707196][T17490] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffe103ac890 [ 691.715137][T17490] R13: 00007fe027dbf700 R14: 0000000000000000 R15: 0000000000022000 [ 691.725010][T17490] memory: usage 307200kB, limit 307200kB, failcnt 102404 [ 691.732039][T17490] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 691.738856][T17490] Memory cgroup stats for /syz5: [ 691.738931][T17490] anon 314490880 [ 691.738931][T17490] file 73728